$ rpki-client -vvf rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/FEC28FDE329511EDBF29A211C4F9AE02.roa File: FEC28FDE329511EDBF29A211C4F9AE02.roa (raw, json) Hash identifier: s203ahG078BUF8vOuoOqsFfETwzt6oYXpB1VfpCv4n0= Subject key identifier: 4A:66:F7:11:B1:08:3E:78:72:08:FC:72:BE:93:27:C8:26:39:8C:4C Certificate issuer: /CN=A9184559/serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277 Certificate serial: AE Authority key identifier: 05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/FEC28FDE329511EDBF29A211C4F9AE02.roa Signing time: Thu 15 Jun 2023 05:14:12 +0000 ROA not before: Thu 15 Jun 2023 05:14:12 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 142287 IP address blocks: 103.167.118.0/23 maxlen: 23 103.167.118.0/24 maxlen: 24 103.167.119.0/24 maxlen: 24 2001:df6:b180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184559/serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277 Validity Not Before: Jun 15 05:14:12 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=648a9e24-82fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:aa:91:ae:07:95:24:01:e9:d5:14:a2:80: d1:3f:a6:80:bd:6f:93:62:3e:64:24:d5:f9:c1:52: 47:38:e6:9b:b6:9a:66:24:74:09:23:27:48:7f:60: 84:98:3c:f0:f0:37:fc:3b:33:f9:9b:b9:bd:6d:e4: 41:b5:cc:9f:60:c2:94:0e:6d:d6:e9:57:7b:7b:3c: c8:ce:3f:c4:6e:42:c9:24:44:4b:cd:c0:6e:87:d5: a9:6a:43:2d:69:bf:17:7d:14:83:5f:89:38:e9:76: 56:41:ce:cf:4c:f4:7e:f1:99:4e:f9:fb:ab:92:19: 8c:07:a6:5e:96:40:27:47:d0:df:1a:c0:51:17:ce: 07:70:4f:53:cd:d1:76:84:59:e4:c1:a1:d5:32:c7: 3f:b1:7e:5d:ee:91:f6:48:e0:d6:13:c3:ea:c2:7e: c3:bf:25:88:ca:a9:21:34:61:ac:dd:ae:94:8d:ef: 1b:17:36:42:67:b7:32:00:9b:51:28:67:1e:ab:b7: c3:51:81:75:02:d8:24:30:6c:5f:64:e8:43:26:d5: a8:9c:db:0b:a0:78:0a:c7:21:bb:e8:4c:51:84:39: 5a:81:dc:c9:38:56:86:09:9d:2e:d7:50:3a:b9:c1: 19:dc:b7:7a:1a:b6:11:99:68:c6:e5:88:07:da:4f: 6c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:66:F7:11:B1:08:3E:78:72:08:FC:72:BE:93:27:C8:26:39:8C:4C X509v3 Authority Key Identifier: keyid:05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/FEC28FDE329511EDBF29A211C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.118.0/23 IPv6: 2001:df6:b180::/48 Signature Algorithm: sha256WithRSAEncryption 3c:dd:47:c8:9c:a2:38:66:6c:77:b4:aa:4b:d1:1b:a2:36:19: 23:51:1e:dc:05:9d:71:b0:4a:df:d9:83:fe:2c:22:8d:b3:b5: 9c:00:75:17:cd:a3:61:e0:74:97:35:2a:74:27:31:32:f7:17: 3a:93:6a:bc:fc:94:24:86:ab:ff:5b:b0:47:ac:22:d6:1c:31: bb:69:92:48:3a:13:e3:a1:92:60:a4:a0:36:86:df:98:da:0e: 9d:19:d0:21:67:92:b3:c3:08:c2:92:6d:1e:88:09:94:44:5a: da:6e:6a:fc:dd:40:7c:54:42:e0:4b:df:b1:a0:f8:29:c2:73: 07:4b:bc:68:c3:e0:be:5d:f4:86:70:b2:d8:65:19:d6:6c:a8: 7d:31:80:3c:47:c0:74:fe:f6:49:43:aa:75:c8:eb:fd:8b:27: 6d:a3:74:33:ab:fd:67:ca:f1:db:db:a9:c5:92:6d:80:5f:0e: 92:cc:46:9d:35:59:98:bc:1f:6a:94:24:fe:0a:a6:52:2f:31: e9:d9:03:c1:72:af:55:9f:74:cc:02:f0:36:7f:b5:89:ae:a6: 36:82:60:02:0e:66:82:d4:08:08:7e:4a:64:84:f2:89:cc:e9: 2a:8d:a8:dd:83:9e:48:00:76:f0:ff:3f:c2:1f:cb:fa:3f:17: 8e:5e:ae:f6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ1NTkxMTAvBgNVBAUTKDA1Q0M4M0NGNEI4QjFCMzc4OUZGRTRFQzQ0NjBBMTZE ODlFQTMyNzcwHhcNMjMwNjE1MDUxNDEyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDhhOWUyNC04MmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3Sqka4HlSQB6dUUooDRP6aAvW+TYj5kJNX5wVJHOOabtppmJHQJIydIf2CE mDzw8Df8OzP5m7m9beRBtcyfYMKUDm3W6Vd7ezzIzj/EbkLJJERLzcBuh9WpakMt ab8XfRSDX4k46XZWQc7PTPR+8ZlO+furkhmMB6ZelkAnR9DfGsBRF84HcE9TzdF2 hFnkwaHVMsc/sX5d7pH2SODWE8Pqwn7DvyWIyqkhNGGs3a6Uje8bFzZCZ7cyAJtR KGceq7fDUYF1AtgkMGxfZOhDJtWonNsLoHgKxyG76ExRhDlagdzJOFaGCZ0u11A6 ucEZ3Ld6GrYRmWjG5YgH2k9s9wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEpm9xGx CD54cgj8cr6TJ8gmOYxMMB8GA1UdIwQYMBaAFAXMg89Lixs3if/k7ERgoW2J6jJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDU1OS83NzdBMzA0RTMy OTExMUVEOTgzMDgwMTlDNEY5QUUwMi9CY3lEejB1TEd6ZUpfLVRzUkdDaGJZbnFN bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjeUR6MHVMR3plSl8tVHNSR0NoYllucU1uYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ1NTkvNzc3QTMwNEUzMjkxMTFFRDk4MzA4MDE5QzRGOUFFMDIvRkVDMjhGREUz Mjk1MTFFREJGMjlBMjExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnp3YwDwQCAAIwCQMHACABDfaxgDANBgkqhkiG9w0BAQsF AAOCAQEAPN1HyJyiOGZsd7SqS9EbojYZI1Ee3AWdcbBK39mD/iwijbO1nAB1F82j YeB0lzUqdCcxMvcXOpNqvPyUJIar/1uwR6wi1hwxu2mSSDoT46GSYKSgNobfmNoO nRnQIWeSs8MIwpJtHogJlERa2m5q/N1AfFRC4EvfsaD4KcJzB0u8aMPgvl30hnCy 2GUZ1myofTGAPEfAdP72SUOqdcjr/YsnbaN0M6v9Z8rx29upxZJtgF8OksxGnTVZ mLwfapQk/gqmUi8x6dkDwXKvVZ90zALwNn+1ia6mNoJgAg5mgtQICH5KZITyiczp Ko2o3YOeSAB28P8/wh/L+j8Xjl6u9g== -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:21 2024 by rpki-client on console-ams.rpki-client.org