$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/FC3B44CE519A11EAB1229A87C4F9AE02.roa File: FC3B44CE519A11EAB1229A87C4F9AE02.roa (raw, json) Hash identifier: fMtMptIHUKeWVI+alGgrp4O9sIjM2WxWj7VtBIe6rMg= Subject key identifier: AA:C6:1A:87:6C:21:42:69:BA:F9:49:67:5B:DE:4A:49:E5:76:22:F4 Certificate issuer: /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB Certificate serial: 0977 Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/FC3B44CE519A11EAB1229A87C4F9AE02.roa Signing time: Wed 06 Sep 2023 20:27:37 +0000 ROA not before: Wed 06 Sep 2023 20:27:37 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 134515 IP address blocks: 103.236.119.0/24 maxlen: 24 2001:df5:8400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2423 (0x977) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB Validity Not Before: Sep 6 20:27:37 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64f8e0b9-9719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:3c:7c:dc:46:6b:eb:26:0f:d9:08:93:b7: b0:b5:d6:7e:61:11:f4:cf:c0:1c:ef:53:5c:27:f9: a6:30:1b:6f:e2:f5:c4:56:92:cc:fb:92:93:f8:12: dd:cf:57:ad:2a:30:a1:8e:2b:ea:80:9e:46:ba:b2: 3a:51:d6:08:e9:35:d4:ae:09:8e:5d:86:bf:e8:5e: d9:08:f2:03:46:a0:89:b5:be:3e:e8:c2:c3:66:e2: b7:10:de:94:80:1e:c8:16:30:09:4d:76:8a:69:da: c0:8d:7b:6a:c3:6b:c8:8e:fa:f7:fe:41:e2:13:5f: e5:ec:7a:80:d4:ce:3a:fa:ff:67:46:4c:a2:09:f4: d8:a6:69:c4:23:a6:d3:ed:17:1d:35:5c:f8:ab:21: ee:b8:f9:4f:43:69:e5:65:70:8a:d2:7f:d4:55:7c: bc:8c:4a:3c:4c:58:13:0c:4b:82:62:32:46:26:58: 28:6e:c2:7b:ec:50:12:27:7c:e4:65:a2:37:96:53: 3e:85:78:a9:b4:37:d9:c4:1a:ae:ab:03:99:f0:d2: 63:b4:2b:85:e0:be:65:4f:08:72:85:ea:b1:46:42: 6e:5f:b6:94:ee:5c:b7:4d:1a:9f:5d:42:5f:53:0e: 89:a3:51:58:42:b0:e3:ee:a3:57:db:4d:fc:e4:cd: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C6:1A:87:6C:21:42:69:BA:F9:49:67:5B:DE:4A:49:E5:76:22:F4 X509v3 Authority Key Identifier: keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/FC3B44CE519A11EAB1229A87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.236.119.0/24 IPv6: 2001:df5:8400::/48 Signature Algorithm: sha256WithRSAEncryption 71:7b:8e:a9:fe:d4:9a:c7:a5:1e:16:64:f3:55:7b:d7:29:24: 41:56:ab:cd:6b:86:4e:da:57:7a:c8:14:74:e0:79:69:df:45: 5e:02:b3:c4:0b:54:0e:24:5d:67:88:ef:cb:ae:e1:ea:e0:ad: f0:ac:a8:0a:95:11:6f:8f:27:f9:8f:3c:5c:b4:3b:04:71:bb: f2:04:ff:93:d2:f8:d4:a1:0b:3d:0d:81:13:fb:27:73:9d:8d: f3:f5:de:a3:59:08:55:94:03:5a:c9:ee:b2:e2:28:67:d2:54: 38:cb:d3:21:96:14:a7:0a:8b:bb:6d:c1:3c:72:f6:cb:29:d6: 92:63:16:df:c0:5e:9d:e1:78:95:1b:28:f6:56:c9:0f:10:e1: 48:45:b0:58:c0:0d:31:07:ba:65:15:0c:c9:a0:a4:07:ff:13: 3e:0c:4f:6c:5f:f7:a1:fc:af:af:bd:1f:e3:22:da:bc:28:ff: 7a:7c:87:a1:24:bb:a9:2e:8e:32:3a:64:0c:86:d2:aa:28:0e: c7:26:88:20:96:f1:65:a7:d5:f0:8d:8c:bf:35:b5:ec:34:b3: 1c:0c:87:0c:d6:a3:36:56:19:fa:0e:19:f3:f3:8e:31:af:58: 01:2e:7a:9e:49:f1:3f:01:c0:6c:45:f1:92:01:24:97:15:55: b7:cf:a1:d1 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZEOTYxMTAvBgNVBAUTKDM0MDQxRkUzOTlDMDc2NTk2MUI3OUZFMTI0Njk0MTcy ODcyMDczQkIwHhcNMjMwOTA2MjAyNzM3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY4ZTBiOS05NzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKw8fNxGa+smD9kIk7ewtdZ+YRH0z8Ac71NcJ/mmMBtv4vXEVpLM+5KT+BLd z1etKjChjivqgJ5GurI6UdYI6TXUrgmOXYa/6F7ZCPIDRqCJtb4+6MLDZuK3EN6U gB7IFjAJTXaKadrAjXtqw2vIjvr3/kHiE1/l7HqA1M46+v9nRkyiCfTYpmnEI6bT 7RcdNVz4qyHuuPlPQ2nlZXCK0n/UVXy8jEo8TFgTDEuCYjJGJlgobsJ77FASJ3zk ZaI3llM+hXiptDfZxBquqwOZ8NJjtCuF4L5lTwhyheqxRkJuX7aU7ly3TRqfXUJf Uw6Jo1FYQrDj7qNX20385M0/hwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKrGGods IUJpuvlJZ1veSknldiL0MB8GA1UdIwQYMBaAFDQEH+OZwHZZYbef4SRpQXKHIHO7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkQ5Ni9BNjI0RkM0NDUx OTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRsbGh0NV9oSkdsQmNvY2dj N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BUWY0NW5BZGxsaHQ1X2hKR2xCY29jZ2M3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0ZEOTYvQTYyNEZDNDQ1MTk4MTFFQTk3MjI1OTgzQzRGOUFFMDIvRkMzQjQ0Q0U1 MTlBMTFFQUIxMjI5QTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABn7HcwDwQCAAIwCQMHACABDfWEADANBgkqhkiG9w0BAQsF AAOCAQEAcXuOqf7UmselHhZk81V71ykkQVarzWuGTtpXesgUdOB5ad9FXgKzxAtU DiRdZ4jvy67h6uCt8KyoCpURb48n+Y88XLQ7BHG78gT/k9L41KELPQ2BE/snc52N 8/Xeo1kIVZQDWsnusuIoZ9JUOMvTIZYUpwqLu23BPHL2yynWkmMW38BeneF4lRso 9lbJDxDhSEWwWMANMQe6ZRUMyaCkB/8TPgxPbF/3ofyvr70f4yLavCj/enyHoSS7 qS6OMjpkDIbSqigOxyaIIJbxZafV8I2MvzW17DSzHAyHDNajNlYZ+g4Z8/OOMa9Y AS56nknxPwHAbEXxkgEklxVVt8+h0Q== -----END CERTIFICATE-----Generated at Thu May 16 22:34:44 2024 by rpki-client on console-ams.rpki-client.org