$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/688AF35CC09511EC8CFFDB10C4F9AE02.roa File: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (raw, json) Hash identifier: 1WkNyyyiFt1FW+4vq2oaXotjB9v8sAKNGelCyY+t8Uc= Subject key identifier: EF:00:48:1E:81:0C:30:A0:1E:C2:1D:9C:41:9B:61:AA:17:BE:E8:92 Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Certificate serial: 0287 Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/688AF35CC09511EC8CFFDB10C4F9AE02.roa Signing time: Sat 01 Jun 2024 05:03:45 +0000 ROA not before: Sat 01 Jun 2024 05:03:45 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 132372 IP address blocks: 103.186.116.0/24 maxlen: 24 103.186.117.0/24 maxlen: 24 2001:df0:a8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Validity Not Before: Jun 1 05:03:45 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=665aabb0-49e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:82:f2:c3:c8:a5:20:0e:5b:a2:f8:6c:e7: e4:4e:ae:4f:47:b5:f5:cd:f6:7f:27:1e:e8:1a:50: b1:d4:07:d8:82:ae:a0:40:77:9e:3e:e9:ce:19:02: ca:c7:60:84:57:d4:ef:ee:db:58:c8:dc:15:c3:c6: af:0e:3f:53:63:f0:ac:86:1c:53:81:f3:ef:52:1b: 03:1c:8f:1f:de:af:36:00:8c:74:6b:9d:74:6e:93: 69:c6:b5:a6:1a:da:48:f2:5b:0c:0d:25:a9:ff:5d: 2a:6a:9c:87:4b:ed:29:d3:e8:76:e0:1f:81:34:b2: a3:aa:5a:67:25:ff:a1:1f:c7:3c:07:45:0b:e7:39: fb:6f:7d:c7:70:e5:29:0e:20:a5:22:f0:2b:0b:d2: c9:b1:90:b9:d0:22:11:62:46:64:50:14:cf:5a:5b: 52:12:fe:fe:92:f9:56:b2:d6:4a:65:2f:08:46:6d: 58:02:b2:fe:4a:e4:42:c1:8b:6a:53:8c:97:35:03: af:f2:7a:e6:f7:60:2e:31:9b:15:b0:10:de:62:77: 38:fe:a1:7b:21:0a:13:1a:65:80:da:b3:78:a2:c8: 04:55:43:af:ed:56:0a:56:0b:ee:3b:c7:39:e3:9f: e3:7e:ba:84:2c:cf:91:34:13:a4:f5:aa:60:04:39: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:00:48:1E:81:0C:30:A0:1E:C2:1D:9C:41:9B:61:AA:17:BE:E8:92 X509v3 Authority Key Identifier: keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/688AF35CC09511EC8CFFDB10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.116.0/23 IPv6: 2001:df0:a8c0::/48 Signature Algorithm: sha256WithRSAEncryption 4f:7e:ef:2d:10:05:f9:e8:44:02:31:d7:c0:ec:b2:f7:c6:82: bf:a2:a6:f8:b6:27:67:f0:cb:c6:89:83:05:70:3c:9f:62:30: a6:36:5d:c0:15:c7:37:2e:8b:78:ff:d0:70:c2:2c:d0:99:6a: 5e:f7:ae:49:3e:ff:57:88:3d:4e:49:06:b2:c5:ab:fb:1d:db: 06:3e:b2:9e:7f:7b:ee:27:3c:5f:f0:6c:d0:18:b2:5f:7d:e9: 52:5d:80:80:3e:9c:85:bd:f5:af:cc:14:46:49:a9:3a:32:8a: 16:e8:97:71:a5:a1:c2:7d:60:bd:a9:4c:9f:53:29:fb:96:7e: 64:69:17:2d:b1:1f:54:d3:0b:41:df:f2:2f:cf:c1:5f:81:05: 4a:e0:e1:1e:8c:95:f1:55:ae:07:ef:3b:37:4e:f8:9f:79:63: 06:d6:b2:8a:05:86:d2:d0:b5:d0:d2:be:78:50:4e:85:28:bc: 4b:cd:11:67:8b:66:14:d1:2f:56:cf:7d:7d:ad:d6:b7:ea:a4: e1:f8:70:da:fe:02:5a:a2:7b:d8:4d:55:1b:e0:1d:4b:99:bf: 52:54:d1:c3:2f:ec:bb:00:24:75:d4:2b:d3:e3:0f:88:25:59: 16:d1:75:74:c8:5d:bb:a8:68:a7:80:d4:58:e3:cc:25:06:0e: 88:cd:c2:d0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCNUYxMTAvBgNVBAUTKEYwMkE1RDEwMkY3RjMzQjI2MTExQjRBMjg3NDJGN0JB MkYxRTlBOTkwHhcNMjQwNjAxMDUwMzQ1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVhYWJiMC00OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6mC8sPIpSAOW6L4bOfkTq5PR7X1zfZ/Jx7oGlCx1AfYgq6gQHeePunOGQLK x2CEV9Tv7ttYyNwVw8avDj9TY/CshhxTgfPvUhsDHI8f3q82AIx0a510bpNpxrWm GtpI8lsMDSWp/10qapyHS+0p0+h24B+BNLKjqlpnJf+hH8c8B0UL5zn7b33HcOUp DiClIvArC9LJsZC50CIRYkZkUBTPWltSEv7+kvlWstZKZS8IRm1YArL+SuRCwYtq U4yXNQOv8nrm92AuMZsVsBDeYnc4/qF7IQoTGmWA2rN4osgEVUOv7VYKVgvuO8c5 45/jfrqELM+RNBOk9apgBDnvLwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFO8ASB6B DDCgHsIdnEGbYaoXvuiSMB8GA1UdIwQYMBaAFPAqXRAvfzOyYRG0oodC97ovHpqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I1Ri8wMDVFNTlBQ0Mw OTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003SmhFYlNpaDBMM3VpOGVt cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDcGRFQzlfTTdKaEViU2loMEwzdWk4ZW1way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0NCNUYvMDA1RTU5QUNDMDkyMTFFQzgwNDRDMTY0QzRGOUFFMDIvNjg4QUYzNUND MDk1MTFFQzhDRkZEQjEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnunQwDwQCAAIwCQMHACABDfCowDANBgkqhkiG9w0BAQsF AAOCAQEAT37vLRAF+ehEAjHXwOyy98aCv6Km+LYnZ/DLxomDBXA8n2IwpjZdwBXH Ny6LeP/QcMIs0JlqXveuST7/V4g9TkkGssWr+x3bBj6ynn977ic8X/Bs0BiyX33p Ul2AgD6chb31r8wURkmpOjKKFuiXcaWhwn1gvalMn1Mp+5Z+ZGkXLbEfVNMLQd/y L8/BX4EFSuDhHoyV8VWuB+87N074n3ljBtayigWG0tC10NK+eFBOhSi8S80RZ4tm FNEvVs99fa3Wt+qk4fhw2v4CWqJ72E1VG+AdS5m/UlTRwy/suwAkddQr0+MPiCVZ FtF1dMhdu6hop4DUWOPMJQYOiM3C0A== -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:42 2024 by rpki-client on console-fra.rpki-client.org