$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/CFF490F63B3211EAA19CAB2DC4F9AE02.roa File: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (raw, json) Hash identifier: 6Ds3NGu2wYLJMMD3M602IBKNI5PFzIBlSYGM/Hpizc8= Subject key identifier: 8A:4A:B4:B8:65:AE:68:7C:58:0C:9E:8D:8E:25:C2:A0:94:B4:58:C8 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 0A91 Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/CFF490F63B3211EAA19CAB2DC4F9AE02.roa Signing time: Tue 16 Jul 2024 19:57:52 +0000 ROA not before: Tue 16 Jul 2024 19:57:52 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 138999 IP address blocks: 103.138.84.0/24 maxlen: 24 103.138.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2705 (0xa91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: Jul 16 19:57:52 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6696d0c0-f5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8f:f9:3b:69:7a:56:e9:86:bd:e3:3c:1b:2d: 89:e2:a7:01:21:91:a4:5d:5f:b4:c6:42:c7:99:f8: 67:1b:9b:62:22:29:06:51:f5:35:d9:7f:ac:a7:f2: a4:4c:15:00:92:1a:97:c6:0f:ae:d6:78:48:aa:02: 0c:1e:ca:6f:3e:1c:b8:ae:be:b2:20:8b:0c:ce:0d: 36:9b:89:b7:0f:9c:17:33:f0:39:8d:3c:5a:a8:48: 62:c1:95:a7:b0:33:cc:68:44:eb:91:3f:14:cf:58: 6e:6e:03:a8:be:98:c9:93:b1:02:f0:39:fa:a3:4f: 4b:f3:2b:c3:5f:a8:7c:bb:33:ed:1c:8b:bd:3e:a0: ab:02:5d:96:d7:fb:80:46:65:72:23:c4:27:9d:39: 0a:6b:47:5c:54:3e:a6:a3:06:fb:f6:bc:94:29:aa: a2:f0:b7:6a:2c:bd:aa:70:53:f3:65:ba:c7:0f:a8: 13:43:4b:32:80:6c:53:49:f2:3f:27:18:08:9c:94: ff:60:56:64:33:51:43:32:c0:00:5a:e0:aa:b4:cf: 58:74:f4:28:cc:77:ce:1c:79:09:a6:3e:25:4c:aa: 7b:4e:f1:11:5d:a5:e4:45:0f:ee:7a:a1:db:b0:21: 5a:71:d7:01:d7:c5:15:ba:c7:a8:e1:b9:9e:b8:b6: 8c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4A:B4:B8:65:AE:68:7C:58:0C:9E:8D:8E:25:C2:A0:94:B4:58:C8 X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/CFF490F63B3211EAA19CAB2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.84.0/23 Signature Algorithm: sha256WithRSAEncryption 12:b2:0e:f3:2e:19:f3:78:fd:29:c1:ac:9b:ff:7f:97:d2:36: 89:7c:b5:fd:4e:e5:c4:0b:df:83:90:09:88:76:89:5b:46:b8: 9a:d1:38:0d:12:22:d5:9e:da:5d:10:13:86:4c:39:b2:47:ed: 61:15:6e:b8:2e:15:b7:2a:cc:73:da:d1:39:c3:50:81:64:9d: 55:5e:81:41:cc:ec:73:e4:db:8a:ae:7c:74:b9:7a:62:bc:2f: b0:2d:a3:f4:97:34:c8:4d:18:9a:4d:89:23:b2:17:98:69:22: 8b:09:63:16:c6:91:35:c4:f8:4b:d0:6b:a6:3b:95:68:fe:08: 38:6c:f6:32:df:ec:04:a7:be:53:99:0a:b2:6f:c0:dd:31:fc: 1e:65:cb:4a:6c:c0:0b:1c:63:ff:c9:05:e9:bd:f5:e3:e8:3f: e2:9a:c1:c6:d6:50:57:a9:6b:2f:3a:9a:f6:d3:2e:b9:bd:7e: 3d:06:7d:8c:cf:1e:41:8b:1a:e8:96:5f:f3:ba:ed:f9:70:78: fd:60:0a:a7:97:ab:b3:e1:70:0e:6a:a2:2c:7e:0b:b7:61:bb: 7c:7b:68:1b:6e:7f:0a:38:de:0d:bc:aa:a9:4d:a6:f0:28:3d: f4:5b:41:25:22:d9:0b:08:e5:fd:db:4f:93:66:9d:b6:40:8d: 62:c3:ee:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjQwNzE2MTk1NzUyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ZDBjMC1mNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Y/5O2l6VumGveM8Gy2J4qcBIZGkXV+0xkLHmfhnG5tiIikGUfU12X+sp/Kk TBUAkhqXxg+u1nhIqgIMHspvPhy4rr6yIIsMzg02m4m3D5wXM/A5jTxaqEhiwZWn sDPMaETrkT8Uz1hubgOovpjJk7EC8Dn6o09L8yvDX6h8uzPtHIu9PqCrAl2W1/uA RmVyI8QnnTkKa0dcVD6mowb79ryUKaqi8LdqLL2qcFPzZbrHD6gTQ0sygGxTSfI/ JxgInJT/YFZkM1FDMsAAWuCqtM9YdPQozHfOHHkJpj4lTKp7TvERXaXkRQ/ueqHb sCFacdcB18UVuseo4bmeuLaM2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIpKtLhl rmh8WAyejY4lwqCUtFjIMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJFMkYvRkVCMTIyNTgzQjMwMTFFQUE5QjdBMDI3QzRGOUFFMDIvQ0ZGNDkwRjYz QjMyMTFFQUExOUNBQjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnilQwDQYJKoZIhvcNAQELBQADggEBABKyDvMuGfN4/SnB rJv/f5fSNol8tf1O5cQL34OQCYh2iVtGuJrROA0SItWe2l0QE4ZMObJH7WEVbrgu FbcqzHPa0TnDUIFknVVegUHM7HPk24qufHS5emK8L7Ato/SXNMhNGJpNiSOyF5hp IosJYxbGkTXE+EvQa6Y7lWj+CDhs9jLf7ASnvlOZCrJvwN0x/B5ly0pswAscY//J Bem99ePoP+KawcbWUFepay86mvbTLrm9fj0GfYzPHkGLGuiWX/O67flweP1gCqeX q7PhcA5qoix+C7dhu3x7aBtufwo43g28qqlNpvAoPfRbQSUi2QsI5f3bT5NmnbZA jWLD7rc= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org