$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/F814A546C01411EA912AC365C4F9AE02.roa File: F814A546C01411EA912AC365C4F9AE02.roa (raw, json) Hash identifier: CSrekpMbUtQxRsDfHQqz7muBflhWUtCH6yCR/F332RE= Subject key identifier: C5:C9:EB:6C:1D:FD:EB:B8:FD:B6:37:D4:6A:98:F1:11:98:BB:4F:B1 Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Certificate serial: 0739 Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/F814A546C01411EA912AC365C4F9AE02.roa Signing time: Sun 02 Jul 2023 21:27:41 +0000 ROA not before: Sun 02 Jul 2023 21:27:41 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 16509 IP address blocks: 103.16.56.0/24 maxlen: 24 103.16.58.0/24 maxlen: 24 103.16.59.0/24 maxlen: 24 103.16.101.0/24 maxlen: 24 150.242.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Apr 2024 21:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1849 (0x739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Validity Not Before: Jul 2 21:27:41 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64a1ebcd-3d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:14:27:c8:ac:0f:1a:d1:12:83:1a:08:2d: e8:01:87:dc:65:c3:88:df:ab:c8:74:bc:78:1f:8f: d9:db:dc:61:bd:ec:c0:9e:b3:84:7a:be:f2:dc:f9: 8b:58:41:1b:51:71:5e:e0:40:13:df:6d:f2:2a:3e: 43:f6:ed:ff:32:ac:52:93:08:82:4c:09:ca:5c:d6: 9a:d5:01:64:91:a4:be:f1:6e:c2:aa:e8:e2:48:4d: b6:ab:f9:4c:c0:cd:55:bb:34:61:f6:32:2b:4f:f7: 58:53:5e:e2:0e:22:a1:76:65:39:a2:10:78:3a:39: 58:c1:c1:0c:56:b8:fd:66:2f:2a:f7:2e:06:0f:50: 40:c0:01:c2:a4:9b:21:64:43:f3:cc:1a:10:d8:5b: 6a:ce:9a:e6:8b:3f:2b:d4:fb:e3:af:7e:54:92:96: 5b:64:fd:e8:98:fd:d2:5c:3a:6e:43:9c:fe:4d:d3: 8d:d9:4a:75:b5:77:18:fa:65:db:b5:d4:ef:fa:c6: fb:20:f0:dd:6f:11:15:fa:5e:a5:d3:33:23:a3:6e: 66:ad:a0:5f:f4:3f:1f:c4:6d:f5:36:b2:a6:14:75: 6c:8c:bb:27:e6:78:6b:88:62:7e:68:3a:5b:fd:11: cd:5a:75:1b:b2:74:37:6f:43:3a:4d:8c:5d:6d:a6: ff:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C9:EB:6C:1D:FD:EB:B8:FD:B6:37:D4:6A:98:F1:11:98:BB:4F:B1 X509v3 Authority Key Identifier: keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/F814A546C01411EA912AC365C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.16.56.0/24 103.16.58.0/23 103.16.101.0/24 150.242.68.0/24 Signature Algorithm: sha256WithRSAEncryption a9:89:de:95:ad:3c:0c:c8:9f:d4:f4:96:1e:99:51:ca:cf:ac: 2c:86:1f:4f:d9:d7:c9:9b:0f:79:2c:c4:37:77:0b:2d:59:34: 9b:f2:b3:5a:73:c0:82:d9:0a:19:44:da:86:56:56:60:b6:98: c8:30:f8:77:3f:a8:ce:8d:47:d9:ce:ba:1f:58:be:bb:3e:06: 4e:d9:c2:6e:d3:02:a5:6e:1b:a4:3a:64:f4:aa:9d:0d:a2:4c: 75:fd:fd:5e:51:ee:f7:9d:c5:0b:94:24:13:df:12:66:4b:d5: c7:24:ee:49:c5:33:5c:4e:39:fd:21:fe:b5:4c:19:1b:83:28: b7:0c:45:1e:b0:16:da:75:31:b6:ba:53:96:30:08:a2:98:bf: e5:c2:8d:fb:67:13:fe:5b:03:75:d6:ad:bd:0c:04:f0:0d:f2: 93:53:fd:39:7e:3e:f9:19:4f:bc:73:77:e6:e3:6f:85:b2:03: f3:e4:90:6c:42:f8:e6:68:0f:06:03:e2:e0:0f:bd:82:27:05: f0:41:13:91:ed:22:26:ca:55:df:89:72:34:4d:1e:04:94:6a: a4:44:69:f2:71:38:ef:9a:44:d9:4f:d9:45:27:38:fa:c8:57: c4:a1:2f:d6:5b:35:31:cb:cf:52:02:02:a5:26:4f:e8:07:e4: 85:50:c6:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw REE2NTJERTQwHhcNMjMwNzAyMjEyNzQxWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGExZWJjZC0zZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZ4UJ8isDxrREoMaCC3oAYfcZcOI36vIdLx4H4/Z29xhvezAnrOEer7y3PmL WEEbUXFe4EAT323yKj5D9u3/MqxSkwiCTAnKXNaa1QFkkaS+8W7CqujiSE22q/lM wM1VuzRh9jIrT/dYU17iDiKhdmU5ohB4OjlYwcEMVrj9Zi8q9y4GD1BAwAHCpJsh ZEPzzBoQ2Ftqzprmiz8r1Pvjr35UkpZbZP3omP3SXDpuQ5z+TdON2Up1tXcY+mXb tdTv+sb7IPDdbxEV+l6l0zMjo25mraBf9D8fxG31NrKmFHVsjLsn5nhriGJ+aDpb /RHNWnUbsnQ3b0M6TYxdbab/TQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFMXJ62wd /eu4/bY31GqY8RGYu0+xMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEE2NEYvM0M5RTJCNUNDMDE0MTFFQTgxNjg5MDY1QzRGOUFFMDIvRjgxNEE1NDZD MDE0MTFFQTkxMkFDMzY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnEDgDBAFnEDoDBABnEGUDBACW8kQwDQYJKoZIhvcNAQEL BQADggEBAKmJ3pWtPAzIn9T0lh6ZUcrPrCyGH0/Z18mbD3ksxDd3Cy1ZNJvys1pz wILZChlE2oZWVmC2mMgw+Hc/qM6NR9nOuh9Yvrs+Bk7Zwm7TAqVuG6Q6ZPSqnQ2i THX9/V5R7vedxQuUJBPfEmZL1cck7knFM1xOOf0h/rVMGRuDKLcMRR6wFtp1Mba6 U5YwCKKYv+XCjftnE/5bA3XWrb0MBPAN8pNT/Tl+PvkZT7xzd+bjb4WyA/PkkGxC +OZoDwYD4uAPvYInBfBBE5HtIibKVd+JcjRNHgSUaqREafJxOO+aRNlP2UUnOPrI V8ShL9ZbNTHLz1ICAqUmT+gH5IVQxjk= -----END CERTIFICATE-----Generated at Tue Mar 26 23:50:10 2024 by rpki-client on console-fra.rpki-client.org