$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/85DE87DC47AF11EEA0A5EB62C4F9AE02.roa File: 85DE87DC47AF11EEA0A5EB62C4F9AE02.roa (raw, json) Hash identifier: rH2vNsfq5ersexmZDiVvwe39yhBGVAKGaeovnGkZbS0= Subject key identifier: 9C:19:30:37:4A:82:7B:E2:A8:F3:68:47:CD:28:1A:8D:69:A5:2E:34 Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Certificate serial: 20A8 Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/85DE87DC47AF11EEA0A5EB62C4F9AE02.roa Signing time: Tue 12 Mar 2024 01:03:31 +0000 ROA not before: Tue 12 Mar 2024 01:03:31 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 132858 IP address blocks: 103.29.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8360 (0x20a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Validity Not Before: Mar 12 01:03:31 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65efa9e3-5ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:69:b9:f9:ed:49:9c:ab:c6:66:c1:e3:87: ae:bb:25:76:9f:3f:70:fb:3e:ab:fe:1a:7c:3f:2f: 14:77:b4:a4:ad:8c:3a:0b:ac:33:af:e3:53:6f:ce: 6b:de:b7:a7:32:25:3d:80:11:76:21:a4:b1:c7:0f: f9:87:1e:e6:f9:63:ad:80:0a:58:97:37:99:d0:85: 96:3f:56:3b:35:ea:a6:44:19:50:52:c7:81:48:51: a0:94:f4:a1:05:6a:09:ec:93:8d:e4:4f:09:c9:ff: 28:48:8d:47:ec:8b:94:0a:79:f3:02:dc:a4:b5:f2: 9c:09:94:74:17:d6:e1:a7:45:05:7d:6c:24:3c:67: a6:ca:6a:ec:3a:a9:70:45:63:45:9e:b1:32:80:24: 9c:22:3e:24:c4:e1:72:96:3c:97:6f:1f:88:14:f7: 99:10:b0:10:7e:51:21:6f:c4:f3:14:2b:01:05:01: bb:6c:07:02:b2:b2:b5:dd:41:fb:11:25:f6:0f:28: 7c:fb:74:67:b4:9b:6c:bc:c3:5a:32:2b:9c:84:23: 45:92:d8:87:30:09:c2:d8:2b:39:c5:6d:25:ac:ca: b1:10:f7:4d:71:ad:0f:57:55:92:99:9d:0e:6a:5d: 9a:93:94:53:8b:79:ed:b2:ef:1b:ed:82:36:40:94: 0b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:19:30:37:4A:82:7B:E2:A8:F3:68:47:CD:28:1A:8D:69:A5:2E:34 X509v3 Authority Key Identifier: keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/85DE87DC47AF11EEA0A5EB62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.172.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:69:a5:2e:23:2c:66:79:9f:63:4b:a0:58:ca:f5:8e:50:3b: 87:1f:32:b5:5c:31:c3:1d:2c:25:b0:96:45:86:23:fe:78:10: 1e:b0:8e:fd:f4:0b:73:3e:27:08:b1:18:49:dd:80:e1:34:15: a5:6d:d1:00:d1:d3:ac:63:61:5e:7b:12:59:90:1b:d2:5b:60: 5b:cb:51:4b:54:18:6d:9b:7b:62:8b:45:7b:6f:d0:05:09:67: ba:8b:16:82:af:11:5d:c3:2e:35:a5:d8:be:b0:bb:6c:47:50: d2:a0:06:67:b1:a0:bb:d9:bb:c9:ab:66:44:79:8a:3a:5f:a8: 38:98:55:f4:98:b5:7c:07:48:67:c8:03:28:48:e9:af:fa:2e: 9b:45:cf:42:d6:ed:62:9e:d1:28:0d:de:f0:c1:99:55:14:d9: ef:5b:81:4b:ec:af:20:93:d4:e7:e1:43:ce:53:78:d3:05:41: 3a:5a:bd:74:e3:01:f1:b2:61:f1:e9:08:1a:72:2a:39:6d:0e: 24:27:4c:91:e5:ef:41:a0:92:51:56:e7:33:73:1d:6b:92:c4: 01:07:5a:10:d1:05:62:eb:a6:83:06:14:1c:03:f4:0d:24:25: f7:f9:31:43:23:43:16:76:23:d1:3b:fa:80:09:1b:76:53:8c: e3:34:80:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF QTNFNDFFNjAwHhcNMjQwMzEyMDEwMzMxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWVmYTllMy01Y2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rVpufntSZyrxmbB44euuyV2nz9w+z6r/hp8Py8Ud7SkrYw6C6wzr+NTb85r 3renMiU9gBF2IaSxxw/5hx7m+WOtgApYlzeZ0IWWP1Y7NeqmRBlQUseBSFGglPSh BWoJ7JON5E8Jyf8oSI1H7IuUCnnzAtyktfKcCZR0F9bhp0UFfWwkPGemymrsOqlw RWNFnrEygCScIj4kxOFyljyXbx+IFPeZELAQflEhb8TzFCsBBQG7bAcCsrK13UH7 ESX2Dyh8+3RntJtsvMNaMiuchCNFktiHMAnC2Cs5xW0lrMqxEPdNca0PV1WSmZ0O al2ak5RTi3ntsu8b7YI2QJQLyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJwZMDdK gnviqPNoR80oGo1ppS40MB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRENEQvQkFFMTA4QzRFQTYwMTFFNTg4MTU3NzBDQzRGOUFFMDIvODVERTg3REM0 N0FGMTFFRUEwQTVFQjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnHawwDQYJKoZIhvcNAQELBQADggEBAB5ppS4jLGZ5n2NL oFjK9Y5QO4cfMrVcMcMdLCWwlkWGI/54EB6wjv30C3M+JwixGEndgOE0FaVt0QDR 06xjYV57ElmQG9JbYFvLUUtUGG2be2KLRXtv0AUJZ7qLFoKvEV3DLjWl2L6wu2xH UNKgBmexoLvZu8mrZkR5ijpfqDiYVfSYtXwHSGfIAyhI6a/6LptFz0LW7WKe0SgN 3vDBmVUU2e9bgUvsryCT1OfhQ85TeNMFQTpavXTjAfGyYfHpCBpyKjltDiQnTJHl 70GgklFW5zNzHWuSxAEHWhDRBWLrpoMGFBwD9A0kJff5MUMjQxZ2I9E7+oAJG3ZT jOM0gHA= -----END CERTIFICATE-----Generated at Thu May 16 17:51:54 2024 by rpki-client on console-ams.rpki-client.org