$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/16ABD910E0C111E7BA64DE22C4F9AE02.roa File: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (raw, json) Hash identifier: Ooak6D5iQ2fJ6FZTf7sU2wRFg0kTNy2Wu4Ysho3zOO0= Subject key identifier: C7:79:8E:66:FA:C1:64:18:D3:97:64:F3:37:C8:76:5A:BC:A5:29:53 Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Certificate serial: 16D1 Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/16ABD910E0C111E7BA64DE22C4F9AE02.roa Signing time: Wed 20 Nov 2024 17:04:55 +0000 ROA not before: Wed 20 Nov 2024 17:04:55 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 136030 IP address blocks: 103.104.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5841 (0x16d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Validity Not Before: Nov 20 17:04:55 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=673e16b7-b15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1b:38:82:52:80:2b:7e:f2:7d:f2:fa:ed:16: 94:21:f1:a7:7c:55:d4:f4:22:4e:a3:b6:30:21:0b: d3:96:01:55:7f:4e:72:c3:66:11:c6:23:1e:70:e0: 3d:df:fa:37:30:a8:bc:cb:b5:96:b0:5b:0f:9d:bb: 1a:95:c1:a0:18:63:91:50:04:bb:cd:b5:27:04:e6: 1a:60:74:ca:30:2a:56:ff:8a:e7:87:98:34:e5:a2: a9:66:2e:bd:ea:0d:4d:00:49:9f:97:c3:14:47:88: 67:0a:25:05:0c:2b:5b:51:8a:29:6e:25:7a:72:0a: 56:50:42:67:a6:26:8d:33:fa:ee:ae:90:4e:8d:d9: a4:74:a8:c6:67:50:e4:37:31:3c:57:e0:02:3e:c7: 86:b3:b7:be:fc:0b:29:16:68:22:fa:0b:6d:1f:16: 54:71:71:c4:b7:c6:2a:d1:d5:16:9c:bf:7c:44:dc: 8d:fa:07:fe:a9:15:3b:a3:a4:6a:f1:83:05:7f:61: d9:f4:8d:a2:18:17:cc:5c:de:2d:e9:9c:5b:84:e7: 7e:70:fa:25:fd:bd:e5:78:0f:b6:86:2f:73:1e:4c: 62:c6:4f:95:d1:70:bc:f9:af:50:08:43:cd:dc:3b: 90:ec:b9:30:e0:d3:de:8d:bc:59:8a:c0:4d:7d:53: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:79:8E:66:FA:C1:64:18:D3:97:64:F3:37:C8:76:5A:BC:A5:29:53 X509v3 Authority Key Identifier: keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/16ABD910E0C111E7BA64DE22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.192.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:5f:ab:50:86:c8:8d:3b:6a:28:64:9c:37:8d:fd:06:7a:b6: bf:41:6a:e6:e0:26:2d:d9:4d:4d:e4:01:ab:ba:d4:db:ce:4f: 92:ab:ec:0b:a7:6b:1d:1b:45:7c:83:1c:cc:44:6b:e4:e1:2a: a0:b9:e3:38:e1:48:71:af:a5:3e:1a:fc:72:63:5f:e9:3e:d4: 60:43:e3:8f:28:ca:e7:08:ac:fe:ee:60:c5:b9:12:ba:0f:0c: a1:95:fb:df:7c:f9:1e:4c:ee:3e:1e:62:d1:27:2c:1e:4d:5a: 6a:15:37:97:36:90:3e:ee:1a:63:87:bb:d4:b2:24:fd:2b:33: eb:52:99:97:7e:3c:63:32:4f:8b:51:12:0a:4f:2c:d5:44:3f: fd:21:f0:8c:45:94:f5:16:e9:e4:bf:1e:df:cb:0b:9f:6d:8d: 37:88:13:0f:6d:90:f1:0c:c8:7e:88:cb:c7:6e:6c:4c:63:33: d4:7b:81:f3:db:ad:80:2b:4c:a8:36:d8:d2:1c:4f:0b:1d:ca: 00:13:2c:87:9e:00:c3:2e:d0:bc:d8:6a:42:ce:76:27:27:d4: 60:fc:c6:45:ad:ae:3a:1d:7f:61:fa:62:16:1c:35:11:3e:3b: c3:bc:95:b6:62:ae:be:49:54:0b:cd:ad:92:f2:43:35:6b:e4: b9:b2:88:96 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1 QkUyNUIxQjQwHhcNMjQxMTIwMTcwNDU1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNlMTZiNy1iMTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Rs4glKAK37yffL67RaUIfGnfFXU9CJOo7YwIQvTlgFVf05yw2YRxiMecOA9 3/o3MKi8y7WWsFsPnbsalcGgGGORUAS7zbUnBOYaYHTKMCpW/4rnh5g05aKpZi69 6g1NAEmfl8MUR4hnCiUFDCtbUYopbiV6cgpWUEJnpiaNM/rurpBOjdmkdKjGZ1Dk NzE8V+ACPseGs7e+/AspFmgi+gttHxZUcXHEt8Yq0dUWnL98RNyN+gf+qRU7o6Rq 8YMFf2HZ9I2iGBfMXN4t6ZxbhOd+cPol/b3leA+2hi9zHkxixk+V0XC8+a9QCEPN 3DuQ7Lkw4NPejbxZisBNfVOTVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMd5jmb6 wWQY05dk8zfIdlq8pSlTMB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTc4REQvQ0MxOEQ5RDRFMEI2MTFFNzk5QTJCNjgyQzRGOUFFMDIvMTZBQkQ5MTBF MEMxMTFFN0JBNjRERTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnaMAwDQYJKoZIhvcNAQELBQADggEBAEtfq1CGyI07aihk nDeN/QZ6tr9BaubgJi3ZTU3kAau61NvOT5Kr7Aunax0bRXyDHMxEa+ThKqC54zjh SHGvpT4a/HJjX+k+1GBD448oyucIrP7uYMW5EroPDKGV+998+R5M7j4eYtEnLB5N WmoVN5c2kD7uGmOHu9SyJP0rM+tSmZd+PGMyT4tREgpPLNVEP/0h8IxFlPUW6eS/ Ht/LC59tjTeIEw9tkPEMyH6Iy8dubExjM9R7gfPbrYArTKg22NIcTwsdygATLIee AMMu0LzYakLOdicn1GD8xkWtrjodf2H6YhYcNRE+O8O8lbZirr5JVAvNrZLyQzVr 5LmyiJY= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:18 2024 by rpki-client on console-fra.rpki-client.org