$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/34C3AF9E01E711EDB2C82D0FC4F9AE02.roa File: 34C3AF9E01E711EDB2C82D0FC4F9AE02.roa (raw, json) Hash identifier: NLJYINXqPSTxYj64unfdQaagTngIjzCUufCjIBP7+Kk= Subject key identifier: 69:B9:99:0D:0E:9F:AD:24:49:BD:9A:AD:83:F7:E5:05:C7:3C:3B:47 Certificate issuer: /CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8 Certificate serial: 01D7 Authority key identifier: 46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/34C3AF9E01E711EDB2C82D0FC4F9AE02.roa Signing time: Wed 01 May 2024 05:07:26 +0000 ROA not before: Wed 01 May 2024 05:07:26 +0000 ROA not after: Thu 29 Aug 2024 00:00:00 +0000 asID: 17483 IP address blocks: 103.227.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.crl rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Jun 2024 04:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8 Validity Not Before: May 1 05:07:26 2024 GMT Not After : Aug 29 00:00:00 2024 GMT Subject: CN=6631ce0d-5520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:88:05:b9:64:d0:42:b8:7e:bf:f9:76:a4: b1:35:d7:b4:1a:96:69:71:6c:2e:41:c8:81:f2:ea: 97:f8:6f:bd:2d:57:0f:bb:d4:78:7c:29:da:d5:4f: b2:16:93:1d:c4:74:de:6f:8d:6a:56:64:a0:4b:48: b1:66:11:09:c8:3f:33:4b:a0:6c:ae:8f:2f:1d:fa: 01:70:17:ab:9b:a4:55:7b:74:af:36:aa:f5:b5:d0: 8c:51:5b:ce:23:df:75:9e:54:54:1d:4b:d0:3e:58: 3d:d1:6b:43:1d:ad:ee:84:8f:e6:9f:18:73:15:dd: d9:6e:a1:61:56:5b:a6:a7:38:74:40:dd:54:d4:9e: 7c:f6:d8:ee:dd:74:8d:1e:58:53:d9:d3:9f:9f:14: 0a:16:0a:95:0e:07:4e:e0:3e:a1:89:e0:28:e3:ac: 3b:3c:ac:be:14:c0:bb:eb:bb:e4:9a:c5:a4:4b:be: 95:61:9a:c5:3a:58:6f:35:fa:9c:24:28:27:9b:4e: 77:e6:c6:fa:2e:c2:77:2d:bd:be:74:e4:cd:16:c4: 68:df:a7:8c:99:8d:44:cc:6c:0a:74:fa:86:3e:32: f1:91:5a:1a:ae:d2:a9:22:f9:65:d7:0a:77:b4:00: 18:36:44:25:01:b3:45:20:4d:ce:6e:99:f0:7e:60: a0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B9:99:0D:0E:9F:AD:24:49:BD:9A:AD:83:F7:E5:05:C7:3C:3B:47 X509v3 Authority Key Identifier: keyid:46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/34C3AF9E01E711EDB2C82D0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.227.56.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:64:17:15:63:12:48:6b:3e:ef:30:6d:02:11:fb:12:04:fe: 90:fa:bb:ec:a3:c8:ad:c6:a1:19:88:a9:59:79:06:f1:63:cc: d9:74:6b:e6:a2:fa:c7:e6:3d:0b:9f:82:e6:52:61:f1:51:c3: b3:f4:84:4c:f9:2d:f2:20:2d:88:f7:e0:83:70:5f:ac:6f:4a: e7:e9:04:d3:cf:a7:69:38:8b:f2:c5:0a:36:e2:99:40:0b:d0: 08:57:7d:7b:b3:54:65:56:32:7c:ae:c4:be:fe:29:a5:2d:c6: 87:1a:fc:7c:5a:d8:e8:d6:d0:6c:51:75:72:26:fb:93:3f:59: 78:84:76:65:6c:7b:47:c2:34:6b:5a:fa:be:77:f0:26:11:f1: c5:ca:8d:cc:08:6f:2a:d0:7b:58:61:de:4c:6f:62:d6:ef:10: f8:64:83:0b:11:03:64:05:2d:80:b6:92:98:e8:bc:3c:d7:d7: ca:e9:39:98:1f:e0:13:ab:0c:a9:e4:29:e3:69:fe:cc:b5:20: 0f:ff:33:dc:d4:83:74:83:fc:d7:f2:3e:98:b3:b8:b9:68:62: be:81:c7:5e:63:29:b8:d9:5d:18:86:89:cc:4d:9e:d9:f6:bd: 65:18:97:d0:22:33:2b:09:74:36:13:5b:65:68:62:2e:ab:6c: 8a:5e:61:8e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGMzQxMTAvBgNVBAUTKDQ2MEZBOEZBRkZDOEJFNDA5RUMyQkRGODQ2MzcwNTg2 M0E0NUU4RTgwHhcNMjQwNTAxMDUwNzI2WhcNMjQwODI5MDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxY2UwZC01NTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0OIBblk0EK4fr/5dqSxNde0GpZpcWwuQciB8uqX+G+9LVcPu9R4fCna1U+y FpMdxHTeb41qVmSgS0ixZhEJyD8zS6Bsro8vHfoBcBerm6RVe3SvNqr1tdCMUVvO I991nlRUHUvQPlg90WtDHa3uhI/mnxhzFd3ZbqFhVlumpzh0QN1U1J589tju3XSN HlhT2dOfnxQKFgqVDgdO4D6hieAo46w7PKy+FMC767vkmsWkS76VYZrFOlhvNfqc JCgnm0535sb6LsJ3Lb2+dOTNFsRo36eMmY1EzGwKdPqGPjLxkVoartKpIvll1wp3 tAAYNkQlAbNFIE3ObpnwfmCgbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGm5mQ0O n60kSb2arYP35QXHPDtHMB8GA1UdIwQYMBaAFEYPqPr/yL5AnsK9+EY3BYY6Rejo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUYzNC9GOTYwRDFCNDAx RTMxMUVEODEyRTUwMEJDNEY5QUUwMi9SZy1vLXZfSXZrQ2V3cjM0UmpjRmhqcEY2 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JnLW8tdl9JdmtDZXdyMzRSamNGaGpwRjZPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFGMzQvRjk2MEQxQjQwMUUzMTFFRDgxMkU1MDBCQzRGOUFFMDIvMzRDM0FGOUUw MUU3MTFFREIyQzgyRDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn4zgwDQYJKoZIhvcNAQELBQADggEBAItkFxVjEkhrPu8w bQIR+xIE/pD6u+yjyK3GoRmIqVl5BvFjzNl0a+ai+sfmPQufguZSYfFRw7P0hEz5 LfIgLYj34INwX6xvSufpBNPPp2k4i/LFCjbimUAL0AhXfXuzVGVWMnyuxL7+KaUt xoca/Hxa2OjW0GxRdXIm+5M/WXiEdmVse0fCNGta+r538CYR8cXKjcwIbyrQe1hh 3kxvYtbvEPhkgwsRA2QFLYC2kpjovDzX18rpOZgf4BOrDKnkKeNp/sy1IA//M9zU g3SD/NfyPpizuLloYr6Bx15jKbjZXRiGicxNntn2vWUYl9AiMysJdDYTW2VoYi6r bIpeYY4= -----END CERTIFICATE-----Generated at Mon Jun 3 06:01:00 2024 by rpki-client on console-fra.rpki-client.org