$ rpki-client -vvf rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa File: F9D16F1CC7D811EDB42DFF20C4F9AE02.roa (raw, json) Hash identifier: CtRLKn6Ho9BgRI41OP+GfRuStv7HD0JEHEC66mznFgA= Subject key identifier: 22:66:96:64:AB:BC:CC:B3:E8:8B:CB:DA:A9:10:E3:77:33:76:24:8C Certificate issuer: /CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90 Certificate serial: 0A30 Authority key identifier: B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa Signing time: Mon 20 May 2024 20:59:23 +0000 ROA not before: Mon 20 May 2024 20:59:23 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135311 IP address blocks: 103.213.240.0/23 maxlen: 24 103.213.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 20:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2608 (0xa30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90 Validity Not Before: May 20 20:59:23 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=664bb9aa-44b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:de:14:09:6e:ee:46:1b:4d:f4:ac:fe:b3: 10:48:3a:a9:27:44:66:19:2a:ba:fc:5d:f2:a9:67: 88:68:e4:e7:f5:de:51:67:7d:bb:a5:9f:e1:1c:97: cd:fe:e2:1d:36:ea:a4:42:55:cb:91:56:9c:ea:94: ff:cb:e8:09:69:44:a7:ee:b7:de:b6:fd:bb:c8:51: 25:30:a6:0f:27:0d:7e:c7:89:04:74:a3:9a:fa:de: 94:9c:b5:c5:7d:6c:ef:63:4c:0d:f3:5b:9c:b6:e4: 6a:d2:6a:54:8e:db:63:30:18:86:e4:d9:ed:37:58: 75:f1:4a:a8:c3:b5:33:3d:57:62:94:7f:0b:45:c6: 7a:43:0b:b7:d1:56:b8:eb:fc:36:4c:aa:48:9b:0b: 2a:e5:76:f7:a5:0f:c6:28:4e:89:6d:d2:38:e7:a0: f3:b9:ed:0d:bb:40:45:12:7f:6c:bc:c3:a8:5a:9a: 00:03:64:66:af:38:94:58:9c:03:54:41:fe:36:9e: 7a:c4:7c:68:45:ed:50:3e:16:88:cd:1e:7a:bc:13: da:b3:f7:20:75:4a:d2:02:ee:09:aa:4c:6b:a2:f9: b5:0a:c1:cd:e5:a1:46:1b:e9:d0:45:12:ef:a7:c8: f5:47:30:4f:3c:8a:73:d3:7c:73:74:0b:61:34:06: 90:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:66:96:64:AB:BC:CC:B3:E8:8B:CB:DA:A9:10:E3:77:33:76:24:8C X509v3 Authority Key Identifier: keyid:B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.240.0/22 Signature Algorithm: sha256WithRSAEncryption 86:0d:b2:5c:25:27:8d:d2:6d:89:fd:d8:b5:4b:4c:50:b1:ec: 37:5e:c6:11:63:74:1c:ec:30:0c:f7:11:ab:59:a8:c0:8b:b8: af:f7:40:e5:e6:28:fa:34:5e:6b:1f:59:e8:15:72:c4:46:9a: 8c:c3:5d:72:5b:76:a3:81:24:1e:8b:20:45:d5:69:cb:96:7c: b9:41:67:d3:b9:08:db:18:c2:e8:0d:25:05:4a:52:c2:ee:19: 53:64:9c:f3:ac:0f:24:f1:a1:8b:1d:c5:62:a3:a5:35:2b:a2: 8c:54:7e:96:ee:2c:b8:6b:d5:e9:75:d4:3c:90:73:68:7d:04: 72:49:ac:a3:7f:6f:0c:10:ef:51:78:de:2f:20:6a:93:11:55: be:7c:8c:fb:85:1c:8a:14:57:c6:c8:b8:eb:4e:aa:4c:ad:de: 8a:48:ca:d8:7f:fb:23:6e:b6:41:f6:a7:a0:b6:3c:0a:ea:dd: 9d:28:fb:50:1c:37:b3:e7:05:25:72:6f:2f:5c:fd:d0:d2:46: 32:16:f0:2b:d2:cb:22:fd:cf:0c:f9:07:51:5d:80:7f:a5:29: a6:0a:0e:80:6b:28:7e:bc:dd:fb:a9:68:9f:85:fd:19:7c:40: ca:a8:22:87:b7:30:11:95:8c:a5:76:ba:b4:68:5f:4d:bc:30: 14:20:d8:7e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg4RjQxMTAvBgNVBAUTKEIxODRDMzVGNkFFREJGQjg1RERBNDExM0YyNzUyRTBD ODlDQTNBOTAwHhcNMjQwNTIwMjA1OTIzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRiYjlhYS00NGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqDeFAlu7kYbTfSs/rMQSDqpJ0RmGSq6/F3yqWeIaOTn9d5RZ327pZ/hHJfN /uIdNuqkQlXLkVac6pT/y+gJaUSn7rfetv27yFElMKYPJw1+x4kEdKOa+t6UnLXF fWzvY0wN81uctuRq0mpUjttjMBiG5NntN1h18Uqow7UzPVdilH8LRcZ6Qwu30Va4 6/w2TKpImwsq5Xb3pQ/GKE6JbdI456Dzue0Nu0BFEn9svMOoWpoAA2RmrziUWJwD VEH+Np56xHxoRe1QPhaIzR56vBPas/cgdUrSAu4Jqkxrovm1CsHN5aFGG+nQRRLv p8j1RzBPPIpz03xzdAthNAaQmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCJmlmSr vMyz6IvL2qkQ43czdiSMMB8GA1UdIwQYMBaAFLGEw19q7b+4XdpBE/J1LgyJyjqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODhGNC8wN0FFNzdDQzQ4 Q0MxMUVBQUVGNTAxNTFDNEY5QUUwMi9zWVREWDJydHY3aGQya0VUOG5VdURJbktP cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZVERYMnJ0djdoZDJrRVQ4blV1REluS09wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg4RjQvMDdBRTc3Q0M0OENDMTFFQUFFRjUwMTUxQzRGOUFFMDIvRjlEMTZGMUND N0Q4MTFFREI0MkRGRjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn1fAwDQYJKoZIhvcNAQELBQADggEBAIYNslwlJ43SbYn9 2LVLTFCx7DdexhFjdBzsMAz3EatZqMCLuK/3QOXmKPo0XmsfWegVcsRGmozDXXJb dqOBJB6LIEXVacuWfLlBZ9O5CNsYwugNJQVKUsLuGVNknPOsDyTxoYsdxWKjpTUr ooxUfpbuLLhr1el11DyQc2h9BHJJrKN/bwwQ71F43i8gapMRVb58jPuFHIoUV8bI uOtOqkyt3opIyth/+yNutkH2p6C2PArq3Z0o+1AcN7PnBSVyby9c/dDSRjIW8CvS yyL9zwz5B1FdgH+lKaYKDoBrKH683fupaJ+F/Rl8QMqoIoe3MBGVjKV2urRoX028 MBQg2H4= -----END CERTIFICATE-----Generated at Wed Jun 12 22:38:30 2024 by rpki-client on console-fra.rpki-client.org