$ rpki-client -vvf rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/4EF3DCD8DECB11ED80F78C77C4F9AE02.roa File: 4EF3DCD8DECB11ED80F78C77C4F9AE02.roa (raw, json) Hash identifier: YAsdGgPvC2gFDTIAZ6DH3aQitMynCUYRQEVu//2Ac+E= Subject key identifier: 0B:B6:9A:E9:13:63:EF:36:93:23:0E:EA:B1:DE:70:0D:7F:18:3D:A4 Certificate issuer: /CN=A917AD0E/serialNumber=C9BB92FAC6A5532E423556751D0EA72891E6DE7A Certificate serial: 065A Authority key identifier: C9:BB:92:FA:C6:A5:53:2E:42:35:56:75:1D:0E:A7:28:91:E6:DE:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybuS-salUy5CNVZ1HQ6nKJHm3no.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/4EF3DCD8DECB11ED80F78C77C4F9AE02.roa Signing time: Wed 16 Aug 2023 22:19:44 +0000 ROA not before: Wed 16 Aug 2023 22:19:44 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 56110 IP address blocks: 103.118.16.0/24 maxlen: 24 103.118.17.0/24 maxlen: 24 2001:df5:c100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/ybuS-salUy5CNVZ1HQ6nKJHm3no.crl rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/ybuS-salUy5CNVZ1HQ6nKJHm3no.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybuS-salUy5CNVZ1HQ6nKJHm3no.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1626 (0x65a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AD0E/serialNumber=C9BB92FAC6A5532E423556751D0EA72891E6DE7A Validity Not Before: Aug 16 22:19:44 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64dd4b80-5ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:ad:c8:29:84:4d:d5:ae:80:be:ee:73:63: b8:53:b7:e5:d4:94:bf:c7:5f:18:67:e0:df:24:60: 86:32:d9:27:22:0e:b8:b1:24:03:5f:1a:ff:42:28: 6c:53:ba:e6:58:09:3c:68:e1:ed:a7:5d:37:65:94: ce:50:16:9c:83:30:a4:c1:db:1d:2e:f2:7a:0f:a4: 00:59:24:cf:70:f3:c4:e9:6e:ae:ad:ef:10:33:fb: bd:5e:1d:6f:ee:72:43:0a:d6:bb:d4:82:c2:df:92: d7:57:f4:d0:39:01:ad:11:8a:27:fa:14:08:d2:e2: 9d:fd:bd:c9:98:1f:0d:9a:1f:aa:77:15:29:cd:8a: 34:2d:49:b2:b6:42:1e:54:96:bf:db:63:16:e8:21: 61:fb:0b:53:94:c9:b1:12:0a:3f:f9:a1:7a:0e:88: 9a:90:bf:d3:d4:e7:1c:a9:b8:f3:d0:6a:8c:2a:d8: bd:e5:ff:23:f7:3b:f8:2f:83:4f:a6:22:45:09:51: e5:17:b5:49:a5:64:8a:13:ef:b6:e9:1a:c0:55:00: 9c:14:9f:4d:1c:cb:a5:e6:43:b0:5a:d7:19:3b:e3: 2d:a3:49:a5:20:c7:66:79:8d:be:7c:f8:86:e8:79: 9a:54:cb:66:78:65:3f:c1:7f:86:24:b4:df:62:5f: 64:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B6:9A:E9:13:63:EF:36:93:23:0E:EA:B1:DE:70:0D:7F:18:3D:A4 X509v3 Authority Key Identifier: keyid:C9:BB:92:FA:C6:A5:53:2E:42:35:56:75:1D:0E:A7:28:91:E6:DE:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/ybuS-salUy5CNVZ1HQ6nKJHm3no.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybuS-salUy5CNVZ1HQ6nKJHm3no.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/4EF3DCD8DECB11ED80F78C77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.16.0/23 IPv6: 2001:df5:c100::/48 Signature Algorithm: sha256WithRSAEncryption 35:6a:30:f6:42:56:59:5e:3f:2f:40:09:da:c0:84:23:6a:0e: c9:e0:96:02:ff:75:95:7c:a7:74:dc:6a:27:56:78:5e:8c:1c: 5a:8a:0f:47:25:41:90:29:91:e6:a6:9b:ab:60:17:f5:26:13: de:11:3e:d9:69:8e:e6:eb:73:94:9e:b0:14:58:b4:5c:30:16: 1e:3e:37:b4:15:8b:cf:d9:b7:f3:c0:8c:e1:aa:9f:51:b0:f1: 4f:f3:b4:17:ba:82:7b:ff:39:80:3c:7f:10:3f:9b:65:cb:9a: 59:2f:60:15:64:c5:27:00:5d:11:2a:81:ff:82:17:e9:3b:d8: e3:25:ce:f9:51:07:77:36:a5:34:cf:54:0c:b6:3f:ea:00:76: 99:92:71:6c:28:d2:02:37:7e:d9:84:f5:69:47:74:e5:8b:b7: c1:51:70:3a:22:ec:77:a1:90:d9:21:55:c8:96:22:75:a2:32: fc:70:57:cc:45:c7:e6:84:3d:e5:83:75:0f:31:c4:06:8a:5e: e7:d4:48:40:b1:4e:e1:77:c2:50:2d:59:cd:06:41:e6:54:fc: b0:91:45:b0:6a:a3:bb:fd:f5:63:e5:52:e0:fa:53:57:66:b3: 5e:aa:dc:2a:52:7c:05:8b:cc:2e:8c:eb:32:3d:c0:de:1b:c9: e0:ff:31:95 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FEMEUxMTAvBgNVBAUTKEM5QkI5MkZBQzZBNTUzMkU0MjM1NTY3NTFEMEVBNzI4 OTFFNkRFN0EwHhcNMjMwODE2MjIxOTQ0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRkNGI4MC01YWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/WtyCmETdWugL7uc2O4U7fl1JS/x18YZ+DfJGCGMtknIg64sSQDXxr/Qihs U7rmWAk8aOHtp103ZZTOUBacgzCkwdsdLvJ6D6QAWSTPcPPE6W6ure8QM/u9Xh1v 7nJDCta71ILC35LXV/TQOQGtEYon+hQI0uKd/b3JmB8Nmh+qdxUpzYo0LUmytkIe VJa/22MW6CFh+wtTlMmxEgo/+aF6DoiakL/T1Occqbjz0GqMKti95f8j9zv4L4NP piJFCVHlF7VJpWSKE++26RrAVQCcFJ9NHMul5kOwWtcZO+Mto0mlIMdmeY2+fPiG 6HmaVMtmeGU/wX+GJLTfYl9klwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAu2mukT Y+82kyMO6rHecA1/GD2kMB8GA1UdIwQYMBaAFMm7kvrGpVMuQjVWdR0OpyiR5t56 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUQwRS8xNDI4MjBCMjBE NUIxMUVCQUQ1MUNFMzZDNEY5QUUwMi95YnVTLXNhbFV5NUNOVloxSFE2bktKSG0z bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lidVMtc2FsVXk1Q05WWjFIUTZuS0pIbTNuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0FEMEUvMTQyODIwQjIwRDVCMTFFQkFENTFDRTM2QzRGOUFFMDIvNEVGM0RDRDhE RUNCMTFFRDgwRjc4Qzc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFndhAwDwQCAAIwCQMHACABDfXBADANBgkqhkiG9w0BAQsF AAOCAQEANWow9kJWWV4/L0AJ2sCEI2oOyeCWAv91lXyndNxqJ1Z4XowcWooPRyVB kCmR5qabq2AX9SYT3hE+2WmO5utzlJ6wFFi0XDAWHj43tBWLz9m388CM4aqfUbDx T/O0F7qCe/85gDx/ED+bZcuaWS9gFWTFJwBdESqB/4IX6TvY4yXO+VEHdzalNM9U DLY/6gB2mZJxbCjSAjd+2YT1aUd05Yu3wVFwOiLsd6GQ2SFVyJYidaIy/HBXzEXH 5oQ95YN1DzHEBope59RIQLFO4XfCUC1ZzQZB5lT8sJFFsGqju/31Y+VS4PpTV2az XqrcKlJ8BYvMLozrMj3A3hvJ4P8xlQ== -----END CERTIFICATE-----Generated at Tue May 7 00:53:20 2024 by rpki-client on console-ams.rpki-client.org