$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/C66770F24B9111EA9A72503CC4F9AE02.roa File: C66770F24B9111EA9A72503CC4F9AE02.roa (raw, json) Hash identifier: wp8uDU6bVBvPlFN9hBw0Bg7dy+QvzbyhnMaIuoFAntQ= Subject key identifier: B1:38:BF:C9:AC:5F:C8:59:0E:9D:3B:02:EA:44:11:0E:78:F4:44:24 Certificate issuer: /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Certificate serial: 0968 Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/C66770F24B9111EA9A72503CC4F9AE02.roa Signing time: Fri 02 Jun 2023 21:32:59 +0000 ROA not before: Fri 02 Jun 2023 21:32:59 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 64095 IP address blocks: 103.60.99.0/24 maxlen: 24 163.47.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2408 (0x968) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Validity Not Before: Jun 2 21:32:59 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647a600b-08ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:47:93:86:07:14:1d:d3:3c:dc:7f:3b:f5: b4:97:b1:1b:2a:92:7f:d8:40:09:e9:28:c3:c0:3f: 7c:bf:28:f1:4c:dd:0e:38:0b:e3:95:8e:9b:8d:b0: e7:8c:98:ff:cf:8b:b4:48:7c:4b:8d:ed:3d:7f:c7: 18:69:a6:ee:95:ec:e7:06:2a:74:ab:71:c9:37:ed: 17:7e:9e:54:6f:80:8e:d1:b6:05:20:78:7e:2b:c3: 1e:cf:66:2e:23:e3:77:22:ab:b4:a8:ca:a6:e3:34: e1:de:f5:ef:49:c1:cc:a1:c4:85:c9:35:9f:ae:d4: ff:df:84:9e:12:55:25:91:d3:44:f7:a5:48:35:70: 64:c1:36:3e:a6:9c:1b:b3:c4:83:0f:66:eb:dd:10: 77:32:a8:7f:df:58:33:61:ee:0d:d6:b3:fe:60:64: 27:ad:33:53:93:8a:e8:bd:c0:30:6a:c3:b8:10:8c: ec:5a:5b:ef:b9:d2:65:9b:73:61:25:7c:8d:9a:81: 3f:59:a4:b3:f4:55:39:b3:2d:db:8c:42:6a:87:03: 38:ab:37:1a:49:93:5c:79:8a:37:5a:63:a5:ac:49: 0f:e3:0e:61:6a:98:5c:12:dc:ac:bf:3e:8c:2d:51: 66:00:cf:8c:94:8f:97:a6:ec:e5:51:9d:31:b0:14: 3a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:38:BF:C9:AC:5F:C8:59:0E:9D:3B:02:EA:44:11:0E:78:F4:44:24 X509v3 Authority Key Identifier: keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/C66770F24B9111EA9A72503CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.99.0/24 163.47.231.0/24 Signature Algorithm: sha256WithRSAEncryption b1:a8:d6:04:ef:1b:ab:43:ab:22:15:79:d9:ca:a4:e8:be:e4: b4:7b:39:ab:ff:83:f8:95:ad:26:05:48:18:73:5a:24:34:82: 67:d1:c3:11:8e:07:68:48:72:e3:4c:ec:58:0d:ae:f7:9e:71: 68:2d:70:9c:4a:b0:b8:a4:ae:b1:17:20:50:2f:f0:87:14:a2: bc:31:72:77:07:92:a7:47:be:c9:c7:43:73:07:7f:55:a8:08: 8f:be:0f:8a:7b:bb:a3:54:7c:35:e0:82:ed:42:73:6f:bb:8d: f3:b0:0d:a5:ea:9b:a2:9b:1e:f3:95:ef:fc:de:2b:af:db:33: f2:fe:c2:af:24:cd:f9:c5:03:16:93:72:95:aa:ec:75:93:e6: a1:3b:4d:73:2b:c9:c8:74:b3:14:3e:30:e8:a0:6b:1a:11:49: 86:4c:a7:f6:02:26:27:18:21:51:20:95:c9:40:0a:a0:38:21: cb:a2:1a:8b:5c:1e:bb:3d:d9:87:18:96:23:5a:54:21:26:46: 03:ea:77:86:27:3a:d8:60:07:32:58:8e:a6:ed:a3:d8:35:2b: 17:9e:cd:31:78:a5:a9:c6:7b:c3:81:77:00:36:6c:19:fb:35: 19:a1:1d:d2:a1:e3:26:7d:cf:cb:f8:00:6c:de:c1:42:17:a6: f3:65:df:20 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVERUUxMTAvBgNVBAUTKDExREY2Q0U0REFCOTY4NEVERjZDRjVFMDNERkRFQzg2 RjE1Q0Q3QkUwHhcNMjMwNjAyMjEzMjU5WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNjAwYi0wOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIZHk4YHFB3TPNx/O/W0l7EbKpJ/2EAJ6SjDwD98vyjxTN0OOAvjlY6bjbDn jJj/z4u0SHxLje09f8cYaabuleznBip0q3HJN+0Xfp5Ub4CO0bYFIHh+K8Mez2Yu I+N3Iqu0qMqm4zTh3vXvScHMocSFyTWfrtT/34SeElUlkdNE96VINXBkwTY+ppwb s8SDD2br3RB3Mqh/31gzYe4N1rP+YGQnrTNTk4rovcAwasO4EIzsWlvvudJlm3Nh JXyNmoE/WaSz9FU5sy3bjEJqhwM4qzcaSZNceYo3WmOlrEkP4w5haphcEtysvz6M LVFmAM+MlI+XpuzlUZ0xsBQ6bwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLE4v8ms X8hZDp07AupEEQ549EQkMB8GA1UdIwQYMBaAFBHfbOTauWhO32z14D397IbxXNe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURFRS9BREQ2NUUyODRC OTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFFN2ZiUFhnUGYzc2h2RmMx NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkOXM1TnE1YUU3ZmJQWGdQZjNzaHZGYzE3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVERUUvQURENjVFMjg0QjkwMTFFQTk1QkVBNjM5QzRGOUFFMDIvQzY2NzcwRjI0 QjkxMTFFQTlBNzI1MDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnPGMDBACjL+cwDQYJKoZIhvcNAQELBQADggEBALGo1gTv G6tDqyIVednKpOi+5LR7Oav/g/iVrSYFSBhzWiQ0gmfRwxGOB2hIcuNM7FgNrvee cWgtcJxKsLikrrEXIFAv8IcUorwxcncHkqdHvsnHQ3MHf1WoCI++D4p7u6NUfDXg gu1Cc2+7jfOwDaXqm6KbHvOV7/zeK6/bM/L+wq8kzfnFAxaTcpWq7HWT5qE7TXMr ych0sxQ+MOigaxoRSYZMp/YCJicYIVEglclACqA4IcuiGotcHrs92YcYliNaVCEm RgPqd4YnOthgBzJYjqbto9g1KxeezTF4panGe8OBdwA2bBn7NRmhHdKh4yZ9z8v4 AGzewUIXpvNl3yA= -----END CERTIFICATE-----Generated at Fri May 10 21:16:11 2024 by rpki-client on console-fra.rpki-client.org