$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/5A0804A4152E11EC94BCB264C4F9AE02.roa File: 5A0804A4152E11EC94BCB264C4F9AE02.roa (raw, json) Hash identifier: oV2v23VyIR5s0kEFyHz3FmFpgbo4gZtQ6jb48hoRfTM= Subject key identifier: 9D:D2:A9:C5:80:3D:F0:C8:5C:25:34:A8:02:61:CC:43:36:A9:86:59 Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 03E6 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/5A0804A4152E11EC94BCB264C4F9AE02.roa Signing time: Wed 29 Nov 2023 01:53:04 +0000 ROA not before: Wed 29 Nov 2023 01:53:04 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 138354 IP address blocks: 45.120.36.0/24 maxlen: 24 103.60.22.0/24 maxlen: 24 103.60.23.0/24 maxlen: 24 103.60.96.0/24 maxlen: 24 103.131.40.0/24 maxlen: 24 103.131.41.0/24 maxlen: 24 103.238.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Nov 29 01:53:04 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65669980-e3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:ae:fa:f0:38:56:b9:28:83:33:4f:88:56: 9c:cd:14:84:12:b5:00:e1:2f:b2:fe:4f:bd:12:36: 3f:b8:3a:24:6f:d8:48:02:7f:7c:0c:a2:26:e2:da: b5:c9:f0:18:a0:db:68:21:20:64:d1:a3:e2:b2:10: a2:9c:80:e3:65:6c:c3:d5:9f:7c:cc:1a:a3:4e:be: a6:64:d0:77:49:bd:58:ef:fb:f9:1f:36:a0:16:27: 63:79:09:54:65:c3:64:ef:64:00:3b:de:c7:19:14: ed:bf:5a:b3:c7:d7:ee:9c:34:5d:ca:ce:92:19:cf: 26:83:a5:1a:88:1d:b8:17:c2:13:b1:c3:b3:97:54: 34:8f:dd:36:a3:66:69:b1:5d:66:0c:88:7c:36:4c: ff:75:a9:03:aa:40:e1:0d:63:73:29:44:68:8d:6e: 51:40:8d:d7:22:7d:47:7d:e4:e0:bc:35:70:59:bb: d8:74:82:9d:d1:0e:79:2b:d6:93:07:fa:a8:40:f7: d8:60:df:f7:e3:02:c5:08:0d:ed:9b:d9:09:d8:2f: 6b:11:bb:a6:f6:43:09:d9:11:1c:63:04:5d:55:da: ca:bc:38:dc:d7:d5:98:f1:b4:5c:fe:28:00:71:1a: 59:40:2c:43:20:c1:60:a1:a5:59:ef:50:86:e7:27: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D2:A9:C5:80:3D:F0:C8:5C:25:34:A8:02:61:CC:43:36:A9:86:59 X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/5A0804A4152E11EC94BCB264C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.36.0/24 103.60.22.0/23 103.60.96.0/24 103.131.40.0/23 103.238.62.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:e2:d1:e6:dd:36:e0:ad:bc:b2:1e:eb:76:45:67:ee:a0:a2: 5d:69:0f:b9:01:c4:7c:41:65:c8:27:78:8e:e2:54:b0:78:37: 93:61:38:0a:5a:09:ce:5d:d4:6d:78:46:9b:88:d0:c7:67:0f: 0c:2e:02:d3:f2:d6:79:bc:a4:d6:60:07:b5:91:27:eb:17:7c: ba:86:22:87:bc:31:17:05:7d:8a:17:7b:a6:36:8e:2f:63:c6: 57:be:2b:43:fd:ba:8b:61:56:4f:6c:18:98:e4:e8:f2:85:2c: 8f:c7:20:c8:cc:0c:cb:2b:05:0c:fd:67:bb:62:75:dd:16:11: 27:e3:54:6e:dc:9c:f2:e6:92:01:c5:ec:cb:08:2e:14:b4:d4: 51:11:d8:b3:9a:92:8b:e7:7a:9c:39:49:24:04:0a:f7:e1:d3: 81:ab:65:0b:ae:fd:b8:68:96:0c:59:c2:6e:71:d0:04:a8:f4: 18:be:a0:f8:34:70:48:71:98:c6:fc:58:1e:e6:94:98:09:67: ce:f1:a1:0b:a1:42:96:2e:1a:ee:c8:53:e8:77:b1:c1:25:7b: a6:ee:d7:73:c3:a2:24:eb:77:2e:e5:5c:a1:ce:da:ce:ae:89: 71:b2:b5:40:56:6b:a0:40:21:0d:c2:b7:12:0a:a4:9d:6e:07: 4d:5b:b3:89 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjMxMTI5MDE1MzA0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY2OTk4MC1lM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtx6u+vA4VrkogzNPiFaczRSEErUA4S+y/k+9EjY/uDokb9hIAn98DKIm4tq1 yfAYoNtoISBk0aPishCinIDjZWzD1Z98zBqjTr6mZNB3Sb1Y7/v5HzagFidjeQlU ZcNk72QAO97HGRTtv1qzx9funDRdys6SGc8mg6UaiB24F8ITscOzl1Q0j902o2Zp sV1mDIh8Nkz/dakDqkDhDWNzKURojW5RQI3XIn1HfeTgvDVwWbvYdIKd0Q55K9aT B/qoQPfYYN/34wLFCA3tm9kJ2C9rEbum9kMJ2REcYwRdVdrKvDjc19WY8bRc/igA cRpZQCxDIMFgoaVZ71CG5yf2/wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJ3SqcWA PfDIXCU0qAJhzEM2qYZZMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM2NDMvQTVEODg0QzQxNTJCMTFFQ0E1M0U0QzYzQzRGOUFFMDIvNUEwODA0QTQx NTJFMTFFQzk0QkNCMjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAAteCQDBAFnPBYDBABnPGADBAFngygDBABn7j4wDQYJKoZI hvcNAQELBQADggEBAEri0ebdNuCtvLIe63ZFZ+6gol1pD7kBxHxBZcgneI7iVLB4 N5NhOApaCc5d1G14RpuI0MdnDwwuAtPy1nm8pNZgB7WRJ+sXfLqGIoe8MRcFfYoX e6Y2ji9jxle+K0P9uothVk9sGJjk6PKFLI/HIMjMDMsrBQz9Z7tidd0WESfjVG7c nPLmkgHF7MsILhS01FER2LOakovnepw5SSQECvfh04GrZQuu/bholgxZwm5x0ASo 9Bi+oPg0cEhxmMb8WB7mlJgJZ87xoQuhQpYuGu7IU+h3scEle6bu13PDoiTrdy7l XKHO2s6uiXGytUBWa6BAIQ3CtxIKpJ1uB01bs4k= -----END CERTIFICATE-----Generated at Fri May 17 02:38:39 2024 by rpki-client on console-fra.rpki-client.org