$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/594A0BF2152E11EC94BCB264C4F9AE02.roa File: 594A0BF2152E11EC94BCB264C4F9AE02.roa (raw, json) Hash identifier: RUb4fveS6KNpdqQZ3iK34TgQh1XppIjAE8PLiJx+i58= Subject key identifier: 82:83:A6:5F:6D:3A:86:C5:55:78:D3:62:94:F7:C8:C9:0A:A5:5F:20 Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 03E5 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/594A0BF2152E11EC94BCB264C4F9AE02.roa Signing time: Wed 29 Nov 2023 01:53:03 +0000 ROA not before: Wed 29 Nov 2023 01:53:03 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 133493 IP address blocks: 103.60.22.0/24 maxlen: 24 103.60.23.0/24 maxlen: 24 103.60.96.0/24 maxlen: 24 103.238.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 997 (0x3e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Nov 29 01:53:03 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6566997f-d155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:38:4e:69:64:1f:ed:da:0b:01:ca:2a:75:9a: 39:b5:e3:96:4f:95:55:49:1d:ae:3c:20:92:93:83: 93:28:fd:d5:1b:c6:91:49:da:a3:9a:25:a0:0a:5f: 45:82:89:da:d5:d9:1b:76:54:2c:66:14:cd:9e:da: e3:a6:a3:bb:63:ae:e8:87:2b:10:1f:43:7c:28:90: 39:35:4e:4b:b5:aa:c4:78:18:e0:6d:ea:0a:ef:d5: 18:31:b8:2b:c1:63:92:8c:3f:11:f7:d4:29:4f:d1: 75:be:ea:ea:ba:9d:1c:fe:69:18:b9:46:54:6e:96: 05:b7:ab:e0:e1:87:36:86:6d:18:92:e8:02:39:53: c9:a8:7b:ac:82:98:de:e5:d0:46:b3:2c:bf:c7:05: 6c:9b:06:0b:ce:5e:87:92:4f:6f:d6:8c:34:ac:bb: 3a:16:f8:cf:d0:d4:61:58:d1:3e:19:af:8c:26:b8: f2:f3:ff:9d:04:3d:c5:66:2c:5d:0b:9a:e5:c4:20: 94:65:12:65:80:fa:4f:93:d8:05:bd:3a:04:bf:ca: 0d:42:e3:23:13:f0:81:a9:6c:73:36:13:34:c4:aa: 86:60:b5:36:4f:38:d1:cf:60:29:6b:80:72:36:e2: d4:c8:7b:3f:74:ef:dc:7c:22:52:ab:58:0f:86:e0: e7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:83:A6:5F:6D:3A:86:C5:55:78:D3:62:94:F7:C8:C9:0A:A5:5F:20 X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/594A0BF2152E11EC94BCB264C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.22.0/23 103.60.96.0/24 103.238.62.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:ed:76:d2:8c:9a:f1:6d:09:c0:4e:f4:41:ea:cf:a4:9c:ad: 39:0a:9c:32:6f:05:82:fd:57:8d:01:62:37:44:9d:38:3a:57: 93:aa:64:1f:49:14:f0:dc:fe:47:e7:17:11:5b:cf:f7:e4:95: 8f:49:b6:ef:eb:94:f6:d7:ba:dc:21:8a:75:ae:b4:54:e8:a6: c0:e2:30:9e:34:3d:03:9c:44:a7:95:61:d3:fb:1b:8c:17:6f: b4:40:ee:9f:cb:dc:5f:5c:d2:e0:61:5f:95:42:bd:b4:0e:52: d6:e1:3f:06:dd:e6:9c:ae:ab:ef:70:80:2a:22:66:6f:d0:b5: 47:dd:f9:47:a0:e9:59:8c:1d:db:cf:ce:a5:01:09:fa:29:28: db:de:a1:38:3c:3b:44:9e:46:cf:1b:f4:15:21:22:d2:b8:46: 36:4c:5d:40:69:72:9f:1f:41:41:04:f8:6a:a8:ad:46:51:a5: 16:b1:74:44:7e:80:aa:c8:e3:e2:35:56:dc:fe:64:c8:1b:f7: 5b:3a:86:d8:2f:52:05:52:69:16:9f:ea:9e:79:0b:01:34:99: 25:d5:91:32:8c:2c:b4:4c:b9:a2:ea:53:50:25:a1:03:f7:be: d3:fb:e9:eb:2d:11:bf:c8:fe:21:05:52:0c:4a:c8:1d:7b:8c: d6:34:55:11 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjMxMTI5MDE1MzAzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY2OTk3Zi1kMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApThOaWQf7doLAcoqdZo5teOWT5VVSR2uPCCSk4OTKP3VG8aRSdqjmiWgCl9F gona1dkbdlQsZhTNntrjpqO7Y67ohysQH0N8KJA5NU5LtarEeBjgbeoK79UYMbgr wWOSjD8R99QpT9F1vurqup0c/mkYuUZUbpYFt6vg4Yc2hm0YkugCOVPJqHusgpje 5dBGsyy/xwVsmwYLzl6Hkk9v1ow0rLs6FvjP0NRhWNE+Ga+MJrjy8/+dBD3FZixd C5rlxCCUZRJlgPpPk9gFvToEv8oNQuMjE/CBqWxzNhM0xKqGYLU2TzjRz2Apa4By NuLUyHs/dO/cfCJSq1gPhuDnOwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIKDpl9t OobFVXjTYpT3yMkKpV8gMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM2NDMvQTVEODg0QzQxNTJCMTFFQ0E1M0U0QzYzQzRGOUFFMDIvNTk0QTBCRjIx NTJFMTFFQzk0QkNCMjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFnPBYDBABnPGADBABn7j4wDQYJKoZIhvcNAQELBQADggEB AA/tdtKMmvFtCcBO9EHqz6ScrTkKnDJvBYL9V40BYjdEnTg6V5OqZB9JFPDc/kfn FxFbz/fklY9Jtu/rlPbXutwhinWutFTopsDiMJ40PQOcRKeVYdP7G4wXb7RA7p/L 3F9c0uBhX5VCvbQOUtbhPwbd5pyuq+9wgCoiZm/QtUfd+Ueg6VmMHdvPzqUBCfop KNveoTg8O0SeRs8b9BUhItK4RjZMXUBpcp8fQUEE+GqorUZRpRaxdER+gKrI4+I1 Vtz+ZMgb91s6htgvUgVSaRaf6p55CwE0mSXVkTKMLLRMuaLqU1AloQP3vtP76est Eb/I/iEFUgxKyB17jNY0VRE= -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org