$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/385B6DAE577411ECBF021B66C4F9AE02.roa File: 385B6DAE577411ECBF021B66C4F9AE02.roa (raw, json) Hash identifier: XjunMNzYncJwuOqeAscMtpgQiJ/lvJGQsFB1GF7BxVg= Subject key identifier: B5:8E:EF:8E:5C:E8:7E:C3:73:FD:4B:41:CD:D7:FA:08:A3:4A:44:55 Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Certificate serial: 03A9 Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/385B6DAE577411ECBF021B66C4F9AE02.roa Signing time: Wed 17 Jul 2024 02:03:00 +0000 ROA not before: Wed 17 Jul 2024 02:03:00 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 56311 IP address blocks: 103.168.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 937 (0x3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Validity Not Before: Jul 17 02:03:00 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66972654-d9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:60:ed:20:58:42:0c:83:c6:49:77:02:2f: 17:5a:12:35:d0:cc:e0:65:40:46:1d:2c:ee:09:fd: 99:cc:ed:45:47:cc:f6:20:f5:e9:04:5e:95:81:a8: 06:3b:4f:fb:43:19:b0:29:d7:61:4e:7a:81:5c:22: 62:89:87:48:d8:25:cc:b0:d3:6e:75:88:b8:bb:45: e0:69:36:d5:2f:24:fa:e5:3b:bd:b2:2b:38:30:5d: f6:06:5d:89:c1:ab:9a:dd:04:b2:2f:a2:c1:98:f9: d8:89:15:84:7c:e0:5a:a0:58:c6:00:3b:f5:c0:42: 54:87:8f:67:38:49:2e:ad:c4:98:8c:96:66:fe:7f: 54:b8:4a:45:c5:a0:89:68:a6:10:c2:e7:0c:4f:dc: 29:60:0d:80:8a:0b:29:db:3d:63:c7:a6:a7:bd:19: 7f:e0:f6:72:3c:22:c2:6e:6c:73:47:70:cf:00:74: 00:18:5f:19:e2:ab:0a:8b:cb:0e:01:3b:af:c1:e9: f6:14:88:26:7e:f1:82:00:2e:97:a5:f6:1e:8e:3d: 80:f3:94:74:3f:30:67:67:1e:0e:b0:de:f8:d5:4f: 25:51:4a:c3:32:71:f3:69:49:4f:50:d0:a0:a7:ff: a3:3a:2c:fa:cb:3b:5d:c7:a5:a4:c6:c0:15:77:a0: 6a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8E:EF:8E:5C:E8:7E:C3:73:FD:4B:41:CD:D7:FA:08:A3:4A:44:55 X509v3 Authority Key Identifier: keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/385B6DAE577411ECBF021B66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.88.0/23 Signature Algorithm: sha256WithRSAEncryption 03:84:84:2f:1d:4e:4a:d4:d5:55:9b:5b:5a:af:d2:8f:1f:fa: 70:83:0b:b5:44:91:52:33:62:40:56:47:02:b9:c5:fa:b7:55: 9f:94:85:92:22:51:a5:63:a9:a4:52:cf:cb:c4:15:96:f9:d5: 1e:37:f5:d1:ed:28:12:c1:b6:8f:b9:50:ec:1d:82:a3:6d:af: 59:04:03:4e:e0:4f:95:60:fa:b2:61:3e:bf:e3:5a:84:b5:e9: a0:45:1d:55:a8:88:40:11:cb:f7:65:e2:e7:f6:7f:15:ec:bf: 6d:a7:05:9c:43:6b:b5:1e:d1:f2:a4:42:31:f2:a7:2b:24:0a: ab:fd:e3:68:be:87:b7:ef:e5:87:2d:bb:68:9a:ba:b7:d0:99: da:e3:45:bc:52:a4:55:90:57:a1:b8:2f:2a:13:74:7a:8c:af: 25:1e:07:56:d3:c6:1c:98:37:69:a5:60:0a:2b:27:6a:20:fc: 87:6b:ec:dd:78:e2:3e:c2:03:10:11:e4:82:f9:87:41:8a:87: 2f:5d:8d:cf:b6:bb:90:6b:83:7d:13:9a:19:97:39:55:3e:05: d2:96:da:76:51:bb:ef:4f:86:8e:1a:66:f3:0d:3d:ce:4b:7a: aa:db:83:97:6f:ab:90:5e:cc:a7:d7:b2:10:e0:2d:7a:48:84: 94:5c:1b:63 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx QzUzMDMxQTcwHhcNMjQwNzE3MDIwMzAwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk3MjY1NC1kOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtONg7SBYQgyDxkl3Ai8XWhI10MzgZUBGHSzuCf2ZzO1FR8z2IPXpBF6VgagG O0/7QxmwKddhTnqBXCJiiYdI2CXMsNNudYi4u0XgaTbVLyT65Tu9sis4MF32Bl2J waua3QSyL6LBmPnYiRWEfOBaoFjGADv1wEJUh49nOEkurcSYjJZm/n9UuEpFxaCJ aKYQwucMT9wpYA2Aigsp2z1jx6anvRl/4PZyPCLCbmxzR3DPAHQAGF8Z4qsKi8sO ATuvwen2FIgmfvGCAC6XpfYejj2A85R0PzBnZx4OsN741U8lUUrDMnHzaUlPUNCg p/+jOiz6yztdx6WkxsAVd6Bq5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLWO745c 6H7Dc/1LQc3X+gijSkRVMB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3 NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkEwMjcvMDQyMDdERjg1NzcwMTFFQ0I5NTc3QTVCQzRGOUFFMDIvMzg1QjZEQUU1 Nzc0MTFFQ0JGMDIxQjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnqFgwDQYJKoZIhvcNAQELBQADggEBAAOEhC8dTkrU1VWb W1qv0o8f+nCDC7VEkVIzYkBWRwK5xfq3VZ+UhZIiUaVjqaRSz8vEFZb51R439dHt KBLBto+5UOwdgqNtr1kEA07gT5Vg+rJhPr/jWoS16aBFHVWoiEARy/dl4uf2fxXs v22nBZxDa7Ue0fKkQjHypyskCqv942i+h7fv5Yctu2iaurfQmdrjRbxSpFWQV6G4 LyoTdHqMryUeB1bTxhyYN2mlYAorJ2og/Idr7N144j7CAxAR5IL5h0GKhy9djc+2 u5Brg30TmhmXOVU+BdKW2nZRu+9Pho4aZvMNPc5Leqrbg5dvq5BezKfXshDgLXpI hJRcG2M= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org