$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F9F53948599011EEB54F7158C4F9AE02.roa File: F9F53948599011EEB54F7158C4F9AE02.roa (raw, json) Hash identifier: d4qUUZCMTJGqsgVXJbSv25ILaZv9GF/+8F1MKtPBFUg= Subject key identifier: 5D:08:3A:8C:7C:35:85:7F:2E:E4:4E:65:BC:41:CA:E0:D6:BB:5D:06 Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Certificate serial: 13 Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F9F53948599011EEB54F7158C4F9AE02.roa Signing time: Fri 22 Sep 2023 21:43:16 +0000 ROA not before: Fri 22 Sep 2023 21:43:15 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 967 IP address blocks: 103.247.28.0/23 maxlen: 24 2401:1fe0::/48 maxlen: 48 2401:1fe0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 07:34:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Validity Not Before: Sep 22 21:43:15 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=650e0a73-ba7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fd:7f:34:52:5c:18:46:9c:2a:f0:a6:14:4a: b8:de:3b:81:7d:14:7e:32:b6:45:19:c1:28:6f:a2: 5f:39:5b:34:10:52:28:e2:7b:e3:06:45:18:4e:3d: b5:e2:5b:e8:af:1c:9d:89:4a:42:6a:c3:ec:f2:9c: c8:cf:e9:c2:11:c1:81:12:0d:47:9e:1e:f4:6f:ba: ce:28:37:77:74:bd:42:99:ff:4a:f7:2d:4b:9f:df: 33:c4:31:e7:c0:c6:ef:ad:96:7b:5b:b1:72:19:27: aa:62:66:70:9e:94:7d:3e:07:25:70:75:70:93:ae: 8d:23:17:82:d9:91:df:3b:95:f0:3f:64:9f:46:43: f6:4d:b3:67:70:95:ff:15:d7:fa:c4:b9:95:0d:18: 8b:63:d9:64:0e:f5:1e:77:25:b7:47:f8:b9:57:e2: 47:e0:a5:68:c6:bf:0f:a2:ab:33:95:f8:9f:b6:e6: 04:43:97:81:bb:df:66:cf:19:b7:bb:2f:e6:1a:c9: ef:e9:03:96:bb:6d:a7:21:4b:c6:ca:0e:5d:4e:8b: 84:c4:5f:0e:fd:9c:c3:55:b3:01:aa:05:51:bc:2b: 12:62:f4:67:e7:a6:7b:cb:3a:ad:9f:1b:4c:65:07: 93:a9:a1:0b:4f:16:5d:3e:74:a7:cd:bd:28:f4:7e: 94:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:08:3A:8C:7C:35:85:7F:2E:E4:4E:65:BC:41:CA:E0:D6:BB:5D:06 X509v3 Authority Key Identifier: keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F9F53948599011EEB54F7158C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.28.0/23 IPv6: 2401:1fe0::/47 Signature Algorithm: sha256WithRSAEncryption 2b:27:ee:ce:1b:8c:08:50:de:6c:f5:72:b3:fd:79:e8:2b:0f: ee:44:37:62:a9:06:bf:91:6b:e9:81:ce:47:51:40:96:e1:67: 69:e3:91:53:a0:94:0f:07:99:91:61:7f:d9:40:72:2f:73:d7: 7f:1a:e7:04:08:00:19:e3:ac:68:52:ed:54:cb:45:2a:1e:9b: e1:47:ca:b6:03:79:18:57:46:15:bc:e3:26:48:fc:1e:7b:c8: 11:1e:11:70:1f:05:1e:79:d8:ec:71:05:3d:0e:e4:46:72:86: 74:5c:bc:95:51:ff:08:6a:37:de:aa:c5:c6:63:da:1b:56:53: 89:61:51:83:3a:97:fe:4a:b3:27:58:51:b4:1c:6f:1e:37:6f: bd:f8:81:bb:82:a7:5b:d7:88:1e:dc:cf:e4:da:52:7b:c8:17: b0:7b:bf:71:2f:8d:67:1d:b1:4e:83:ee:c9:63:91:1f:2d:44: 7c:e6:16:c2:23:22:5b:19:b5:44:f9:56:e0:d0:a8:08:49:02: 99:1c:e0:d6:41:e3:82:03:d5:c2:fc:e4:78:92:43:91:82:24: 7b:6a:74:44:8f:3c:5f:57:40:9f:b7:cb:4c:6e:22:b2:f5:f6: a5:f2:d2:b7:48:87:e4:2c:f9:89:51:17:76:e8:6d:7d:be:fa: 3d:8a:15:d7 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0EzMTExMC8GA1UEBRMoMUVGMzBDNEM1NjA0QTU2RUNCM0VBRUU3RjJDQTk3RUI3 ODEwNTA3MDAeFw0yMzA5MjIyMTQzMTVaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MGUwYTczLWJhN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi/X80UlwYRpwq8KYUSrjeO4F9FH4ytkUZwShvol85WzQQUijie+MGRRhOPbXi W+ivHJ2JSkJqw+zynMjP6cIRwYESDUeeHvRvus4oN3d0vUKZ/0r3LUuf3zPEMefA xu+tlntbsXIZJ6piZnCelH0+ByVwdXCTro0jF4LZkd87lfA/ZJ9GQ/ZNs2dwlf8V 1/rEuZUNGItj2WQO9R53JbdH+LlX4kfgpWjGvw+iqzOV+J+25gRDl4G732bPGbe7 L+Yaye/pA5a7bachS8bKDl1Oi4TEXw79nMNVswGqBVG8KxJi9GfnpnvLOq2fG0xl B5OpoQtPFl0+dKfNvSj0fpTBAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUXQg6jHw1 hX8u5E5lvEHK4Na7XQYwHwYDVR0jBBgwFoAUHvMMTFYEpW7LPq7n8sqX63gQUHAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDQTMxLzA5MEYxNEZBNTAw QzExRUU4MkIyNjg2M0M0RjlBRTAyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVI QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSHZNTVRGWUVwVzdMUHE3bjhzcVg2M2dRVUhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9GOUY1Mzk0ODU5 OTAxMUVFQjU0RjcxNThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWf3HDAPBAIAAjAJAwcBJAEf4AAAMA0GCSqGSIb3DQEBCwUA A4IBAQArJ+7OG4wIUN5s9XKz/XnoKw/uRDdiqQa/kWvpgc5HUUCW4Wdp45FToJQP B5mRYX/ZQHIvc9d/GucECAAZ46xoUu1Uy0UqHpvhR8q2A3kYV0YVvOMmSPwee8gR HhFwHwUeedjscQU9DuRGcoZ0XLyVUf8IajfeqsXGY9obVlOJYVGDOpf+SrMnWFG0 HG8eN2+9+IG7gqdb14ge3M/k2lJ7yBewe79xL41nHbFOg+7JY5EfLUR85hbCIyJb GbVE+Vbg0KgISQKZHODWQeOCA9XC/OR4kkORgiR7anREjzxfV0Cft8tMbiKy9fal 8tK3SIfkLPmJURd26G19vvo9ihXX -----END CERTIFICATE-----Generated at Mon Jun 17 09:40:50 2024 by rpki-client on console-fra.rpki-client.org