$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/16E91232932D11EABE8CE524C4F9AE02.roa File: 16E91232932D11EABE8CE524C4F9AE02.roa (raw, json) Hash identifier: QwiCtLOGc39rcsKBJpLs7uJ14+2epM+zhyDLSz46Eug= Subject key identifier: 4E:41:6E:ED:0A:5D:46:EA:5C:E6:CE:0F:81:E4:19:B8:B7:02:FE:93 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 086B Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/16E91232932D11EABE8CE524C4F9AE02.roa Signing time: Mon 08 Jan 2024 21:30:15 +0000 ROA not before: Mon 08 Jan 2024 21:30:15 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 138419 IP address blocks: 103.125.32.0/24 maxlen: 24 103.125.33.0/24 maxlen: 24 103.125.34.0/24 maxlen: 24 103.125.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Validity Not Before: Jan 8 21:30:15 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=659c6967-cbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:e1:d9:f1:e1:6e:56:99:8f:c7:f4:21:14: 42:db:dd:c8:11:0e:4c:6e:0b:4f:0b:2b:ed:ad:f4: 1d:bd:7c:1b:49:b1:a6:e5:f4:05:df:66:42:f8:f0: 22:2a:d2:52:af:16:21:3b:bb:48:dd:39:2d:30:b7: 09:ec:14:14:5b:75:b8:1f:83:69:66:9e:d6:e0:17: 8e:3c:e8:08:41:71:5f:e6:96:a3:89:b2:f4:c1:b5: 71:1e:18:a8:ac:71:5f:16:3b:be:d2:69:e6:3c:80: b8:ee:38:92:e7:14:cf:e5:f3:d0:64:01:5f:5d:50: ea:46:88:a6:45:d8:23:23:b1:54:af:5a:ee:ec:38: df:e8:12:1e:c8:28:21:a2:36:2f:d5:c9:cc:ee:2d: 1d:23:b5:50:50:72:fb:b3:47:76:82:8c:65:ba:06: fb:d3:c8:bc:fd:ee:13:80:d9:ed:73:9b:bf:ab:1b: 1f:00:0a:cd:77:e2:3a:56:e4:2f:6b:72:95:7a:a7: 30:5f:26:70:89:24:4d:2b:20:2b:2e:c4:25:b3:7c: bd:1c:44:f6:31:16:b5:a1:22:44:8f:4d:4f:30:99: 45:15:a1:0f:cb:3e:36:dc:8c:64:b5:66:0e:11:d9: dc:f0:c3:03:53:33:c0:02:04:33:6d:e5:fa:62:32: 81:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:41:6E:ED:0A:5D:46:EA:5C:E6:CE:0F:81:E4:19:B8:B7:02:FE:93 X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/16E91232932D11EABE8CE524C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.125.32.0/22 Signature Algorithm: sha256WithRSAEncryption 90:47:1a:f3:8a:aa:27:7f:2b:b9:73:c9:7e:fd:22:ce:ef:4d: 89:0e:98:69:94:bd:31:d5:74:06:f3:d9:f8:70:63:82:df:5d: ca:ab:29:55:c2:c6:65:e7:ac:05:f0:df:f0:0b:2a:26:29:7c: 26:30:23:60:2e:e8:09:0a:40:d5:34:f7:e8:16:d9:7f:09:15: 27:96:d7:7e:33:63:16:66:5e:39:78:ab:2f:6c:d3:ad:1d:66: 84:62:ac:22:41:fb:f5:51:f3:ab:ff:56:07:a5:e5:50:fa:11: b1:07:38:62:8b:d2:59:44:e0:dc:9d:e0:da:02:55:64:9a:9e: bc:7c:b0:a7:a9:e1:2b:a6:c8:e7:cf:03:4b:2a:d5:b5:56:dd: 66:91:7b:bf:d5:c1:7e:05:44:f6:50:a7:ca:f1:68:2c:bc:2f: b7:99:5f:57:a2:cb:bc:21:63:45:7f:f0:66:5c:8e:29:0f:41: e6:81:3b:40:40:14:8e:f8:a9:57:54:65:20:dc:51:64:bd:a6: 1e:61:59:1d:fc:8f:f8:3e:a2:b3:7a:b8:fb:24:25:c3:b8:a0: 78:2b:90:9a:99:a4:db:6d:5e:76:b6:6d:52:c7:8f:0c:9b:d5: b3:0b:60:85:52:41:18:5d:a3:3d:66:51:29:db:21:97:f0:1d: cb:40:8c:e7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjQwMTA4MjEzMDE1WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTljNjk2Ny1jYmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZjh2fHhblaZj8f0IRRC293IEQ5MbgtPCyvtrfQdvXwbSbGm5fQF32ZC+PAi KtJSrxYhO7tI3TktMLcJ7BQUW3W4H4NpZp7W4BeOPOgIQXFf5pajibL0wbVxHhio rHFfFju+0mnmPIC47jiS5xTP5fPQZAFfXVDqRoimRdgjI7FUr1ru7Djf6BIeyCgh ojYv1cnM7i0dI7VQUHL7s0d2goxlugb708i8/e4TgNntc5u/qxsfAArNd+I6VuQv a3KVeqcwXyZwiSRNKyArLsQls3y9HET2MRa1oSJEj01PMJlFFaEPyz423IxktWYO Ednc8MMDUzPAAgQzbeX6YjKB/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFE5Bbu0K XUbqXObOD4HkGbi3Av6TMB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMxNEMvMkEzNjExMEM5MzJCMTFFQUJBNTY4QjFFQzRGOUFFMDIvMTZFOTEyMzI5 MzJEMTFFQUJFOENFNTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnfSAwDQYJKoZIhvcNAQELBQADggEBAJBHGvOKqid/K7lz yX79Is7vTYkOmGmUvTHVdAbz2fhwY4LfXcqrKVXCxmXnrAXw3/ALKiYpfCYwI2Au 6AkKQNU09+gW2X8JFSeW134zYxZmXjl4qy9s060dZoRirCJB+/VR86v/Vgel5VD6 EbEHOGKL0llE4Nyd4NoCVWSanrx8sKep4SumyOfPA0sq1bVW3WaRe7/VwX4FRPZQ p8rxaCy8L7eZX1eiy7whY0V/8GZcjikPQeaBO0BAFI74qVdUZSDcUWS9ph5hWR38 j/g+orN6uPskJcO4oHgrkJqZpNttXna2bVLHjwyb1bMLYIVSQRhdoz1mUSnbIZfw HctAjOc= -----END CERTIFICATE-----Generated at Sat May 18 22:14:02 2024 by rpki-client on console-fra.rpki-client.org