$ rpki-client -vvf rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/FB4FC092A83811ED94EE0437C4F9AE02.roa File: FB4FC092A83811ED94EE0437C4F9AE02.roa (raw, json) Hash identifier: uBSKCHsUFl408B6bvgD3QgcNXBcba/V56ixs2JbyeAs= Subject key identifier: 3C:CE:6E:A2:25:0B:4C:9A:9A:71:0B:58:C2:E4:BD:34:E1:10:2E:F6 Certificate issuer: /CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB Certificate serial: 8D Authority key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/FB4FC092A83811ED94EE0437C4F9AE02.roa Signing time: Wed 01 Nov 2023 05:56:21 +0000 ROA not before: Wed 01 Nov 2023 05:56:21 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 150310 IP address blocks: 103.250.220.0/23 maxlen: 23 103.250.220.0/24 maxlen: 24 103.250.221.0/24 maxlen: 24 2001:df1:45c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB Validity Not Before: Nov 1 05:56:21 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6541e885-f04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:d9:90:fc:06:17:98:6d:de:aa:cb:5c:95: d6:86:f8:cf:3f:c1:67:d9:02:c6:3e:d3:22:ee:34: 74:01:cc:10:44:3d:96:8f:54:39:ac:e4:84:6b:1e: 25:f5:7b:35:80:23:ee:4d:97:10:30:63:4a:e1:1d: ed:5d:45:5d:6d:2e:e1:47:a3:63:d7:19:70:28:28: 4a:d1:47:97:96:51:eb:c6:57:84:07:d5:68:4e:90: 58:b2:74:61:1f:5e:e4:93:e5:4a:dc:74:19:e4:4d: 74:d5:d9:f4:14:94:33:a4:af:a0:b2:96:6e:d8:24: de:54:3f:0c:4e:cf:d0:b9:e1:1a:c6:d5:12:04:25: 46:e8:ac:0f:0a:07:2a:14:0d:f3:28:c4:c0:bf:b7: a4:58:74:51:78:9f:f0:c1:9d:14:62:37:0d:34:04: c4:72:01:2e:ed:ab:45:e7:88:86:52:6f:cb:6a:73: bc:a4:4f:ee:57:14:c6:54:81:47:00:93:bf:56:da: 01:15:e2:22:6b:9a:79:72:e0:c4:90:da:e9:85:9c: 7a:b9:9a:ac:b0:f7:9b:37:06:f8:9a:1d:2c:f0:f2: 2f:0d:e0:aa:64:0f:88:e6:e0:c6:3b:3c:0a:5a:5b: 59:fd:15:70:05:ec:fe:25:28:d8:7e:a1:a1:9a:00: 86:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CE:6E:A2:25:0B:4C:9A:9A:71:0B:58:C2:E4:BD:34:E1:10:2E:F6 X509v3 Authority Key Identifier: keyid:D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/FB4FC092A83811ED94EE0437C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.250.220.0/23 IPv6: 2001:df1:45c0::/48 Signature Algorithm: sha256WithRSAEncryption 16:43:29:d7:78:67:07:d7:0c:98:e3:e9:5f:ee:7b:96:b2:91: 45:c2:0f:6b:bf:a3:bf:6a:17:f4:45:22:74:88:bc:5d:6e:e5: 36:b3:8b:43:c3:e7:dd:8b:7a:52:5d:41:89:a0:95:0a:29:68: 7a:14:4e:96:17:42:69:ac:ba:f7:41:d6:d7:ec:43:8e:de:2d: c9:83:df:e2:21:f2:fa:50:f2:d1:2d:30:df:4d:0f:b2:e7:5e: 13:cf:01:63:f3:e8:ce:cd:cb:70:a7:16:ac:52:3b:3a:f8:61: 12:3e:68:90:de:b8:56:3f:c6:c2:51:89:f4:b8:38:30:45:53: 6b:be:30:de:c6:a1:8c:67:42:7b:79:26:7f:bc:ad:3e:28:93: 0f:57:e0:46:21:8f:5b:69:ff:12:b0:34:5e:7f:97:af:0f:8e: 00:3f:ac:fa:26:72:61:5b:38:77:3a:db:ea:f6:b5:52:ca:df: 44:48:08:82:08:0e:bb:45:0f:a1:91:c1:d8:e8:79:eb:e1:a4: 4c:4a:23:8d:97:0b:8b:fe:29:90:d8:3f:6f:e4:09:e0:19:b4: ff:e4:65:97:d6:98:75:ae:83:37:47:3a:a8:d1:d1:9e:40:d4: ef:d6:31:91:82:1b:67:1f:f4:af:db:64:e0:7e:d0:51:0d:3b: b6:10:a9:87 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZEMkIxMTAvBgNVBAUTKEQ2MURDMTc4MDhGNThFMEY5OUIyODUyQ0U3NDg2MEY4 NTNDQjIwREIwHhcNMjMxMTAxMDU1NjIxWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQxZTg4NS1mMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnenZkPwGF5ht3qrLXJXWhvjPP8Fn2QLGPtMi7jR0AcwQRD2Wj1Q5rOSEax4l 9Xs1gCPuTZcQMGNK4R3tXUVdbS7hR6Nj1xlwKChK0UeXllHrxleEB9VoTpBYsnRh H17kk+VK3HQZ5E101dn0FJQzpK+gspZu2CTeVD8MTs/QueEaxtUSBCVG6KwPCgcq FA3zKMTAv7ekWHRReJ/wwZ0UYjcNNATEcgEu7atF54iGUm/LanO8pE/uVxTGVIFH AJO/VtoBFeIia5p5cuDEkNrphZx6uZqssPebNwb4mh0s8PIvDeCqZA+I5uDGOzwK WltZ/RVwBez+JSjYfqGhmgCG6QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDzObqIl C0yamnELWMLkvTThEC72MB8GA1UdIwQYMBaAFNYdwXgI9Y4PmbKFLOdIYPhTyyDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkQyQi8zRjg2RDc5QUE4 MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFqMWpnLVpzb1VzNTBoZy1GUExJ TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoM0JlQWoxamctWnNvVXM1MGhnLUZQTElOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkZEMkIvM0Y4NkQ3OUFBODM1MTFFREE3NzZBQjMwQzRGOUFFMDIvRkI0RkMwOTJB ODM4MTFFRDk0RUUwNDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn+twwDwQCAAIwCQMHACABDfFFwDANBgkqhkiG9w0BAQsF AAOCAQEAFkMp13hnB9cMmOPpX+57lrKRRcIPa7+jv2oX9EUidIi8XW7lNrOLQ8Pn 3Yt6Ul1BiaCVCiloehROlhdCaay690HW1+xDjt4tyYPf4iHy+lDy0S0w300Psude E88BY/Pozs3LcKcWrFI7OvhhEj5okN64Vj/GwlGJ9Lg4MEVTa74w3sahjGdCe3km f7ytPiiTD1fgRiGPW2n/ErA0Xn+Xrw+OAD+s+iZyYVs4dzrb6va1UsrfREgIgggO u0UPoZHB2Oh56+GkTEojjZcLi/4pkNg/b+QJ4Bm0/+Rll9aYda6DN0c6qNHRnkDU 79YxkYIbZx/0r9tk4H7QUQ07thCphw== -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:33 2024 by rpki-client on console-fra.rpki-client.org