$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa File: 8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa (raw, json) Hash identifier: 7432gBeXTm7SSnceAfVds2tUmmHfUv6NTFiLUykJYZ8= Subject key identifier: 88:46:63:DE:8B:1E:10:5C:2E:0D:1A:10:DE:9F:92:B3:72:98:2F:17 Certificate issuer: /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Certificate serial: 0710 Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa Signing time: Sat 15 Jun 2024 00:02:23 +0000 ROA not before: Sat 15 Jun 2024 00:02:23 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 23862 IP address blocks: 103.53.58.0/24 maxlen: 24 103.53.59.0/24 maxlen: 24 202.92.128.0/24 maxlen: 24 202.92.129.0/24 maxlen: 24 202.92.130.0/24 maxlen: 24 202.92.131.0/24 maxlen: 24 202.92.132.0/24 maxlen: 24 202.92.134.0/24 maxlen: 24 202.92.135.0/24 maxlen: 24 202.92.136.0/22 maxlen: 22 202.92.136.0/24 maxlen: 24 202.92.141.0/24 maxlen: 24 202.92.159.0/24 maxlen: 24 2400:b000:100::/48 maxlen: 48 2400:b000:c0e::/48 maxlen: 48 2400:b000:eee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1808 (0x710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Validity Not Before: Jun 15 00:02:23 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=666cda0e-1cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:6f:a3:32:6d:89:c7:5f:31:ce:46:4e:bd: e5:ab:96:e2:0d:a7:58:fa:a4:e3:24:72:61:9a:9c: 33:d9:94:43:0d:58:54:51:ea:0a:ab:4d:ae:ec:6e: 28:75:e7:fa:11:7a:60:ff:30:69:24:d0:8a:75:b6: 20:33:b1:dc:d1:93:f0:26:10:27:15:3a:79:b6:7b: 5b:44:f0:c9:51:93:1f:94:15:fe:ad:53:c8:bd:dd: cf:e8:ab:05:6d:51:42:8d:04:c1:bf:86:fb:a8:b2: 46:9e:9d:9b:16:e2:e8:a3:29:d7:cd:f8:de:cd:44: 12:9a:11:e8:0c:1e:2f:15:b1:e6:3a:28:6c:50:5b: b7:ea:a0:c1:b2:ae:ca:9d:c6:5b:0a:7f:12:5d:02: 8d:6f:f7:59:12:dc:34:5e:35:dd:d9:45:50:5a:6e: 39:15:b4:1f:61:5c:a0:3e:28:89:85:08:26:ce:e9: be:59:42:40:2a:c1:09:67:cb:4a:f7:e3:da:03:2f: 94:2f:ad:e1:a4:a7:fb:9f:7a:ae:df:c7:72:65:42: f1:3c:5b:8c:2b:21:19:0b:d4:04:40:2b:7d:37:79: d0:13:d7:7d:a2:62:19:00:26:5e:39:7b:24:3d:42: a9:ba:69:8a:3b:a1:cb:d5:57:8f:e4:39:7d:ca:7a: 6e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:46:63:DE:8B:1E:10:5C:2E:0D:1A:10:DE:9F:92:B3:72:98:2F:17 X509v3 Authority Key Identifier: keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.53.58.0/23 202.92.128.0-202.92.132.255 202.92.134.0-202.92.139.255 202.92.141.0/24 202.92.159.0/24 IPv6: 2400:b000:100::/48 2400:b000:c0e::/48 2400:b000:eee::/48 Signature Algorithm: sha256WithRSAEncryption 8e:85:15:49:8c:de:38:58:c2:52:a1:c5:a4:45:75:72:b0:98: 11:4b:be:5d:53:cc:15:aa:92:86:ba:01:97:68:fb:d6:41:c9: 1b:9a:1e:da:46:06:f7:6e:bc:3c:0f:0e:8a:81:74:07:de:a0: 68:4e:cb:de:cd:71:aa:38:bb:e4:d4:74:92:24:b2:f8:09:0e: 3f:6b:07:f1:73:7a:6a:6e:74:1b:d0:d2:8e:30:ec:37:e5:f8: 9c:e6:75:20:c1:38:35:b0:8f:49:1a:08:78:e3:29:c8:30:a0: 18:9b:e2:98:26:9c:22:05:8b:d0:83:31:8b:93:f8:02:00:90: 16:fb:30:08:9c:3b:f0:36:e4:ca:cd:bd:66:d2:8c:47:75:6a: b7:d2:61:f8:6b:e9:2d:5e:7e:49:58:e5:ce:33:1d:8f:68:8f: 88:92:de:6a:13:76:2b:85:51:40:b2:0d:a8:83:96:b1:cc:6c: 97:27:ef:a2:93:c7:57:7b:3e:d1:4c:79:c3:d5:47:06:d9:6d: ae:ba:b2:0e:90:65:81:1b:1d:43:17:d9:6b:15:82:0e:58:f0: ed:c6:ee:7a:dd:6e:06:6e:3c:4c:cf:cd:e8:c0:0a:2b:b9:be: 7f:28:24:ad:9b:d4:f4:22:67:5f:ef:73:ee:98:ca:e5:3a:be: 39:5b:70:cf -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MTgxMTAvBgNVBAUTKDc2MTc0NjI1RTgxNjMyRDM4REY2MkE4M0I1N0IwM0JB Mjg4N0U2RjUwHhcNMjQwNjE1MDAwMjIzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjZjZGEwZS0xY2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMBvozJticdfMc5GTr3lq5biDadY+qTjJHJhmpwz2ZRDDVhUUeoKq02u7G4o def6EXpg/zBpJNCKdbYgM7Hc0ZPwJhAnFTp5tntbRPDJUZMflBX+rVPIvd3P6KsF bVFCjQTBv4b7qLJGnp2bFuLooynXzfjezUQSmhHoDB4vFbHmOihsUFu36qDBsq7K ncZbCn8SXQKNb/dZEtw0XjXd2UVQWm45FbQfYVygPiiJhQgmzum+WUJAKsEJZ8tK 9+PaAy+UL63hpKf7n3qu38dyZULxPFuMKyEZC9QEQCt9N3nQE9d9omIZACZeOXsk PUKpummKO6HL1VeP5Dl9ynpuSwIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFIhGY96L HhBcLg0aEN6fkrNymC8XMB8GA1UdIwQYMBaAFHYXRiXoFjLTjfYqg7V7A7ooh+b1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcxOC85MjgzRURFRTBF OTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010T045aXFEdFhzRHVpaUg1 dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoZEdKZWdXTXRPTjlpcUR0WHNEdWlpSDV2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTA3MTgvOTI4M0VERUUwRTk0MTFFQjk2NjlFMTMzQzRGOUFFMDIvODQzM0ZGNkEw RTk3MTFFQjlBNkMyQjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwagYIKwYBBQUHAQcBAf8E WzBZMDQEAgABMC4DBAFnNTowDAMEB8pcgAMEAMpchDAMAwQBylyGAwQCylyIAwQA ylyNAwQAylyfMCEEAgACMBsDBwAkALAAAQADBwAkALAADA4DBwAkALAADu4wDQYJ KoZIhvcNAQELBQADggEBAI6FFUmM3jhYwlKhxaRFdXKwmBFLvl1TzBWqkoa6AZdo +9ZByRuaHtpGBvduvDwPDoqBdAfeoGhOy97Ncao4u+TUdJIksvgJDj9rB/Fzempu dBvQ0o4w7Dfl+JzmdSDBODWwj0kaCHjjKcgwoBib4pgmnCIFi9CDMYuT+AIAkBb7 MAicO/A25MrNvWbSjEd1arfSYfhr6S1efklY5c4zHY9oj4iS3moTdiuFUUCyDaiD lrHMbJcn76KTx1d7PtFMecPVRwbZba66sg6QZYEbHUMX2WsVgg5Y8O3G7nrdbgZu PEzPzejACiu5vn8oJK2b1PQiZ1/vc+6YyuU6vjlbcM8= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:20 2024 by rpki-client on console-ams.rpki-client.org