$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/B360BB9689AD11ED93CAB75FC4F9AE02.roa File: B360BB9689AD11ED93CAB75FC4F9AE02.roa (raw, json) Hash identifier: phCaH2hmKn9csgEA/K+CD2iFkrWqLhy3OCLIe+VLrHQ= Subject key identifier: 17:8F:C4:1A:EB:2F:06:4D:10:87:97:7F:02:6B:9B:37:1B:FD:8B:DC Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: CA Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/B360BB9689AD11ED93CAB75FC4F9AE02.roa Signing time: Sun 03 Dec 2023 04:54:44 +0000 ROA not before: Sun 03 Dec 2023 04:54:44 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 63526 IP address blocks: 103.143.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: Dec 3 04:54:44 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656c0a14-d301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4c:4d:c2:e4:0c:a5:78:33:cf:5c:0b:e7:8d: 75:88:71:4d:13:cf:0d:52:89:25:d7:94:17:f1:72: 32:bd:8c:e9:01:2d:bd:e6:08:a9:54:be:20:c6:25: 4f:76:36:fa:9c:fb:ce:cb:48:a1:5d:eb:39:2c:87: be:a2:2e:ca:4f:a1:2f:46:60:2e:44:3d:9f:16:05: 6c:5e:1b:a4:7f:1c:4b:ef:c3:2f:9b:53:77:7b:21: 5e:e5:ba:2b:b4:ff:0e:bd:55:e5:c1:70:ba:24:e9: eb:f0:66:6c:b6:c9:6a:f5:81:3d:15:53:84:07:30: c5:8c:90:37:53:a8:24:c5:f6:4b:92:f8:38:6e:36: 9a:c1:f5:32:b0:b1:1a:0b:04:d8:3d:10:15:d2:60: 81:de:70:13:6d:bd:18:f9:36:f5:e4:3f:8a:32:3b: 27:6e:b4:a3:da:c6:13:fd:aa:19:76:04:fd:ad:76: ca:6b:df:d2:ea:4f:41:65:9a:36:f4:71:f6:ed:08: 3c:8b:45:35:b0:be:49:42:a5:21:44:7d:66:95:ab: 3a:1e:a5:22:77:47:df:08:9c:54:18:3c:22:45:dd: e2:25:ac:5b:ea:7b:7e:a3:31:64:a6:72:41:71:59: 5d:03:3c:c1:cc:8e:68:74:30:90:ea:e2:e7:9c:fc: ca:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8F:C4:1A:EB:2F:06:4D:10:87:97:7F:02:6B:9B:37:1B:FD:8B:DC X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/B360BB9689AD11ED93CAB75FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.242.0/24 Signature Algorithm: sha256WithRSAEncryption 07:0e:e6:97:60:fe:f6:fe:ec:b9:c7:7e:35:0a:aa:ac:16:e4: f9:2f:48:1f:93:69:6c:87:6b:db:22:59:b6:a5:38:d7:a7:73: b8:e1:44:62:ad:96:da:ae:e9:eb:4b:b6:c6:54:ae:4a:a1:ba: f5:52:27:d6:bb:23:24:fb:ac:13:0e:f1:bc:7b:7b:88:c2:0f: 74:c8:00:3a:02:e8:29:89:42:3b:e4:87:a4:e8:2e:0b:f3:1b: bc:71:8c:2d:6b:a1:44:7c:13:0a:e4:24:c6:cf:c9:46:49:88: 01:4f:34:f8:29:ba:b9:73:db:87:e8:2c:66:57:2b:c4:cc:88: 7d:cd:78:72:82:6b:49:07:2f:3e:2d:50:41:40:6b:81:13:fc: 8e:b5:73:22:79:a9:79:28:d5:84:29:36:a9:1f:59:fb:86:fc: 37:a6:b8:71:fa:5b:bc:62:31:e9:a0:47:31:3e:7a:c7:89:5f: 85:1f:77:6f:8d:72:77:aa:77:8a:42:97:0f:64:11:1b:c1:6d: 97:10:d2:fb:23:a8:3a:31:ef:6f:a4:ce:30:e4:70:d1:8c:da: 0c:f5:69:a7:1f:3d:c5:dd:ad:81:65:1d:00:4a:43:95:7f:b7: 40:76:16:f9:89:94:92:9a:1b:c2:89:1e:e9:01:af:f3:94:e5: 09:7c:64:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjMxMjAzMDQ1NDQ0WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZjMGExNC1kMzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5UxNwuQMpXgzz1wL5411iHFNE88NUokl15QX8XIyvYzpAS295gipVL4gxiVP djb6nPvOy0ihXes5LIe+oi7KT6EvRmAuRD2fFgVsXhukfxxL78Mvm1N3eyFe5bor tP8OvVXlwXC6JOnr8GZstslq9YE9FVOEBzDFjJA3U6gkxfZLkvg4bjaawfUysLEa CwTYPRAV0mCB3nATbb0Y+Tb15D+KMjsnbrSj2sYT/aoZdgT9rXbKa9/S6k9BZZo2 9HH27Qg8i0U1sL5JQqUhRH1mlas6HqUid0ffCJxUGDwiRd3iJaxb6nt+ozFkpnJB cVldAzzBzI5odDCQ6uLnnPzKrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBePxBrr LwZNEIeXfwJrmzcb/YvcMB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REU1NzAvQzJDQjExOUM2NTgzMTFFRDk2MDAyQzJDQzRGOUFFMDIvQjM2MEJCOTY4 OUFEMTFFRDkzQ0FCNzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnj/IwDQYJKoZIhvcNAQELBQADggEBAAcO5pdg/vb+7LnH fjUKqqwW5PkvSB+TaWyHa9siWbalONenc7jhRGKtltqu6etLtsZUrkqhuvVSJ9a7 IyT7rBMO8bx7e4jCD3TIADoC6CmJQjvkh6ToLgvzG7xxjC1roUR8EwrkJMbPyUZJ iAFPNPgpurlz24foLGZXK8TMiH3NeHKCa0kHLz4tUEFAa4ET/I61cyJ5qXko1YQp NqkfWfuG/DemuHH6W7xiMemgRzE+eseJX4Ufd2+Ncneqd4pClw9kERvBbZcQ0vsj qDox72+kzjDkcNGM2gz1aacfPcXdrYFlHQBKQ5V/t0B2FvmJlJKaG8KJHukBr/OU 5Ql8ZBY= -----END CERTIFICATE-----Generated at Fri May 17 06:46:29 2024 by rpki-client on console-ams.rpki-client.org