$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/499DE3FC1C1611EB8BD35065C4F9AE02.roa File: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (raw, json) Hash identifier: yZHf3tOWc+sxyzq57J+zRtrh1h68qCw13SKQG5RmD88= Subject key identifier: 50:E9:89:7E:89:B5:B1:99:F4:E1:EA:67:AF:30:D5:DA:E0:86:26:B4 Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE Certificate serial: 06A5 Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/499DE3FC1C1611EB8BD35065C4F9AE02.roa Signing time: Wed 01 May 2024 00:02:24 +0000 ROA not before: Wed 01 May 2024 00:02:24 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 135090 IP address blocks: 103.189.115.0/24 maxlen: 24 103.209.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE Validity Not Before: May 1 00:02:24 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6631868f-6f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:46:88:0b:5a:f5:25:cd:72:51:03:23:27:69: dd:d6:14:4b:40:cb:f6:6b:6d:b8:02:46:43:32:da: 73:ac:09:1b:ae:e2:70:2d:a0:f7:ba:d4:81:98:08: 0b:29:4d:27:b5:ae:24:28:c9:8c:30:97:e1:8e:6a: f6:46:07:6b:aa:17:3b:fd:5b:05:d8:15:fd:d0:ea: 89:28:8f:1f:8e:b2:c3:6f:13:47:5d:45:f1:f8:0f: 4e:16:00:03:7c:2f:cc:8a:cb:1a:95:81:a1:09:11: f8:76:9f:40:de:93:d4:90:4e:d6:4a:16:39:a9:5f: 9d:51:00:7f:d8:d6:7f:ae:7a:e5:ac:54:6a:48:1e: dd:1e:68:fb:30:1a:3b:d0:15:65:3b:18:23:0f:69: 04:1a:59:a6:08:fa:85:55:1a:9a:d5:bc:a9:d2:88: 9f:e3:94:6c:6d:3e:31:dd:7c:a4:bf:e5:f5:34:64: 29:ed:25:9b:b1:44:89:8d:a0:07:06:3a:da:22:70: 98:c5:ad:3f:a1:07:96:9b:f0:f3:ad:fe:c1:57:c4: c9:a6:2c:3b:96:71:cf:5f:b2:28:74:1f:5b:d4:b1: 2e:b0:34:a6:32:40:82:0f:ab:c4:92:70:d9:db:da: 4f:5f:38:5d:f2:8a:f3:38:6e:d5:ac:a8:ad:ed:ba: ee:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E9:89:7E:89:B5:B1:99:F4:E1:EA:67:AF:30:D5:DA:E0:86:26:B4 X509v3 Authority Key Identifier: keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/499DE3FC1C1611EB8BD35065C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.115.0/24 103.209.11.0/24 Signature Algorithm: sha256WithRSAEncryption 72:2c:91:90:3b:00:80:28:1f:77:1d:80:8b:c7:f7:5c:78:cc: 86:31:a1:23:a6:56:0b:eb:9e:d5:65:69:2c:fd:bf:7e:76:bf: 29:05:e6:c6:72:35:71:52:ac:c9:de:c3:cc:c7:98:4d:94:27: 8a:8b:74:d0:40:4f:da:75:65:89:f4:bf:b8:27:a4:a4:74:c0: 2e:1d:f5:40:cb:6b:49:b4:8d:a3:c7:dd:2c:ef:e5:af:a7:bc: 3d:84:cf:aa:82:b4:bf:74:65:ec:59:44:80:7b:27:58:99:64: 15:fe:f0:8e:d7:32:5b:4a:6c:1e:42:2d:7f:74:f7:57:e0:32: 3e:10:cc:7f:e6:c5:d8:5e:ce:2e:25:b7:d5:ed:c1:c8:8b:0c: 83:8d:2a:ef:eb:b0:56:bc:bc:d4:fc:ff:4f:59:e1:9b:9a:76: 3e:f0:af:65:9a:91:f9:92:44:ea:a0:7a:47:d4:74:d5:cf:83: b7:7f:c0:93:93:59:5d:07:bf:c9:74:fd:47:a9:e6:21:77:33: 66:67:45:fa:bf:f6:5d:65:40:c7:66:b9:1b:10:87:09:9a:fc: 0c:40:32:54:d3:09:da:d2:2a:af:10:e7:ff:b6:8f:ec:b8:30: 0f:d0:90:13:38:6e:ba:c1:25:ff:0c:10:18:fc:37:3b:25:3c: 96:5f:03:36 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGOEUxMTAvBgNVBAUTKDNEQzVEMjk0M0VENEFDRkE5MjZCNzc2NzZBOThCRUM4 QjNDOTc5QUUwHhcNMjQwNTAxMDAwMjI0WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxODY4Zi02ZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kaIC1r1Jc1yUQMjJ2nd1hRLQMv2a224AkZDMtpzrAkbruJwLaD3utSBmAgL KU0nta4kKMmMMJfhjmr2Rgdrqhc7/VsF2BX90OqJKI8fjrLDbxNHXUXx+A9OFgAD fC/MissalYGhCRH4dp9A3pPUkE7WShY5qV+dUQB/2NZ/rnrlrFRqSB7dHmj7MBo7 0BVlOxgjD2kEGlmmCPqFVRqa1byp0oif45RsbT4x3Xykv+X1NGQp7SWbsUSJjaAH BjraInCYxa0/oQeWm/Dzrf7BV8TJpiw7lnHPX7IodB9b1LEusDSmMkCCD6vEknDZ 29pPXzhd8orzOG7VrKit7bru0wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFDpiX6J tbGZ9OHqZ68w1drghia0MB8GA1UdIwQYMBaAFD3F0pQ+1Kz6kmt3Z2qYvsizyXmu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUY4RS9EOTRBNzU5NDFD MTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQcVNhM2RuYXBpLXlMUEpl YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BjWFNsRDdVclBxU2EzZG5hcGkteUxQSmVhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkFGOEUvRDk0QTc1OTQxQzE0MTFFQkIwMzZEQzYzQzRGOUFFMDIvNDk5REUzRkMx QzE2MTFFQjhCRDM1MDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnvXMDBABn0QswDQYJKoZIhvcNAQELBQADggEBAHIskZA7 AIAoH3cdgIvH91x4zIYxoSOmVgvrntVlaSz9v352vykF5sZyNXFSrMnew8zHmE2U J4qLdNBAT9p1ZYn0v7gnpKR0wC4d9UDLa0m0jaPH3Szv5a+nvD2Ez6qCtL90ZexZ RIB7J1iZZBX+8I7XMltKbB5CLX9091fgMj4QzH/mxdhezi4lt9XtwciLDIONKu/r sFa8vNT8/09Z4Zuadj7wr2WakfmSROqgekfUdNXPg7d/wJOTWV0Hv8l0/Uep5iF3 M2ZnRfq/9l1lQMdmuRsQhwma/AxAMlTTCdrSKq8Q5/+2j+y4MA/QkBM4brrBJf8M EBj8NzslPJZfAzY= -----END CERTIFICATE-----Generated at Sun May 19 00:30:16 2024 by rpki-client on console-ams.rpki-client.org