$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/9A4EE834EB8111EA87E2C165C4F9AE02.roa File: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (raw, json) Hash identifier: Fy6xqv5na3HgQasuL0cruqcvb2fBlGE564xe2jgQvbA= Subject key identifier: 1A:8C:6E:5B:D8:51:A7:D1:A2:FC:8B:F1:45:BD:9D:7F:24:7A:39:E2 Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 337B Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/9A4EE834EB8111EA87E2C165C4F9AE02.roa Signing time: Thu 28 Sep 2023 15:31:04 +0000 ROA not before: Thu 28 Sep 2023 15:31:04 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 45881 IP address blocks: 103.136.123.0/24 maxlen: 24 203.176.158.0/24 maxlen: 24 203.176.159.0/24 maxlen: 24 2001:df0:4b::/48 maxlen: 48 2404:8e80:2::/48 maxlen: 48 2404:8e80:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 15:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13179 (0x337b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: Sep 28 15:31:04 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65159c38-de2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:00:de:ac:57:4b:12:d0:dd:84:48:65:7a: a1:fa:b2:ae:34:96:39:28:80:28:3d:96:9a:25:de: 71:38:f6:2a:5c:e9:bc:8a:88:f8:d8:cc:6a:90:e8: 6e:6f:b4:5a:20:fa:36:22:29:e5:0f:ef:41:90:0a: 13:7d:0c:c5:b7:ea:9a:98:6d:76:32:dc:c3:14:d8: 28:c0:6c:8e:fe:d9:9b:11:f8:01:f6:dc:93:6a:6f: b1:5c:ac:ed:9b:da:33:7b:b8:df:08:63:32:6b:5d: dc:10:cf:6d:b9:c2:64:f8:d3:fb:1e:ad:c4:25:60: f4:98:84:e8:c7:d5:9b:ca:2d:66:21:08:47:18:99: 9e:c8:f7:3a:84:06:81:bc:71:6f:0b:a8:0c:c5:da: f4:b8:c5:2d:bb:3f:99:ee:2e:cc:77:92:e6:54:11: 86:3c:c7:52:9a:72:44:a5:d9:62:95:fa:79:86:f6: a2:11:d0:52:79:bd:62:8f:34:b0:33:fd:0a:84:b7: e3:ac:51:28:80:41:cb:aa:41:6f:67:73:e2:a9:c4: 39:e8:0e:91:b5:c3:0a:07:c1:31:b1:5d:c9:41:22: c4:60:a3:77:3b:34:ea:18:9f:9c:f5:88:c7:ac:29: af:e6:bd:51:db:ba:05:a3:f2:72:8a:b3:f1:e5:6b: ea:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8C:6E:5B:D8:51:A7:D1:A2:FC:8B:F1:45:BD:9D:7F:24:7A:39:E2 X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/9A4EE834EB8111EA87E2C165C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.123.0/24 203.176.158.0/23 IPv6: 2001:df0:4b::/48 2404:8e80:2::/47 Signature Algorithm: sha256WithRSAEncryption 9c:d7:78:63:66:72:c3:e6:4e:ad:80:5c:f7:d5:0b:58:43:e6: 44:6b:50:3f:10:9b:1c:69:15:63:18:3a:35:5d:54:9f:0e:6e: 3d:23:17:30:a2:84:fa:72:5f:66:1b:ae:77:51:8f:9e:60:5d: 3c:89:51:fc:c7:16:b6:f9:06:23:b6:b2:5c:3e:4a:ef:96:af: ee:d3:3e:b1:1d:ca:cd:56:57:82:ce:df:b6:96:a5:2f:bb:6c: fb:4d:61:6b:4d:ca:94:91:f8:3a:1a:f8:eb:7f:ed:07:bf:a5: 01:0a:40:e0:fc:4b:0a:17:9f:e3:62:4a:30:c3:ec:4e:da:7f: 2c:ff:cf:38:8e:37:7b:5d:ed:85:9b:16:16:bb:20:5a:c5:b1: df:e6:15:7e:69:f3:b2:b9:74:22:42:8e:2f:b4:48:ce:03:59: 4f:b3:6e:ea:2c:a4:25:b2:19:ab:1d:1b:c3:db:96:c4:1b:78: 08:63:1d:41:64:c8:10:1e:82:ea:74:3f:a7:40:c4:f7:7e:c6: 26:e2:22:b3:e5:7c:3b:e7:db:0f:c3:ca:e0:31:20:a3:99:78: 84:b1:ac:58:e2:b3:a2:ef:d5:25:7d:6f:58:a5:e6:8c:22:8f: 5c:6c:06:d3:9c:38:31:f7:72:4d:fe:92:c0:9c:d6:bf:ca:50: 54:60:7c:4c -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICM3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjMwOTI4MTUzMTA0WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE1OWMzOC1kZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsd4A3qxXSxLQ3YRIZXqh+rKuNJY5KIAoPZaaJd5xOPYqXOm8ioj42MxqkOhu b7RaIPo2IinlD+9BkAoTfQzFt+qamG12MtzDFNgowGyO/tmbEfgB9tyTam+xXKzt m9oze7jfCGMya13cEM9tucJk+NP7Hq3EJWD0mITox9Wbyi1mIQhHGJmeyPc6hAaB vHFvC6gMxdr0uMUtuz+Z7i7Md5LmVBGGPMdSmnJEpdlilfp5hvaiEdBSeb1ijzSw M/0KhLfjrFEogEHLqkFvZ3PiqcQ56A6RtcMKB8ExsV3JQSLEYKN3OzTqGJ+c9YjH rCmv5r1R27oFo/JyirPx5WvqLwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFBqMblvY UafRovyL8UW9nX8kejniMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVFQjgvOEUwRjJDQjYxREExMTFFMkI5MDZCQzkzMDhCMDJDRDIvOUE0RUU4MzRF QjgxMTFFQTg3RTJDMTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBABniHsDBAHLsJ4wGAQCAAIwEgMHACABDfAASwMHASQEjoAA AjANBgkqhkiG9w0BAQsFAAOCAQEAnNd4Y2Zyw+ZOrYBc99ULWEPmRGtQPxCbHGkV Yxg6NV1Unw5uPSMXMKKE+nJfZhuud1GPnmBdPIlR/McWtvkGI7ayXD5K75av7tM+ sR3KzVZXgs7ftpalL7ts+01ha03KlJH4Ohr463/tB7+lAQpA4PxLChef42JKMMPs Ttp/LP/POI43e13thZsWFrsgWsWx3+YVfmnzsrl0IkKOL7RIzgNZT7Nu6iykJbIZ qx0bw9uWxBt4CGMdQWTIEB6C6nQ/p0DE937GJuIis+V8O+fbD8PK4DEgo5l4hLGs WOKzou/VJX1vWKXmjCKPXGwG05w4MfdyTf6SwJzWv8pQVGB8TA== -----END CERTIFICATE-----Generated at Wed May 22 16:21:50 2024 by rpki-client on console-ams.rpki-client.org