$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/166760A85CF511E9A1F5EE2BC4F9AE02.roa File: 166760A85CF511E9A1F5EE2BC4F9AE02.roa (raw, json) Hash identifier: F0bzFVB9DpzLQNhx6YUaeBah+c9CsHyAXG1cVMQs+ZU= Subject key identifier: C4:85:53:52:72:96:F6:4D:F6:7D:39:6F:7D:21:A0:6E:FD:11:DA:2B Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 0ED8 Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/166760A85CF511E9A1F5EE2BC4F9AE02.roa Signing time: Tue 02 Apr 2024 18:56:37 +0000 ROA not before: Tue 02 Apr 2024 18:56:37 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 17547 IP address blocks: 103.23.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3800 (0xed8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: Apr 2 18:56:37 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660c54e5-128d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:33:ae:6a:84:7a:86:8d:e7:fd:cc:e4:e8: 31:b8:e5:cf:b7:2c:1d:94:a4:63:e8:3a:26:46:18: 89:c9:09:8e:31:0d:e6:c1:e4:23:26:e9:34:23:76: a9:34:93:20:10:10:97:12:e5:6b:f6:0c:2a:ba:dc: 90:fc:97:65:98:aa:94:77:c0:bc:cf:e3:85:66:4b: 83:26:61:a7:a6:51:4c:60:ff:62:0c:b4:18:23:9a: d8:38:ad:36:b0:85:86:89:e3:c7:ac:db:e8:0d:d2: e5:56:f8:9c:ab:ed:56:f3:82:71:4e:3b:82:a9:a0: 44:52:1c:fc:ed:ad:cb:47:1e:6a:2b:e3:20:5d:f6: 85:74:2e:dc:a5:45:c0:ef:41:b1:58:0d:bf:67:e1: 25:8e:27:2a:15:81:e7:55:f1:a1:a8:b3:0e:fa:80: 71:51:ff:48:ae:75:21:bc:17:52:51:0b:87:12:13: 7b:b1:4a:b4:a5:a9:9a:2f:54:e4:61:50:3e:3d:80: 0d:00:12:ef:36:e5:59:a3:12:82:49:fc:82:10:a8: 44:41:3f:c8:cd:ae:28:7a:c9:67:de:af:2d:7c:f1: ce:76:4e:03:78:f1:2a:35:9a:8d:31:0e:24:fb:8f: 2c:cf:20:22:8b:c2:c4:9e:96:44:35:d1:2a:17:5f: 4f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:85:53:52:72:96:F6:4D:F6:7D:39:6F:7D:21:A0:6E:FD:11:DA:2B X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/166760A85CF511E9A1F5EE2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.76.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:60:68:d0:ba:22:53:24:4f:c1:26:d7:af:40:78:75:1d:d9: 73:5e:4d:62:67:72:ca:4a:7a:68:23:16:16:94:f1:32:8c:e2: dc:73:c6:99:a9:0c:0b:ce:c3:59:60:97:08:67:de:9f:8d:c4: 8b:9a:ed:27:91:e0:5e:47:01:ce:45:ed:01:81:8e:1a:fb:86: d6:13:22:7e:52:f0:d4:02:00:11:de:c2:7c:b1:b9:fb:51:5b: 31:27:22:f5:92:cc:56:d8:69:41:b3:d4:4f:33:88:02:cf:19: 2e:ec:02:7a:d4:36:7a:41:34:f2:93:95:9f:2d:25:78:ad:43: bc:b0:27:1d:b1:76:15:02:dc:10:f5:cd:d1:77:7f:a9:ef:33: c8:7a:b3:12:d5:25:7b:6b:28:7e:bd:fd:4e:2b:86:a6:8d:8a: c8:6c:55:74:f0:01:1a:0d:57:11:4c:7b:7d:e9:78:2a:f4:bb: 2a:24:57:3a:2c:88:dc:3e:f6:fc:70:f7:01:a9:23:f0:90:eb: 5a:f1:99:29:a3:ce:12:3d:a8:f4:b3:ac:f6:00:07:91:18:b4: 6e:40:18:21:03:4b:c6:f9:52:09:e5:32:3e:d4:8d:dc:b3:02: df:37:57:91:37:c5:9a:19:e2:46:ec:74:4c:bd:d2:bc:3a:56: 05:66:c7:c9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjQwNDAyMTg1NjM3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjNTRlNS0xMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwczrmqEeoaN5/3M5OgxuOXPtywdlKRj6DomRhiJyQmOMQ3mweQjJuk0I3ap NJMgEBCXEuVr9gwqutyQ/JdlmKqUd8C8z+OFZkuDJmGnplFMYP9iDLQYI5rYOK02 sIWGiePHrNvoDdLlVvicq+1W84JxTjuCqaBEUhz87a3LRx5qK+MgXfaFdC7cpUXA 70GxWA2/Z+EljicqFYHnVfGhqLMO+oBxUf9IrnUhvBdSUQuHEhN7sUq0pamaL1Tk YVA+PYANABLvNuVZoxKCSfyCEKhEQT/Iza4oesln3q8tfPHOdk4DePEqNZqNMQ4k +48szyAii8LEnpZENdEqF19PDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMSFU1Jy lvZN9n05b30hoG79EdorMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlFM0YvRDhDNTFBQ0E1Q0YzMTFFOTkyRkQ2MjJBQzRGOUFFMDIvMTY2NzYwQTg1 Q0Y1MTFFOUExRjVFRTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnF0wwDQYJKoZIhvcNAQELBQADggEBAJ5gaNC6IlMkT8Em 169AeHUd2XNeTWJncspKemgjFhaU8TKM4txzxpmpDAvOw1lglwhn3p+NxIua7SeR 4F5HAc5F7QGBjhr7htYTIn5S8NQCABHewnyxuftRWzEnIvWSzFbYaUGz1E8ziALP GS7sAnrUNnpBNPKTlZ8tJXitQ7ywJx2xdhUC3BD1zdF3f6nvM8h6sxLVJXtrKH69 /U4rhqaNishsVXTwARoNVxFMe33peCr0uyokVzosiNw+9vxw9wGpI/CQ61rxmSmj zhI9qPSzrPYAB5EYtG5AGCEDS8b5UgnlMj7UjdyzAt83V5E3xZoZ4kbsdEy90rw6 VgVmx8k= -----END CERTIFICATE-----Generated at Thu May 16 19:10:55 2024 by rpki-client on console-fra.rpki-client.org