$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/359322B2D1E711EDB90DBF27C4F9AE02.roa File: 359322B2D1E711EDB90DBF27C4F9AE02.roa (raw, json) Hash identifier: oqC6m15GvkoEhYAheA3+Yegw0Ae9mcHaCs/xuTvq3ak= Subject key identifier: 4F:47:AF:84:8B:30:00:51:63:6C:68:F1:8B:B6:7D:C1:36:9C:49:1F Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Certificate serial: 011A Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/359322B2D1E711EDB90DBF27C4F9AE02.roa Signing time: Tue 03 Sep 2024 05:18:01 +0000 ROA not before: Tue 03 Sep 2024 05:18:01 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135069 IP address blocks: 103.96.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC1D Validity Not Before: Sep 3 05:18:01 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d69c09-b235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:3c:fd:ce:db:3d:50:eb:c8:09:64:e4:3a: c6:1c:88:00:ba:74:74:7a:37:4e:d0:a6:9a:f1:f7: 57:91:5c:20:03:48:11:e5:5c:8b:bc:b7:cb:8c:b2: 6f:fa:47:84:eb:41:b0:4f:86:9e:3b:d7:85:2e:09: b3:9b:71:ee:61:04:48:9c:a0:1b:74:e7:ee:54:51: 3c:28:03:2a:37:de:2a:0e:39:39:cf:40:67:ef:52: 7c:0f:ee:6d:fe:99:b3:be:66:fd:8c:61:72:0a:14: 63:bc:8f:5b:36:3d:78:c8:b2:d5:d6:ee:92:9c:bd: cc:68:83:ba:09:c9:7f:0b:c9:eb:86:71:74:d0:90: 19:6b:26:48:46:92:05:a9:6b:88:e3:1b:78:9e:74: cf:15:e7:f5:80:fb:f0:1c:ff:a9:f8:b4:b9:ee:e7: 6b:58:65:b9:64:e6:67:d0:93:ac:84:f0:62:78:4d: 7d:ed:af:a3:7e:dd:c3:ba:42:6d:0f:57:e8:b9:27: c4:fd:23:46:d2:8a:0b:74:24:15:57:be:83:a7:62: 55:27:2d:68:91:af:9e:bb:b9:2a:ac:c5:6d:d6:d0: 6f:56:f1:90:4a:d2:40:1c:84:65:8f:2b:c2:bd:a9: f0:29:3a:64:90:a6:19:f6:41:71:cf:1e:46:30:3c: d1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:47:AF:84:8B:30:00:51:63:6C:68:F1:8B:B6:7D:C1:36:9C:49:1F X509v3 Authority Key Identifier: keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/359322B2D1E711EDB90DBF27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.96.84.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:9b:29:66:3e:69:f4:a2:ab:df:c9:db:fb:65:bc:d1:5e:2e: c5:da:4e:94:94:21:32:2f:00:af:4f:14:a9:8e:7e:b4:c6:33: 74:af:b3:b7:1f:06:fe:b6:3d:e3:6f:54:c0:9c:20:4f:be:df: f5:b6:b3:a6:4c:7f:2c:5d:34:e2:e6:51:ff:e5:f8:ea:ed:10: 4b:32:01:62:30:be:08:48:ec:ce:95:ed:81:25:31:c8:24:d8: df:1f:47:79:6a:49:0b:12:06:f9:00:02:e7:08:68:1e:a1:88: f9:86:e9:05:4c:68:6e:18:9d:3e:97:09:73:a1:90:02:f9:e7: c8:71:05:67:02:ae:dc:db:9b:58:3c:e3:48:41:13:18:66:df: a9:60:ae:bd:59:18:fa:f3:3d:bb:a5:f8:cb:7b:91:d2:b3:72: c0:8d:41:92:ad:56:36:dc:e4:cd:0c:85:29:fc:ec:1a:1f:c8: 82:05:51:f3:23:3a:9d:ac:2e:6b:26:5f:19:a5:ee:0f:04:18: 35:8e:f5:b4:02:93:5c:53:97:2f:e0:aa:37:0a:cf:45:df:d9: 00:d6:f2:bf:08:9c:c1:96:5f:de:2b:95:29:7a:fc:6e:27:44: ca:cd:7f:e2:be:81:b1:80:37:25:c8:84:f5:7a:ef:52:75:85: 0a:b1:4b:d4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDMUQxMTAvBgNVBAUTKEZCMDE5N0Q4MDJBNjYxODZFODQwQkQ2MkU4OEVFNDBF RDk1RTk1MjkwHhcNMjQwOTAzMDUxODAxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2OWMwOS1iMjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEc8/c7bPVDryAlk5DrGHIgAunR0ejdO0Kaa8fdXkVwgA0gR5VyLvLfLjLJv +keE60GwT4aeO9eFLgmzm3HuYQRInKAbdOfuVFE8KAMqN94qDjk5z0Bn71J8D+5t /pmzvmb9jGFyChRjvI9bNj14yLLV1u6SnL3MaIO6Ccl/C8nrhnF00JAZayZIRpIF qWuI4xt4nnTPFef1gPvwHP+p+LS57udrWGW5ZOZn0JOshPBieE197a+jft3DukJt D1fouSfE/SNG0ooLdCQVV76Dp2JVJy1oka+eu7kqrMVt1tBvVvGQStJAHIRljyvC vanwKTpkkKYZ9kFxzx5GMDzRcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFE9Hr4SL MABRY2xo8Yu2fcE2nEkfMB8GA1UdIwQYMBaAFPsBl9gCpmGG6EC9YuiO5A7ZXpUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0MxRC84Q0ZFMUQ5QUQx RTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZYm9RTDFpNkk3a0R0bGVs U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13R1gyQUttWVlib1FMMWk2STdrRHRsZWxTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNDMUQvOENGRTFEOUFEMUUyMTFFRDkyM0M2MTFGQzRGOUFFMDIvMzU5MzIyQjJE MUU3MTFFREI5MERCRjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnYFQwDQYJKoZIhvcNAQELBQADggEBAF6bKWY+afSiq9/J 2/tlvNFeLsXaTpSUITIvAK9PFKmOfrTGM3Svs7cfBv62PeNvVMCcIE++3/W2s6ZM fyxdNOLmUf/l+OrtEEsyAWIwvghI7M6V7YElMcgk2N8fR3lqSQsSBvkAAucIaB6h iPmG6QVMaG4YnT6XCXOhkAL558hxBWcCrtzbm1g840hBExhm36lgrr1ZGPrzPbul +Mt7kdKzcsCNQZKtVjbc5M0MhSn87BofyIIFUfMjOp2sLmsmXxml7g8EGDWO9bQC k1xTly/gqjcKz0Xf2QDW8r8InMGWX94rlSl6/G4nRMrNf+K+gbGANyXIhPV671J1 hQqxS9Q= -----END CERTIFICATE-----Generated at Fri Apr 4 23:52:37 2025 by rpki-client