$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/A3BE70CCD5AE11EE909D5C40C4F9AE02.roa File: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (raw, json) Hash identifier: mlqYWvuNrrSnEm+0B66h/nKV5Ub3D0iTDWSnbfoE0rw= Subject key identifier: 32:22:E7:45:C6:FA:47:92:A9:57:B1:5B:DA:98:44:54:BD:74:0B:15 Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Certificate serial: 0A63 Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/A3BE70CCD5AE11EE909D5C40C4F9AE02.roa Signing time: Tue 27 Feb 2024 20:27:34 +0000 ROA not before: Tue 27 Feb 2024 20:27:34 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 137884 IP address blocks: 103.116.116.0/23 maxlen: 23 103.116.116.0/24 maxlen: 24 103.116.117.0/24 maxlen: 24 103.116.118.0/24 maxlen: 24 2402:f940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2659 (0xa63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Validity Not Before: Feb 27 20:27:34 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65de45b6-17d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:75:bc:fd:af:1c:d3:6e:cd:f9:7d:0a:9c:f9: 3b:ed:1a:00:7d:82:da:ad:59:60:32:39:f6:73:31: 26:09:2e:e5:95:c2:92:cb:c7:24:d4:31:bf:4f:32: e0:90:89:d2:46:99:f2:58:41:0f:95:2d:cb:a3:79: ec:fc:f3:ef:9c:80:9b:22:ed:7b:57:dc:86:21:4b: 7f:bc:a0:d8:51:d5:7d:6c:35:c4:93:9b:ba:1f:f1: f4:30:e9:b7:24:5c:82:c3:b4:6e:c2:19:88:da:e1: a1:a0:5e:eb:a4:83:5f:b4:92:e8:b6:14:63:4c:d9: 45:6c:0a:60:49:34:4c:df:01:30:eb:df:0a:de:73: a7:ec:6f:4e:10:aa:55:a9:d9:65:4d:65:42:7a:95: 96:d5:61:00:74:f4:72:34:d4:0a:98:e5:2a:f7:51: 35:96:d0:ef:33:72:e5:d2:c5:a5:39:4e:3d:aa:b9: 62:9b:5f:84:cd:5a:48:b7:31:84:f7:1d:15:40:67: a6:12:5a:a7:61:d3:02:09:a9:13:22:d6:1e:f4:2a: 18:08:38:bb:79:bb:ff:9f:b4:77:39:08:88:b8:ca: ca:9c:1d:1e:60:c1:0e:9c:11:28:13:19:c4:98:8c: 67:20:a5:7a:85:dc:46:54:a5:5c:fd:75:ba:dc:b3: f2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:22:E7:45:C6:FA:47:92:A9:57:B1:5B:DA:98:44:54:BD:74:0B:15 X509v3 Authority Key Identifier: keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/A3BE70CCD5AE11EE909D5C40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.116.0-103.116.118.255 IPv6: 2402:f940::/32 Signature Algorithm: sha256WithRSAEncryption 06:98:ad:af:d4:cd:a1:19:62:e5:ac:d7:72:82:25:8f:d4:5e: 5c:66:58:ac:10:89:14:76:eb:6b:7c:30:51:a9:3d:5a:ba:b9: 7a:2a:56:b7:0e:7b:f8:a0:56:e2:bf:fa:3b:5b:fb:4e:fd:15: a5:b0:d7:f2:ff:3b:01:af:75:96:7f:0b:0f:60:10:b0:c1:a8: 64:4a:64:81:b7:94:76:97:15:df:0f:06:06:18:8c:ab:e3:7f: f2:a4:62:67:77:96:86:85:97:12:40:9d:82:07:94:9e:68:6c: 13:df:39:ad:a4:de:aa:31:c7:cd:10:97:ef:86:3d:47:23:02: 5b:97:80:9f:7b:79:65:54:99:f2:fc:09:7b:2c:38:55:1a:1c: 93:da:0c:ec:2a:ba:a4:34:a8:54:35:78:b3:c9:9a:c2:32:4c: 3a:b9:2a:cb:91:64:6b:6e:80:10:15:ae:8f:70:37:6a:7b:dc: 19:94:ec:65:71:f8:e6:2d:0a:d6:6e:88:be:75:2a:7c:a9:f8: 80:17:b5:1e:a8:d9:d9:15:c5:59:fd:01:6e:04:e7:57:cd:66: 7a:d6:25:b7:a7:70:d0:bd:78:cd:31:ae:54:ad:ff:03:11:e7: ff:a9:54:df:2f:4b:de:f1:02:4c:b8:88:83:2f:7a:b2:8c:97: 37:cf:25:85 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRGNjYxMTAvBgNVBAUTKDY5QzgxOThCREEzRkQwOTA1M0Y0MjU1M0Q3M0VFQTE1 MTIxRDI0MUMwHhcNMjQwMjI3MjAyNzM0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRlNDViNi0xN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nW8/a8c027N+X0KnPk77RoAfYLarVlgMjn2czEmCS7llcKSy8ck1DG/TzLg kInSRpnyWEEPlS3Lo3ns/PPvnICbIu17V9yGIUt/vKDYUdV9bDXEk5u6H/H0MOm3 JFyCw7RuwhmI2uGhoF7rpINftJLothRjTNlFbApgSTRM3wEw698K3nOn7G9OEKpV qdllTWVCepWW1WEAdPRyNNQKmOUq91E1ltDvM3Ll0sWlOU49qrlim1+EzVpItzGE 9x0VQGemElqnYdMCCakTItYe9CoYCDi7ebv/n7R3OQiIuMrKnB0eYMEOnBEoExnE mIxnIKV6hdxGVKVc/XW63LPyqwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFDIi50XG +keSqVexW9qYRFS9dAsVMB8GA1UdIwQYMBaAFGnIGYvaP9CQU/QlU9c+6hUSHSQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEY2Ni9FNUY2NThBQTM2 OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBKQlQ5Q1ZUMXo3cUZSSWRK QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjZ1ppOW9fMEpCVDlDVlQxejdxRlJJZEpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRGNjYvRTVGNjU4QUEzNjhBMTFFQUI1NzQ5MjcyQzRGOUFFMDIvQTNCRTcwQ0NE NUFFMTFFRTkwOUQ1QzQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEAmd0dAMEAGd0djANBAIAAjAHAwUAJAL5QDANBgkqhkiG 9w0BAQsFAAOCAQEABpitr9TNoRli5azXcoIlj9ReXGZYrBCJFHbra3wwUak9Wrq5 eipWtw57+KBW4r/6O1v7Tv0VpbDX8v87Aa91ln8LD2AQsMGoZEpkgbeUdpcV3w8G BhiMq+N/8qRiZ3eWhoWXEkCdggeUnmhsE985raTeqjHHzRCX74Y9RyMCW5eAn3t5 ZVSZ8vwJeyw4VRock9oM7Cq6pDSoVDV4s8mawjJMOrkqy5Fka26AEBWuj3A3anvc GZTsZXH45i0K1m6IvnUqfKn4gBe1HqjZ2RXFWf0BbgTnV81metYlt6dw0L14zTGu VK3/AxHn/6lU3y9L3vECTLiIgy96soyXN88lhQ== -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:31 2024 by rpki-client on console-ams.rpki-client.org