$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/DCDCF87AE17511E8886B1878C4F9AE02.roa File: DCDCF87AE17511E8886B1878C4F9AE02.roa (raw, json) Hash identifier: KsLGHi4+kHYjw5B+CT+5OlCyjuOYeOPXd/7bbATaIPc= Subject key identifier: 88:06:DA:73:14:22:59:AE:BE:ED:BF:CD:1D:88:B9:27:5A:D2:89:A4 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1A6D Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/DCDCF87AE17511E8886B1878C4F9AE02.roa Signing time: Thu 30 May 2024 17:07:23 +0000 ROA not before: Thu 30 May 2024 17:07:23 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135328 IP address blocks: 103.214.104.0/24 maxlen: 24 103.214.105.0/24 maxlen: 24 103.214.106.0/24 maxlen: 24 103.214.107.0/24 maxlen: 24 2404:c480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6765 (0x1a6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: May 30 17:07:23 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6658b24b-5498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:29:14:43:3e:ae:08:2b:32:b3:c9:e8:f9:dc: 19:20:82:f3:ba:12:a0:16:ba:be:c3:cd:bb:f6:5b: 60:67:8c:0c:36:51:7d:d0:86:34:5b:96:1a:23:66: 6c:3c:f8:71:1b:71:e0:85:0d:2d:a6:d7:c7:70:99: c7:3d:f8:86:be:eb:23:22:66:0a:ca:db:24:cd:40: 28:6e:6e:9e:f5:53:6e:9c:28:b3:0f:e1:ee:99:a7: 16:17:34:15:e2:45:c2:58:dd:69:38:3f:6b:ba:0c: eb:74:8e:f7:59:4f:17:b0:9a:6c:27:ef:60:10:8c: 15:96:b0:df:cc:3a:ca:4b:1d:ab:25:ab:33:2d:83: 6a:16:5d:62:49:2b:2c:73:35:40:38:47:15:1f:9f: 8b:25:a8:84:bd:53:f4:e3:63:bb:30:cc:cd:6e:65: 63:a9:43:fe:d1:3f:90:96:90:42:27:90:cd:c8:a0: c6:79:78:4b:b9:03:10:ae:5c:81:50:05:ed:df:b2: 79:83:4b:03:b8:1d:4b:35:2c:3d:2d:a3:46:ce:09: 19:14:16:26:33:bf:a8:33:ea:54:d3:a1:6e:80:2d: b6:50:4e:ea:47:4b:94:f1:c8:f0:09:76:ca:67:f2: b3:90:f8:60:17:49:fb:bf:ea:97:7e:99:f0:ed:11: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:06:DA:73:14:22:59:AE:BE:ED:BF:CD:1D:88:B9:27:5A:D2:89:A4 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/DCDCF87AE17511E8886B1878C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.214.104.0/22 IPv6: 2404:c480::/32 Signature Algorithm: sha256WithRSAEncryption 01:14:23:91:b0:37:f7:ad:91:89:4d:cd:15:7e:e5:cd:22:e2: 1e:14:91:bd:4f:b5:f7:47:07:1e:85:f0:4e:6e:1d:38:c6:a1: 29:89:53:53:2e:30:b1:e6:d0:74:69:a1:62:18:67:a6:4d:fd: 28:67:3d:d3:7e:95:c4:c4:a5:68:2d:5a:ec:ad:3e:32:53:3b: 9c:5a:b1:1c:c4:9d:41:66:af:df:b9:23:c4:75:6f:9d:16:90: 16:66:c4:c3:05:49:a6:fb:6b:b6:03:e1:e0:27:20:4a:b4:aa: 6a:29:b6:0e:cb:5d:25:92:ed:7b:4b:68:f5:be:73:55:fa:d0: 60:4a:a0:0c:4e:50:5e:95:be:db:cf:8e:b7:df:ac:b3:49:4f: cb:dc:32:9e:64:1d:c3:47:ca:8f:0e:82:9f:c8:62:18:f9:04: f0:87:69:fd:d3:37:3c:b2:e0:f4:3b:22:f9:b4:cb:d5:20:7f: 34:85:bc:a3:5f:1d:33:83:8d:ae:5a:e5:dc:b3:64:32:83:a2: a7:a5:38:a1:d4:b3:d7:4c:53:9f:17:fa:25:5f:e0:c4:ff:85: 65:2e:f0:19:35:98:c3:20:18:0c:35:26:85:10:56:53:05:ef: 33:67:90:eb:d0:ee:fe:13:11:21:b8:83:c4:84:25:19:b2:5e: 91:0f:8f:3d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICGm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjQwNTMwMTcwNzIzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4YjI0Yi01NDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSkUQz6uCCsys8no+dwZIILzuhKgFrq+w8279ltgZ4wMNlF90IY0W5YaI2Zs PPhxG3HghQ0tptfHcJnHPfiGvusjImYKytskzUAobm6e9VNunCizD+HumacWFzQV 4kXCWN1pOD9rugzrdI73WU8XsJpsJ+9gEIwVlrDfzDrKSx2rJaszLYNqFl1iSSss czVAOEcVH5+LJaiEvVP042O7MMzNbmVjqUP+0T+QlpBCJ5DNyKDGeXhLuQMQrlyB UAXt37J5g0sDuB1LNSw9LaNGzgkZFBYmM7+oM+pU06FugC22UE7qR0uU8cjwCXbK Z/KzkPhgF0n7v+qXfpnw7REQjwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIgG2nMU Ilmuvu2/zR2IuSda0omkMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFCMTQvQjQxQTU4MzgxOEQxMTFFNzk3MENFQzE3QzRGOUFFMDIvRENEQ0Y4N0FF MTc1MTFFODg4NkIxODc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn1mgwDQQCAAIwBwMFACQExIAwDQYJKoZIhvcNAQELBQAD ggEBAAEUI5GwN/etkYlNzRV+5c0i4h4Ukb1PtfdHBx6F8E5uHTjGoSmJU1MuMLHm 0HRpoWIYZ6ZN/ShnPdN+lcTEpWgtWuytPjJTO5xasRzEnUFmr9+5I8R1b50WkBZm xMMFSab7a7YD4eAnIEq0qmoptg7LXSWS7XtLaPW+c1X60GBKoAxOUF6VvtvPjrff rLNJT8vcMp5kHcNHyo8Ogp/IYhj5BPCHaf3TNzyy4PQ7Ivm0y9UgfzSFvKNfHTOD ja5a5dyzZDKDoqelOKHUs9dMU58X+iVf4MT/hWUu8Bk1mMMgGAw1JoUQVlMF7zNn kOvQ7v4TESG4g8SEJRmyXpEPjz0= -----END CERTIFICATE-----Generated at Sun Jun 16 17:32:44 2024 by rpki-client on console-fra.rpki-client.org