$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/7FFCAA30667111EDB5CCA77DC4F9AE02.roa File: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (raw, json) Hash identifier: Sopvdcy4i/zCtHJsS9WmVX/sgPvDELxJfyYNgX/g46Q= Subject key identifier: 76:FF:C3:85:EA:D1:45:63:4C:79:97:E4:C6:F6:03:47:56:BB:89:FE Certificate issuer: /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44 Certificate serial: C6 Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/7FFCAA30667111EDB5CCA77DC4F9AE02.roa Signing time: Tue 05 Dec 2023 04:35:26 +0000 ROA not before: Tue 05 Dec 2023 04:35:26 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 150429 IP address blocks: 103.14.144.0/23 maxlen: 24 2001:df1:8b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44 Validity Not Before: Dec 5 04:35:26 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656ea88e-8892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ba:4f:71:7b:18:fb:cb:a7:0f:29:5c:4d:30: 17:95:e8:fe:9d:8b:55:da:67:40:84:74:f2:d6:9d: 83:ce:a0:a5:16:1d:9f:40:70:91:bc:89:9c:86:29: 55:db:36:4e:e3:ab:81:f0:4d:06:2f:6f:cf:30:5a: 0d:06:61:c0:9f:cb:cc:f4:3c:b6:c5:da:71:a1:72: 77:ee:ae:e2:8a:0a:90:dd:0a:70:eb:75:1a:46:1d: 82:47:e2:be:80:9a:49:22:87:ef:f8:24:b1:bb:d3: 8f:96:13:b9:0e:07:de:dd:92:08:80:c2:30:d4:c9: db:72:36:74:6a:c0:dd:c6:d6:84:81:40:74:a2:56: 92:0a:4b:93:76:6a:d3:4f:6e:d1:2e:69:c4:46:6d: 2e:71:e4:87:46:a0:ce:fa:af:1d:ee:33:cd:51:09: 08:05:7c:53:82:c2:71:7a:77:5e:50:31:4e:b7:63: b8:bc:d2:ea:7e:a9:da:93:a1:40:a8:4f:ff:7a:6d: 3d:cd:2d:bd:17:70:ad:83:41:2f:65:c2:30:b2:b0: 4b:41:7c:ff:ad:7f:5c:ad:46:7e:be:ec:16:8b:7d: 49:c2:d3:20:b2:b8:eb:32:49:47:2f:2c:d0:0c:e8: c8:2f:71:93:6d:6d:a1:9c:e3:3d:d7:be:dd:32:1a: 50:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FF:C3:85:EA:D1:45:63:4C:79:97:E4:C6:F6:03:47:56:BB:89:FE X509v3 Authority Key Identifier: keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/7FFCAA30667111EDB5CCA77DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.144.0/23 IPv6: 2001:df1:8b40::/48 Signature Algorithm: sha256WithRSAEncryption 22:49:06:4a:59:55:c3:29:9c:83:9e:5b:b5:a2:91:16:c9:f7: 5d:98:6e:e5:5b:43:98:13:80:91:72:f2:f5:ec:34:d8:1b:9d: 69:77:dd:2e:86:24:e0:13:73:d2:4a:f9:a1:d2:39:48:a2:67: 90:d8:a5:64:cf:a6:43:8c:50:41:f3:81:84:32:c5:26:21:bf: 6a:54:aa:b3:48:14:1e:ce:e6:5c:c8:61:45:51:5b:b4:f7:6c: 43:2e:72:4e:e7:f3:1f:af:8f:2a:65:f1:23:77:5b:9e:50:04: ae:9d:66:9b:4e:57:57:b8:58:ad:98:8d:6c:ca:d5:a3:a5:2c: 7f:3e:0e:d0:ac:d9:8a:64:9f:7d:07:e9:1c:8d:cf:3e:2d:31: 53:07:f7:bb:9c:f8:32:26:8b:05:c9:78:34:da:b9:cb:6a:26: 3b:93:a2:bd:30:97:1e:95:df:66:f4:37:d2:da:f3:32:64:05: c2:0b:63:fd:ff:65:3d:da:9d:d6:56:bf:f3:36:88:5c:19:96: 33:da:82:70:36:e0:52:d5:75:9e:4e:39:af:b3:21:fa:7d:ba: a5:20:26:38:24:b7:eb:fc:b5:6e:67:b6:a7:2c:35:81:e4:da: 91:73:e9:58:2f:41:48:e6:83:77:cc:f7:bb:82:a0:bb:7b:c9: f1:f6:44:27 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkwMzI0REE5NDMx QzQwOUJBNDQwHhcNMjMxMjA1MDQzNTI2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZlYTg4ZS04ODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bpPcXsY+8unDylcTTAXlej+nYtV2mdAhHTy1p2DzqClFh2fQHCRvImchilV 2zZO46uB8E0GL2/PMFoNBmHAn8vM9Dy2xdpxoXJ37q7iigqQ3Qpw63UaRh2CR+K+ gJpJIofv+CSxu9OPlhO5Dgfe3ZIIgMIw1MnbcjZ0asDdxtaEgUB0olaSCkuTdmrT T27RLmnERm0uceSHRqDO+q8d7jPNUQkIBXxTgsJxendeUDFOt2O4vNLqfqnak6FA qE//em09zS29F3Ctg0EvZcIwsrBLQXz/rX9crUZ+vuwWi31JwtMgsrjrMklHLyzQ DOjIL3GTbW2hnOM9177dMhpQpQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHb/w4Xq 0UVjTHmX5Mb2A0dWu4n+MB8GA1UdIwQYMBaAFCcXMJE3aK8BOLo5AyTalDHECbpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDkxQS80MjA0MDU3RTY2 NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3RTR1amtESk5xVU1jUUp1 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p4Y3drVGRvcndFNHVqa0RKTnFVTWNRSnVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjA5MUEvNDIwNDA1N0U2NjZEMTFFREI1NTY1Nzc3QzRGOUFFMDIvN0ZGQ0FBMzA2 NjcxMTFFREI1Q0NBNzdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnDpAwDwQCAAIwCQMHACABDfGLQDANBgkqhkiG9w0BAQsF AAOCAQEAIkkGSllVwymcg55btaKRFsn3XZhu5VtDmBOAkXLy9ew02BudaXfdLoYk 4BNz0kr5odI5SKJnkNilZM+mQ4xQQfOBhDLFJiG/alSqs0gUHs7mXMhhRVFbtPds Qy5yTufzH6+PKmXxI3dbnlAErp1mm05XV7hYrZiNbMrVo6Usfz4O0KzZimSffQfp HI3PPi0xUwf3u5z4MiaLBcl4NNq5y2omO5OivTCXHpXfZvQ30trzMmQFwgtj/f9l Pdqd1la/8zaIXBmWM9qCcDbgUtV1nk45r7Mh+n26pSAmOCS36/y1bme2pyw1geTa kXPpWC9BSOaDd8z3u4Kgu3vJ8fZEJw== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:49 2024 by rpki-client on console-fra.rpki-client.org