$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/99BB0B14A16311EE85DF497CC4F9AE02.roa File: 99BB0B14A16311EE85DF497CC4F9AE02.roa (raw, json) Hash identifier: 5Xc9/jAyPbFuKwxDaojvdU6UZPRQGKoIWV+FcNcu1/g= Subject key identifier: F6:3A:0C:BF:A6:84:5F:D3:73:1F:CC:D2:96:C7:DD:0A:58:C4:29:8F Certificate issuer: /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Certificate serial: 04DD Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/99BB0B14A16311EE85DF497CC4F9AE02.roa Signing time: Sat 23 Dec 2023 07:19:25 +0000 ROA not before: Sat 23 Dec 2023 07:19:25 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 136897 IP address blocks: 103.116.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 00:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Validity Not Before: Dec 23 07:19:25 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=658689fd-69e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c5:df:2f:e5:86:ad:0a:cb:f5:df:9d:28:fa: 3e:ce:0d:e6:7e:0f:9e:0e:e2:2b:28:67:69:c6:6c: f2:55:26:14:d0:9e:85:22:ad:00:bf:c4:7c:5e:eb: 40:1b:cd:cb:01:cd:6f:f5:0b:0e:6d:77:28:d3:f6: 5e:be:97:80:16:5b:44:91:c7:dc:bb:b0:d7:df:08: 6d:95:75:1c:7a:f6:f0:eb:de:f0:f6:fa:bb:df:c1: da:d3:da:68:ed:b0:df:c1:10:1e:1d:9d:3c:fe:0d: 3b:d3:95:65:85:f3:79:ed:2c:3a:24:f0:48:d3:7d: 4d:de:fa:bc:d5:46:8b:e0:9f:9c:c3:87:0b:b4:cf: 0b:1d:e1:d1:08:5e:cf:c7:dd:2c:07:ac:d4:e7:aa: 49:4c:bf:30:e4:6b:00:a1:d9:28:00:63:41:e6:ff: 4b:67:91:fb:44:41:74:22:93:bf:f4:f6:87:6c:3c: a2:99:a1:c5:98:b2:11:38:3e:68:aa:1d:c5:01:6f: 18:97:3c:c5:17:5e:15:9a:8e:9e:7a:d7:28:cd:cf: 09:df:ce:c7:4e:fb:92:78:67:84:58:dd:8d:3d:b8: be:87:de:8c:f4:2f:12:52:90:1c:3d:35:39:62:ed: 63:fb:3e:87:8f:3d:50:dd:4c:7c:c8:7e:e1:af:c0: 3e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3A:0C:BF:A6:84:5F:D3:73:1F:CC:D2:96:C7:DD:0A:58:C4:29:8F X509v3 Authority Key Identifier: keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/99BB0B14A16311EE85DF497CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.64.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:42:5d:c8:d6:03:55:55:f4:c9:0d:32:23:42:74:5d:24:71: 52:5f:24:1f:90:be:08:72:8b:79:5f:56:d1:d3:74:27:17:76: ff:a0:90:c1:5d:33:66:cb:58:85:23:08:18:a0:60:b6:c3:16: f8:ba:59:a7:e6:6c:b9:c5:78:f9:1a:44:9f:d0:8a:39:40:76: af:f2:64:2d:c6:46:f8:d4:9c:b2:19:d4:7b:f5:86:6c:4a:dc: 8a:89:23:0a:ca:a4:19:b7:69:14:52:83:6e:65:08:b1:71:b3: 9b:4e:87:8f:6a:ae:6c:52:3d:03:aa:ad:2c:12:86:fa:96:84: f6:63:4a:39:c1:13:c6:7c:8d:da:cd:80:ad:7c:2e:22:fd:c9: 1a:fa:b4:92:6b:65:f4:cf:e8:77:ae:f4:f3:b5:b7:f0:78:5c: bd:2a:34:2d:02:27:57:81:55:24:97:0e:31:3e:98:62:92:b2: 1f:36:43:49:70:27:e3:43:c7:34:c0:db:d1:7e:90:ad:ce:22: ea:84:f0:6c:e9:ab:c1:b6:75:f1:ac:b2:06:ef:e5:15:b8:bc: 27:eb:97:2d:f8:41:0e:37:b8:1f:08:f3:9e:bd:01:6a:ca:0f: 0f:8a:b3:3d:bd:3e:c2:c4:3e:fc:1d:c3:a3:4c:5d:49:32:33: 98:39:24:c1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBM0YxMTAvBgNVBAUTKDdGRjNFQTlBQzA4MzI1MUY1RDMwQjAxRDA1NkJDQkNE RTFBN0VFMkQwHhcNMjMxMjIzMDcxOTI1WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTg2ODlmZC02OWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsXfL+WGrQrL9d+dKPo+zg3mfg+eDuIrKGdpxmzyVSYU0J6FIq0Av8R8XutA G83LAc1v9QsObXco0/ZevpeAFltEkcfcu7DX3whtlXUcevbw697w9vq738Ha09po 7bDfwRAeHZ08/g0705VlhfN57Sw6JPBI031N3vq81UaL4J+cw4cLtM8LHeHRCF7P x90sB6zU56pJTL8w5GsAodkoAGNB5v9LZ5H7REF0IpO/9PaHbDyimaHFmLIROD5o qh3FAW8YlzzFF14Vmo6eetcozc8J387HTvuSeGeEWN2NPbi+h96M9C8SUpAcPTU5 Yu1j+z6Hjz1Q3Ux8yH7hr8A+eQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPY6DL+m hF/Tcx/M0pbH3QpYxCmPMB8GA1UdIwQYMBaAFH/z6prAgyUfXTCwHQVry83hp+4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REEzRi8wNEZGODlEOEI2 Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpSOWRNTEFkQld2THplR243 aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfUHFtc0NESlI5ZE1MQWRCV3ZMemVHbjdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRBM0YvMDRGRjg5RDhCNkNEMTFFQjhFMTA4MDI2QzRGOUFFMDIvOTlCQjBCMTRB MTYzMTFFRTg1REY0OTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJndEAwDQYJKoZIhvcNAQELBQADggEBAEpCXcjWA1VV9MkN MiNCdF0kcVJfJB+Qvghyi3lfVtHTdCcXdv+gkMFdM2bLWIUjCBigYLbDFvi6Wafm bLnFePkaRJ/QijlAdq/yZC3GRvjUnLIZ1Hv1hmxK3IqJIwrKpBm3aRRSg25lCLFx s5tOh49qrmxSPQOqrSwShvqWhPZjSjnBE8Z8jdrNgK18LiL9yRr6tJJrZfTP6Heu 9PO1t/B4XL0qNC0CJ1eBVSSXDjE+mGKSsh82Q0lwJ+NDxzTA29F+kK3OIuqE8Gzp q8G2dfGssgbv5RW4vCfrly34QQ43uB8I8569AWrKDw+Ksz29PsLEPvwdw6NMXUky M5g5JME= -----END CERTIFICATE-----Generated at Tue May 21 01:47:01 2024 by rpki-client on console-fra.rpki-client.org