$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/1B4DA20CD46711ECA1A27035C4F9AE02.roa File: 1B4DA20CD46711ECA1A27035C4F9AE02.roa (raw, json) Hash identifier: c+IcopvbSFKbNI/bK9N3IjS1UiK8CZ1Ykr32AtfiQkg= Subject key identifier: 9C:BB:30:3B:97:2E:44:D5:B9:A1:01:B2:4D:E1:FD:AB:64:8B:99:37 Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 0509 Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/1B4DA20CD46711ECA1A27035C4F9AE02.roa Signing time: Fri 20 Oct 2023 23:51:54 +0000 ROA not before: Fri 20 Oct 2023 23:51:54 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 132325 IP address blocks: 103.143.12.0/23 maxlen: 23 103.143.12.0/24 maxlen: 24 103.143.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: Oct 20 23:51:54 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6533129a-03f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:49:93:0b:9a:3a:64:7d:d6:ee:b3:d6:4e:7b: 86:eb:d4:23:d1:30:b2:83:ae:69:6b:a7:b4:39:45: 5d:06:e1:d3:95:5d:c3:0a:aa:d5:4a:b1:fc:75:9d: ba:e3:e8:15:d1:74:98:b5:1c:a2:c0:32:e1:79:30: ef:29:b3:79:f6:32:b3:56:dc:7a:c2:f2:54:92:c9: eb:ba:eb:d4:01:3a:ae:ea:81:43:6b:be:35:c7:cf: ba:76:b3:a0:c6:a4:2b:0a:e5:f1:69:30:8e:da:5e: 28:84:2c:da:d9:ca:9d:6d:a1:35:4d:73:c5:89:e3: 26:55:6d:21:45:16:ad:10:71:d3:69:66:3b:9c:06: 04:35:94:49:7b:f4:1b:75:c8:25:d3:94:b2:ed:2e: 85:18:1a:27:fa:4d:04:e9:15:d9:b4:aa:19:69:44: 23:a1:60:6e:88:97:c2:50:a3:02:61:06:e0:d3:35: 45:5b:e9:17:0f:3b:2a:e4:5c:9c:2c:04:cc:4d:f8: b5:47:3d:07:e0:2b:d3:10:1d:ed:93:ec:aa:d6:30: a0:2c:b6:7f:0c:a4:e8:fd:da:bc:90:9e:2b:d9:85: 61:a3:16:9d:6c:ba:d0:1d:5b:3a:a1:de:2e:6b:5a: a6:5b:fc:8f:28:3d:15:c0:26:91:f4:58:9d:8b:d4: 62:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BB:30:3B:97:2E:44:D5:B9:A1:01:B2:4D:E1:FD:AB:64:8B:99:37 X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/1B4DA20CD46711ECA1A27035C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.12.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:be:02:84:70:73:e3:9a:62:be:ca:4c:41:89:be:2e:c9:8e: 2b:4e:21:86:63:ad:6a:a4:49:bd:76:4e:91:34:99:fd:b9:bc: 2b:db:fd:f1:d1:f0:a0:23:36:40:26:aa:b1:87:d7:eb:9f:62: 1e:e1:00:95:9b:f9:c0:72:b1:9f:67:f5:b0:de:37:dd:d4:7c: 3b:dd:62:cc:50:3f:b9:e7:97:df:da:fa:34:92:04:cb:44:63: 19:49:27:dc:30:50:20:5f:8d:0e:77:74:e4:2b:ca:d9:e9:f6: 54:dc:fb:24:2e:7e:4f:82:69:1e:2b:fa:2e:4f:5c:66:c0:d1: 24:1f:0d:d9:90:a1:e9:44:1e:15:47:1a:33:49:7d:59:5f:9b: 52:d8:66:02:bd:93:0c:08:12:f5:22:71:7c:8b:28:31:7f:fb: 3c:c7:1b:57:b1:64:d4:74:be:5c:22:7e:2c:60:b1:f4:7e:48: 0a:c4:4d:e6:b7:3f:e8:af:f8:de:79:7c:97:ac:a6:f7:34:e0: 9b:e1:c9:2e:82:23:67:e7:90:72:c6:f8:b7:b5:e5:96:4a:3e: 3e:6b:16:84:ea:f1:49:a3:fe:0d:03:97:d9:4e:4d:6d:b9:12: 9a:6e:78:93:c5:21:7f:2a:6a:42:01:a0:d5:fb:2d:2d:91:e5: 18:4f:fe:ae -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjMxMDIwMjM1MTU0WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMzMTI5YS0wM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kmTC5o6ZH3W7rPWTnuG69Qj0TCyg65pa6e0OUVdBuHTlV3DCqrVSrH8dZ26 4+gV0XSYtRyiwDLheTDvKbN59jKzVtx6wvJUksnruuvUATqu6oFDa741x8+6drOg xqQrCuXxaTCO2l4ohCza2cqdbaE1TXPFieMmVW0hRRatEHHTaWY7nAYENZRJe/Qb dcgl05Sy7S6FGBon+k0E6RXZtKoZaUQjoWBuiJfCUKMCYQbg0zVFW+kXDzsq5Fyc LATMTfi1Rz0H4CvTEB3tk+yq1jCgLLZ/DKTo/dq8kJ4r2YVhoxadbLrQHVs6od4u a1qmW/yPKD0VwCaR9Fidi9RiewIDAQABo4IClTCCApEwHQYDVR0OBBYEFJy7MDuX LkTVuaEBsk3h/atki5k3MB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlFQTkvRTY0NkJGMUU5NjgwMTFFQkFBNjRGQTU2QzRGOUFFMDIvMUI0REEyMENE NDY3MTFFQ0ExQTI3MDM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjwwwDQYJKoZIhvcNAQELBQADggEBAI2+AoRwc+OaYr7K TEGJvi7JjitOIYZjrWqkSb12TpE0mf25vCvb/fHR8KAjNkAmqrGH1+ufYh7hAJWb +cBysZ9n9bDeN93UfDvdYsxQP7nnl9/a+jSSBMtEYxlJJ9wwUCBfjQ53dOQrytnp 9lTc+yQufk+CaR4r+i5PXGbA0SQfDdmQoelEHhVHGjNJfVlfm1LYZgK9kwwIEvUi cXyLKDF/+zzHG1exZNR0vlwifixgsfR+SArETea3P+iv+N55fJespvc04JvhyS6C I2fnkHLG+Le15ZZKPj5rFoTq8Umj/g0Dl9lOTW25EppueJPFIX8qakIBoNX7LS2R 5RhP/q4= -----END CERTIFICATE-----Generated at Sat May 11 02:39:35 2024 by rpki-client on console-fra.rpki-client.org