$ rpki-client -vvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa File: 800F1868BEB311EAAFE28B42C4F9AE02.roa (raw, json) Hash identifier: nuUzxV/qcUas0lckiF8RCBcNTqQyRDE19LAWF1530Ic= Subject key identifier: EA:85:6B:BB:53:96:F8:CE:53:E2:B1:B0:5B:40:9F:F8:99:7E:D2:EE Certificate issuer: /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Certificate serial: 08C1 Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa Signing time: Thu 16 Nov 2023 20:58:43 +0000 ROA not before: Thu 16 Nov 2023 20:58:43 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 140583 IP address blocks: 103.152.0.0/24 maxlen: 24 103.157.17.0/24 maxlen: 24 2001:df3:7880::/48 maxlen: 48 2407:3dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Validity Not Before: Nov 16 20:58:43 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65568283-6f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:55:01:b7:7e:b7:5e:ca:31:be:6f:61:81: 55:c5:14:66:8b:e5:1c:26:a0:9b:b1:5b:5f:e5:bd: fe:61:14:42:20:29:30:31:bd:52:42:65:7a:f5:fb: 8d:c5:ff:c8:6e:99:5c:76:77:f1:a1:80:d6:e7:d9: ae:5b:a7:96:47:02:bd:99:ac:30:4a:b7:43:73:4d: 3c:dc:b2:ec:52:a2:72:83:f9:b9:74:31:72:f9:86: d3:54:6c:c7:85:56:a7:03:62:09:7f:13:fd:98:22: 22:76:39:8d:b8:5b:ed:9d:2a:c5:f6:78:a0:95:dc: f3:1e:86:b8:af:77:d6:32:8c:bb:b8:4b:c7:0a:b5: 76:a2:d1:eb:4f:a5:fe:21:3c:c9:18:90:9e:25:df: 10:6a:6e:8f:95:d7:13:01:e4:5d:12:25:e8:b3:6d: 4d:0e:9b:c2:c9:fd:57:48:63:db:25:b9:e0:50:8e: e0:40:69:f7:68:71:9d:75:0e:49:fd:29:c0:6b:6d: 4b:ee:b8:b3:be:45:17:9f:ed:22:48:91:00:48:98: b5:d7:0c:e0:32:68:34:ea:78:ba:1f:76:a6:40:d0: 5a:32:f7:e9:99:61:71:b7:b8:e6:95:2c:eb:9e:64: f1:ae:7b:b6:c1:67:cd:61:b8:dc:42:5a:f8:4a:a0: d9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:85:6B:BB:53:96:F8:CE:53:E2:B1:B0:5B:40:9F:F8:99:7E:D2:EE X509v3 Authority Key Identifier: keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.0.0/24 103.157.17.0/24 IPv6: 2001:df3:7880::/48 2407:3dc0::/32 Signature Algorithm: sha256WithRSAEncryption a7:6b:93:e8:88:20:06:d0:3d:fa:d9:41:c3:b9:33:64:4b:b3: e0:c0:95:c4:2b:38:ec:4b:b2:6c:65:af:06:00:24:f9:55:57: 0f:58:ac:3c:9f:e1:b9:e1:50:d5:75:f6:93:33:bb:9d:ff:64: 86:b3:eb:17:28:0a:85:e6:2c:ef:36:77:46:cd:ab:b2:a1:62: 93:73:0f:58:d7:69:d9:1a:29:a6:f6:8e:41:ba:01:fc:a3:9f: 9e:a2:93:d8:e8:1a:2e:3a:aa:b3:5e:06:92:37:90:b4:26:76: ed:d8:d2:83:7f:d2:08:6b:81:45:e8:fc:8a:31:51:0a:c9:3e: 9e:53:1c:b7:b4:c7:9f:e8:68:53:61:48:d0:15:4e:db:e0:07: 92:f2:56:76:c4:af:4a:44:ef:f7:d8:d3:18:e4:63:c9:c9:49: d3:3f:d2:7a:84:e1:9c:f4:c6:15:bd:4d:3b:3a:32:21:3e:c7: 52:36:dc:36:f8:79:2e:6c:47:64:8c:86:6a:4c:5f:b5:f4:5d: 91:70:85:3a:d2:de:3a:2a:a7:dd:1d:a4:f1:e9:df:fd:92:4c: 71:7c:e2:53:0a:87:5f:4c:46:d6:82:fc:a8:4f:95:5d:94:1f: b7:c5:17:79:96:5d:4a:7c:70:f0:d2:85:9f:e0:b2:4c:b1:a6: ab:f5:a2:91 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY4M0MxMTAvBgNVBAUTKEE2QzUwNDlERkZDMjY0MjcxRjRBNzdBNUFFRUFFNDc3 RDdFRUVBRjMwHhcNMjMxMTE2MjA1ODQzWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTU2ODI4My02ZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwO1VAbd+t17KMb5vYYFVxRRmi+UcJqCbsVtf5b3+YRRCICkwMb1SQmV69fuN xf/IbplcdnfxoYDW59muW6eWRwK9mawwSrdDc0083LLsUqJyg/m5dDFy+YbTVGzH hVanA2IJfxP9mCIidjmNuFvtnSrF9nigldzzHoa4r3fWMoy7uEvHCrV2otHrT6X+ ITzJGJCeJd8Qam6PldcTAeRdEiXos21NDpvCyf1XSGPbJbngUI7gQGn3aHGddQ5J /SnAa21L7rizvkUXn+0iSJEASJi11wzgMmg06ni6H3amQNBaMvfpmWFxt7jmlSzr nmTxrnu2wWfNYbjcQlr4SqDZlQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFOqFa7tT lvjOU+KxsFtAn/iZftLuMB8GA1UdIwQYMBaAFKbFBJ3/wmQnH0p3pa7q5HfX7urz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjgzQy9FMEI1ODAyRTgw N0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pDY2ZTbmVscnVya2Q5ZnU2 dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzVUVuZl9DWkNjZlNuZWxydXJrZDlmdTZ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjY4M0MvRTBCNTgwMkU4MDdCMTFFQTgyNDQ2MTI1QzRGOUFFMDIvODAwRjE4NjhC RUIzMTFFQUFGRTI4QjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMBIEAgABMAwDBABnmAADBABnnREwFgQCAAIwEAMHACABDfN4gAMFACQHPcAw DQYJKoZIhvcNAQELBQADggEBAKdrk+iIIAbQPfrZQcO5M2RLs+DAlcQrOOxLsmxl rwYAJPlVVw9YrDyf4bnhUNV19pMzu53/ZIaz6xcoCoXmLO82d0bNq7KhYpNzD1jX adkaKab2jkG6Afyjn56ik9joGi46qrNeBpI3kLQmdu3Y0oN/0ghrgUXo/IoxUQrJ Pp5THLe0x5/oaFNhSNAVTtvgB5LyVnbEr0pE7/fY0xjkY8nJSdM/0nqE4Zz0xhW9 TTs6MiE+x1I23Db4eS5sR2SMhmpMX7X0XZFwhTrS3joqp90dpPHp3/2STHF84lMK h19MRtaC/KhPlV2UH7fFF3mWXUp8cPDShZ/gskyxpqv1opE= -----END CERTIFICATE-----Generated at Thu May 16 22:34:46 2024 by rpki-client on console-ams.rpki-client.org