$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/FFC266D67AB911ED876A9C69C4F9AE02.roa File: FFC266D67AB911ED876A9C69C4F9AE02.roa (raw, json) Hash identifier: 4UT0/2o0TZ4k/d65UkPlj9qu8v945dpaTYp6272vOtM= Subject key identifier: 65:48:FB:7B:80:C4:93:B4:42:95:F2:F9:0B:78:90:C3:31:DE:40:D5 Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Certificate serial: B2 Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/FFC266D67AB911ED876A9C69C4F9AE02.roa Signing time: Tue 21 Nov 2023 04:55:34 +0000 ROA not before: Tue 21 Nov 2023 04:55:34 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 150681 IP address blocks: 103.53.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 06:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096 Validity Not Before: Nov 21 04:55:34 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=655c3846-30fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b0:e1:7f:b0:50:0b:b3:b9:3b:51:4b:31:e3: 7c:3b:ef:ed:e5:e7:cd:2f:5c:f7:d9:bf:d5:ea:8a: 24:94:d2:76:ac:15:9d:5b:77:16:09:d8:69:ff:51: 91:2b:f0:4c:6a:81:bf:66:98:72:a9:e7:98:02:ff: 99:ca:05:4e:6e:59:a7:30:28:56:28:9d:01:ad:fe: 0e:5f:1f:33:5a:7d:a6:f1:20:a4:9e:f2:53:18:cc: ed:05:2d:01:c5:ee:4c:e5:d4:0b:61:10:85:2f:aa: c6:fa:d3:83:7f:f9:6d:17:c3:2a:b9:6a:ae:90:3f: 48:02:87:e6:04:7a:49:ae:cc:f3:9a:12:87:cd:46: f5:d4:e0:20:dd:bf:28:b8:f3:f5:32:cc:3f:33:b9: 03:48:18:cd:c1:60:ea:f5:dc:ae:6b:7f:61:49:fd: c2:31:1e:e5:09:91:81:09:28:8c:54:f8:3c:95:03: 9e:3b:b5:9a:b1:1f:40:90:64:8b:77:6a:ee:e4:37: 3b:0d:86:f4:93:2f:3f:f0:67:0b:ab:bf:2c:60:4e: d5:b9:3c:82:3b:05:95:69:59:df:fb:6e:53:84:78: 4e:ec:46:89:75:19:80:fc:db:6f:a2:c2:7c:d0:8b: 5c:20:77:4c:79:16:99:e5:79:a9:28:5d:6f:93:56: fb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:48:FB:7B:80:C4:93:B4:42:95:F2:F9:0B:78:90:C3:31:DE:40:D5 X509v3 Authority Key Identifier: keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/FFC266D67AB911ED876A9C69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.53.160.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:4d:5c:1b:29:8b:42:11:96:7f:4f:a6:46:db:9c:8a:b3:7a: e8:1a:09:5b:27:a8:35:e9:9d:47:21:76:16:b6:32:52:ac:88: 9c:e1:72:33:3d:cb:7e:dd:75:90:3d:22:1a:6e:f1:52:c1:05: 3b:bc:0a:46:8d:9d:0e:2f:b1:f6:45:76:31:12:b5:a0:c2:09: c0:19:f6:24:12:38:20:2a:87:b8:73:33:8d:21:33:49:e8:a8: 84:01:6e:b4:6e:13:e1:ba:d0:29:32:b2:5a:74:61:76:0a:8a: 70:55:fc:3b:63:55:83:cb:f5:21:90:6e:06:76:1b:63:5f:e8: 80:4a:22:28:4e:b6:41:1c:22:52:ef:2c:a3:19:f3:68:90:74: ef:24:46:86:fd:42:df:eb:08:aa:67:0b:11:02:e7:f3:98:39: 9d:50:7f:da:05:94:a7:82:99:5c:c1:56:0f:4d:e3:1a:d8:88: 72:5f:48:74:6a:66:65:f9:75:66:a9:7a:a0:41:ff:f2:eb:bf: a5:7a:85:67:31:02:c3:b3:aa:97:72:9e:ca:51:b6:0f:59:6b: 41:20:01:23:76:e9:a4:e2:41:cb:be:f4:49:d5:fe:c9:32:01: 62:f7:4a:7d:61:61:07:d7:19:0a:aa:76:b9:19:34:67:93:40: 98:d4:40:f3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5MDcxMTAvBgNVBAUTKENBMDA3MEFDNTIwMUQ2RjZBNzc1QUE1MjVENTNEOEUz MzBFMzIwOTYwHhcNMjMxMTIxMDQ1NTM0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTVjMzg0Ni0zMGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LDhf7BQC7O5O1FLMeN8O+/t5efNL1z32b/V6ooklNJ2rBWdW3cWCdhp/1GR K/BMaoG/ZphyqeeYAv+ZygVOblmnMChWKJ0Brf4OXx8zWn2m8SCknvJTGMztBS0B xe5M5dQLYRCFL6rG+tODf/ltF8MquWqukD9IAofmBHpJrszzmhKHzUb11OAg3b8o uPP1Msw/M7kDSBjNwWDq9dyua39hSf3CMR7lCZGBCSiMVPg8lQOeO7WasR9AkGSL d2ru5Dc7DYb0ky8/8GcLq78sYE7VuTyCOwWVaVnf+25ThHhO7EaJdRmA/NtvosJ8 0ItcIHdMeRaZ5XmpKF1vk1b7nwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGVI+3uA xJO0QpXy+Qt4kMMx3kDVMB8GA1UdIwQYMBaAFMoAcKxSAdb2p3WqUl1T2OMw4yCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkwNy9CNTZBN0NCMDdB QjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2YW5kYXBTWFZQWTR6RGpJ SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lnQndyRklCMXZhbmRhcFNYVlBZNHpEaklKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY5MDcvQjU2QTdDQjA3QUI3MTFFRDlCOTUzNTY5QzRGOUFFMDIvRkZDMjY2RDY3 QUI5MTFFRDg3NkE5QzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnNaAwDQYJKoZIhvcNAQELBQADggEBADtNXBspi0IRln9P pkbbnIqzeugaCVsnqDXpnUchdha2MlKsiJzhcjM9y37ddZA9Ihpu8VLBBTu8CkaN nQ4vsfZFdjEStaDCCcAZ9iQSOCAqh7hzM40hM0noqIQBbrRuE+G60Ckyslp0YXYK inBV/DtjVYPL9SGQbgZ2G2Nf6IBKIihOtkEcIlLvLKMZ82iQdO8kRob9Qt/rCKpn CxEC5/OYOZ1Qf9oFlKeCmVzBVg9N4xrYiHJfSHRqZmX5dWapeqBB//Lrv6V6hWcx AsOzqpdynspRtg9Za0EgASN26aTiQcu+9EnV/skyAWL3Sn1hYQfXGQqqdrkZNGeT QJjUQPM= -----END CERTIFICATE-----Generated at Sat Jun 1 08:15:54 2024 by rpki-client on console-ams.rpki-client.org