$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/B4F0A9F800A011E8B6C9E20AC4F9AE02.roa File: B4F0A9F800A011E8B6C9E20AC4F9AE02.roa (raw, json) Hash identifier: O++Vx92KavIvOn+xBQAI46zCuI/TBPZ1f39+eEbauLE= Subject key identifier: 1D:3A:BE:8E:AB:80:DB:23:F1:86:1A:EA:C8:8E:E3:64:33:1F:DF:70 Certificate issuer: /CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357 Certificate serial: 16CB Authority key identifier: 7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/B4F0A9F800A011E8B6C9E20AC4F9AE02.roa Signing time: Fri 20 Oct 2023 17:04:35 +0000 ROA not before: Fri 20 Oct 2023 17:04:35 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 14907 IP address blocks: 103.102.166.0/24 maxlen: 24 2001:df2:e500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 17:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5835 (0x16cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357 Validity Not Before: Oct 20 17:04:35 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6532b322-ca39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:ff:98:51:d7:7d:78:da:9d:7f:9a:ac:a8: 6c:03:63:ec:aa:92:a0:90:22:a1:4d:39:ed:dc:d4: 14:cb:30:89:1e:85:8e:6b:cf:18:c5:e1:92:ce:6f: bf:b5:6d:86:59:40:d6:5e:20:b4:2d:8a:96:7b:5b: d5:d5:ff:64:18:97:2f:1c:19:0d:a6:55:78:d2:76: 3f:3e:75:4f:53:08:b0:41:75:a6:c2:91:8b:37:31: e4:65:76:f9:78:d1:18:b0:0c:36:cb:8e:18:89:27: 2a:57:94:0f:15:8b:6a:6d:47:d0:01:ea:51:52:7f: ae:88:b6:56:b7:53:8b:45:fc:5b:b9:52:f2:6e:8d: ce:e3:23:97:ea:7d:7c:05:89:17:59:e1:1b:88:63: 7f:f1:d3:0b:d2:76:78:83:84:fb:07:55:e9:73:8d: d6:d8:90:c6:e0:4b:8e:94:12:a1:24:13:ce:dd:ab: 89:00:d8:2a:67:d3:58:6b:a5:76:e2:d3:29:ab:db: e9:50:10:36:1d:a5:a5:76:fe:ae:bb:16:61:4b:d5: a6:f0:13:32:8b:0f:9b:74:f4:f0:14:20:00:e5:12: 79:f7:43:91:fd:d4:a5:1b:38:51:4d:e8:bf:ac:ba: 86:4e:68:55:07:95:60:6c:d2:d8:ad:01:81:56:b9: 98:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3A:BE:8E:AB:80:DB:23:F1:86:1A:EA:C8:8E:E3:64:33:1F:DF:70 X509v3 Authority Key Identifier: keyid:7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/B4F0A9F800A011E8B6C9E20AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.166.0/24 IPv6: 2001:df2:e500::/48 Signature Algorithm: sha256WithRSAEncryption 1a:1b:fb:9b:1c:98:82:9a:f0:bf:8f:3c:01:71:a4:63:b2:95: 17:3c:46:9d:d2:f7:51:a2:ec:d3:5c:58:ae:f7:75:0c:ec:68: ef:de:29:6f:68:2e:10:0d:38:6b:d7:2f:28:34:d6:60:b4:56: 8e:ab:19:8c:72:b5:1c:ff:e7:54:f0:4b:06:4b:67:76:38:80: c8:2c:18:c8:ee:c0:3e:88:ad:f1:7c:84:21:e4:a4:8c:aa:85: 58:ab:f7:62:20:2c:60:89:fe:d8:b3:40:5c:6f:a2:c9:17:4c: 0f:d8:57:ff:a1:1c:17:51:cc:12:74:48:43:61:76:f1:c2:df: 53:2e:91:2a:4e:05:99:66:57:e9:5f:c6:ee:af:44:76:13:18: fc:e7:0c:40:4c:8b:99:08:ee:93:6a:87:07:8c:fc:5b:58:95: 6d:04:0f:7f:3e:c6:eb:0f:f0:67:ea:be:43:f9:b5:48:c0:58: af:3e:5e:98:6c:b0:b7:3c:29:2a:bc:89:65:5c:73:fb:b1:51: db:99:ea:a8:38:ef:e8:50:d5:15:fa:f0:04:a5:14:fb:0b:19: dc:ee:78:b0:a4:c8:9d:a6:cc:21:4f:ae:4f:ca:65:37:90:08: 8b:e4:7e:a8:53:d4:0e:f2:6d:7b:15:1a:c0:89:39:5c:bd:1e: 75:af:39:2b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICFsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNzYxMTAvBgNVBAUTKDdCMzU4OUQ3RDhEQTZCRERFNjBGMzk4RTdFNTJCQTg1 RTVBRTMzNTcwHhcNMjMxMDIwMTcwNDM1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMyYjMyMi1jYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnr/mFHXfXjanX+arKhsA2PsqpKgkCKhTTnt3NQUyzCJHoWOa88YxeGSzm+/ tW2GWUDWXiC0LYqWe1vV1f9kGJcvHBkNplV40nY/PnVPUwiwQXWmwpGLNzHkZXb5 eNEYsAw2y44YiScqV5QPFYtqbUfQAepRUn+uiLZWt1OLRfxbuVLybo3O4yOX6n18 BYkXWeEbiGN/8dML0nZ4g4T7B1Xpc43W2JDG4EuOlBKhJBPO3auJANgqZ9NYa6V2 4tMpq9vpUBA2HaWldv6uuxZhS9Wm8BMyiw+bdPTwFCAA5RJ590OR/dSlGzhRTei/ rLqGTmhVB5VgbNLYrQGBVrmYLQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB06vo6r gNsj8YYa6siO42QzH99wMB8GA1UdIwQYMBaAFHs1idfY2mvd5g85jn5SuoXlrjNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY3Ni8yOUJFNThGMEI4 Q0QxMUU3OUU0MzE4NjFDNEY5QUUwMi9leldKMTlqYWE5M21Eem1PZmxLNmhlV3VN MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6V0oxOWphYTkzbUR6bU9mbEs2aGVXdU0xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVGNzYvMjlCRTU4RjBCOENEMTFFNzlFNDMxODYxQzRGOUFFMDIvQjRGMEE5Rjgw MEEwMTFFOEI2QzlFMjBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnZqYwDwQCAAIwCQMHACABDfLlADANBgkqhkiG9w0BAQsF AAOCAQEAGhv7mxyYgprwv488AXGkY7KVFzxGndL3UaLs01xYrvd1DOxo794pb2gu EA04a9cvKDTWYLRWjqsZjHK1HP/nVPBLBktndjiAyCwYyO7APoit8XyEIeSkjKqF WKv3YiAsYIn+2LNAXG+iyRdMD9hX/6EcF1HMEnRIQ2F28cLfUy6RKk4FmWZX6V/G 7q9EdhMY/OcMQEyLmQjuk2qHB4z8W1iVbQQPfz7G6w/wZ+q+Q/m1SMBYrz5emGyw tzwpKryJZVxz+7FR25nqqDjv6FDVFfrwBKUU+wsZ3O54sKTInabMIU+uT8plN5AI i+R+qFPUDvJtexUawIk5XL0eda85Kw== -----END CERTIFICATE-----Generated at Tue May 28 19:32:35 2024 by rpki-client on console-ams.rpki-client.org