$ rpki-client -vvf rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/9AF0F3C801D611EDA3BFA62EC4F9AE02.roa File: 9AF0F3C801D611EDA3BFA62EC4F9AE02.roa (raw, json) Hash identifier: nciiFuGmxPeoho5NmphaFtp0k4wbXNH8dEwpri0vVSM= Subject key identifier: 36:B1:C1:66:00:1E:E7:31:6A:AF:EC:9A:63:7A:20:22:E5:E9:1E:91 Certificate issuer: /CN=A915C241/serialNumber=1D61DB24D2179647497614C14F66BBFFACA9CBFD Certificate serial: 0184 Authority key identifier: 1D:61:DB:24:D2:17:96:47:49:76:14:C1:4F:66:BB:FF:AC:A9:CB:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/9AF0F3C801D611EDA3BFA62EC4F9AE02.roa Signing time: Fri 01 Dec 2023 04:34:48 +0000 ROA not before: Fri 01 Dec 2023 04:34:48 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 59215 IP address blocks: 103.243.116.0/24 maxlen: 24 103.243.117.0/24 maxlen: 24 103.243.118.0/24 maxlen: 24 103.243.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.crl rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C241/serialNumber=1D61DB24D2179647497614C14F66BBFFACA9CBFD Validity Not Before: Dec 1 04:34:48 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65696268-dc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a7:7f:30:1f:a8:e4:d0:1e:ad:d9:9e:43:96: e6:08:ee:b7:49:eb:b1:8b:5b:7b:46:b5:42:8a:1d: d0:73:8d:a9:81:07:27:50:b0:72:32:80:b0:d8:79: 64:39:bf:47:f3:a4:c6:e5:30:ff:5f:d2:7e:c6:bf: 16:63:23:70:a3:46:c3:d9:f2:1c:2a:ca:0b:a5:e4: d6:f8:b8:dd:70:eb:4a:0b:aa:93:22:fd:d4:5c:b4: 5f:76:65:14:fe:df:4b:eb:87:a4:ac:f3:d4:dc:98: 2c:1c:f7:0a:61:7b:b1:e1:b2:d4:74:f8:d6:48:47: aa:9b:e6:75:ce:d2:7c:2b:95:79:68:36:dc:9f:86: 7e:65:02:a5:0a:3b:08:53:0f:74:1d:f3:48:98:f5: 5f:78:a2:ce:ee:e4:06:e3:a0:b3:7d:35:5c:06:69: ff:bd:53:3e:2a:df:3e:75:22:c5:f2:ac:d0:3f:43: 58:73:11:05:b5:75:3c:a7:3f:f3:23:bc:43:33:51: 27:35:37:ce:20:61:a6:69:9c:ef:d9:4b:15:4a:08: 1b:16:7d:9c:6f:73:1c:16:eb:ec:28:2a:2f:82:7c: 38:b2:b4:96:fa:70:d8:6c:1c:74:1a:68:8e:60:7c: 74:76:b9:47:9b:ed:33:e9:fe:60:65:e3:f7:76:a2: 75:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B1:C1:66:00:1E:E7:31:6A:AF:EC:9A:63:7A:20:22:E5:E9:1E:91 X509v3 Authority Key Identifier: keyid:1D:61:DB:24:D2:17:96:47:49:76:14:C1:4F:66:BB:FF:AC:A9:CB:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/9AF0F3C801D611EDA3BFA62EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.116.0/22 Signature Algorithm: sha256WithRSAEncryption 86:2d:4f:31:9e:14:20:b4:fb:e4:96:c5:6c:7a:50:c5:59:c2: cd:02:62:13:78:3a:04:7e:c9:47:2b:8a:8f:fb:ae:c7:81:02: 96:87:b4:54:4f:49:ce:be:d8:36:1a:03:02:3c:cd:a5:23:0e: 6c:55:8e:d4:ad:15:08:5b:9b:c4:6e:64:b3:4f:4b:a3:1d:ec: 6a:e5:e7:4a:59:7b:80:2e:c3:05:3b:e7:86:a3:e2:25:91:d7: 45:ac:a2:7b:01:a0:28:e0:16:24:cf:9d:f3:9c:ab:24:ea:48: fc:9f:1a:08:5a:6a:87:b9:24:09:80:fa:6c:cb:97:e2:82:e5: 1c:14:92:17:de:9f:52:00:71:59:94:f3:d8:7d:a7:44:c5:cf: 3c:e8:83:4f:b9:8c:63:32:cd:cf:78:31:0e:37:61:96:32:ed: 37:39:d7:50:cd:d7:0e:a1:aa:9d:ae:7c:8e:be:74:dd:39:a5: 94:a4:bd:6d:d7:bb:6d:69:98:ad:1d:bb:2e:5f:a5:f7:8a:2b: 1a:ed:f4:45:8f:92:e8:5f:07:e8:de:73:74:ce:d2:4d:c9:6a: 19:ca:e3:fb:38:65:75:8c:7d:1a:5f:42:32:4b:05:4d:c7:50: b6:8e:c6:d1:f1:39:ef:bc:df:2b:eb:d9:6c:5c:cf:ab:09:cf: 7f:49:e1:b1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMyNDExMTAvBgNVBAUTKDFENjFEQjI0RDIxNzk2NDc0OTc2MTRDMTRGNjZCQkZG QUNBOUNCRkQwHhcNMjMxMjAxMDQzNDQ4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY5NjI2OC1kYzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqd/MB+o5NAerdmeQ5bmCO63Seuxi1t7RrVCih3Qc42pgQcnULByMoCw2Hlk Ob9H86TG5TD/X9J+xr8WYyNwo0bD2fIcKsoLpeTW+LjdcOtKC6qTIv3UXLRfdmUU /t9L64ekrPPU3JgsHPcKYXux4bLUdPjWSEeqm+Z1ztJ8K5V5aDbcn4Z+ZQKlCjsI Uw90HfNImPVfeKLO7uQG46CzfTVcBmn/vVM+Kt8+dSLF8qzQP0NYcxEFtXU8pz/z I7xDM1EnNTfOIGGmaZzv2UsVSggbFn2cb3McFuvsKCovgnw4srSW+nDYbBx0GmiO YHx0drlHm+0z6f5gZeP3dqJ1TwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDaxwWYA Hucxaq/smmN6ICLl6R6RMB8GA1UdIwQYMBaAFB1h2yTSF5ZHSXYUwU9mu/+sqcv9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzI0MS82ODlBQzUzODAx RDIxMUVEQTYzRDdFMjhDNEY5QUUwMi9IV0hiSk5JWGxrZEpkaFRCVDJhN182eXB5 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSGJKTklYbGtkSmRoVEJUMmE3XzZ5cHlfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUMyNDEvNjg5QUM1MzgwMUQyMTFFREE2M0Q3RTI4QzRGOUFFMDIvOUFGMEYzQzgw MUQ2MTFFREEzQkZBNjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn83QwDQYJKoZIhvcNAQELBQADggEBAIYtTzGeFCC0++SW xWx6UMVZws0CYhN4OgR+yUcrio/7rseBApaHtFRPSc6+2DYaAwI8zaUjDmxVjtSt FQhbm8RuZLNPS6Md7Grl50pZe4AuwwU754aj4iWR10WsonsBoCjgFiTPnfOcqyTq SPyfGghaaoe5JAmA+mzLl+KC5RwUkhfen1IAcVmU89h9p0TFzzzog0+5jGMyzc94 MQ43YZYy7Tc511DN1w6hqp2ufI6+dN05pZSkvW3Xu21pmK0duy5fpfeKKxrt9EWP kuhfB+jec3TO0k3JahnK4/s4ZXWMfRpfQjJLBU3HULaOxtHxOe+83yvr2Wxcz6sJ z39J4bE= -----END CERTIFICATE-----Generated at Tue May 7 05:39:52 2024 by rpki-client on console-fra.rpki-client.org