$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/0DC4BC0C5CDE11ECB486850FC4F9AE02.roa File: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (raw, json) Hash identifier: FClvPvzoTDmX/ZzIigyjz+g4sikyQbqSLF5/K9p2wok= Subject key identifier: 27:77:09:DA:8C:C0:55:89:9A:9A:05:D2:B1:BD:74:3B:38:71:E9:47 Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Certificate serial: 038B Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/0DC4BC0C5CDE11ECB486850FC4F9AE02.roa Signing time: Fri 07 Jun 2024 03:20:26 +0000 ROA not before: Fri 07 Jun 2024 03:20:26 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 58590 IP address blocks: 103.8.248.0/22 maxlen: 22 103.8.248.0/24 maxlen: 24 103.8.249.0/24 maxlen: 24 103.8.250.0/24 maxlen: 24 103.8.251.0/24 maxlen: 24 2403:bd00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Validity Not Before: Jun 7 03:20:26 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66627c7a-1826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:02:d3:b1:eb:24:cc:9d:8b:07:58:1e:77: ea:38:d3:77:a9:b2:44:ca:a0:48:a1:9c:3f:49:ee: 10:9a:9a:91:b0:7a:56:c0:af:3d:a8:09:7a:88:8e: 04:60:bb:43:fa:ab:85:63:97:95:35:bb:5d:a7:df: 2e:17:df:1d:f6:c7:93:1d:17:4c:40:17:e9:52:49: 09:26:99:db:c9:5f:13:11:85:ec:5e:31:18:da:c1: 9b:b8:57:c7:d2:df:0a:9c:d0:11:82:41:a7:bf:73: 12:cb:d3:76:3a:ba:f5:59:ad:96:12:88:69:40:5a: 67:b6:06:ac:f2:25:ae:36:ad:09:ac:c3:be:88:0f: 40:a8:1d:33:a8:1c:28:54:44:23:fb:53:b9:41:43: 45:67:43:1b:ab:fe:ae:06:72:98:14:66:8a:2d:af: ea:fb:1c:c8:06:15:12:72:2d:71:5a:68:ae:39:2e: d9:14:a6:66:52:a6:03:cd:16:b5:3e:d8:10:db:f4: e7:62:b5:83:30:79:9e:69:f3:ed:a6:a3:86:92:1d: 78:86:1a:24:fa:0e:22:47:dc:e1:c1:59:aa:7d:51: dd:5c:22:67:1f:74:9b:d9:b5:5c:e2:ba:57:3b:50: 34:af:cb:34:16:08:df:e0:96:ed:98:f8:9a:06:9a: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:77:09:DA:8C:C0:55:89:9A:9A:05:D2:B1:BD:74:3B:38:71:E9:47 X509v3 Authority Key Identifier: keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/0DC4BC0C5CDE11ECB486850FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.8.248.0/22 IPv6: 2403:bd00::/32 Signature Algorithm: sha256WithRSAEncryption 1f:23:4f:e3:42:28:24:f7:8a:ae:ad:89:44:5e:e8:40:6d:29: 64:19:4a:f8:46:4a:cc:63:9d:2f:34:d0:55:d4:3e:df:21:9b: 8e:8d:c7:bd:73:52:b1:5b:68:54:5e:35:de:09:8c:49:b3:44: 9b:e3:5d:23:2c:d5:3b:e4:80:3c:81:1f:a0:44:6c:c8:f5:c2: 03:2a:87:d5:58:cc:1f:3a:e3:44:96:1f:cb:74:4c:70:ad:3e: b9:53:05:87:83:f8:e5:0d:1e:07:78:97:e8:69:16:40:f7:2e: 23:68:42:32:25:1b:e5:5f:5d:69:98:02:b0:d9:81:83:dc:07: af:ad:bc:5d:c2:5c:a0:0d:49:0b:19:db:a0:29:ba:d3:99:32: e0:e3:7e:6e:b9:8c:11:f0:0c:ed:64:c0:e5:08:c3:7c:e2:05: ff:fb:8a:c9:62:e0:1d:b4:02:41:2c:6c:c0:d2:05:47:d1:47: d6:33:99:4c:6f:a4:b9:fa:31:65:32:c4:c7:47:52:b9:4f:28: 4d:a5:3d:af:aa:d1:18:17:3e:6e:c4:15:47:a1:e9:ae:75:93: e0:aa:f9:9c:13:f3:b2:41:5c:09:b5:1f:9b:c6:95:b5:c9:8b: 4d:94:cb:68:32:1c:90:9a:e9:5e:e1:73:84:aa:a8:61:1e:c4: 93:f8:3b:07 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz NEZGREYzNUMwHhcNMjQwNjA3MDMyMDI2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjYyN2M3YS0xODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7QC07HrJMydiwdYHnfqONN3qbJEyqBIoZw/Se4QmpqRsHpWwK89qAl6iI4E YLtD+quFY5eVNbtdp98uF98d9seTHRdMQBfpUkkJJpnbyV8TEYXsXjEY2sGbuFfH 0t8KnNARgkGnv3MSy9N2Orr1Wa2WEohpQFpntgas8iWuNq0JrMO+iA9AqB0zqBwo VEQj+1O5QUNFZ0Mbq/6uBnKYFGaKLa/q+xzIBhUSci1xWmiuOS7ZFKZmUqYDzRa1 PtgQ2/TnYrWDMHmeafPtpqOGkh14hhok+g4iR9zhwVmqfVHdXCJnH3Sb2bVc4rpX O1A0r8s0Fgjf4JbtmPiaBppwuQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCd3CdqM wFWJmpoF0rG9dDs4celHMB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUY4QzkvNEI0RDcxMkE1Q0RCMTFFQ0JENTRGNzBDQzRGOUFFMDIvMERDNEJDMEM1 Q0RFMTFFQ0I0ODY4NTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnCPgwDQQCAAIwBwMFACQDvQAwDQYJKoZIhvcNAQELBQAD ggEBAB8jT+NCKCT3iq6tiURe6EBtKWQZSvhGSsxjnS800FXUPt8hm46Nx71zUrFb aFReNd4JjEmzRJvjXSMs1TvkgDyBH6BEbMj1wgMqh9VYzB8640SWH8t0THCtPrlT BYeD+OUNHgd4l+hpFkD3LiNoQjIlG+VfXWmYArDZgYPcB6+tvF3CXKANSQsZ26Ap utOZMuDjfm65jBHwDO1kwOUIw3ziBf/7isli4B20AkEsbMDSBUfRR9YzmUxvpLn6 MWUyxMdHUrlPKE2lPa+q0RgXPm7EFUeh6a51k+Cq+ZwT87JBXAm1H5vGlbXJi02U y2gyHJCa6V7hc4SqqGEexJP4Owc= -----END CERTIFICATE-----Generated at Sat Jun 15 03:54:19 2024 by rpki-client on console-fra.rpki-client.org