$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa File: 8174C3BEF16411E980D2F667C4F9AE02.roa (raw, json) Hash identifier: VEw9MLhojPtBj7/yVbdylAjgIZeL4XHegjDH9vdhq/Y= Subject key identifier: F2:44:B5:4D:B5:D2:83:AA:F0:E3:43:21:DF:40:6D:57:31:00:E3:B7 Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0BDC Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa Signing time: Wed 10 Apr 2024 19:28:12 +0000 ROA not before: Wed 10 Apr 2024 19:28:12 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 38493 IP address blocks: 103.123.8.0/22 maxlen: 24 123.136.24.0/21 maxlen: 24 2404:7e00::/32 maxlen: 36 2404:7e00:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3036 (0xbdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Apr 10 19:28:12 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6616e84c-6c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1a:e4:92:df:eb:f6:0b:52:59:70:64:52:47: e1:c6:99:4f:04:a4:df:bd:a8:cb:89:c9:05:3b:75: fb:b8:e3:a9:59:91:5e:cb:95:04:58:be:d4:7e:59: 75:d1:eb:77:84:c2:32:e2:48:83:cc:55:a8:bc:32: 5b:be:cc:8e:ce:9d:5c:ee:38:05:3c:79:29:b8:46: 3d:8d:f8:2e:a6:f1:af:d3:78:31:0d:0b:14:9f:1c: d2:7e:13:b4:a8:0c:ab:bd:46:70:87:6d:3d:81:4e: be:00:69:1f:52:1c:68:6c:82:3e:55:60:88:14:69: 53:e0:d9:91:ec:2e:8f:98:f2:55:04:0b:90:24:f7: 19:8c:37:df:0a:13:44:01:11:3c:00:0c:50:28:59: 29:1e:85:96:b0:6e:84:42:7a:fc:39:08:49:68:b0: bc:d5:f2:97:5f:a5:36:41:86:bd:09:53:0f:82:ed: 8c:b6:75:de:aa:fe:cc:b6:bf:10:46:97:1b:6e:50: 88:29:fd:e9:5e:76:8b:7d:fa:20:ce:cb:ab:83:30: 23:c9:59:67:64:c0:4e:60:cf:0d:a6:90:a7:f1:26: 32:47:40:08:f2:85:49:7f:bd:b2:c2:19:b9:af:3b: 4e:64:e0:f7:00:33:e0:4c:32:3e:87:49:52:b7:f6: a1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:44:B5:4D:B5:D2:83:AA:F0:E3:43:21:DF:40:6D:57:31:00:E3:B7 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.8.0/22 123.136.24.0/21 IPv6: 2404:7e00::/32 Signature Algorithm: sha256WithRSAEncryption 52:b5:5a:34:84:db:c3:e2:35:ec:89:1a:75:f7:20:51:6a:6c: 66:31:08:2f:ff:23:2b:3c:11:49:a8:b2:21:2f:23:c2:24:b8: 78:c8:7c:33:83:a7:93:30:96:d5:f7:d8:38:f8:1a:18:e0:06: ce:0a:bc:a8:42:99:56:49:8c:e0:e0:87:52:60:5c:53:a1:97: 37:99:96:b5:27:ca:a8:bd:be:6e:8f:b0:c2:f4:a9:f6:5d:ba: 6c:c3:fd:66:5f:94:87:b5:54:3a:7d:34:e7:ce:86:50:6d:7e: 3a:85:04:7d:cc:58:52:68:8a:87:02:3c:5f:d2:6c:dc:cb:3d: 87:4f:c7:0b:36:2b:03:75:9a:44:33:77:68:de:66:d2:50:cb: 48:1d:d3:2b:7e:0f:f5:4e:bb:ac:c2:2c:88:5d:e7:f4:82:62: 07:08:f1:d4:1e:11:a6:7b:a7:1e:95:9f:d3:ff:76:e4:02:01: 6e:10:40:62:11:1a:66:bc:9f:5c:13:48:aa:a7:44:46:a1:a0: 72:36:57:ec:59:bf:32:e6:48:27:bc:5e:d5:42:d0:e0:d4:1b: a9:33:00:72:de:53:ae:cb:96:f2:9b:0f:15:52:17:90:19:6a: 52:71:0d:3c:89:ee:9f:36:8f:ef:c2:8b:c3:3a:b8:75:ca:94: 75:ab:73:0b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICC9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjQwNDEwMTkyODEyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjE2ZTg0Yy02YzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhrkkt/r9gtSWXBkUkfhxplPBKTfvajLickFO3X7uOOpWZFey5UEWL7Ufll1 0et3hMIy4kiDzFWovDJbvsyOzp1c7jgFPHkpuEY9jfgupvGv03gxDQsUnxzSfhO0 qAyrvUZwh209gU6+AGkfUhxobII+VWCIFGlT4NmR7C6PmPJVBAuQJPcZjDffChNE ARE8AAxQKFkpHoWWsG6EQnr8OQhJaLC81fKXX6U2QYa9CVMPgu2MtnXeqv7Mtr8Q RpcbblCIKf3pXnaLffogzsurgzAjyVlnZMBOYM8NppCn8SYyR0AI8oVJf72ywhm5 rztOZOD3ADPgTDI+h0lSt/ahAQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPJEtU21 0oOq8ONDId9AbVcxAOO3MB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjcwOEYvNTZEQjBGMjRGMTYzMTFFOTlEQkVERjY1QzRGOUFFMDIvODE3NEMzQkVG MTY0MTFFOTgwRDJGNjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnewgDBAN7iBgwDQQCAAIwBwMFACQEfgAwDQYJKoZIhvcN AQELBQADggEBAFK1WjSE28PiNeyJGnX3IFFqbGYxCC//Iys8EUmosiEvI8IkuHjI fDODp5MwltX32Dj4GhjgBs4KvKhCmVZJjODgh1JgXFOhlzeZlrUnyqi9vm6PsML0 qfZdumzD/WZflIe1VDp9NOfOhlBtfjqFBH3MWFJoiocCPF/SbNzLPYdPxws2KwN1 mkQzd2jeZtJQy0gd0yt+D/VOu6zCLIhd5/SCYgcI8dQeEaZ7px6Vn9P/duQCAW4Q QGIRGma8n1wTSKqnREahoHI2V+xZvzLmSCe8XtVC0ODUG6kzAHLeU67LlvKbDxVS F5AZalJxDTyJ7p82j+/Ci8M6uHXKlHWrcws= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org