$ rpki-client -vvf rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/43854B4044D411EB85615640C4F9AE02.roa File: 43854B4044D411EB85615640C4F9AE02.roa (raw, json) Hash identifier: klAGfBDx0WVWjQu4/S2weh+NfUhun+iFqiAVeW1UVsg= Subject key identifier: 00:D9:60:EA:C5:C3:56:2C:AB:0B:5C:30:C8:2E:45:5E:B5:C6:C5:08 Certificate issuer: /CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E Certificate serial: 05A2 Authority key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/43854B4044D411EB85615640C4F9AE02.roa Signing time: Thu 20 Jul 2023 22:59:05 +0000 ROA not before: Thu 20 Jul 2023 22:59:05 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 131448 IP address blocks: 103.69.136.0/22 maxlen: 22 103.69.136.0/24 maxlen: 24 103.69.137.0/24 maxlen: 24 103.69.138.0/24 maxlen: 24 103.69.139.0/24 maxlen: 24 116.66.180.0/22 maxlen: 22 116.66.180.0/24 maxlen: 24 116.66.181.0/24 maxlen: 24 116.66.182.0/24 maxlen: 24 116.66.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1442 (0x5a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E Validity Not Before: Jul 20 22:59:05 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64b9bc39-fe37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ab:e9:c2:10:17:96:f9:5b:44:3c:70:63:b3: 08:8a:fd:a5:4c:ad:52:08:46:39:7b:43:ba:17:52: 27:9b:bb:91:6a:14:45:6f:cf:1a:62:5f:f8:15:e7: a4:b2:ab:15:49:de:10:c4:e9:d4:88:e9:e7:91:1a: bd:18:c1:99:0a:67:01:b4:7b:a2:0c:31:4d:4f:a4: b2:84:55:b1:89:2a:b4:69:8b:d5:66:a9:24:96:ef: 4d:f8:1f:96:5e:04:66:49:17:11:34:00:4e:9b:ca: 86:8b:3c:a5:16:ef:55:e4:51:94:82:ca:19:7f:bf: 09:d4:e3:84:bb:33:35:a6:4e:9f:ed:38:2e:2a:f7: 3c:a4:fb:85:9a:14:f4:a7:63:94:b7:25:a7:b9:bc: 9b:61:26:43:cd:90:cf:30:a2:d5:a1:a7:e2:8a:40: 93:fe:ef:81:29:fd:99:39:1b:00:21:fc:d6:89:f3: 46:e2:cb:07:a6:34:a6:d8:3a:ce:84:f9:93:6b:49: 7f:d1:6e:0d:e1:a9:f3:99:88:6c:ba:a3:99:5e:ee: 8e:fc:9e:88:e4:36:f8:f8:e4:44:af:af:36:33:b8: 05:a6:cd:69:5d:fa:50:71:f6:33:0b:ab:ef:24:43: ad:d5:85:15:19:a5:92:f4:88:5b:57:cf:09:1a:fb: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D9:60:EA:C5:C3:56:2C:AB:0B:5C:30:C8:2E:45:5E:B5:C6:C5:08 X509v3 Authority Key Identifier: keyid:C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/43854B4044D411EB85615640C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.69.136.0/22 116.66.180.0/22 Signature Algorithm: sha256WithRSAEncryption a7:01:4b:83:f8:9d:46:40:7f:79:77:27:5b:94:4e:e3:42:08: 98:26:10:69:32:03:bc:4f:b7:89:5b:ac:0f:1e:3a:4b:17:89: 51:3c:5d:7a:a3:61:67:ca:e3:04:50:7e:2a:8b:fe:e9:fd:b1: e7:9e:90:cd:af:96:25:c7:17:f4:27:d8:f1:ab:1a:a4:8a:e7: 9e:5f:00:79:cd:6b:aa:b4:30:1b:f8:76:e5:44:a2:72:ad:e0: 31:e3:ad:d3:22:b4:71:d6:0c:0e:71:90:26:07:43:eb:1b:f5: 20:4f:5a:ea:45:29:2c:ac:2d:9c:e3:14:58:11:63:ff:90:e4: a5:0f:e8:04:5d:32:bc:dd:c4:92:35:14:48:41:e7:ca:ca:d6: d5:fd:27:5a:f8:83:31:2e:82:a4:fc:f6:73:05:05:cc:36:88: 69:4e:7a:7f:2e:bc:22:29:fe:a9:8b:5e:2d:9c:5b:36:03:00: 4d:bb:0d:bf:5a:c2:67:e2:ab:f8:46:a1:67:0e:15:c9:69:65: e1:98:4e:32:72:c7:d7:3b:55:17:3c:c6:a6:8d:49:7e:d9:e3: 00:20:83:b2:49:63:0f:ca:70:de:50:5a:a3:2e:6d:7a:b4:cb: 32:17:40:b8:54:92:77:c0:8f:1b:03:d7:e8:de:cd:72:4e:8d: 5b:1c:43:54 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxOTcxMTAvBgNVBAUTKEMzQjY0OEVCMkUyMzg3MkE5MThEMDU3NzEzMEYzNTg1 M0Y2RjYzOUUwHhcNMjMwNzIwMjI1OTA1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI5YmMzOS1mZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6vpwhAXlvlbRDxwY7MIiv2lTK1SCEY5e0O6F1Inm7uRahRFb88aYl/4Feek sqsVSd4QxOnUiOnnkRq9GMGZCmcBtHuiDDFNT6SyhFWxiSq0aYvVZqkklu9N+B+W XgRmSRcRNABOm8qGizylFu9V5FGUgsoZf78J1OOEuzM1pk6f7TguKvc8pPuFmhT0 p2OUtyWnubybYSZDzZDPMKLVoafiikCT/u+BKf2ZORsAIfzWifNG4ssHpjSm2DrO hPmTa0l/0W4N4anzmYhsuqOZXu6O/J6I5Db4+OREr682M7gFps1pXfpQcfYzC6vv JEOt1YUVGaWS9IhbV88JGvuWHQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFADZYOrF w1YsqwtcMMguRV61xsUIMB8GA1UdIwQYMBaAFMO2SOsuI4cqkY0FdxMPNYU/b2Oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE5Ny9BNEREQTUyNDQ0 RDIxMUVCQjEzNzlDM0VDNEY5QUUwMi93N1pJNnk0amh5cVJqUVYzRXc4MWhUOXZZ NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Wkk2eTRqaHlxUmpRVjNFdzgxaFQ5dlk1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjgxOTcvQTREREE1MjQ0NEQyMTFFQkIxMzc5QzNFQzRGOUFFMDIvNDM4NTRCNDA0 NEQ0MTFFQjg1NjE1NjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnRYgDBAJ0QrQwDQYJKoZIhvcNAQELBQADggEBAKcBS4P4 nUZAf3l3J1uUTuNCCJgmEGkyA7xPt4lbrA8eOksXiVE8XXqjYWfK4wRQfiqL/un9 seeekM2vliXHF/Qn2PGrGqSK555fAHnNa6q0MBv4duVEonKt4DHjrdMitHHWDA5x kCYHQ+sb9SBPWupFKSysLZzjFFgRY/+Q5KUP6ARdMrzdxJI1FEhB58rK1tX9J1r4 gzEugqT89nMFBcw2iGlOen8uvCIp/qmLXi2cWzYDAE27Db9awmfiq/hGoWcOFclp ZeGYTjJyx9c7VRc8xqaNSX7Z4wAgg7JJYw/KcN5QWqMubXq0yzIXQLhUknfAjxsD 1+jezXJOjVscQ1Q= -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:44 2024 by rpki-client on console-fra.rpki-client.org