$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/B16C9766F97711EEB642002CC4F9AE02.roa File: B16C9766F97711EEB642002CC4F9AE02.roa (raw, json) Hash identifier: QK/3IPLlLHpJzMAh9LEu9wBTyMjDq5axIgBNT1XfyTo= Subject key identifier: 50:6B:B2:28:79:D6:D9:2D:F5:D5:C0:59:35:C2:D9:B6:56:30:D5:AA Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0926 Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/B16C9766F97711EEB642002CC4F9AE02.roa Signing time: Sat 13 Apr 2024 09:24:57 +0000 ROA not before: Sat 13 Apr 2024 09:24:57 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 7489 IP address blocks: 103.207.68.0/22 maxlen: 22 210.16.120.0/23 maxlen: 24 210.16.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2342 (0x926) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Apr 13 09:24:57 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=661a4f69-180f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:9a:93:88:c5:eb:f0:9b:f9:dc:6d:00:9b: fd:2b:e5:69:7a:08:a1:f8:b4:70:f5:1f:57:62:cc: de:4d:1d:29:0d:1e:40:f9:76:d4:64:ff:fa:7f:2e: 22:e8:d9:19:6c:b8:a4:5c:bc:07:d1:c4:73:e3:5b: 4e:ec:c6:85:4d:3c:89:b2:36:5a:ba:ed:c2:f5:7b: 39:2e:84:cc:6a:ec:ec:d9:e8:62:44:a0:cb:ca:c2: b5:09:57:46:16:9f:c0:d6:70:fa:93:5f:94:30:47: 51:d3:b7:7d:9a:0a:84:80:6e:4e:14:9c:b4:5e:d5: aa:dd:c3:60:7b:10:68:97:8f:9f:90:08:3c:03:8a: db:36:7d:71:a0:56:8d:8c:8a:cc:c7:71:14:82:6c: 34:50:b8:5b:52:3d:c2:5d:ae:38:18:ee:76:5d:9c: 67:fa:f7:61:6f:64:4c:07:aa:43:5f:25:bb:3b:e1: 3f:21:51:51:63:48:c2:ff:ec:27:68:a1:28:15:ce: 27:1a:35:09:b1:19:58:4c:af:d0:ec:7b:36:5b:37: b9:b2:4d:75:47:3d:c4:ca:64:5c:c9:28:91:d2:08: 57:f1:8b:a5:b5:e0:14:59:32:a4:4e:14:0c:05:49: 6a:07:2a:0d:d5:ed:a8:89:4c:f2:aa:79:82:e0:c9: 00:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6B:B2:28:79:D6:D9:2D:F5:D5:C0:59:35:C2:D9:B6:56:30:D5:AA X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/B16C9766F97711EEB642002CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.207.68.0/22 210.16.120.0/23 210.16.123.0/24 Signature Algorithm: sha256WithRSAEncryption 40:ad:36:67:d9:e9:77:ee:67:51:cc:6c:fe:4b:7d:4d:e7:7e: c1:bc:b8:fa:79:df:5c:2f:e1:0e:18:b2:53:ef:ed:31:16:be: dd:e4:bb:e7:fd:59:4f:0e:f3:8a:19:1b:be:f4:e5:fd:1f:67: 5e:ee:15:a5:f6:7d:17:a3:95:e2:a4:61:01:89:18:b5:eb:be: 29:a2:36:e8:7b:0b:5a:a7:53:d1:3b:b1:54:f2:cc:98:15:19: f0:77:d3:7f:03:00:e4:e8:ef:3e:cd:55:d9:48:e0:36:6e:ad: 80:b4:ce:12:8b:2f:55:a6:6a:95:30:3b:eb:5a:5d:de:cc:90: 02:1b:18:6f:4e:fb:a1:09:b5:35:91:d8:2a:00:2c:89:01:c0: 80:f7:1d:11:92:0f:20:c5:f1:3e:1e:6f:cd:96:e7:0f:a7:5b: 69:22:da:3e:1a:cd:df:e9:2b:a1:d0:e7:42:10:97:f5:a8:4c: 7e:f8:34:55:38:ef:46:79:f7:3b:46:27:73:c7:dd:42:af:57: 3a:5b:fa:fd:0e:ed:8c:80:bb:6c:1c:4f:79:df:0b:69:43:05: 4f:a3:cf:51:88:9d:7a:56:83:c7:b8:60:da:e7:84:6c:f5:5c: c8:a3:7c:b3:84:5d:f3:e8:67:18:4f:d8:10:af:2e:4b:36:33: e4:fb:1f:e3 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjQwNDEzMDkyNDU3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjFhNGY2OS0xODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSSak4jF6/Cb+dxtAJv9K+Vpegih+LRw9R9XYszeTR0pDR5A+XbUZP/6fy4i 6NkZbLikXLwH0cRz41tO7MaFTTyJsjZauu3C9Xs5LoTMauzs2ehiRKDLysK1CVdG Fp/A1nD6k1+UMEdR07d9mgqEgG5OFJy0XtWq3cNgexBol4+fkAg8A4rbNn1xoFaN jIrMx3EUgmw0ULhbUj3CXa44GO52XZxn+vdhb2RMB6pDXyW7O+E/IVFRY0jC/+wn aKEoFc4nGjUJsRlYTK/Q7Hs2Wze5sk11Rz3EymRcySiR0ghX8YulteAUWTKkThQM BUlqByoN1e2oiUzyqnmC4MkADQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFFBrsih5 1tkt9dXAWTXC2bZWMNWqMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdFNDUvMDZDODU2M0M4M0Q5MTFFQUEzMTI0RjVDQzRGOUFFMDIvQjE2Qzk3NjZG OTc3MTFFRUI2NDIwMDJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnz0QDBAHSEHgDBADSEHswDQYJKoZIhvcNAQELBQADggEB AECtNmfZ6XfuZ1HMbP5LfU3nfsG8uPp531wv4Q4YslPv7TEWvt3ku+f9WU8O84oZ G7705f0fZ17uFaX2fRejleKkYQGJGLXrvimiNuh7C1qnU9E7sVTyzJgVGfB3038D AOTo7z7NVdlI4DZurYC0zhKLL1WmapUwO+taXd7MkAIbGG9O+6EJtTWR2CoALIkB wID3HRGSDyDF8T4eb82W5w+nW2ki2j4azd/pK6HQ50IQl/WoTH74NFU470Z59ztG J3PH3UKvVzpb+v0O7YyAu2wcT3nfC2lDBU+jz1GInXpWg8e4YNrnhGz1XMijfLOE XfPoZxhP2BCvLks2M+T7H+M= -----END CERTIFICATE-----Generated at Thu May 2 22:28:58 2024 by rpki-client on console-ams.rpki-client.org