$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/3DCC89FAC6CB11ECB185E43EC4F9AE02.roa File: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (raw, json) Hash identifier: DbMlrA2mgcFyuLE7QB39mPODBO4SPCFwB1pU2tz91NQ= Subject key identifier: 31:4E:4E:BD:00:D9:F2:D7:17:36:20:41:B4:3C:39:46:7C:45:A4:C7 Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Certificate serial: 0200 Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/3DCC89FAC6CB11ECB185E43EC4F9AE02.roa Signing time: Mon 09 Oct 2023 02:54:38 +0000 ROA not before: Mon 09 Oct 2023 02:54:38 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 132742 IP address blocks: 43.243.208.0/22 maxlen: 24 103.39.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Validity Not Before: Oct 9 02:54:38 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65236b6e-1294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:11:4c:a8:9d:a4:22:cb:6d:17:80:98:20: fc:d7:9b:14:22:05:62:7e:bf:f7:c9:6b:f6:35:9f: 77:6f:f2:e2:9b:f3:fb:8c:82:48:36:34:47:91:05: 65:c2:0f:e6:d3:1a:1d:cc:48:85:ec:65:6e:8e:1d: 4f:f3:8a:d5:4e:51:ce:5d:57:27:eb:dc:28:49:79: 83:fb:77:b9:0d:2d:ad:3e:af:30:9f:96:dd:8a:85: 4e:4c:c3:9f:d2:c9:1b:4f:9d:a5:15:61:53:75:8c: 72:ef:df:8c:b5:b0:5c:9e:95:5c:f6:bc:f4:f3:70: ed:93:d3:eb:27:01:6a:0c:eb:a5:32:f9:a3:a7:d2: 2d:f8:9d:c8:8a:ce:ef:5c:82:95:3a:08:cd:a9:ef: d3:07:67:b8:7c:2c:5e:54:86:fd:88:8e:53:57:06: 30:87:a7:a9:1c:d1:22:27:f2:79:04:c0:50:28:05: 53:2a:0e:b9:52:90:2d:27:56:ad:b2:da:75:d0:53: 78:1f:89:a0:eb:00:6f:67:e6:0e:4c:38:48:c0:24: 99:48:d1:b5:48:db:d7:37:3f:ac:1f:6e:eb:15:91: 9b:20:d9:9f:b3:31:e4:d8:a8:7c:71:07:9e:22:eb: 95:d4:ff:94:fa:6f:63:e2:00:fd:6c:3f:a2:a5:17: 16:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4E:4E:BD:00:D9:F2:D7:17:36:20:41:B4:3C:39:46:7C:45:A4:C7 X509v3 Authority Key Identifier: keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/3DCC89FAC6CB11ECB185E43EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.208.0/22 103.39.24.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:23:b7:cf:8d:34:6a:f4:14:f5:75:4f:9f:f5:58:77:39:77: 9c:8a:e1:87:a3:52:83:7d:e3:da:2f:ea:eb:63:bb:cb:58:86: 66:3d:4d:06:3e:71:14:ed:bd:87:b6:bd:f5:59:60:94:7f:29: 16:4d:01:5d:40:52:66:36:29:1a:37:69:5a:87:c7:93:36:b3: f0:e6:65:a1:c4:14:18:8e:68:52:a2:34:50:7d:e5:70:fd:0d: 58:d5:fd:6d:86:d0:74:ba:f6:7d:1f:b5:74:cf:41:f2:27:d2: 11:10:ed:5f:cc:7e:d4:5e:c3:57:e1:c3:75:22:a8:7d:7c:0f: e0:72:dc:f7:d2:85:a9:ad:9e:25:60:e1:6a:f6:90:6a:78:c2: c5:6a:2e:ff:c4:08:93:b1:d8:7a:67:8e:5b:df:fc:f8:fe:63: c3:50:88:42:7f:eb:f3:2f:55:df:f7:68:34:be:20:c4:b5:06: 12:f3:f5:db:b0:17:33:ac:27:04:98:7b:f5:5c:61:48:91:fc: fe:8c:ce:8f:5c:5b:c2:66:5b:03:3a:8f:74:2b:c6:49:28:ac: 9f:ae:03:f1:5a:0b:27:84:ac:be:29:26:7f:2d:e2:cf:d1:cc: ba:66:fc:52:7b:58:30:49:0a:05:e9:01:31:46:7a:83:74:82: 10:a3:86:32 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4 NzM0MkI3MjkwHhcNMjMxMDA5MDI1NDM4WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTIzNmI2ZS0xMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRgRTKidpCLLbReAmCD815sUIgVifr/3yWv2NZ93b/Lim/P7jIJINjRHkQVl wg/m0xodzEiF7GVujh1P84rVTlHOXVcn69woSXmD+3e5DS2tPq8wn5bdioVOTMOf 0skbT52lFWFTdYxy79+MtbBcnpVc9rz083Dtk9PrJwFqDOulMvmjp9It+J3Iis7v XIKVOgjNqe/TB2e4fCxeVIb9iI5TVwYwh6epHNEiJ/J5BMBQKAVTKg65UpAtJ1at stp10FN4H4mg6wBvZ+YOTDhIwCSZSNG1SNvXNz+sH27rFZGbINmfszHk2Kh8cQee IuuV1P+U+m9j4gD9bD+ipRcWswIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDFOTr0A 2fLXFzYgQbQ8OUZ8RaTHMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2 MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUEzNUUvRkE5Mjc3ODJDNjAwMTFFQzlEQTc0MDBGQzRGOUFFMDIvM0RDQzg5RkFD NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr89ADBAJnJxgwDQYJKoZIhvcNAQELBQADggEBAJ4jt8+N NGr0FPV1T5/1WHc5d5yK4YejUoN949ov6utju8tYhmY9TQY+cRTtvYe2vfVZYJR/ KRZNAV1AUmY2KRo3aVqHx5M2s/DmZaHEFBiOaFKiNFB95XD9DVjV/W2G0HS69n0f tXTPQfIn0hEQ7V/MftRew1fhw3UiqH18D+By3PfShamtniVg4Wr2kGp4wsVqLv/E CJOx2Hpnjlvf/Pj+Y8NQiEJ/6/MvVd/3aDS+IMS1BhLz9duwFzOsJwSYe/VcYUiR /P6Mzo9cW8JmWwM6j3QrxkkorJ+uA/FaCyeErL4pJn8t4s/RzLpm/FJ7WDBJCgXp ATFGeoN0ghCjhjI= -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:10 2024 by rpki-client on console-ams.rpki-client.org