$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/F2AB2F288FE011EDA9919C57C4F9AE02.roa File: F2AB2F288FE011EDA9919C57C4F9AE02.roa (raw, json) Hash identifier: j2B/1YBlPE46G5yeDHdnDnb9mxYWTsPXU0v9hB2F54Q= Subject key identifier: F6:BA:C1:3D:2C:40:65:97:FE:90:70:56:04:AB:10:C6:48:54:90:32 Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Certificate serial: EA Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/F2AB2F288FE011EDA9919C57C4F9AE02.roa Signing time: Mon 01 Apr 2024 06:38:35 +0000 ROA not before: Mon 01 Apr 2024 06:38:35 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 136174 IP address blocks: 103.122.158.0/24 maxlen: 24 103.122.159.0/24 maxlen: 24 103.209.52.0/24 maxlen: 24 103.209.53.0/24 maxlen: 24 2404:c040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Validity Not Before: Apr 1 06:38:35 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660a566a-3140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:ef:a7:a7:cd:da:2b:f4:aa:17:c3:9f:ac: 8a:49:27:f1:13:d0:0b:3e:50:37:d6:6a:6c:3a:53: 99:b7:15:df:f3:35:04:85:f1:fd:ef:96:ff:77:45: cf:7d:d2:85:f6:8d:89:91:e4:f4:57:17:ae:4b:5e: ee:3d:74:03:15:99:7d:d0:97:9c:2e:71:ac:f0:8a: 91:f8:3a:dd:15:be:7d:5e:d9:1e:37:36:5f:41:10: a1:40:da:f8:75:a2:e1:10:85:8e:77:05:27:e3:4c: 40:6f:bb:cb:2c:b1:e3:39:f2:d9:4d:e0:95:54:0e: 3e:97:1c:c6:ed:ff:03:9e:f0:7d:5c:44:69:dc:09: 6c:67:81:54:9b:17:09:8b:c7:de:fd:b6:3d:cd:5b: 1e:b9:60:4a:a9:8f:d9:bf:1b:61:de:cf:06:6c:af: d3:59:bd:37:ae:a2:31:23:47:79:d1:82:e6:03:58: 0f:28:b8:42:a9:fb:39:20:e0:f4:d0:c3:11:20:32: 7d:d6:04:25:7b:2b:e5:8e:c1:1a:b0:16:b7:42:3b: 4f:54:b7:67:12:2e:66:db:5b:c3:fd:30:16:e7:27: 8b:58:f8:90:22:15:d1:03:e5:c2:36:14:2a:7b:2e: b1:3d:94:76:8b:e1:8e:bc:c2:74:71:56:d8:45:f8: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BA:C1:3D:2C:40:65:97:FE:90:70:56:04:AB:10:C6:48:54:90:32 X509v3 Authority Key Identifier: keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/F2AB2F288FE011EDA9919C57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.158.0/23 103.209.52.0/23 IPv6: 2404:c040::/32 Signature Algorithm: sha256WithRSAEncryption 6e:c4:12:86:73:bd:a0:54:3a:dc:bf:b1:a0:76:c2:dc:68:c9: 0c:d6:bf:46:2f:c8:97:91:5b:02:0a:48:d9:6d:8d:04:eb:b9: 5a:98:19:a3:49:40:d2:5f:d8:87:d9:3d:25:b5:e0:f2:38:55: 3f:7f:ce:8d:73:5d:c0:02:9a:23:c1:3c:a4:25:a7:96:30:7c: 21:6b:3a:d1:dc:66:8f:ef:d8:a9:01:74:8b:d1:ce:23:bd:6b: 4a:15:09:c0:66:f9:ba:5c:fb:3d:1c:d0:8b:fe:b3:d7:e6:36: 35:9f:a0:4d:83:06:1a:13:33:fc:6d:cc:5e:c9:59:97:86:f6: 1b:4d:55:74:ba:2f:b9:5b:d9:b1:08:81:68:f3:80:cf:c8:89: d0:2d:df:71:e2:6c:8d:b1:14:85:82:91:4a:3d:dd:bd:1d:30: 2f:58:6f:d7:5b:7b:5a:e7:5c:ac:82:81:2b:0d:91:0a:b6:85: 0b:1c:7b:45:56:b3:0f:3a:f1:0e:23:45:4f:b5:f2:df:10:b0: d0:d5:d2:7f:9c:b2:07:2a:ff:47:de:e4:0e:75:45:c3:a2:9c: f9:91:8b:cb:35:d5:0e:90:48:e0:e3:e6:1a:6d:af:15:09:dd: 55:f8:e4:d5:1a:0b:e5:d9:20:26:cb:a8:e7:41:11:b8:ef:e1: 04:e6:05:18 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2MDkxMTAvBgNVBAUTKDFDNDIyQkIxRkM5NkZFNjBENEIyRkY1RjZDMTI0NTBF Q0M5RUU5NkMwHhcNMjQwNDAxMDYzODM1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBhNTY2YS0zMTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6Lvp6fN2iv0qhfDn6yKSSfxE9ALPlA31mpsOlOZtxXf8zUEhfH975b/d0XP fdKF9o2JkeT0VxeuS17uPXQDFZl90JecLnGs8IqR+DrdFb59XtkeNzZfQRChQNr4 daLhEIWOdwUn40xAb7vLLLHjOfLZTeCVVA4+lxzG7f8DnvB9XERp3AlsZ4FUmxcJ i8fe/bY9zVseuWBKqY/Zvxth3s8GbK/TWb03rqIxI0d50YLmA1gPKLhCqfs5IOD0 0MMRIDJ91gQleyvljsEasBa3QjtPVLdnEi5m21vD/TAW5yeLWPiQIhXRA+XCNhQq ey6xPZR2i+GOvMJ0cVbYRfhI+wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPa6wT0s QGWX/pBwVgSrEMZIVJAyMB8GA1UdIwQYMBaAFBxCK7H8lv5g1LL/X2wSRQ7Mnuls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzYwOS8yM0Y5RThCQThG REUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19tRFVzdjlmYkJKRkRzeWU2 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFSXJzZnlXX21EVXN2OWZiQkpGRHN5ZTZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM2MDkvMjNGOUU4QkE4RkRFMTFFREFFMzY5QTUzQzRGOUFFMDIvRjJBQjJGMjg4 RkUwMTFFREE5OTE5QzU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnep4DBAFn0TQwDQQCAAIwBwMFACQEwEAwDQYJKoZIhvcN AQELBQADggEBAG7EEoZzvaBUOty/saB2wtxoyQzWv0YvyJeRWwIKSNltjQTruVqY GaNJQNJf2IfZPSW14PI4VT9/zo1zXcACmiPBPKQlp5YwfCFrOtHcZo/v2KkBdIvR ziO9a0oVCcBm+bpc+z0c0Iv+s9fmNjWfoE2DBhoTM/xtzF7JWZeG9htNVXS6L7lb 2bEIgWjzgM/IidAt33HibI2xFIWCkUo93b0dMC9Yb9dbe1rnXKyCgSsNkQq2hQsc e0VWsw868Q4jRU+18t8QsNDV0n+csgcq/0fe5A51RcOinPmRi8s11Q6QSODj5hpt rxUJ3VX45NUaC+XZICbLqOdBEbjv4QTmBRg= -----END CERTIFICATE-----Generated at Fri May 17 06:18:06 2024 by rpki-client on console-fra.rpki-client.org