$ rpki-client -vvf rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/85613B4E8C8411EBB68DD829C4F9AE02.roa File: 85613B4E8C8411EBB68DD829C4F9AE02.roa (raw, json) Hash identifier: QHP0aD4ImRkFLj+jX01YDeLCypyOMufG/+vYnm1Iw50= Subject key identifier: A1:F1:20:0F:51:45:94:AE:3B:4E:E6:2A:6E:A4:B4:F5:AA:3B:22:45 Certificate issuer: /CN=A911CF44/serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253 Certificate serial: 04E3 Authority key identifier: 40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/85613B4E8C8411EBB68DD829C4F9AE02.roa Signing time: Fri 23 Jun 2023 00:56:56 +0000 ROA not before: Fri 23 Jun 2023 00:56:56 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 136733 IP address blocks: 103.94.224.0/24 maxlen: 24 103.94.225.0/24 maxlen: 24 103.94.226.0/24 maxlen: 24 103.94.227.0/24 maxlen: 24 150.107.168.0/24 maxlen: 24 150.107.169.0/24 maxlen: 24 150.107.170.0/24 maxlen: 24 150.107.171.0/24 maxlen: 24 2001:df1:8900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CF44/serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253 Validity Not Before: Jun 23 00:56:56 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6494edd8-6efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:8a:2f:7c:1c:49:a7:fc:91:bf:eb:e1:b6: 8f:74:ca:4a:0c:73:6d:58:6b:fc:fb:c7:7e:22:98: 0a:8f:d6:c8:33:0a:a7:f5:37:6a:52:2d:fd:0b:74: 00:7c:28:89:b8:12:41:37:dd:d6:ba:12:b4:71:b8: c9:cc:8d:00:52:59:48:d1:35:19:8b:3f:5f:d1:a5: cd:6f:48:2f:9b:b5:2c:95:17:3c:48:18:2c:71:6e: c6:6f:1d:9a:1c:7f:f4:59:a8:94:bf:8b:45:80:17: 8d:86:36:83:ca:b8:c3:8a:23:d3:9e:d2:84:1c:fd: 24:f5:f0:e5:0d:18:30:92:ba:77:a8:42:c2:e1:28: d3:f6:78:a8:dc:a3:ee:9b:66:d9:8c:49:6c:b5:19: 48:19:76:64:33:c4:fb:da:9a:79:bb:e6:5c:15:81: 18:a2:43:d5:e6:6a:fe:4e:3f:02:8d:e7:47:c2:f6: cd:e0:3b:c2:c9:89:ea:2f:6d:c7:4c:89:45:86:c7: 1e:84:bf:76:25:28:bd:a7:64:f4:d2:33:4d:48:98: 0e:da:88:8d:e2:35:86:84:26:57:6a:4b:70:7b:89: c1:78:51:c0:9a:33:f8:25:46:7c:bc:07:f1:4b:bb: de:e0:90:2f:73:60:20:56:88:1c:7d:71:07:e4:d8: 49:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F1:20:0F:51:45:94:AE:3B:4E:E6:2A:6E:A4:B4:F5:AA:3B:22:45 X509v3 Authority Key Identifier: keyid:40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/85613B4E8C8411EBB68DD829C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.224.0/22 150.107.168.0/22 IPv6: 2001:df1:8900::/48 Signature Algorithm: sha256WithRSAEncryption ce:d9:70:eb:66:73:dd:20:79:71:29:6f:25:ea:41:9a:73:76: c2:63:7b:70:9f:f7:80:99:a5:0f:58:6a:52:aa:45:3c:40:10: e2:27:3b:92:53:bd:c5:4d:46:44:8e:0a:86:8d:47:72:2c:a0: b3:1a:c3:6b:b6:7d:27:12:fc:e3:14:48:85:05:d0:1d:14:a2: 37:3a:a4:ba:65:55:6a:21:f6:7a:32:16:e3:ac:e2:df:4a:c0: d9:80:96:23:ce:24:a0:be:cf:57:e5:44:a2:d1:f4:11:e6:43: 30:71:2a:0c:bb:46:eb:1c:24:b9:a5:da:e9:0f:d5:2e:0f:9f: 31:23:21:53:ca:73:d9:9d:c7:b9:ec:ef:5b:45:60:44:a0:f3: 8c:b7:42:95:3c:64:ff:e6:9f:87:98:d7:61:26:d9:e0:22:66: b3:41:55:da:53:28:3c:93:f6:54:b2:18:df:c7:2b:e7:90:9a: 75:8f:d1:c5:66:8d:6e:68:6d:99:a3:b3:c6:97:ea:44:4f:8c: 87:2b:be:3f:db:f3:ec:01:3f:5a:80:5d:58:94:d2:51:68:2b: 14:11:83:4f:0a:26:38:28:e9:10:95:13:1b:ef:91:4a:a9:7d: 8f:c0:91:66:21:55:1c:ae:33:a7:67:2a:7d:f2:43:e5:15:d7: fc:af:47:1b -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNGNDQxMTAvBgNVBAUTKDQwREQ2NjJCNkY2RTk3QjM0RDNCNzVBODAwN0RFNTM4 OEQ5MjcyNTMwHhcNMjMwNjIzMDA1NjU2WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDk0ZWRkOC02ZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI2KL3wcSaf8kb/r4baPdMpKDHNtWGv8+8d+IpgKj9bIMwqn9TdqUi39C3QA fCiJuBJBN93WuhK0cbjJzI0AUllI0TUZiz9f0aXNb0gvm7UslRc8SBgscW7Gbx2a HH/0WaiUv4tFgBeNhjaDyrjDiiPTntKEHP0k9fDlDRgwkrp3qELC4SjT9nio3KPu m2bZjElstRlIGXZkM8T72pp5u+ZcFYEYokPV5mr+Tj8CjedHwvbN4DvCyYnqL23H TIlFhscehL92JSi9p2T00jNNSJgO2oiN4jWGhCZXaktwe4nBeFHAmjP4JUZ8vAfx S7ve4JAvc2AgVogcfXEH5NhJwwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFKHxIA9R RZSuO07mKm6ktPWqOyJFMB8GA1UdIwQYMBaAFEDdZitvbpezTTt1qAB95TiNknJT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0Y0NC82Njc3QkVCNjhD ODMxMUVCODQ5RTYxMjlDNEY5QUUwMi9RTjFtSzI5dWw3Tk5PM1dvQUgzbE9JMlNj bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOMW1LMjl1bDdOTk8zV29BSDNsT0kyU2NsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNGNDQvNjY3N0JFQjY4QzgzMTFFQjg0OUU2MTI5QzRGOUFFMDIvODU2MTNCNEU4 Qzg0MTFFQkI2OEREODI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAJnXuADBAKWa6gwDwQCAAIwCQMHACABDfGJADANBgkqhkiG 9w0BAQsFAAOCAQEAztlw62Zz3SB5cSlvJepBmnN2wmN7cJ/3gJmlD1hqUqpFPEAQ 4ic7klO9xU1GRI4Kho1HciygsxrDa7Z9JxL84xRIhQXQHRSiNzqkumVVaiH2ejIW 46zi30rA2YCWI84koL7PV+VEotH0EeZDMHEqDLtG6xwkuaXa6Q/VLg+fMSMhU8pz 2Z3HuezvW0VgRKDzjLdClTxk/+afh5jXYSbZ4CJms0FV2lMoPJP2VLIY38cr55Ca dY/RxWaNbmhtmaOzxpfqRE+Mhyu+P9vz7AE/WoBdWJTSUWgrFBGDTwomOCjpEJUT G++RSql9j8CRZiFVHK4zp2cqffJD5RXX/K9HGw== -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:21 2024 by rpki-client on console-ams.rpki-client.org