$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa File: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (raw, json) Hash identifier: OZcqyskTabG9dXZ9tOQBtkIg+n17tBstz4awFEOoRXY= Subject key identifier: E2:1E:D5:34:A1:58:12:01:AD:DB:EE:58:9A:C1:B7:D7:29:F0:C0:F7 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 013B Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa Signing time: Sun 17 Sep 2023 03:23:57 +0000 ROA not before: Sun 17 Sep 2023 03:23:57 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 150129 IP address blocks: 103.154.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Sep 17 03:23:57 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6506714c-68c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f3:00:e2:9f:12:ce:9d:56:40:04:63:88:0b: 99:55:37:64:f7:1a:ce:cc:28:79:e7:d7:33:66:5d: 2b:50:49:be:43:33:6f:a4:e5:50:b8:36:68:23:79: 10:7d:bc:4d:6f:a7:19:75:af:08:81:aa:97:53:88: 8d:08:a3:53:24:e4:2a:a8:fe:42:cb:d8:28:f0:89: 9f:19:57:53:8f:bd:20:8e:69:98:e9:f6:25:e2:f2: 79:ef:8b:92:9a:10:15:e5:17:1d:3d:49:35:2c:4e: 1a:de:2c:b8:26:54:f7:7a:99:f4:55:ee:cf:f6:c0: 31:56:82:ce:1d:7b:ef:13:d1:93:34:b2:0e:a4:db: eb:c3:ab:f4:aa:56:ac:bd:0a:53:24:0b:41:fa:3c: c2:f9:74:97:16:e2:63:24:b9:14:5f:c8:70:9d:d6: 48:d0:69:3c:12:c7:eb:1c:dd:02:38:91:53:3d:5b: 00:34:12:3a:32:fb:c9:83:09:87:a8:d1:4a:9d:fd: 28:8b:eb:9c:80:fa:93:c3:de:d9:7a:5b:25:d8:90: 2f:64:c5:31:60:aa:1b:18:e4:c2:f2:6b:72:8c:17: fb:90:71:4c:e1:47:56:7d:4d:00:ac:05:b6:03:b9: 93:a2:41:cc:c1:62:3b:6e:1f:00:d3:b9:16:09:44: bf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1E:D5:34:A1:58:12:01:AD:DB:EE:58:9A:C1:B7:D7:29:F0:C0:F7 X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.64.0/24 Signature Algorithm: sha256WithRSAEncryption a4:e3:2e:9f:09:f4:38:b3:0d:b0:db:f8:0e:f2:03:97:73:49: 6e:17:bf:7d:c6:5c:ae:1d:a3:4e:db:c4:d2:23:80:3a:10:ca: 2d:80:b3:98:e9:bf:e2:ef:04:63:9a:d1:0f:b7:e6:65:e0:91: b7:76:23:1a:d8:b7:79:b1:ef:6f:b2:1e:10:9d:49:5e:96:08: 8f:4a:f2:a3:9f:54:0f:ee:8c:e7:72:cf:9f:41:b3:1f:64:b0: b8:61:37:74:84:03:c8:c6:ee:40:a9:99:09:b8:bb:f7:50:70: fe:6f:7f:6f:84:9e:d3:af:7c:86:16:70:de:eb:93:58:1f:0c: b2:85:cb:b5:1f:37:1f:3c:dd:89:f8:1e:87:e8:3e:f8:ee:c3: 29:c0:9c:13:41:05:70:db:2b:40:55:74:ee:31:26:0c:05:b1: e8:33:8f:48:6b:7c:cf:ed:f8:ca:d9:de:94:84:2c:88:89:e4: c8:03:dd:f1:65:d3:9d:6f:32:17:62:a1:7d:37:f2:26:65:6f: 93:27:84:05:37:fa:24:e6:a0:5c:1a:db:ab:98:28:5d:53:99: c1:3c:bd:85:2d:3c:32:f1:69:c5:8e:f8:61:56:00:35:53:d0: 7b:21:2c:2c:88:6f:59:63:e4:a0:69:c1:68:83:54:68:e6:9a: 04:6f:39:3f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjMwOTE3MDMyMzU3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTA2NzE0Yy02OGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vMA4p8Szp1WQARjiAuZVTdk9xrOzCh559czZl0rUEm+QzNvpOVQuDZoI3kQ fbxNb6cZda8IgaqXU4iNCKNTJOQqqP5Cy9go8ImfGVdTj70gjmmY6fYl4vJ574uS mhAV5RcdPUk1LE4a3iy4JlT3epn0Ve7P9sAxVoLOHXvvE9GTNLIOpNvrw6v0qlas vQpTJAtB+jzC+XSXFuJjJLkUX8hwndZI0Gk8EsfrHN0COJFTPVsANBI6MvvJgwmH qNFKnf0oi+ucgPqTw97Zelsl2JAvZMUxYKobGOTC8mtyjBf7kHFM4UdWfU0ArAW2 A7mTokHMwWI7bh8A07kWCUS/qwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOIe1TSh WBIBrdvuWJrBt9cp8MD3MB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE4RTgvOTAzOTc4MzAxMEQ5MTFFRDgwQjgwRDI5QzRGOUFFMDIvQ0UxQTUyNDIx MEREMTFFREJDN0VBMzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnmkAwDQYJKoZIhvcNAQELBQADggEBAKTjLp8J9DizDbDb +A7yA5dzSW4Xv33GXK4do07bxNIjgDoQyi2As5jpv+LvBGOa0Q+35mXgkbd2IxrY t3mx72+yHhCdSV6WCI9K8qOfVA/ujOdyz59Bsx9ksLhhN3SEA8jG7kCpmQm4u/dQ cP5vf2+EntOvfIYWcN7rk1gfDLKFy7UfNx883Yn4HofoPvjuwynAnBNBBXDbK0BV dO4xJgwFsegzj0hrfM/t+MrZ3pSELIiJ5MgD3fFl051vMhdioX038iZlb5MnhAU3 +iTmoFwa26uYKF1TmcE8vYUtPDLxacWO+GFWADVT0HshLCyIb1lj5KBpwWiDVGjm mgRvOT8= -----END CERTIFICATE-----Generated at Sun May 19 05:48:52 2024 by rpki-client on console-fra.rpki-client.org