$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/3FE30722468C11EE9462EC3AC4F9AE02.roa File: 3FE30722468C11EE9462EC3AC4F9AE02.roa (raw, json) Hash identifier: TXMIcjXfw89pBV7O6xn2ijXwqndTJdGmo4dL+p+wL7A= Subject key identifier: D2:3B:10:5C:F7:13:6E:89:A1:25:2B:9F:32:4E:D1:2D:29:A0:52:7F Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 02 Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/3FE30722468C11EE9462EC3AC4F9AE02.roa Signing time: Tue 29 Aug 2023 16:51:08 +0000 ROA not before: Tue 29 Aug 2023 16:51:08 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 396982 IP address blocks: 103.248.10.0/24 maxlen: 24 103.248.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Aug 29 16:51:08 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ee21fb-0d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9c:bf:8b:32:79:85:ca:f9:38:84:78:4d:22: ba:28:cf:ff:79:5c:9a:9d:b8:21:3a:f7:9f:0c:0f: 3f:4e:19:73:52:eb:58:8f:3a:3a:84:00:cf:11:41: 3a:6c:39:23:33:ed:29:87:4b:00:69:0c:d5:21:62: e1:7a:43:77:20:72:b7:4e:da:8d:62:f0:2b:ee:a0: 2c:8c:e6:93:cb:04:7f:0b:7a:03:4d:df:08:0e:78: fb:09:8d:40:5b:e6:66:21:0c:28:c6:6d:a8:3b:76: 47:4a:10:37:68:97:6f:41:27:d2:80:97:0c:f5:5a: 4e:ad:cf:52:b8:60:75:f0:e0:ba:6d:16:80:d8:3f: f4:25:42:eb:d0:74:8a:f5:1e:3d:24:09:e6:ef:03: ec:6a:4c:a6:84:49:92:c5:db:02:fa:4f:a7:84:c0: 72:bb:f3:03:1d:bc:33:f4:d9:b1:e9:30:c4:9c:8c: 16:8d:62:79:e2:54:13:b0:7e:a2:bf:56:c7:94:c7: a8:f3:d5:a5:11:21:ec:f1:79:5a:3a:bd:7a:32:68: d3:f9:a5:47:90:4b:f8:82:7b:24:df:2a:b5:a2:96: 1d:e8:4a:e9:0c:f3:13:b3:67:ef:48:3b:1f:47:53: b4:07:bd:7a:1f:e2:fb:5c:f8:9f:e9:20:c7:b1:5e: 8e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3B:10:5C:F7:13:6E:89:A1:25:2B:9F:32:4E:D1:2D:29:A0:52:7F X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/3FE30722468C11EE9462EC3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.248.10.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:a8:9b:35:79:6b:d2:c7:04:83:47:97:f9:fc:48:e8:c9:6b: 27:8f:a2:64:b0:9c:9f:24:b7:df:2f:46:5e:9e:92:85:46:d3: 8c:a1:75:6c:44:64:b5:54:f8:2a:6f:ca:fb:e2:57:54:32:69: 09:60:b2:63:5b:b2:48:c4:03:1e:85:4a:f3:73:38:f8:38:ef: 1a:5e:9c:fa:97:33:35:f0:b2:ea:38:23:91:2f:dd:c6:55:74: 32:c7:31:4a:74:ea:58:5b:a3:63:3a:50:f8:97:fa:9a:b1:fc: 05:1b:f8:78:dd:55:6a:c8:88:39:a2:db:66:f8:44:f0:de:8d: 99:47:b5:94:a2:c2:4f:9d:c9:37:a5:bb:7a:73:66:ba:3d:b3: c7:e2:d6:a6:3c:cd:63:7f:a1:b5:51:82:6a:e6:64:2a:bd:56: f8:55:1a:07:42:13:ce:91:41:ac:7e:95:27:f4:39:63:c4:8a: 62:a5:a2:10:88:5e:34:99:6c:22:3c:5a:bf:f5:02:8c:11:c0: c1:b6:d7:d7:38:9b:06:49:3d:c5:c7:9c:cd:fa:e8:0d:2d:e8: 09:e9:68:50:f9:1e:c4:90:f3:31:4d:8c:8b:03:f0:2d:ab:b3: 4b:9b:6d:90:e0:96:80:14:46:88:a8:ca:f3:de:5d:55:22:1b: 15:88:6d:69 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzJFMTExMC8GA1UEBRMoRDRCQzc5QTRCMTUzN0ZFQjBBRDkyRUIzRjBBN0NBRjM0 NTNBOEY1MjAeFw0yMzA4MjkxNjUxMDhaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0ZWUyMWZiLTBkODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjnL+LMnmFyvk4hHhNIrooz/95XJqduCE6958MDz9OGXNS61iPOjqEAM8RQTps OSMz7SmHSwBpDNUhYuF6Q3cgcrdO2o1i8CvuoCyM5pPLBH8LegNN3wgOePsJjUBb 5mYhDCjGbag7dkdKEDdol29BJ9KAlwz1Wk6tz1K4YHXw4LptFoDYP/QlQuvQdIr1 Hj0kCebvA+xqTKaESZLF2wL6T6eEwHK78wMdvDP02bHpMMScjBaNYnniVBOwfqK/ VseUx6jz1aURIezxeVo6vXoyaNP5pUeQS/iCeyTfKrWilh3oSukM8xOzZ+9IOx9H U7QHvXof4vtc+J/pIMexXo6pAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU0jsQXPcT bomhJSufMk7RLSmgUn8wHwYDVR0jBBgwFoAU1Lx5pLFTf+sK2S6z8KfK80U6j1Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDMkUxLzkwNDdFRjA0NDY4 QTExRUU4NzlFQjUzNUM0RjlBRTAyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmox SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUx4NXBMRlRmLXNLMlM2ejhLZks4MFU2ajFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8zRkUzMDcyMjQ2 OEMxMUVFOTQ2MkVDM0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWf4CjANBgkqhkiG9w0BAQsFAAOCAQEAXqibNXlr0scEg0eX +fxI6MlrJ4+iZLCcnyS33y9GXp6ShUbTjKF1bERktVT4Km/K++JXVDJpCWCyY1uy SMQDHoVK83M4+DjvGl6c+pczNfCy6jgjkS/dxlV0MscxSnTqWFujYzpQ+Jf6mrH8 BRv4eN1VasiIOaLbZvhE8N6NmUe1lKLCT53JN6W7enNmuj2zx+LWpjzNY3+htVGC auZkKr1W+FUaB0ITzpFBrH6VJ/Q5Y8SKYqWiEIheNJlsIjxav/UCjBHAwbbX1zib Bkk9xceczfroDS3oCeloUPkexJDzMU2MiwPwLauzS5ttkOCWgBRGiKjK895dVSIb FYhtaQ== -----END CERTIFICATE-----Generated at Sun May 5 08:38:58 2024 by rpki-client on console-fra.rpki-client.org