$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/A663285A59DE11EE85CFCB12C4F9AE02.roa File: A663285A59DE11EE85CFCB12C4F9AE02.roa (raw, json) Hash identifier: mrCI6LJh7OXLK/YxqWyr5RsSDyzUYdmyvE3b/k2wgVw= Subject key identifier: 4C:83:E8:20:34:37:7C:66:8E:17:D9:69:E2:64:4D:44:05:1E:43:F4 Certificate issuer: /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35 Certificate serial: 49 Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/A663285A59DE11EE85CFCB12C4F9AE02.roa Signing time: Wed 31 Jan 2024 07:29:11 +0000 ROA not before: Wed 31 Jan 2024 07:29:11 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 132170 IP address blocks: 103.59.218.0/23 maxlen: 23 2001:df1:bb40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35 Validity Not Before: Jan 31 07:29:11 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b9f6c7-f17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ae:ad:0f:3b:a4:58:dc:3c:ed:36:a9:f7:fb: 4d:f3:da:1b:67:6d:e4:29:90:b6:93:45:a4:bb:80: 72:60:3d:56:38:fa:2c:18:aa:54:02:3c:00:91:25: 29:2e:5d:2a:05:79:68:f4:52:55:49:ee:63:3c:ad: bf:b7:92:5e:a4:fa:a1:e9:98:a6:b4:9f:7a:39:83: 64:c8:c6:09:f4:05:88:ba:79:7b:93:8c:59:da:f9: cb:16:14:24:b0:1c:47:e4:23:b4:ce:36:9d:64:cb: e9:2c:da:38:e3:55:6f:ba:e1:f9:de:47:54:ed:ea: 51:ad:0a:cc:2a:ed:06:ed:76:66:fc:a0:c8:61:60: 43:d9:cb:78:7b:8b:05:3c:3a:99:e0:bc:a8:43:b4: 81:f1:cb:5b:9e:ab:d3:09:78:f1:13:be:f2:8a:f6: d8:e8:4c:b5:a7:5d:34:c7:b1:80:5d:56:9a:f3:ec: c0:65:2e:8e:40:f8:97:0a:4d:50:1d:ef:e7:85:91: 83:76:b7:28:63:91:64:46:0b:c0:5f:c5:49:a4:d7: b7:2a:bf:0c:b7:ae:1b:b6:3e:ac:cc:21:c5:bc:8a: 91:03:1f:79:47:d7:c9:56:14:ff:25:f3:13:47:3c: 5c:6e:40:78:8a:f7:c2:54:70:40:fc:2c:91:92:12: eb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:83:E8:20:34:37:7C:66:8E:17:D9:69:E2:64:4D:44:05:1E:43:F4 X509v3 Authority Key Identifier: keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/A663285A59DE11EE85CFCB12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.59.218.0/23 IPv6: 2001:df1:bb40::/48 Signature Algorithm: sha256WithRSAEncryption 38:ec:16:83:bc:51:d1:1c:c4:00:9f:7f:11:13:0a:cb:e0:29: bd:26:b7:e5:e1:ae:83:0f:93:d8:8c:a0:2a:ea:a1:3c:d9:8d: ff:ea:a6:a4:47:6f:97:20:61:01:9c:35:19:19:17:dd:0f:25: 40:ff:07:ef:b0:b9:8d:6c:c8:eb:26:f5:30:ee:e0:81:d7:21: 30:9a:3d:a4:64:cb:a8:d1:d1:47:20:96:09:4f:c4:66:38:95: 6f:66:79:d0:57:c0:3a:4b:44:0a:8e:df:9a:04:6a:ad:44:43: c2:c3:44:99:77:17:3f:3a:e8:e9:eb:e8:d0:c3:7a:52:a9:6a: c0:88:27:7f:e5:2b:a7:3e:45:90:43:04:18:a4:2d:09:c8:b1: 8e:4f:8d:0f:84:b1:52:be:23:94:8e:c1:1f:50:a7:f6:99:fb: 70:d8:d0:91:08:d7:4e:07:c5:d0:68:32:46:e7:cd:bf:7d:6a: a9:d5:7b:42:ba:6e:62:2e:cd:1c:0d:ed:5a:6c:2c:73:7f:cc: 8a:db:13:21:5a:e1:7a:39:12:14:49:be:57:fa:b8:68:48:46: 39:bc:80:88:f5:6a:7f:0e:c1:6c:47:38:84:6a:b6:e4:ee:aa: 7a:2e:21:a7:d5:99:1e:3e:e8:1a:a1:d3:df:e0:9a:dd:35:21: 3f:7b:37:cd -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0E4RjExMC8GA1UEBRMoNkQ5NjA2ODhCNkRFNzE0MUE3MjE4OThFOUUwNzNFMTY3 NzhGRUYzNTAeFw0yNDAxMzEwNzI5MTFaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YjlmNmM3LWYxN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkrq0PO6RY3DztNqn3+03z2htnbeQpkLaTRaS7gHJgPVY4+iwYqlQCPACRJSku XSoFeWj0UlVJ7mM8rb+3kl6k+qHpmKa0n3o5g2TIxgn0BYi6eXuTjFna+csWFCSw HEfkI7TONp1ky+ks2jjjVW+64fneR1Tt6lGtCswq7Qbtdmb8oMhhYEPZy3h7iwU8 OpngvKhDtIHxy1ueq9MJePETvvKK9tjoTLWnXTTHsYBdVprz7MBlLo5A+JcKTVAd 7+eFkYN2tyhjkWRGC8BfxUmk17cqvwy3rhu2PqzMIcW8ipEDH3lH18lWFP8l8xNH PFxuQHiK98JUcED8LJGSEusHAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUTIPoIDQ3 fGaOF9lp4mRNRAUeQ/QwHwYDVR0jBBgwFoAUbZYGiLbecUGnIYmOngc+FneP7zUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QThGLzYzQUNENUY0NTlE QjExRUVBNzM3RkUwQUM0RjlBRTAyL2JaWUdpTGJlY1VHbklZbU9uZ2MtRm5lUDd6 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpZR2lMYmVjVUduSVltT25nYy1GbmVQN3pVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0E4Ri82M0FDRDVGNDU5REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9BNjYzMjg1QTU5 REUxMUVFODVDRkNCMTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWc72jAPBAIAAjAJAwcAIAEN8btAMA0GCSqGSIb3DQEBCwUA A4IBAQA47BaDvFHRHMQAn38REwrL4Cm9Jrfl4a6DD5PYjKAq6qE82Y3/6qakR2+X IGEBnDUZGRfdDyVA/wfvsLmNbMjrJvUw7uCB1yEwmj2kZMuo0dFHIJYJT8RmOJVv ZnnQV8A6S0QKjt+aBGqtREPCw0SZdxc/Oujp6+jQw3pSqWrAiCd/5SunPkWQQwQY pC0JyLGOT40PhLFSviOUjsEfUKf2mftw2NCRCNdOB8XQaDJG582/fWqp1XtCum5i Ls0cDe1abCxzf8yK2xMhWuF6ORIUSb5X+rhoSEY5vICI9Wp/DsFsRziEarbk7qp6 LiGn1ZkePugaodPf4JrdNSE/ezfN -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:35 2024 by rpki-client on console-fra.rpki-client.org