$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/1CD34B6CEDFC11EE880F6F58C4F9AE02.roa File: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (raw, json) Hash identifier: puVUpX6BUEtmCkkNCTB3vhHnm2QcVSaiXOBe2bg8km8= Subject key identifier: 35:24:FE:37:27:2C:94:4F:2E:36:2B:63:BF:0B:F9:7C:BE:C0:D8:01 Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Certificate serial: 4C Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/1CD34B6CEDFC11EE880F6F58C4F9AE02.roa Signing time: Thu 09 May 2024 04:31:43 +0000 ROA not before: Thu 09 May 2024 04:31:43 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 142297 IP address blocks: 103.167.186.0/24 maxlen: 24 2001:df6:bb80::/48 maxlen: 48 2001:df6:bb80::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 08:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Validity Not Before: May 9 04:31:43 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=663c51ae-f001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:30:43:67:57:3f:c3:f4:3c:8e:7a:04:53: 86:a9:05:c4:8c:10:4b:13:83:c8:11:ae:02:f1:02: 3e:a0:f1:3a:0d:fe:d2:46:ea:6e:4a:7e:88:5e:5d: 5b:f9:ba:b9:89:bc:83:27:f4:1e:23:d5:cd:07:61: 99:b2:a0:e2:5e:38:74:1e:6c:6b:bb:c1:30:e7:d4: 2b:3b:71:e3:db:12:27:9d:7a:be:29:9d:3b:ac:37: da:29:17:16:78:12:b2:b7:1f:40:5d:91:89:25:40: b6:17:ee:10:bc:d1:81:cb:05:83:b2:14:48:d7:98: f5:36:25:00:76:86:54:f8:19:da:62:e5:d9:99:0b: b7:0e:fd:25:11:38:c4:24:20:b8:17:0f:67:68:dc: 83:c0:21:4d:ac:bf:50:1f:04:b7:32:97:29:a6:14: 32:9f:0c:f8:f9:75:37:a3:81:17:ce:eb:77:84:49: 82:61:e5:50:a9:78:3f:0e:71:d3:22:96:0b:49:58: 90:75:c3:1e:23:0c:f4:d3:9d:12:0a:83:c4:61:b3: da:6f:de:83:73:65:de:00:19:8c:6a:01:69:42:07: 94:dd:51:cd:b3:db:7e:9e:f5:37:2b:11:8d:2c:68: a8:da:13:69:ec:14:09:5d:7c:76:93:1a:95:af:c2: 19:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:24:FE:37:27:2C:94:4F:2E:36:2B:63:BF:0B:F9:7C:BE:C0:D8:01 X509v3 Authority Key Identifier: keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/1CD34B6CEDFC11EE880F6F58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.186.0/24 IPv6: 2001:df6:bb80::/48 Signature Algorithm: sha256WithRSAEncryption bc:84:d0:cd:3d:b8:11:fd:0c:76:d3:27:5e:96:37:6c:c1:c0: d2:55:64:26:1f:b2:d5:68:d0:5a:2d:93:cb:a1:f4:1e:c7:25: 23:89:73:20:6a:a9:4b:ff:83:fe:01:20:62:c0:f6:bd:64:53: 5c:61:7f:68:f0:4d:89:db:2d:97:4d:8e:b9:0d:b5:3e:e8:7f: ad:9a:86:ee:b8:a3:08:4c:46:ce:af:85:c3:4a:b9:da:31:12: 8c:06:46:40:09:5e:e1:fa:6a:41:aa:bb:4f:3d:75:12:40:d6: 9d:29:da:17:12:d7:fd:0b:8b:92:cf:9d:77:56:c7:7e:5f:28: 19:fc:27:2a:65:65:ec:bf:b0:41:67:d2:5a:ad:44:04:d7:45: 04:1d:3c:10:c6:02:d1:02:eb:36:6b:4e:10:33:91:cc:7d:bb: 19:bf:d9:fd:b4:2f:8c:71:9a:88:b4:7c:b1:b9:c6:4a:34:a8: 42:f1:12:3a:5c:6e:cd:d4:ea:3a:5b:3f:2f:4f:e9:0e:9d:56: fe:d0:af:42:fe:b2:6f:8c:2b:25:e5:81:ae:d3:9a:40:ed:ed: 7e:57:c7:20:b7:20:c2:b3:ff:e9:eb:d9:83:07:a8:cb:88:90: 21:b6:40:7b:18:f0:4d:83:3d:37:db:5c:ac:cb:96:46:ac:44: fa:b2:08:1e -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTEyRjExMC8GA1UEBRMoMUU1N0I0M0YwNDRENEFCQTgyMjJBNDA5Nzg2NjE0Mjgw QUE3MzlBMTAeFw0yNDA1MDkwNDMxNDNaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2M2M1MWFlLWYwMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt3TBDZ1c/w/Q8jnoEU4apBcSMEEsTg8gRrgLxAj6g8ToN/tJG6m5KfoheXVv5 urmJvIMn9B4j1c0HYZmyoOJeOHQebGu7wTDn1Cs7cePbEieder4pnTusN9opFxZ4 ErK3H0BdkYklQLYX7hC80YHLBYOyFEjXmPU2JQB2hlT4Gdpi5dmZC7cO/SUROMQk ILgXD2do3IPAIU2sv1AfBLcylymmFDKfDPj5dTejgRfO63eESYJh5VCpeD8OcdMi lgtJWJB1wx4jDPTTnRIKg8Rhs9pv3oNzZd4AGYxqAWlCB5TdUc2z236e9TcrEY0s aKjaE2nsFAldfHaTGpWvwhkRAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUNST+Nycs lE8uNitjvwv5fL7A2AEwHwYDVR0jBBgwFoAUHle0PwRNSrqCIqQJeGYUKAqnOaEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExMTJGLzk2NERDNjlBQkE4 RDExRUU4MjhBODk0NkM0RjlBRTAyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9h RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGxlMFB3Uk5TcnFDSXFRSmVHWVVLQXFuT2FFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTEyRi85NjREQzY5QUJBOEQxMUVFODI4QTg5NDZDNEY5QUUwMi8xQ0QzNEI2Q0VE RkMxMUVFODgwRjZGNThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAGenujAPBAIAAjAJAwcAIAEN9ruAMA0GCSqGSIb3DQEBCwUA A4IBAQC8hNDNPbgR/Qx20ydeljdswcDSVWQmH7LVaNBaLZPLofQexyUjiXMgaqlL /4P+ASBiwPa9ZFNcYX9o8E2J2y2XTY65DbU+6H+tmobuuKMITEbOr4XDSrnaMRKM BkZACV7h+mpBqrtPPXUSQNadKdoXEtf9C4uSz513Vsd+XygZ/CcqZWXsv7BBZ9Ja rUQE10UEHTwQxgLRAus2a04QM5HMfbsZv9n9tC+McZqItHyxucZKNKhC8RI6XG7N 1Oo6Wz8vT+kOnVb+0K9C/rJvjCsl5YGu05pA7e1+V8cgtyDCs//p69mDB6jLiJAh tkB7GPBNgz0321ysy5ZGrET6sgge -----END CERTIFICATE-----Generated at Mon Jun 17 09:40:47 2024 by rpki-client on console-fra.rpki-client.org