$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0DDC2C14776F11ED8E7B8775C4F9AE02.roa File: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (raw, json) Hash identifier: zJKk7pRNCYHPfxM2M8hICVJasRLXXzzcGCdPvoe2P64= Subject key identifier: 65:7F:75:75:CF:5F:56:E0:07:8C:60:3C:CC:4D:3D:8E:33:D7:35:BA Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Certificate serial: 05A7 Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0DDC2C14776F11ED8E7B8775C4F9AE02.roa Signing time: Wed 04 Oct 2023 23:00:48 +0000 ROA not before: Wed 04 Oct 2023 23:00:48 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 10143 IP address blocks: 103.99.101.0/24 maxlen: 24 103.242.49.0/24 maxlen: 24 2001:df3:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1447 (0x5a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Validity Not Before: Oct 4 23:00:48 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651dee9f-3607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:99:c5:c8:46:20:83:da:8f:e1:7b:7e:09: 9b:26:04:b5:c5:c6:d4:24:a8:a1:fc:8d:fc:98:e1: ca:e7:9b:ea:91:32:23:48:1c:c5:2d:32:f4:94:22: 6d:dc:a5:a2:64:0c:fc:e2:2d:cd:5a:85:a8:4d:77: 42:f9:23:61:6c:c5:19:f6:6a:26:75:fa:aa:ab:ae: e3:d6:de:31:75:7d:f1:3f:16:da:54:26:d4:b4:65: d0:c6:67:26:c5:bd:76:3d:1b:9b:1a:1a:92:36:df: 72:d2:a8:32:ed:42:69:ba:ca:ae:ea:80:23:a7:6c: 59:fb:cb:e3:58:c9:09:c4:11:c9:d4:30:89:0d:5d: e8:6a:b8:7f:d3:c7:65:6f:ae:b8:69:d9:a2:16:93: 78:cd:74:4b:cf:2e:c7:cd:e7:73:a5:38:7a:a0:f4: cf:75:e5:3d:19:bd:21:ab:db:a0:31:83:18:bc:c5: d9:4f:14:50:fb:ad:a1:f3:b3:ad:d3:b4:3b:2c:a1: a0:5b:97:42:b6:c9:32:88:21:24:26:d7:2b:2d:b8: 01:ef:4f:06:c9:9c:48:34:7f:bd:c7:84:19:45:12: a2:54:eb:2d:96:bd:fa:b2:b3:bd:59:d5:13:70:1f: d7:1b:5e:ff:56:4e:16:7b:30:31:61:79:ab:45:27: ed:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7F:75:75:CF:5F:56:E0:07:8C:60:3C:CC:4D:3D:8E:33:D7:35:BA X509v3 Authority Key Identifier: keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0DDC2C14776F11ED8E7B8775C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.101.0/24 103.242.49.0/24 IPv6: 2001:df3:d000::/48 Signature Algorithm: sha256WithRSAEncryption 6f:af:e8:a3:77:bd:d0:39:16:17:d5:6e:77:42:1a:06:b7:9d: d4:c4:b9:79:47:92:a3:f6:ed:1d:2a:eb:6a:10:3c:89:38:fc: c4:d4:88:15:10:82:0a:91:ac:63:1c:c4:11:36:cc:17:34:bb: 7b:e0:76:2d:68:16:17:05:fe:ed:93:dd:7f:f6:53:cb:b2:e6: 4c:16:a7:ed:b3:97:7f:49:a9:a5:db:fe:7f:03:5e:d5:ef:6f: 72:47:b8:b1:d8:37:8b:5e:1a:f3:80:a1:f6:72:42:18:46:4a: 5e:66:50:6a:c9:38:8a:19:b7:6d:fb:3c:e9:b8:ad:19:3b:ce: ff:e5:06:cd:4d:67:32:16:a2:4a:7b:61:8d:65:90:10:b6:be: 46:0b:dc:c9:ba:59:b4:6a:29:de:31:b8:b1:6e:c7:0d:68:82: a3:d5:a4:6f:36:79:a1:88:13:bd:ae:cf:cd:ca:72:25:2e:0a: 0f:b3:4a:5f:e5:11:88:f6:2f:74:e0:d9:87:82:d3:2e:0f:a9: d4:99:62:dd:14:12:45:6f:bd:e9:40:22:b8:0c:4f:c8:a3:0e: b6:dd:e2:fa:a8:7b:82:49:67:39:d9:65:23:94:a3:b0:d5:52: ab:c8:46:de:53:3e:c6:f1:8b:a7:47:33:3c:6f:d9:fc:ee:7a: aa:19:b0:3c -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx QzhFNDNGMjQwHhcNMjMxMDA0MjMwMDQ4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFkZWU5Zi0zNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm2ZxchGIIPaj+F7fgmbJgS1xcbUJKih/I38mOHK55vqkTIjSBzFLTL0lCJt 3KWiZAz84i3NWoWoTXdC+SNhbMUZ9momdfqqq67j1t4xdX3xPxbaVCbUtGXQxmcm xb12PRubGhqSNt9y0qgy7UJpusqu6oAjp2xZ+8vjWMkJxBHJ1DCJDV3oarh/08dl b664admiFpN4zXRLzy7HzedzpTh6oPTPdeU9Gb0hq9ugMYMYvMXZTxRQ+62h87Ot 07Q7LKGgW5dCtskyiCEkJtcrLbgB708GyZxINH+9x4QZRRKiVOstlr36srO9WdUT cB/XG17/Vk4WezAxYXmrRSft6wIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFGV/dXXP X1bgB4xgPMxNPY4z1zW6MB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5 NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkEzMTQvNzBEM0IzNkE1OTUyMTFFQkE2RDc4MDQ4QzRGOUFFMDIvMEREQzJDMTQ3 NzZGMTFFRDhFN0I4Nzc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnY2UDBABn8jEwDwQCAAIwCQMHACABDfPQADANBgkqhkiG 9w0BAQsFAAOCAQEAb6/oo3e90DkWF9Vud0IaBred1MS5eUeSo/btHSrrahA8iTj8 xNSIFRCCCpGsYxzEETbMFzS7e+B2LWgWFwX+7ZPdf/ZTy7LmTBan7bOXf0mppdv+ fwNe1e9vcke4sdg3i14a84Ch9nJCGEZKXmZQask4ihm3bfs86bitGTvO/+UGzU1n MhaiSnthjWWQELa+RgvcybpZtGop3jG4sW7HDWiCo9WkbzZ5oYgTva7PzcpyJS4K D7NKX+URiPYvdODZh4LTLg+p1Jli3RQSRW+96UAiuAxPyKMOtt3i+qh7gklnOdll I5SjsNVSq8hG3lM+xvGLp0czPG/Z/O56qhmwPA== -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:44 2024 by rpki-client on console-fra.rpki-client.org