$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/6608D04620E911EC891FA162C4F9AE02.roa File: 6608D04620E911EC891FA162C4F9AE02.roa (raw, json) Hash identifier: xs3rNAxkgNzLzAAqPMqiWowoWpf7P7sBNMyau8DZ7n4= Subject key identifier: 8F:DF:3D:0B:21:14:E7:B8:24:16:70:16:08:17:C5:B6:96:87:CF:29 Certificate issuer: /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Certificate serial: 0441 Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/6608D04620E911EC891FA162C4F9AE02.roa Signing time: Wed 31 Jul 2024 01:27:51 +0000 ROA not before: Wed 31 Jul 2024 01:27:51 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 138502 IP address blocks: 103.131.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Sep 2024 23:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Validity Not Before: Jul 31 01:27:51 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=66a99316-93b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:39:af:4e:1e:09:70:59:d9:ce:bd:aa:e1: 27:07:ce:f5:c2:0e:1b:b6:57:68:90:75:33:3d:1b: a3:64:96:ee:64:a3:67:81:b6:81:9d:3a:d3:8a:45: a6:d0:45:39:83:2e:af:40:30:a7:59:85:87:74:7b: d3:a0:65:76:6c:55:87:34:6a:7f:c1:0e:f5:b2:ac: c9:ea:0e:50:80:d7:92:5e:a9:fe:44:32:de:89:de: 2f:e8:64:0c:2c:fb:8a:b0:fb:84:c6:6f:7c:df:ae: ea:0c:ab:50:a5:fc:bb:68:cd:52:19:13:53:82:a4: 6e:6c:9c:a2:93:13:b5:04:58:01:0f:b1:ff:0f:90: ab:65:18:1b:67:2f:ca:f7:8c:a8:bd:0d:57:8c:ec: 66:98:7f:94:f4:f2:7b:78:84:5f:74:6f:3a:8d:3d: 2c:b1:98:88:fe:ce:08:b6:a0:b1:4b:14:5a:0f:64: 1d:98:37:92:57:e5:23:65:44:56:da:db:e3:20:29: cc:d9:ef:c7:57:11:df:9d:26:e7:5a:de:8f:b4:80: 7d:f2:f2:67:5f:d5:80:97:df:6c:ff:49:bd:26:f5: 5b:17:09:ee:6d:82:53:fa:94:02:13:40:ff:cf:f3: cb:30:08:cb:b9:b3:10:5c:3a:ad:ac:b2:4d:34:ae: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DF:3D:0B:21:14:E7:B8:24:16:70:16:08:17:C5:B6:96:87:CF:29 X509v3 Authority Key Identifier: keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/6608D04620E911EC891FA162C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.42.0/23 Signature Algorithm: sha256WithRSAEncryption b8:0e:a0:45:5a:3c:ef:1e:23:bd:ad:6e:d9:82:78:1c:51:32: ed:be:12:0a:d9:3b:80:25:f1:83:8e:cd:70:06:77:f8:83:f8: af:9f:f6:c7:2b:f9:c3:aa:c7:d6:0e:b1:3d:ca:01:b5:13:ed: 5e:2a:5d:49:a4:29:e7:ba:ae:d3:42:1f:78:ed:14:09:08:3c: bb:28:c3:1a:9d:21:ec:8e:56:38:bd:0d:54:83:53:6b:b3:2d: 9c:1c:aa:ea:71:d7:47:a7:a0:d3:fc:b1:b7:66:ae:4f:06:10: d2:e3:70:53:68:6b:17:09:5a:f3:4e:de:07:01:3e:09:9d:4f: 7b:b6:f4:cf:4f:06:1c:dc:97:4d:e9:39:28:6c:ff:8f:a3:99: b8:96:ab:cc:f3:a9:8f:db:b4:d1:a8:38:e3:69:98:41:66:ed: 1f:fc:1f:c0:66:e5:37:e2:ce:bb:10:a8:3e:03:97:2e:55:28: d4:9a:0b:83:ca:ae:8f:5b:f4:31:63:5f:96:cd:10:81:e8:2a: 86:d6:43:2c:a1:80:8e:3e:52:3b:8f:51:52:eb:4e:1f:c3:41: 51:99:e7:0d:1e:bf:17:0e:e9:e8:37:d9:2b:38:69:66:eb:50: fa:ae:8a:7d:76:2b:ca:ef:2b:bf:c4:60:1a:a3:e9:a6:52:90: fb:f6:35:ea -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1MDUxMTAvBgNVBAUTKDg0NDc3QTNDRjAwM0FCQkNCQzg1NEUzRjQwQzg3Q0JD RjJBMTU4REYwHhcNMjQwNzMxMDEyNzUxWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5OTMxNi05M2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBc5r04eCXBZ2c69quEnB871wg4btldokHUzPRujZJbuZKNngbaBnTrTikWm 0EU5gy6vQDCnWYWHdHvToGV2bFWHNGp/wQ71sqzJ6g5QgNeSXqn+RDLeid4v6GQM LPuKsPuExm98367qDKtQpfy7aM1SGRNTgqRubJyikxO1BFgBD7H/D5CrZRgbZy/K 94yovQ1XjOxmmH+U9PJ7eIRfdG86jT0ssZiI/s4ItqCxSxRaD2QdmDeSV+UjZURW 2tvjICnM2e/HVxHfnSbnWt6PtIB98vJnX9WAl99s/0m9JvVbFwnubYJT+pQCE0D/ z/PLMAjLubMQXDqtrLJNNK7w/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFI/fPQsh FOe4JBZwFggXxbaWh88pMB8GA1UdIwQYMBaAFIRHejzwA6u8vIVOP0DIfLzyoVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUwNS80QTg5RDU2MjIw RTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3eThoVTRfUU1oOHZQS2hX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFZDZQUEFEcTd5OGhVNF9RTWg4dlBLaFdOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE1MDUvNEE4OUQ1NjIyMEU1MTFFQzkwMjJERDU5QzRGOUFFMDIvNjYwOEQwNDYy MEU5MTFFQzg5MUZBMTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFngyowDQYJKoZIhvcNAQELBQADggEBALgOoEVaPO8eI72t btmCeBxRMu2+EgrZO4Al8YOOzXAGd/iD+K+f9scr+cOqx9YOsT3KAbUT7V4qXUmk Kee6rtNCH3jtFAkIPLsowxqdIeyOVji9DVSDU2uzLZwcqupx10enoNP8sbdmrk8G ENLjcFNoaxcJWvNO3gcBPgmdT3u29M9PBhzcl03pOShs/4+jmbiWq8zzqY/btNGo OONpmEFm7R/8H8Bm5TfizrsQqD4Dly5VKNSaC4PKro9b9DFjX5bNEIHoKobWQyyh gI4+UjuPUVLrTh/DQVGZ5w0evxcO6eg32Ss4aWbrUPquin12K8rvK7/EYBqj6aZS kPv2Neo= -----END CERTIFICATE-----Generated at Thu Sep 19 01:13:02 2024 by rpki-client on console-fra.rpki-client.org