$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/CFF490F63B3211EAA19CAB2DC4F9AE02.roa File: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (raw, json) Hash identifier: d/u/tQyu7BiZM6HHupxtxJeaNSffsgItB1m87HqzAOI= Subject key identifier: 33:6E:09:68:F9:34:C9:B7:15:24:AD:83:2D:7E:94:C3:75:BE:24:A2 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 09AE Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/CFF490F63B3211EAA19CAB2DC4F9AE02.roa Signing time: Wed 10 May 2023 21:32:20 +0000 ROA not before: Wed 10 May 2023 21:32:20 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 138999 IP address blocks: 103.138.84.0/24 maxlen: 24 103.138.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2478 (0x9ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: May 10 21:32:20 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=645c0d64-c5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:c1:6f:fe:28:6c:36:45:05:52:80:68:25: a7:71:5a:a0:7d:c1:fe:3b:fd:88:f8:d1:a7:ae:ed: cd:e8:ec:c9:39:2c:97:88:02:e5:0a:6c:a7:ea:73: 27:a1:d7:52:4f:64:f1:71:e3:c3:54:69:4e:93:e4: aa:dc:c0:6c:7f:5a:4a:dc:f6:ff:df:30:8d:66:f8: be:4f:20:de:8d:25:f6:19:37:fe:27:51:07:9e:92: 86:ec:18:4c:58:77:65:f2:87:34:dc:91:2d:19:d1: 91:d3:2d:f4:58:2a:7e:7b:4f:83:4b:e9:b4:10:db: b0:77:93:97:cd:14:9e:b2:29:a2:09:6d:bc:a7:10: 68:81:53:9d:02:51:1f:7d:35:78:ba:fb:da:17:25: e7:c9:40:0d:21:a1:47:95:73:26:92:d0:4d:af:bf: 03:48:87:3b:ec:5c:d9:3f:85:51:e2:15:19:51:41: f9:03:46:65:da:d0:da:9c:fa:09:11:af:f6:a5:63: a1:f3:de:ad:f0:1c:34:da:b6:0a:56:b7:3a:97:7a: 31:6a:1c:2f:43:fe:c9:06:73:d6:7b:88:ed:9c:7c: a2:25:f4:24:a1:42:b3:b3:a3:f5:13:ae:78:ed:d7: f5:9c:a3:66:e1:df:b0:83:c2:3a:06:b6:6a:94:53: 39:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6E:09:68:F9:34:C9:B7:15:24:AD:83:2D:7E:94:C3:75:BE:24:A2 X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/CFF490F63B3211EAA19CAB2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.84.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:72:7e:49:01:a5:e0:6c:0e:21:44:36:99:36:8a:91:67:7d: 5d:f1:bf:c1:7c:5c:a6:f8:c3:c5:06:73:c0:42:7d:89:d6:4b: ab:86:8f:29:1c:5d:5a:ab:de:03:a5:25:76:bf:dd:af:3e:a8: ce:42:0c:18:5f:f5:31:44:59:7b:6e:fd:cf:51:57:99:8a:0e: b1:ed:52:eb:5c:bd:a4:ca:7c:96:a9:40:9f:dd:34:fc:b7:65: f5:ca:93:cd:17:c0:72:40:32:70:fd:57:70:4e:3b:12:8f:e4: 4d:5b:b2:92:d2:e4:49:a1:c2:6a:dd:c8:1b:f6:62:5a:f7:5a: a0:b4:5c:d4:a5:ad:36:63:43:74:99:84:d2:ba:0c:f4:e8:8b: 25:d0:fc:15:4d:23:66:73:9d:af:e2:33:b6:2c:b2:74:b4:57: 2b:41:cc:d9:2a:39:71:12:58:64:ad:82:2d:b9:b1:4b:a5:d8: 55:79:45:09:35:79:2a:23:08:60:31:69:6d:2b:9d:bc:87:23: 1a:88:6c:13:01:c8:41:a0:0e:7c:60:5b:2a:26:a3:f6:dc:f5: 2a:3b:16:f9:4c:bf:01:7f:59:f8:fb:f9:9e:03:f1:74:1d:3e: c0:1b:df:a9:95:f4:69:f7:8d:c8:39:5b:38:4f:cc:bc:97:4c: 93:8a:be:48 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjMwNTEwMjEzMjIwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDVjMGQ2NC1jNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNLBb/4obDZFBVKAaCWncVqgfcH+O/2I+NGnru3N6OzJOSyXiALlCmyn6nMn oddST2TxcePDVGlOk+Sq3MBsf1pK3Pb/3zCNZvi+TyDejSX2GTf+J1EHnpKG7BhM WHdl8oc03JEtGdGR0y30WCp+e0+DS+m0ENuwd5OXzRSesimiCW28pxBogVOdAlEf fTV4uvvaFyXnyUANIaFHlXMmktBNr78DSIc77FzZP4VR4hUZUUH5A0Zl2tDanPoJ Ea/2pWOh896t8Bw02rYKVrc6l3oxahwvQ/7JBnPWe4jtnHyiJfQkoUKzs6P1E654 7df1nKNm4d+wg8I6BrZqlFM5rwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDNuCWj5 NMm3FSStgy1+lMN1viSiMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJFMkYvRkVCMTIyNTgzQjMwMTFFQUE5QjdBMDI3QzRGOUFFMDIvQ0ZGNDkwRjYz QjMyMTFFQUExOUNBQjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnilQwDQYJKoZIhvcNAQELBQADggEBAExyfkkBpeBsDiFE Npk2ipFnfV3xv8F8XKb4w8UGc8BCfYnWS6uGjykcXVqr3gOlJXa/3a8+qM5CDBhf 9TFEWXtu/c9RV5mKDrHtUutcvaTKfJapQJ/dNPy3ZfXKk80XwHJAMnD9V3BOOxKP 5E1bspLS5EmhwmrdyBv2Ylr3WqC0XNSlrTZjQ3SZhNK6DPToiyXQ/BVNI2Zzna/i M7YssnS0VytBzNkqOXESWGStgi25sUul2FV5RQk1eSojCGAxaW0rnbyHIxqIbBMB yEGgDnxgWyomo/bc9So7FvlMvwF/Wfj7+Z4D8XQdPsAb36mV9Gn3jcg5WzhPzLyX TJOKvkg= -----END CERTIFICATE-----Generated at Sat May 18 21:31:28 2024 by rpki-client on console-ams.rpki-client.org