$ rpki-client -vvf rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/66387A6C087211EF9EDFC673C4F9AE02.roa File: 66387A6C087211EF9EDFC673C4F9AE02.roa (raw, json) Hash identifier: pgoxE8TT+V8GBeQeayiCskcI8BF3IYFQIBj4lqGhvug= Subject key identifier: E2:74:48:0C:A8:FE:E7:CF:3F:BC:E9:16:6D:1F:18:E4:15:25:22:BF Certificate issuer: /CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Certificate serial: 03 Authority key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/66387A6C087211EF9EDFC673C4F9AE02.roa Signing time: Thu 02 May 2024 10:54:51 +0000 ROA not before: Thu 02 May 2024 10:54:51 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 4657 IP address blocks: 103.76.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Validity Not Before: May 2 10:54:51 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=663370fa-769e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:06:3d:fc:ab:6e:dc:bb:c6:60:2a:98:5d: 6b:71:27:67:21:6e:45:89:2d:5c:ea:d9:21:d4:b8: af:43:33:6d:34:18:9d:40:e7:30:4e:5e:24:6b:38: 92:f4:8a:e6:0e:14:b0:62:d5:4e:f0:94:37:4f:6d: a1:03:b4:3c:c2:3f:d9:fb:25:22:0e:29:59:b4:d1: 34:3d:34:5c:71:54:28:2f:91:eb:10:34:8c:45:e1: ce:d5:df:ca:6d:27:1c:31:99:1d:be:a1:45:c0:fb: 1d:b0:a8:d1:0a:ed:f2:77:81:b2:b7:79:07:1b:06: 79:78:b3:84:96:bd:83:5a:89:3a:bb:ce:10:ee:55: 8a:ac:6d:2d:e0:bc:6b:73:67:d5:11:44:1b:37:87: 61:c5:3c:17:49:6f:23:fa:c1:b6:bc:f2:82:52:d5: 48:df:27:1b:62:3a:30:4c:91:f7:2d:f8:56:da:58: b5:46:dc:71:45:c5:de:b9:65:5e:b6:95:04:ad:01: 83:ab:34:f8:e1:7b:0f:6d:58:4d:60:ea:bd:a9:39: 4d:30:dc:2d:79:36:8d:17:98:73:11:de:71:29:61: be:5c:68:51:26:a0:e6:e4:55:ad:6b:a3:32:15:9f: f9:01:c3:fa:f5:72:f5:b8:ad:9e:45:ba:7a:00:f2: 36:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:74:48:0C:A8:FE:E7:CF:3F:BC:E9:16:6D:1F:18:E4:15:25:22:BF X509v3 Authority Key Identifier: keyid:11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/66387A6C087211EF9EDFC673C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.38.0/23 Signature Algorithm: sha256WithRSAEncryption 41:c8:2c:3c:62:8d:ad:f4:67:23:f5:32:64:dc:da:d9:0a:e0: 2a:17:98:87:36:37:3e:00:bf:e4:36:2e:9b:52:ad:b8:85:ef: 91:57:34:d2:50:a1:af:57:bc:29:bd:9f:37:11:c3:6f:4f:d9: 51:79:b1:10:c7:6a:74:fa:73:27:44:11:93:e6:a0:57:20:f8: 49:99:d3:41:36:35:5c:ba:39:1c:68:7b:87:c7:f4:3b:34:2a: 50:41:bf:43:02:55:47:09:3b:37:d7:ef:e8:49:3e:6f:22:61: 38:7c:cb:cd:8b:83:a1:15:79:e2:91:38:17:58:1b:44:6d:00: e4:c3:04:c8:26:8d:65:ba:f1:64:d9:6c:e7:fa:d0:af:ae:6d: 4e:15:8d:1f:72:0b:e4:13:5a:fb:eb:09:83:af:94:cb:57:b0: cf:e0:3e:3c:9a:f8:e9:9e:36:78:54:64:c0:9f:1d:a4:c5:ad: 40:c8:0f:27:33:6d:54:d0:c9:51:29:9a:99:36:cd:fb:cf:e0: 0b:cb:53:c6:f3:e1:ba:9c:ca:2e:ab:9c:52:18:52:64:f2:6e: ab:90:01:0a:c7:69:7c:97:58:fd:e6:b4:68:58:a0:a6:9a:ca: 17:e8:c8:a6:5d:1b:72:e8:7d:84:09:ab:7e:a1:69:05:2c:29: 6f:b4:45:12 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTM5RjExMC8GA1UEBRMoMTFFNzNGNTJCRjBGNTg2RjJCOUZBNjlFRTJDQTE1RjIx ODVGNjZDMjAeFw0yNDA1MDIxMDU0NTFaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MzM3MGZhLTc2OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC37QY9/Ktu3LvGYCqYXWtxJ2chbkWJLVzq2SHUuK9DM200GJ1A5zBOXiRrOJL0 iuYOFLBi1U7wlDdPbaEDtDzCP9n7JSIOKVm00TQ9NFxxVCgvkesQNIxF4c7V38pt JxwxmR2+oUXA+x2wqNEK7fJ3gbK3eQcbBnl4s4SWvYNaiTq7zhDuVYqsbS3gvGtz Z9URRBs3h2HFPBdJbyP6wba88oJS1UjfJxtiOjBMkfct+FbaWLVG3HFFxd65ZV62 lQStAYOrNPjhew9tWE1g6r2pOU0w3C15No0XmHMR3nEpYb5caFEmoObkVa1rozIV n/kBw/r1cvW4rZ5FunoA8jZ9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU4nRIDKj+ 588/vOkWbR8Y5BUlIr8wHwYDVR0jBBgwFoAUEec/Ur8PWG8rn6ae4soV8hhfZsIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFMzlGL0I1MDk1QTIyMDg2 QzExRUZBMDg1MkUxNkM0RjlBRTAyL0VlY19VcjhQV0c4cm42YWU0c29WOGhoZlpz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWVjX1VyOFBXRzhybjZhZTRzb1Y4aGhmWnNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM5Ri9CNTA5NUEyMjA4NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi82NjM4N0E2QzA4 NzIxMUVGOUVERkM2NzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWdMJjANBgkqhkiG9w0BAQsFAAOCAQEAQcgsPGKNrfRnI/Uy ZNza2QrgKheYhzY3PgC/5DYum1KtuIXvkVc00lChr1e8Kb2fNxHDb0/ZUXmxEMdq dPpzJ0QRk+agVyD4SZnTQTY1XLo5HGh7h8f0OzQqUEG/QwJVRwk7N9fv6Ek+byJh OHzLzYuDoRV54pE4F1gbRG0A5MMEyCaNZbrxZNls5/rQr65tThWNH3IL5BNa++sJ g6+Uy1ewz+A+PJr46Z42eFRkwJ8dpMWtQMgPJzNtVNDJUSmamTbN+8/gC8tTxvPh upzKLqucUhhSZPJuq5ABCsdpfJdY/ea0aFigpprKF+jIpl0bcuh9hAmrfqFpBSwp b7RFEg== -----END CERTIFICATE-----Generated at Tue Sep 17 08:11:54 2024 by rpki-client on console-ams.rpki-client.org