$ rpki-client -vvf rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/9FE7159201D611EDA3BFA62EC4F9AE02.roa File: 9FE7159201D611EDA3BFA62EC4F9AE02.roa (raw, json) Hash identifier: VVdMpQJfWJzeEGllDWHOaKV26ooqf2lxHQS0gQIblUk= Subject key identifier: AF:26:96:BA:8F:38:C8:03:E9:BF:6B:33:B1:38:51:8B:AE:AD:A8:9F Certificate issuer: /CN=A911D8BA/serialNumber=7318DA73A0AB3DD090E6B73FC4DF0D7510185CF1 Certificate serial: 011C Authority key identifier: 73:18:DA:73:A0:AB:3D:D0:90:E6:B7:3F:C4:DF:0D:75:10:18:5C:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/9FE7159201D611EDA3BFA62EC4F9AE02.roa Signing time: Sat 13 May 2023 06:25:15 +0000 ROA not before: Sat 13 May 2023 06:25:15 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 59338 IP address blocks: 103.227.236.0/24 maxlen: 24 103.227.237.0/24 maxlen: 24 103.227.238.0/24 maxlen: 24 103.227.239.0/24 maxlen: 24 2001:df3:f800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.crl rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D8BA/serialNumber=7318DA73A0AB3DD090E6B73FC4DF0D7510185CF1 Validity Not Before: May 13 06:25:15 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645f2d4a-7572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0d:3f:fe:a6:c0:22:bc:23:a0:e3:46:66:fa: 6b:f4:49:6c:04:a8:c3:98:68:6b:0a:24:28:3d:ac: 30:b9:62:0d:10:c8:6f:c7:ff:e6:42:68:df:62:12: 58:ea:9a:bb:44:e3:f4:77:ab:81:2a:e5:a7:18:fe: 5d:6a:f2:57:88:85:2e:81:bf:62:ff:f2:9f:58:f0: fe:41:e5:1f:61:42:c0:05:aa:f2:ad:0e:1f:c3:6f: 87:fa:89:a7:87:1d:51:70:21:68:aa:85:a7:e9:cd: 27:4f:0b:7e:48:26:58:3f:e9:89:a0:48:dd:f5:a1: e5:11:7e:0c:30:4a:4f:a9:ac:cd:95:de:a2:eb:20: 28:58:ca:57:05:94:83:9d:a1:f9:6d:d9:43:73:40: 6e:b9:07:6f:8d:af:f7:70:d6:13:e7:fc:21:43:20: c3:ca:bd:76:bc:4c:33:18:60:ce:0e:7d:de:cd:06: f2:90:73:94:98:4e:6e:0e:7f:97:6c:23:99:17:b5: 45:79:1d:9e:02:cd:68:cc:f2:d9:62:4e:6e:15:61: 72:bf:1a:b2:95:7c:04:18:c8:b6:fc:b3:b1:0b:d4: 47:90:76:80:b4:0c:10:f7:f5:d2:65:19:32:5a:3b: e0:00:71:ce:ad:9f:30:44:ea:4a:0c:62:46:2e:b5: a4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:26:96:BA:8F:38:C8:03:E9:BF:6B:33:B1:38:51:8B:AE:AD:A8:9F X509v3 Authority Key Identifier: keyid:73:18:DA:73:A0:AB:3D:D0:90:E6:B7:3F:C4:DF:0D:75:10:18:5C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/9FE7159201D611EDA3BFA62EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.227.236.0/22 IPv6: 2001:df3:f800::/48 Signature Algorithm: sha256WithRSAEncryption 27:71:4d:d9:4b:43:a6:5e:3e:a6:91:b8:23:3a:35:86:0a:62: 8d:7d:d1:ed:f2:8b:72:d3:4d:0c:11:69:8c:d2:a2:02:e4:c4: f8:6c:40:b7:6d:ec:ac:fa:d2:da:62:9f:e0:d4:dd:4b:58:f3: de:02:d9:7c:19:46:ed:3d:02:e4:74:c7:78:14:60:bf:13:f4: 60:ef:6f:85:20:06:d3:89:a9:a8:3d:be:5d:90:ca:67:ae:63: 35:b1:ed:c6:bb:89:aa:74:97:d9:c9:81:4f:ec:f5:a0:cf:fe: 5a:68:75:e5:e7:9d:02:c1:06:f1:f8:ee:2f:a2:1e:4a:53:00: 0e:97:7b:46:ad:12:dd:7a:80:d3:fe:c6:b3:d7:ec:70:69:8d: b9:40:50:52:2f:be:99:20:c6:10:fc:f6:ab:d1:64:ac:67:d5: 72:d9:18:a3:7b:f0:37:a7:6e:de:11:26:83:24:de:4e:e1:53: 9f:94:66:27:99:fb:5b:3e:5e:7a:d2:3d:a2:68:85:a7:dd:58: 80:e5:db:81:0f:14:9e:81:17:a9:23:de:9b:ab:46:1d:76:cb: 95:10:28:44:79:ea:d9:c0:c8:f4:c7:54:a4:e9:c1:fb:d3:b3: 92:9f:9a:2d:d7:7f:5b:eb:18:b0:37:34:23:36:7c:08:a9:b9: d4:8b:99:6b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4QkExMTAvBgNVBAUTKDczMThEQTczQTBBQjNERDA5MEU2QjczRkM0REYwRDc1 MTAxODVDRjEwHhcNMjMwNTEzMDYyNTE1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDVmMmQ0YS03NTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A0//qbAIrwjoONGZvpr9ElsBKjDmGhrCiQoPawwuWINEMhvx//mQmjfYhJY 6pq7ROP0d6uBKuWnGP5davJXiIUugb9i//KfWPD+QeUfYULABaryrQ4fw2+H+omn hx1RcCFoqoWn6c0nTwt+SCZYP+mJoEjd9aHlEX4MMEpPqazNld6i6yAoWMpXBZSD naH5bdlDc0BuuQdvja/3cNYT5/whQyDDyr12vEwzGGDODn3ezQbykHOUmE5uDn+X bCOZF7VFeR2eAs1ozPLZYk5uFWFyvxqylXwEGMi2/LOxC9RHkHaAtAwQ9/XSZRky WjvgAHHOrZ8wROpKDGJGLrWkbQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFK8mlrqP OMgD6b9rM7E4UYuuraifMB8GA1UdIwQYMBaAFHMY2nOgqz3QkOa3P8TfDXUQGFzx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDhCQS80OEI0MEE4NDAx RDQxMUVEQTkyRUFBMkRDNEY5QUUwMi9jeGphYzZDclBkQ1E1cmNfeE44TmRSQVlY UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4amFjNkNyUGRDUTVyY194TjhOZFJBWVhQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQ4QkEvNDhCNDBBODQwMUQ0MTFFREE5MkVBQTJEQzRGOUFFMDIvOUZFNzE1OTIw MUQ2MTFFREEzQkZBNjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJn4+wwDwQCAAIwCQMHACABDfP4ADANBgkqhkiG9w0BAQsF AAOCAQEAJ3FN2UtDpl4+ppG4Izo1hgpijX3R7fKLctNNDBFpjNKiAuTE+GxAt23s rPrS2mKf4NTdS1jz3gLZfBlG7T0C5HTHeBRgvxP0YO9vhSAG04mpqD2+XZDKZ65j NbHtxruJqnSX2cmBT+z1oM/+Wmh15eedAsEG8fjuL6IeSlMADpd7Rq0S3XqA0/7G s9fscGmNuUBQUi++mSDGEPz2q9FkrGfVctkYo3vwN6du3hEmgyTeTuFTn5RmJ5n7 Wz5eetI9omiFp91YgOXbgQ8UnoEXqSPem6tGHXbLlRAoRHnq2cDI9MdUpOnB+9Oz kp+aLdd/W+sYsDc0IzZ8CKm51IuZaw== -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:10 2024 by rpki-client on console-ams.rpki-client.org