$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa File: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (raw, json) Hash identifier: 9Z5YCMcDd0R1oP8yFk8oM7gS30Ax/blEQC/AaLFyoFs= Subject key identifier: D7:3D:4D:06:0C:08:33:90:29:D3:0E:9A:E5:38:3A:74:DD:7B:C7:B4 Certificate issuer: /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08 Certificate serial: 04D7 Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa Signing time: Fri 17 May 2024 20:29:21 +0000 ROA not before: Fri 17 May 2024 20:29:21 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 23947 IP address blocks: 103.116.124.0/24 maxlen: 24 103.116.125.0/24 maxlen: 24 103.116.126.0/24 maxlen: 24 103.116.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08 Validity Not Before: May 17 20:29:21 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6647be21-97ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:41:c3:af:c8:58:c8:72:2c:97:c5:9b:9b:04: da:14:02:8d:94:72:38:13:04:a6:50:2e:42:85:42: fa:b0:64:e4:30:1e:bf:3e:97:85:39:d1:e7:ed:d3: da:5f:b0:7e:de:87:80:97:b0:cd:b4:eb:28:d6:8e: df:f2:78:9e:f9:e6:e3:dc:e4:fb:81:e2:f9:74:c4: 05:07:58:82:59:2f:af:c1:0b:1f:8d:fc:4f:93:33: 89:eb:d5:b5:84:9a:20:f4:9d:90:72:d1:d5:88:c0: fc:db:f7:06:61:91:a5:85:82:e5:71:72:c4:67:44: 82:67:45:41:ea:43:7e:12:d3:4e:5a:68:fd:33:e2: 4f:16:b2:b3:fc:fe:2c:74:27:b2:86:1e:5d:ee:9f: df:e1:9e:17:f4:17:64:0d:c7:0b:c2:fc:bc:c5:e1: a3:67:b5:38:a6:5a:d5:4e:2b:36:aa:f7:a4:46:6e: 55:e2:0e:d3:93:57:dc:c2:f2:8d:16:88:24:5a:f6: a2:ab:55:52:f1:bb:c2:93:38:6d:e3:48:e4:92:81: 60:1b:6b:0d:94:b7:5e:6d:f3:e4:89:db:78:e7:e5: f5:52:f4:d5:42:90:12:05:f3:6f:a0:6f:7b:04:f8: d8:ee:57:38:da:64:15:76:98:fd:fb:f4:8a:15:2e: e4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3D:4D:06:0C:08:33:90:29:D3:0E:9A:E5:38:3A:74:DD:7B:C7:B4 X509v3 Authority Key Identifier: keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.124.0/22 Signature Algorithm: sha256WithRSAEncryption dc:3b:2d:ad:e1:b4:94:46:03:dd:60:93:fc:87:bb:ff:d8:d8: 7c:f8:48:a5:32:76:9e:88:ea:bb:38:36:37:21:8f:5f:e4:09: c1:dc:26:c2:27:7e:71:5f:9f:5a:7e:a4:29:42:99:8b:14:7a: ef:35:44:96:ff:e1:bc:67:67:9a:68:64:dd:ba:72:a8:ce:50: b2:c8:5f:e7:bd:d4:b5:54:32:18:9d:e4:6c:3e:c7:37:f9:67: 0e:ad:01:7d:f7:59:34:39:d7:e4:2e:d8:89:68:70:4e:6e:2a: 3d:36:c0:a1:6e:08:6f:b6:37:34:53:19:da:2c:22:c6:7e:60: a2:68:ff:50:f2:f6:4f:c4:a5:e0:4a:34:2e:55:2e:ce:33:35: ad:c7:27:17:5c:be:a6:34:a4:d5:02:66:fd:4e:be:41:21:17: 94:f4:c4:7f:b3:6f:77:07:20:32:2a:19:ad:2a:00:80:d2:78: 62:19:cc:2c:4d:19:08:13:be:b7:84:b9:fd:28:d9:a8:0e:18: bb:6e:70:e4:6f:94:42:16:fe:8c:6d:dd:8b:b0:e8:e6:c9:bd: ea:26:7a:a5:95:83:15:9f:13:e5:93:ac:69:ac:49:ec:f0:30: 05:c4:9b:a2:48:52:ce:15:65:89:00:34:91:e2:25:26:4b:9c: eb:4d:c1:78 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2NDcxMTAvBgNVBAUTKDk4QTVBOTU1OTJDMDRFQkVEMzg3MTZCQzFEQ0UzNTE3 QjdCMTJEMDgwHhcNMjQwNTE3MjAyOTIxWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ3YmUyMS05N2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kHDr8hYyHIsl8WbmwTaFAKNlHI4EwSmUC5ChUL6sGTkMB6/PpeFOdHn7dPa X7B+3oeAl7DNtOso1o7f8nie+ebj3OT7geL5dMQFB1iCWS+vwQsfjfxPkzOJ69W1 hJog9J2QctHViMD82/cGYZGlhYLlcXLEZ0SCZ0VB6kN+EtNOWmj9M+JPFrKz/P4s dCeyhh5d7p/f4Z4X9BdkDccLwvy8xeGjZ7U4plrVTis2qvekRm5V4g7Tk1fcwvKN FogkWvaiq1VS8bvCkzht40jkkoFgG2sNlLdebfPkidt45+X1UvTVQpASBfNvoG97 BPjY7lc42mQVdpj9+/SKFS7k/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNc9TQYM CDOQKdMOmuU4OnTde8e0MB8GA1UdIwQYMBaAFJilqVWSwE6+04cWvB3ONRe3sS0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjY0Ny8wMTU3QkFERUQy NDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRyN1RoeGE4SGM0MUY3ZXhM UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21LV3BWWkxBVHI3VGh4YThIYzQxRjdleExRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I2NDcvMDE1N0JBREVEMjQ5MTFFQkEwNEI0QzNCQzRGOUFFMDIvQkY4RjcwQzY3 QjgyMTFFRDlDNEVERDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJndHwwDQYJKoZIhvcNAQELBQADggEBANw7La3htJRGA91g k/yHu//Y2Hz4SKUydp6I6rs4Njchj1/kCcHcJsInfnFfn1p+pClCmYsUeu81RJb/ 4bxnZ5poZN26cqjOULLIX+e91LVUMhid5Gw+xzf5Zw6tAX33WTQ51+Qu2IlocE5u Kj02wKFuCG+2NzRTGdosIsZ+YKJo/1Dy9k/EpeBKNC5VLs4zNa3HJxdcvqY0pNUC Zv1OvkEhF5T0xH+zb3cHIDIqGa0qAIDSeGIZzCxNGQgTvreEuf0o2agOGLtucORv lEIW/oxt3Yuw6ObJveomeqWVgxWfE+WTrGmsSezwMAXEm6JIUs4VZYkANJHiJSZL nOtNwXg= -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:28 2024 by rpki-client on console-ams.rpki-client.org