$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/A2272F186E1D11EEB6A10A0CC4F9AE02.roa File: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (raw, json) Hash identifier: u20NuNFzDHapjyOj4X0XHCGLZUioMw89EmL8O4oRBbc= Subject key identifier: 7D:7C:BC:4A:54:50:D0:24:EA:E2:28:C9:7D:1C:9B:6C:25:CD:82:C8 Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Certificate serial: 064B Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/A2272F186E1D11EEB6A10A0CC4F9AE02.roa Signing time: Sat 02 Mar 2024 23:42:18 +0000 ROA not before: Sat 02 Mar 2024 23:42:18 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 151487 IP address blocks: 103.160.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1611 (0x64b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Validity Not Before: Mar 2 23:42:18 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65e3b95a-cb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b0:8a:6b:48:f2:51:c3:8c:d5:b9:a9:5a:8d: 52:47:bd:99:e4:36:0a:7c:85:20:18:21:c2:f6:f7: 18:5a:01:57:4b:bd:57:e0:76:4f:df:49:b2:4e:43: af:1a:a5:91:61:a5:5d:91:5a:06:3d:ca:62:ae:bc: 73:94:b4:5d:5f:f6:1a:70:f1:7f:28:76:ee:b8:da: 8e:32:63:44:52:7a:d2:6f:38:dc:ab:ab:ad:9d:1b: eb:43:1a:14:79:34:db:c3:fa:aa:01:99:2e:d8:93: d4:74:48:6c:f0:8b:cc:96:06:6d:e1:99:a0:c2:38: 53:30:f5:1a:88:3e:56:15:ec:18:d9:a3:6c:8a:fa: 67:90:ba:a3:de:d2:cf:7c:a7:2d:c7:6a:e6:da:14: d4:f0:1c:18:d4:4a:85:3e:97:82:75:15:2e:a4:41: 24:73:e8:8e:21:98:53:b0:51:36:9c:ce:34:1a:1f: 84:d7:c1:41:d7:08:7d:3c:91:4b:88:6b:af:b5:7e: 1e:dc:23:ae:8e:d4:a3:97:0d:b6:b8:93:72:f4:36: 1c:00:8d:8b:1b:6e:34:6f:48:e5:9f:6c:95:01:d1: 1d:dd:61:bf:2a:ba:df:f6:2d:c2:ef:15:56:d7:6d: 02:4c:40:eb:bf:92:9c:3f:6f:53:ca:77:67:6b:5e: 15:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7C:BC:4A:54:50:D0:24:EA:E2:28:C9:7D:1C:9B:6C:25:CD:82:C8 X509v3 Authority Key Identifier: keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/A2272F186E1D11EEB6A10A0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.100.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:ad:5d:14:30:83:9b:f9:6d:a8:8c:be:45:aa:bb:eb:be:a0: 71:94:df:c9:b7:c0:61:cc:d8:89:61:30:ed:30:ee:fa:98:69: dd:34:51:3f:6e:35:07:d9:04:7c:8b:cc:f2:a2:be:af:08:35: 80:56:a8:33:89:ec:c2:a5:64:4c:81:f0:af:d9:27:5e:30:8d: 6f:65:7a:42:44:20:a7:94:a8:79:f0:b4:6c:58:5a:f2:38:e2: 61:e7:cb:da:34:13:3c:57:83:ee:9d:f8:84:7c:61:7c:f3:dc: c7:17:14:4f:65:13:dc:e1:db:dd:8e:04:ab:0f:71:31:35:30: 42:d8:95:cf:1c:f5:59:0f:27:c3:b4:cc:8e:a9:bd:91:d9:74: db:5b:ed:d6:9d:c8:57:f0:f7:3c:66:b6:4a:70:19:2f:26:16: 93:45:2d:7e:04:ca:c4:b2:9a:8e:3d:06:f0:32:65:b9:72:38: d1:ca:98:5a:13:a2:76:30:1f:da:68:74:ef:dd:0f:7c:bf:d3: 9d:fa:ef:46:56:fe:88:54:09:88:63:e8:49:84:c4:bc:36:39: cb:d1:12:7f:bc:2e:83:2a:89:89:ad:74:dd:d0:47:7b:bd:8e: 15:e9:88:fe:6d:b5:3d:2c:ca:88:9c:db:12:02:90:5f:55:66: fc:d7:49:43 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy NEVDMjRFOTIwHhcNMjQwMzAyMjM0MjE4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzYjk1YS1jYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47CKa0jyUcOM1bmpWo1SR72Z5DYKfIUgGCHC9vcYWgFXS71X4HZP30myTkOv GqWRYaVdkVoGPcpirrxzlLRdX/YacPF/KHbuuNqOMmNEUnrSbzjcq6utnRvrQxoU eTTbw/qqAZku2JPUdEhs8IvMlgZt4ZmgwjhTMPUaiD5WFewY2aNsivpnkLqj3tLP fKctx2rm2hTU8BwY1EqFPpeCdRUupEEkc+iOIZhTsFE2nM40Gh+E18FB1wh9PJFL iGuvtX4e3COujtSjlw22uJNy9DYcAI2LG240b0jln2yVAdEd3WG/Krrf9i3C7xVW 120CTEDrv5KcP29Tyndna14V2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFH18vEpU UNAk6uIoyX0cm2wlzYLIMB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQxMjgvOTBERTlDNjYzRUEzMTFFQjhBQ0I5MDEzQzRGOUFFMDIvQTIyNzJGMTg2 RTFEMTFFRUI2QTEwQTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnoGQwDQYJKoZIhvcNAQELBQADggEBAC2tXRQwg5v5baiM vkWqu+u+oHGU38m3wGHM2IlhMO0w7vqYad00UT9uNQfZBHyLzPKivq8INYBWqDOJ 7MKlZEyB8K/ZJ14wjW9lekJEIKeUqHnwtGxYWvI44mHny9o0EzxXg+6d+IR8YXzz 3McXFE9lE9zh292OBKsPcTE1MELYlc8c9VkPJ8O0zI6pvZHZdNtb7dadyFfw9zxm tkpwGS8mFpNFLX4EysSymo49BvAyZblyONHKmFoTonYwH9podO/dD3y/053670ZW /ohUCYhj6EmExLw2OcvREn+8LoMqiYmtdN3QR3u9jhXpiP5ttT0syoic2xICkF9V ZvzXSUM= -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:45 2024 by rpki-client on console-fra.rpki-client.org