$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/F9CEAB8A2A3111EFA2F4C557C4F9AE02.roa File: F9CEAB8A2A3111EFA2F4C557C4F9AE02.roa (raw, json) Hash identifier: IdKVNXqvdZLhmQS1Esa8g1uuLYU3QWPL5YOKqBM9Hr0= Subject key identifier: E6:9F:08:39:ED:FC:9F:49:A5:85:06:42:50:0B:01:40:9D:43:60:03 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0606 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/F9CEAB8A2A3111EFA2F4C557C4F9AE02.roa Signing time: Fri 14 Jun 2024 09:39:21 +0000 ROA not before: Fri 14 Jun 2024 09:39:21 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 132422 IP address blocks: 43.252.208.0/24 maxlen: 24 43.252.209.0/24 maxlen: 24 43.252.210.0/24 maxlen: 24 103.228.64.0/24 maxlen: 24 103.234.54.0/24 maxlen: 24 150.107.1.0/24 maxlen: 24 150.107.2.0/24 maxlen: 24 150.107.3.0/24 maxlen: 24 150.129.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jul 2024 22:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1542 (0x606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Jun 14 09:39:21 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=666c0fc8-7b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:44:d5:d9:68:d4:6a:90:4c:0a:8e:cd:31:f2: b1:64:23:07:50:5f:96:44:0f:9e:0d:72:cf:6a:c3: 26:9d:f0:de:19:44:2b:22:e2:49:de:2a:bd:64:ab: 4c:94:48:c3:69:8d:ef:9b:93:c6:45:28:dd:b6:c5: 3a:f9:3a:4c:5d:b5:07:47:21:22:c0:78:8b:38:1a: f6:64:aa:a7:44:3a:4a:b0:9d:b8:3a:55:90:35:84: 36:d8:c1:93:8d:7d:cf:4d:94:64:9a:c2:e6:96:de: 5a:2b:55:de:eb:4d:24:c7:a5:a1:67:ad:df:d4:49: 38:ab:71:93:87:4b:c6:ab:ab:fc:94:8b:40:8a:d2: 11:23:1c:30:96:74:ff:8a:ca:b1:7e:85:03:e3:bf: c2:9d:22:95:1d:df:6f:59:28:d9:5b:4a:99:63:d4: 90:46:a0:8e:d2:6d:b6:d6:b6:8c:05:78:f1:ad:d2: 42:3f:34:61:f9:92:f6:5c:35:65:d6:74:83:6c:53: f2:f7:3f:7c:b8:01:7d:ff:ad:96:d6:6d:f9:4b:fd: c6:31:22:ff:cf:b9:29:3a:79:4a:2b:fc:c9:71:27: fb:25:81:71:c9:92:75:69:95:c6:4e:7d:92:37:7b: 94:d5:a0:fe:26:25:9c:cb:c8:44:28:e0:a2:27:23: ac:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9F:08:39:ED:FC:9F:49:A5:85:06:42:50:0B:01:40:9D:43:60:03 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/F9CEAB8A2A3111EFA2F4C557C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.208.0-43.252.210.255 103.228.64.0/24 103.234.54.0/24 150.107.1.0-150.107.3.255 150.129.42.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:e0:3b:da:a5:32:22:12:04:28:76:9f:b9:d5:39:ff:f9:33: 48:8f:58:4c:26:2a:f0:75:94:7c:1e:85:22:85:a4:4a:27:5c: 2d:88:1e:33:7d:c2:09:05:e9:5c:76:b4:21:9e:34:9e:ec:70: 6f:72:17:59:42:df:21:f7:79:98:6e:a7:0b:b8:22:3e:0d:3b: 25:f0:75:46:c1:97:57:c0:41:34:8c:0f:be:2a:60:74:ca:8a: e9:3a:74:e9:db:88:1d:4c:96:93:e5:a2:75:47:2b:f4:bf:9d: 1c:67:23:66:2f:69:9a:a0:0a:16:47:c8:53:97:7a:31:c5:64: 11:d1:f9:6d:56:9e:0a:a4:cf:00:8d:8a:c7:4a:54:d3:4a:97: 40:44:84:ce:fa:c5:a5:e1:25:2f:32:06:01:68:3d:86:17:ef: d3:40:b4:0e:c3:4d:e1:c8:b4:83:a8:1d:ac:80:e2:73:96:7f: c6:2b:7d:0c:01:3d:d8:fb:05:49:81:7d:65:23:b8:92:5f:00: df:5c:3e:a5:b3:68:c5:00:dd:2e:b7:ad:1d:95:0a:be:db:1d: b8:bc:e2:09:86:21:52:c8:b3:4e:59:4a:40:db:79:4b:71:c4: ca:1e:be:68:fb:41:8c:08:81:09:c5:fd:e7:0e:aa:35:cf:f7: a7:0f:45:c0 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjQwNjE0MDkzOTIxWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjZjMGZjOC03YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsETV2WjUapBMCo7NMfKxZCMHUF+WRA+eDXLPasMmnfDeGUQrIuJJ3iq9ZKtM lEjDaY3vm5PGRSjdtsU6+TpMXbUHRyEiwHiLOBr2ZKqnRDpKsJ24OlWQNYQ22MGT jX3PTZRkmsLmlt5aK1Xe600kx6WhZ63f1Ek4q3GTh0vGq6v8lItAitIRIxwwlnT/ isqxfoUD47/CnSKVHd9vWSjZW0qZY9SQRqCO0m221raMBXjxrdJCPzRh+ZL2XDVl 1nSDbFPy9z98uAF9/62W1m35S/3GMSL/z7kpOnlKK/zJcSf7JYFxyZJ1aZXGTn2S N3uU1aD+JiWcy8hEKOCiJyOstQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFOafCDnt /J9JpYUGQlALAUCdQ2ADMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvRjlDRUFCOEEy QTMxMTFFRkEyRjRDNTU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MDQEAgABMC4wDAMEBCv80AMEACv80gMEAGfkQAMEAGfqNjAMAwQAlmsBAwQC lmsAAwQAloEqMA0GCSqGSIb3DQEBCwUAA4IBAQBK4DvapTIiEgQodp+51Tn/+TNI j1hMJirwdZR8HoUihaRKJ1wtiB4zfcIJBelcdrQhnjSe7HBvchdZQt8h93mYbqcL uCI+DTsl8HVGwZdXwEE0jA++KmB0yorpOnTp24gdTJaT5aJ1Ryv0v50cZyNmL2ma oAoWR8hTl3oxxWQR0fltVp4KpM8AjYrHSlTTSpdARITO+sWl4SUvMgYBaD2GF+/T QLQOw03hyLSDqB2sgOJzln/GK30MAT3Y+wVJgX1lI7iSXwDfXD6ls2jFAN0ut60d lQq+2x24vOIJhiFSyLNOWUpA23lLccTKHr5o+0GMCIEJxf3nDqo1z/enD0XA -----END CERTIFICATE-----Generated at Sat Jun 29 03:32:20 2024 by rpki-client on console-ams.rpki-client.org