$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/7F444842C3A411ED8EFA6F13C4F9AE02.roa File: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (raw, json) Hash identifier: nZHgPl7m5MWLYPaxdKJ+/nLD1cDja1CUfctZTXtql7E= Subject key identifier: 73:97:CE:42:DA:2F:52:60:28:D2:89:7E:FF:67:9F:AC:A1:F6:57:9B Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 12A7 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/7F444842C3A411ED8EFA6F13C4F9AE02.roa Signing time: Tue 04 Jul 2023 17:24:11 +0000 ROA not before: Tue 04 Jul 2023 17:24:11 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 55933 IP address blocks: 103.106.188.0/22 maxlen: 24 103.116.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 17:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4775 (0x12a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jul 4 17:24:11 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a455ba-11f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:dd:9c:78:1d:08:dd:18:ea:55:2b:ab:f1: 52:8d:b1:70:67:fa:5e:8b:7b:2f:10:27:a3:58:29: 8c:0a:87:63:ae:ce:74:39:b9:52:b8:b1:80:1b:7d: 31:ef:70:f5:ba:d7:fd:b5:47:95:ba:19:20:12:20: 74:65:02:01:89:66:a7:64:2f:3f:ff:b3:b1:6b:4b: 8e:e5:ea:0a:15:81:bd:b6:4b:ec:ea:25:44:5a:88: 75:b8:e3:7d:64:50:e2:fc:31:c3:6f:7b:ef:38:50: 17:bf:87:70:b7:37:94:b3:80:9b:14:90:b3:99:49: f5:28:7f:54:1d:a8:9f:eb:34:53:ec:3f:2b:01:ba: 21:e3:82:e3:45:75:a2:71:44:db:5b:ae:75:cf:dd: 42:e8:4a:c0:36:d7:2e:45:19:83:c6:6f:3c:64:f5: f3:14:14:9d:5f:f2:48:f4:9f:31:8e:78:8c:11:82: 08:8c:70:23:04:50:b6:1e:22:ba:98:09:d6:e1:ce: 4f:53:2e:79:54:12:07:f1:65:17:25:d6:59:c3:77: 44:a5:06:d6:4f:96:28:58:33:ce:83:13:54:fb:02: ef:bc:81:d8:af:7b:6b:cc:72:79:a9:23:ef:50:af: 81:38:56:39:48:c3:cc:e1:a4:b8:21:69:34:25:92: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:97:CE:42:DA:2F:52:60:28:D2:89:7E:FF:67:9F:AC:A1:F6:57:9B X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/7F444842C3A411ED8EFA6F13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.188.0/22 103.116.244.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:c8:d1:ce:86:56:d5:e0:28:ff:1f:b6:6e:5d:00:d0:b3:65: 08:24:02:e4:c6:ba:35:ff:07:a1:0e:30:d3:ab:c5:a1:50:76: 8d:e8:b1:27:10:6a:ed:96:35:1d:b5:6b:52:5f:eb:f4:5e:6b: 4e:83:75:88:b1:50:75:96:da:f8:6e:bb:da:00:69:d9:07:57: a4:41:12:18:24:d4:cd:03:e2:3f:9c:30:bc:af:e8:cc:e9:0d: 58:63:15:41:25:dc:a6:25:27:14:7f:3b:bc:a2:c2:ad:c7:96: 05:08:e4:a4:c8:83:ac:fe:9b:8f:33:41:bc:9c:02:03:78:d6: a3:ac:10:06:a2:e5:27:a7:00:ed:5b:07:15:1b:cb:18:04:d2: de:09:d1:07:12:d9:d2:97:99:50:a6:fa:4d:b3:35:9f:4c:2f: 7f:ca:7a:74:bc:d4:f5:66:c6:9c:21:36:51:21:13:68:3a:53: d6:1b:aa:27:69:56:ca:c2:bc:c6:14:e5:da:10:1a:5a:75:34: 6e:a3:45:a7:cc:a9:24:f0:bd:d8:a1:5a:5b:91:30:38:a9:30: 53:ae:58:ad:40:f7:6d:4d:7f:47:3e:3e:8a:b4:be:55:d5:c7: 0c:67:d9:74:5a:d6:20:6d:87:16:9d:b1:d7:53:cf:db:7c:ab: 3a:0a:f7:f1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICEqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjMwNzA0MTcyNDExWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE0NTViYS0xMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgbdnHgdCN0Y6lUrq/FSjbFwZ/pei3svECejWCmMCodjrs50OblSuLGAG30x 73D1utf9tUeVuhkgEiB0ZQIBiWanZC8//7Oxa0uO5eoKFYG9tkvs6iVEWoh1uON9 ZFDi/DHDb3vvOFAXv4dwtzeUs4CbFJCzmUn1KH9UHaif6zRT7D8rAboh44LjRXWi cUTbW651z91C6ErANtcuRRmDxm88ZPXzFBSdX/JI9J8xjniMEYIIjHAjBFC2HiK6 mAnW4c5PUy55VBIH8WUXJdZZw3dEpQbWT5YoWDPOgxNU+wLvvIHYr3trzHJ5qSPv UK+BOFY5SMPM4aS4IWk0JZK9fQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHOXzkLa L1JgKNKJfv9nn6yh9lebMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhCNEEvMEFEQjE3QzA4MDBBMTFFODlCNDgzRTdDQzRGOUFFMDIvN0Y0NDQ4NDJD M0E0MTFFRDhFRkE2RjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnarwDBAJndPQwDQYJKoZIhvcNAQELBQADggEBAJrI0c6G VtXgKP8ftm5dANCzZQgkAuTGujX/B6EOMNOrxaFQdo3osScQau2WNR21a1Jf6/Re a06DdYixUHWW2vhuu9oAadkHV6RBEhgk1M0D4j+cMLyv6MzpDVhjFUEl3KYlJxR/ O7yiwq3HlgUI5KTIg6z+m48zQbycAgN41qOsEAai5SenAO1bBxUbyxgE0t4J0QcS 2dKXmVCm+k2zNZ9ML3/KenS81PVmxpwhNlEhE2g6U9YbqidpVsrCvMYU5doQGlp1 NG6jRafMqSTwvdihWluRMDipMFOuWK1A921Nf0c+Poq0vlXVxwxn2XRa1iBthxad sddTz9t8qzoK9/E= -----END CERTIFICATE-----Generated at Tue May 28 19:51:20 2024 by rpki-client on console-fra.rpki-client.org