$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FC73357271B811EEAEDED685C4F9AE02.roa File: FC73357271B811EEAEDED685C4F9AE02.roa (raw, json) Hash identifier: sWStjNphAJOS4ge/ZJtqF5XrPnq1MWPX1eiC04Kwz6A= Subject key identifier: 1C:DA:44:B1:FC:34:80:08:D2:14:A4:74:43:51:23:47:CF:4C:34:F4 Certificate issuer: /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4 Certificate serial: DC Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FC73357271B811EEAEDED685C4F9AE02.roa Signing time: Sun 01 Sep 2024 05:37:39 +0000 ROA not before: Sun 01 Sep 2024 05:37:39 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 58955 IP address blocks: 103.216.158.0/23 maxlen: 23 103.216.158.0/24 maxlen: 24 103.216.159.0/24 maxlen: 24 2001:df2:d3c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4 Validity Not Before: Sep 1 05:37:39 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d3fda3-3a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:5f:ab:6a:51:85:3f:57:34:34:62:5d:bb: fc:5a:e8:91:a9:25:20:b3:8d:82:63:39:c7:1e:62: df:7d:15:e8:50:b4:e2:17:b0:3a:f4:ab:20:68:50: 64:d2:00:9e:fa:6f:d6:0f:3b:c8:bd:c1:5e:88:82: 20:03:a8:db:7f:a1:6e:41:13:d4:c4:5e:72:96:4a: 93:41:88:96:44:9f:21:22:d0:1f:59:19:8f:eb:11: 2b:fc:e8:0e:fe:07:35:95:4b:7b:59:72:77:ef:f0: dc:f2:29:8c:29:f0:51:60:1d:4f:f1:9e:1d:b3:29: 17:36:0f:f9:ff:38:d3:67:64:b0:fd:91:7d:4f:64: e0:5d:e1:47:7a:ea:54:5a:d2:49:b5:1a:cb:82:a9: db:24:a1:2f:a9:6b:31:8f:43:fb:d0:ae:67:b0:c1: c7:c7:f4:9a:75:b2:7e:75:8a:e0:a1:f6:7f:43:43: b5:d0:6c:56:50:75:a8:22:34:25:d7:0e:9c:58:a2: f6:1f:b2:b8:08:ba:34:eb:bb:bb:90:04:d5:e7:69: d7:25:99:71:8b:d3:e6:0b:5d:a7:11:f1:5d:63:a4: 2d:a7:15:e4:e5:31:41:a7:86:5d:c9:f8:90:86:6c: 04:7a:10:a6:0e:51:e0:53:6d:32:03:d6:5e:d0:b4: de:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DA:44:B1:FC:34:80:08:D2:14:A4:74:43:51:23:47:CF:4C:34:F4 X509v3 Authority Key Identifier: keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FC73357271B811EEAEDED685C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.216.158.0/23 IPv6: 2001:df2:d3c0::/48 Signature Algorithm: sha256WithRSAEncryption 9a:52:59:ef:a3:5f:ed:d1:28:df:d3:fd:16:5e:65:c5:b4:ad: fa:0d:45:3e:b6:e2:72:e2:6d:5a:b7:4d:1d:7f:6d:f7:9a:ba: c9:3e:3e:3a:6f:17:b6:d4:13:8b:3f:5d:fd:15:f1:65:49:83: d9:44:89:5e:c0:0b:4b:42:1d:5b:eb:d1:fe:4c:57:12:5b:b1: 5c:40:79:dd:f3:56:b3:4b:a8:cd:94:d8:e7:a9:c3:7b:e9:c6: c4:b4:68:87:19:a4:41:9e:8a:46:78:69:6a:de:52:13:08:93: bc:ef:69:be:fa:29:20:9f:42:a9:75:0d:59:92:cc:c4:e0:d1: bc:f2:43:e6:84:4d:3f:e9:8c:bb:97:a2:92:ab:f9:6f:9b:5a: 60:ea:26:7e:75:d6:ca:34:6b:55:9b:e5:e5:10:02:0d:5a:2f: bb:78:3e:76:68:67:40:e2:20:7e:94:3c:3b:8e:9b:e8:96:af: 37:bc:cf:39:5c:1b:ed:bb:ec:0f:c4:e4:fb:35:45:1e:74:10: 61:6e:93:19:49:c3:e5:a5:f9:75:6c:4f:8e:d6:42:c1:39:af: 91:f4:15:fc:32:c8:f9:58:e8:7c:15:6f:3a:ae:5d:2a:5d:5b: ac:28:cb:51:9c:4f:b5:95:c2:7e:58:ff:12:34:4e:6e:41:34: 92:a9:3a:5b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYwMEExMTAvBgNVBAUTKDM4RUMxOURBQ0E1OEM0NUQ5MUM2NTlEMzVGRTRGMjZE RDgyNEFDRTQwHhcNMjQwOTAxMDUzNzM5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQzZmRhMy0zYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYVfq2pRhT9XNDRiXbv8WuiRqSUgs42CYznHHmLffRXoULTiF7A69KsgaFBk 0gCe+m/WDzvIvcFeiIIgA6jbf6FuQRPUxF5ylkqTQYiWRJ8hItAfWRmP6xEr/OgO /gc1lUt7WXJ37/Dc8imMKfBRYB1P8Z4dsykXNg/5/zjTZ2Sw/ZF9T2TgXeFHeupU WtJJtRrLgqnbJKEvqWsxj0P70K5nsMHHx/SadbJ+dYrgofZ/Q0O10GxWUHWoIjQl 1w6cWKL2H7K4CLo067u7kATV52nXJZlxi9PmC12nEfFdY6QtpxXk5TFBp4ZdyfiQ hmwEehCmDlHgU20yA9Ze0LTetQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBzaRLH8 NIAI0hSkdENRI0fPTDT0MB8GA1UdIwQYMBaAFDjsGdrKWMRdkcZZ01/k8m3YJKzk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjAwQS85RUEyQkI3RTND RDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhGMlJ4bG5UWC1UeWJkZ2ty T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Pd1oyc3BZeEYyUnhsblRYLVR5YmRna3JPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjYwMEEvOUVBMkJCN0UzQ0QwMTFFRUFFNTU0RTczQzRGOUFFMDIvRkM3MzM1NzI3 MUI4MTFFRUFFREVENjg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn2J4wDwQCAAIwCQMHACABDfLTwDANBgkqhkiG9w0BAQsF AAOCAQEAmlJZ76Nf7dEo39P9Fl5lxbSt+g1FPrbicuJtWrdNHX9t95q6yT4+Om8X ttQTiz9d/RXxZUmD2USJXsALS0IdW+vR/kxXEluxXEB53fNWs0uozZTY56nDe+nG xLRohxmkQZ6KRnhpat5SEwiTvO9pvvopIJ9CqXUNWZLMxODRvPJD5oRNP+mMu5ei kqv5b5taYOomfnXWyjRrVZvl5RACDVovu3g+dmhnQOIgfpQ8O46b6JavN7zPOVwb 7bvsD8Tk+zVFHnQQYW6TGUnD5aX5dWxPjtZCwTmvkfQV/DLI+VjofBVvOq5dKl1b rCjLUZxPtZXCflj/EjRObkE0kqk6Ww== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org