$ rpki-client -vvf rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/983A05F84EA311EB934EF05CC4F9AE02.roa File: 983A05F84EA311EB934EF05CC4F9AE02.roa (raw, json) Hash identifier: P2K/A9S9BbQJJ5jpe6Nsy6vhhPAP+7WyRVkP1cTLDko= Subject key identifier: 43:1F:FA:22:E7:02:98:DB:20:A5:88:0E:31:FF:CD:FF:B6:4A:C8:D4 Certificate issuer: /CN=A916B8B3/serialNumber=F2C052E0C573AB0580EB06F3F90025646E6F32CF Certificate serial: 0E88 Authority key identifier: F2:C0:52:E0:C5:73:AB:05:80:EB:06:F3:F9:00:25:64:6E:6F:32:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8sBS4MVzqwWA6wbz-QAlZG5vMs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/983A05F84EA311EB934EF05CC4F9AE02.roa Signing time: Fri 06 Oct 2023 18:15:44 +0000 ROA not before: Fri 06 Oct 2023 18:15:44 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 38047 IP address blocks: 103.123.100.0/22 maxlen: 23 103.123.100.0/24 maxlen: 24 103.123.101.0/24 maxlen: 24 103.123.102.0/24 maxlen: 24 103.123.103.0/24 maxlen: 24 2403:a040::/32 maxlen: 32 2403:a040:1::/48 maxlen: 48 2403:a040:852::/48 maxlen: 48 2403:a040:886::/48 maxlen: 48 2403:a040:1688::/48 maxlen: 48 2403:a040:3368::/48 maxlen: 48 2403:a040:6611::/48 maxlen: 48 2403:a040:8001::/48 maxlen: 48 2403:a040:8002::/48 maxlen: 48 2403:a040:8003::/48 maxlen: 48 2403:a040:8004::/48 maxlen: 48 2403:a040:8188::/48 maxlen: 48 2403:a040:a001::/48 maxlen: 48 2403:a040:b001::/48 maxlen: 48 2403:a040:cdef::/48 maxlen: 48 2403:a040:ce01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.crl rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8sBS4MVzqwWA6wbz-QAlZG5vMs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3720 (0xe88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B8B3/serialNumber=F2C052E0C573AB0580EB06F3F90025646E6F32CF Validity Not Before: Oct 6 18:15:44 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65204ecf-c305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:6d:79:d8:b2:98:b3:c5:a2:e3:fc:ef:c8: 07:b9:67:71:6a:b5:13:6e:53:45:6c:83:ea:c3:fd: ca:3b:ce:15:d5:e3:f9:a2:1a:c1:82:5c:ad:97:c7: 85:e0:de:51:1e:d4:be:59:79:58:29:13:69:a2:08: 88:3a:6c:e5:01:c1:da:24:0c:24:04:9d:02:47:98: 44:1f:94:64:e0:8c:5c:a7:39:d1:51:56:7f:7c:4f: 92:19:ea:3d:c7:61:b5:51:5f:68:fc:1d:c2:3f:c1: ff:b4:49:31:aa:30:d5:70:0d:81:da:dc:2b:26:d1: ac:fb:8c:3e:ee:56:6a:dc:8b:00:37:56:9f:4c:7e: 23:89:81:f6:fb:38:c2:83:7c:7f:39:d9:2b:a0:52: ba:7e:3c:ce:bd:79:36:33:44:24:d5:ec:4d:d3:61: ca:11:47:4d:b9:34:fb:21:fa:d2:0b:97:95:b2:e8: a2:b5:97:0e:e2:9c:80:db:9d:03:a0:a0:65:89:b0: d4:6d:6a:81:45:dc:a7:37:cc:c7:8a:3f:d1:76:57: d1:17:94:0c:71:93:7d:16:75:36:cd:a1:3f:ad:c3: 28:8e:0e:bf:8c:f2:21:1b:ed:74:6f:e2:85:6e:3e: 24:34:81:97:a6:d6:ce:f2:7a:f8:b0:45:37:7c:f0: 07:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1F:FA:22:E7:02:98:DB:20:A5:88:0E:31:FF:CD:FF:B6:4A:C8:D4 X509v3 Authority Key Identifier: keyid:F2:C0:52:E0:C5:73:AB:05:80:EB:06:F3:F9:00:25:64:6E:6F:32:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8sBS4MVzqwWA6wbz-QAlZG5vMs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/983A05F84EA311EB934EF05CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.100.0/22 IPv6: 2403:a040::/32 Signature Algorithm: sha256WithRSAEncryption 32:d4:f6:38:22:b0:9f:96:2c:3f:c4:b6:2c:df:82:9a:d7:b4: eb:c3:a8:ed:50:70:89:8e:92:f3:11:3d:a9:75:e5:38:b2:50: ff:92:f0:61:82:54:6c:cf:15:14:b2:5a:72:78:9b:3d:7a:39: b9:f7:3f:f2:94:28:c7:42:a0:15:d5:e7:d8:d3:ce:33:a6:55: 04:97:13:62:84:32:21:d4:8d:9f:c3:2a:b6:e5:51:22:02:b2: 00:b6:c3:c4:76:52:a8:40:09:97:e5:f2:84:fd:95:15:96:c7: 4b:f7:52:21:7d:45:04:aa:c2:28:89:9a:36:d9:a0:88:0d:88: 34:7c:14:ce:1d:29:f5:36:f8:32:8e:30:23:cb:eb:75:c5:01: 7f:af:c6:1b:e9:d8:e8:f3:d8:a6:ae:96:f2:6e:97:3e:ce:e3: f0:ea:f0:55:10:49:ed:2e:85:74:6e:87:ce:03:75:89:54:09: 05:31:ec:db:1e:6c:be:14:2d:da:00:e4:1e:6a:1c:c7:d9:2b: d2:c6:a0:66:e0:da:31:70:cd:5a:b9:0c:e3:56:ec:b9:12:49: a7:49:71:71:2f:31:3d:05:00:78:d5:d0:e1:3a:8c:93:3b:ac: 7a:59:c3:ef:88:68:16:53:53:e8:72:a8:e2:1a:38:55:06:34: ee:05:64:60 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4QjMxMTAvBgNVBAUTKEYyQzA1MkUwQzU3M0FCMDU4MEVCMDZGM0Y5MDAyNTY0 NkU2RjMyQ0YwHhcNMjMxMDA2MTgxNTQ0WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTIwNGVjZi1jMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHJtediymLPFouP878gHuWdxarUTblNFbIPqw/3KO84V1eP5ohrBglytl8eF 4N5RHtS+WXlYKRNpogiIOmzlAcHaJAwkBJ0CR5hEH5Rk4IxcpznRUVZ/fE+SGeo9 x2G1UV9o/B3CP8H/tEkxqjDVcA2B2twrJtGs+4w+7lZq3IsAN1afTH4jiYH2+zjC g3x/OdkroFK6fjzOvXk2M0Qk1exN02HKEUdNuTT7IfrSC5eVsuiitZcO4pyA250D oKBlibDUbWqBRdynN8zHij/RdlfRF5QMcZN9FnU2zaE/rcMojg6/jPIhG+10b+KF bj4kNIGXptbO8nr4sEU3fPAHKQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEMf+iLn ApjbIKWIDjH/zf+2SsjUMB8GA1UdIwQYMBaAFPLAUuDFc6sFgOsG8/kAJWRubzLP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjhCMy9BMTEzMUQ2QzY2 NjYxMUU5ODc1M0U0N0FDNEY5QUUwMi84c0JTNE1WenF3V0E2d2J6LVFBbFpHNXZN czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhzQlM0TVZ6cXdXQTZ3YnotUUFsWkc1dk1zOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI4QjMvQTExMzFENkM2NjY2MTFFOTg3NTNFNDdBQzRGOUFFMDIvOTgzQTA1Rjg0 RUEzMTFFQjkzNEVGMDVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJne2QwDQQCAAIwBwMFACQDoEAwDQYJKoZIhvcNAQELBQAD ggEBADLU9jgisJ+WLD/EtizfgprXtOvDqO1QcImOkvMRPal15TiyUP+S8GGCVGzP FRSyWnJ4mz16Obn3P/KUKMdCoBXV59jTzjOmVQSXE2KEMiHUjZ/DKrblUSICsgC2 w8R2UqhACZfl8oT9lRWWx0v3UiF9RQSqwiiJmjbZoIgNiDR8FM4dKfU2+DKOMCPL 63XFAX+vxhvp2Ojz2KaulvJulz7O4/Dq8FUQSe0uhXRuh84DdYlUCQUx7NsebL4U LdoA5B5qHMfZK9LGoGbg2jFwzVq5DONW7LkSSadJcXEvMT0FAHjV0OE6jJM7rHpZ w++IaBZTU+hyqOIaOFUGNO4FZGA= -----END CERTIFICATE-----Generated at Tue May 28 19:51:21 2024 by rpki-client on console-fra.rpki-client.org