$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/6B4FDE1AD60D11E9A0539B2EC4F9AE02.roa File: 6B4FDE1AD60D11E9A0539B2EC4F9AE02.roa (raw, json) Hash identifier: h5klLkFfmit+V2nAjXxznhfu6hhOQ90mqTaqjDoyur4= Subject key identifier: F8:02:4A:A9:DB:B7:8C:66:99:DF:37:DE:63:E9:05:5D:84:35:46:E1 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2832 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/6B4FDE1AD60D11E9A0539B2EC4F9AE02.roa Signing time: Thu 28 Dec 2023 16:03:20 +0000 ROA not before: Thu 28 Dec 2023 16:03:20 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 45254 IP address blocks: 110.49.97.0/24 maxlen: 24 110.49.107.0/24 maxlen: 24 110.49.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10290 (0x2832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Dec 28 16:03:20 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658d9c47-1f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:f5:7a:88:23:34:bb:87:3a:a3:75:ed:78: 2e:0f:dc:5a:b2:91:c2:92:11:8c:af:c6:62:d1:b0: ab:f0:1e:da:31:fa:f8:f6:a4:79:b8:71:12:9b:46: 5b:7a:5b:fb:0b:dc:63:af:93:79:74:8f:b4:17:59: db:69:69:8d:b1:e4:71:fd:67:48:5d:c9:b4:8a:f2: 3e:f1:5b:93:5f:49:80:05:8d:21:9f:da:dc:26:de: c5:18:e4:d7:c4:20:41:c4:13:ef:51:c0:db:54:2c: 69:f0:f8:d4:0f:1b:07:b0:c7:2e:d4:e5:56:49:d0: 1c:36:0e:14:47:8b:b5:0c:7a:5e:0a:df:1a:b3:ae: a0:ba:5e:f1:e3:b1:eb:e7:d1:d9:3f:d5:4d:2b:08: ed:58:be:eb:4e:d2:bb:ea:70:17:d7:af:32:77:f7: 8a:af:12:53:61:c1:4f:43:36:8d:fc:3e:6b:ad:da: 68:f2:b4:c9:b1:96:11:84:7b:11:7a:94:b1:9f:69: f2:5c:fd:d6:5b:05:90:29:74:34:a2:47:3c:f1:62: b3:cf:b7:38:69:ad:88:ea:46:9d:da:8b:4f:88:13: 07:e4:98:ed:57:b0:59:30:fb:a2:0b:1f:47:77:1e: 5f:30:28:21:d9:c2:f2:41:af:b7:90:22:3a:72:5c: b4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:02:4A:A9:DB:B7:8C:66:99:DF:37:DE:63:E9:05:5D:84:35:46:E1 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/6B4FDE1AD60D11E9A0539B2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.49.97.0/24 110.49.107.0/24 110.49.111.0/24 Signature Algorithm: sha256WithRSAEncryption 27:9e:5f:e9:0d:0d:bd:f0:40:6b:32:93:3f:87:72:68:5e:21: 6f:01:2c:e6:af:4c:2b:47:9e:0b:94:81:68:24:d0:d8:93:b7: 0f:0e:8e:b8:47:e5:71:f7:ad:11:bb:07:99:13:29:21:9c:17: ce:af:66:6b:9c:3c:fe:7d:a5:1c:26:6c:47:cb:5d:74:b6:e9: 65:da:ef:94:47:cb:77:92:9b:1f:df:48:e2:50:bd:bc:76:68: cb:e2:27:c9:f4:5e:d2:58:c3:e8:7c:94:a2:4a:99:c0:24:5c: ff:06:7b:af:86:88:79:3d:ec:9e:b3:5d:0b:97:e2:9d:25:f4: e9:b5:44:2e:41:cb:58:df:81:3e:bb:39:9c:9a:00:05:4d:9c: 48:4e:29:ca:95:fd:0f:33:d9:11:b4:3c:67:ec:ca:1f:37:f7: 48:1f:23:73:ad:e2:e3:29:76:9d:bc:57:16:30:fe:98:4a:5f: 02:09:0a:39:33:14:c0:e9:1e:b1:9c:61:48:3a:17:c8:20:8e: ee:5c:e5:ee:fe:b4:d9:a8:ed:ec:ce:38:fe:d4:0b:01:ca:c0: 27:3f:8f:8e:d0:1e:f5:4b:30:35:05:3e:d3:18:9f:44:8a:5d: 6b:0a:a9:f3:7b:9f:79:b1:ce:e0:80:e9:b2:39:16:49:9a:3b: 59:b7:9b:f0 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICKDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjMxMjI4MTYwMzIwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkOWM0Ny0xZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcz1eogjNLuHOqN17XguD9xaspHCkhGMr8Zi0bCr8B7aMfr49qR5uHESm0Zb elv7C9xjr5N5dI+0F1nbaWmNseRx/WdIXcm0ivI+8VuTX0mABY0hn9rcJt7FGOTX xCBBxBPvUcDbVCxp8PjUDxsHsMcu1OVWSdAcNg4UR4u1DHpeCt8as66gul7x47Hr 59HZP9VNKwjtWL7rTtK76nAX168yd/eKrxJTYcFPQzaN/D5rrdpo8rTJsZYRhHsR epSxn2nyXP3WWwWQKXQ0okc88WKzz7c4aa2I6kad2otPiBMH5JjtV7BZMPuiCx9H dx5fMCgh2cLyQa+3kCI6cly0CQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPgCSqnb t4xmmd833mPpBV2ENUbhMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvNkI0RkRFMUFE NjBEMTFFOUEwNTM5QjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABuMWEDBABuMWsDBABuMW8wDQYJKoZIhvcNAQELBQADggEB ACeeX+kNDb3wQGsykz+HcmheIW8BLOavTCtHnguUgWgk0NiTtw8OjrhH5XH3rRG7 B5kTKSGcF86vZmucPP59pRwmbEfLXXS26WXa75RHy3eSmx/fSOJQvbx2aMviJ8n0 XtJYw+h8lKJKmcAkXP8Ge6+GiHk97J6zXQuX4p0l9Om1RC5By1jfgT67OZyaAAVN nEhOKcqV/Q8z2RG0PGfsyh8390gfI3Ot4uMpdp28VxYw/phKXwIJCjkzFMDpHrGc YUg6F8ggju5c5e7+tNmo7ezOOP7UCwHKwCc/j47QHvVLMDUFPtMYn0SKXWsKqfN7 n3mxzuCA6bI5FkmaO1m3m/A= -----END CERTIFICATE-----Generated at Fri May 31 20:33:57 2024 by rpki-client on console-ams.rpki-client.org