$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa File: 862720F4031611EB9086351AC4F9AE02.roa (raw, json) Hash identifier: hZAor1qxhPHXa7AJm+TM9USbW+gzeCKsktKVITYBVMw= Subject key identifier: AB:3F:1F:7A:8E:62:73:70:1D:ED:75:21:6B:55:1D:9A:89:F7:13:B3 Certificate issuer: /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F Certificate serial: 0709 Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa Signing time: Tue 30 Apr 2024 23:31:55 +0000 ROA not before: Tue 30 Apr 2024 23:31:55 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 63931 IP address blocks: 103.47.246.0/23 maxlen: 24 103.204.104.0/23 maxlen: 24 192.140.248.0/22 maxlen: 24 2402:1280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 22:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1801 (0x709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F Validity Not Before: Apr 30 23:31:55 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=66317f6a-2603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:a3:25:46:ba:ca:13:f7:fe:aa:4e:9d:c6: b6:1f:16:29:11:73:1f:2c:1e:73:cb:56:33:04:a3: a1:2c:9a:ba:f8:75:03:6c:f5:56:7c:b1:e8:a3:8e: 5a:b9:f6:0a:89:b6:00:bf:d6:8c:c0:b3:b0:f0:a1: 1e:88:4f:a4:ba:3a:32:5d:98:f3:77:bc:ba:28:72: 1b:15:fd:22:62:a0:c1:2d:f2:35:65:96:91:31:d6: a0:58:ba:c6:32:6a:c4:fa:d5:b0:58:f2:7a:6d:2d: 0b:49:3c:7a:bf:6a:13:2c:05:a4:60:3e:9b:5c:b1: 94:6a:fb:56:f6:cc:fb:93:de:57:40:30:7f:ec:81: f0:a3:a3:4d:85:bb:99:5b:06:7a:37:c6:8f:b0:95: f7:b7:6c:6a:99:20:69:27:6e:15:db:4f:75:ac:09: 63:09:1f:41:f3:a9:fd:5c:cc:5d:b9:3c:ab:24:b9: 5e:c7:57:13:2c:5b:6a:36:b0:fc:2d:7d:5e:83:5e: ef:44:17:64:57:ff:ff:c1:a6:2c:47:a4:b3:01:be: 93:e4:fe:73:7e:df:cf:3c:b1:49:49:df:15:1f:73: 5b:59:02:f2:de:d7:02:1d:32:8c:32:d1:74:aa:e2: e3:c2:c4:5a:9a:bb:8a:52:59:9a:12:42:4c:d0:df: 5a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3F:1F:7A:8E:62:73:70:1D:ED:75:21:6B:55:1D:9A:89:F7:13:B3 X509v3 Authority Key Identifier: keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.47.246.0/23 103.204.104.0/23 192.140.248.0/22 IPv6: 2402:1280::/32 Signature Algorithm: sha256WithRSAEncryption 4b:a9:c9:48:10:5c:77:fe:d7:13:a6:18:da:f8:99:e0:b7:32: 21:66:b5:fd:13:36:a1:61:80:54:ca:3c:00:d2:2f:6a:a7:11: d9:98:e0:7e:9e:b8:5d:38:12:88:d0:d8:e2:fb:81:74:2c:a8: c3:0e:8f:c3:a5:82:ec:d0:d2:cf:a6:7c:32:47:24:41:84:03: c4:10:6c:12:c4:69:18:5a:21:db:4b:af:f8:b2:20:94:4d:14: 58:a0:18:37:3d:c9:b8:c5:03:cc:1c:93:88:41:bc:0e:9f:9c: 4b:b8:a4:3f:62:eb:c3:22:fa:2c:ac:8f:93:b3:2d:ec:0a:a7: 14:7c:85:bc:08:d8:e9:bb:78:29:a5:d4:34:d8:3e:09:34:5e: 1b:27:a1:12:4e:5d:da:d6:b0:4b:12:1b:e9:33:ae:a7:db:a5: d2:a4:67:be:b8:2c:3f:96:8b:44:9d:dc:43:f7:06:df:16:91: 3e:59:89:46:98:6f:13:b3:51:61:4c:12:c0:96:d1:f3:0a:c5: bf:63:7b:21:f1:01:70:73:8c:e8:03:77:41:73:5e:4d:13:ad: 95:73:64:3a:0f:2c:88:19:78:db:6b:20:ef:0a:f6:a8:56:23: 8b:22:8d:38:a7:ba:5c:23:ef:42:43:31:da:80:02:f5:8c:9e: 91:77:ad:8f -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RENkExMTAvBgNVBAUTKEJCOUQ1RDUwRjc1NTgxOTcyRkMzQUYxQzZDRTZBRkNG NTdDRkI5M0YwHhcNMjQwNDMwMjMzMTU1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxN2Y2YS0yNjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4ujJUa6yhP3/qpOnca2HxYpEXMfLB5zy1YzBKOhLJq6+HUDbPVWfLHoo45a ufYKibYAv9aMwLOw8KEeiE+kujoyXZjzd7y6KHIbFf0iYqDBLfI1ZZaRMdagWLrG MmrE+tWwWPJ6bS0LSTx6v2oTLAWkYD6bXLGUavtW9sz7k95XQDB/7IHwo6NNhbuZ WwZ6N8aPsJX3t2xqmSBpJ24V2091rAljCR9B86n9XMxduTyrJLlex1cTLFtqNrD8 LX1eg17vRBdkV///waYsR6SzAb6T5P5zft/PPLFJSd8VH3NbWQLy3tcCHTKMMtF0 quLjwsRamruKUlmaEkJM0N9avQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFKs/H3qO YnNwHe11IWtVHZqJ9xOzMB8GA1UdIwQYMBaAFLudXVD3VYGXL8OvHGzmr89Xz7k/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ2QS8zOUY0OEExMDAz MTUxMUVCQjU1RDIyMTlDNEY5QUUwMi91NTFkVVBkVmdaY3Z3NjhjYk9hdnoxZlB1 VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1MWRVUGRWZ1pjdnc2OGNiT2F2ejFmUHVUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0RENkEvMzlGNDhBMTAwMzE1MTFFQkI1NUQyMjE5QzRGOUFFMDIvODYyNzIwRjQw MzE2MTFFQjkwODYzNTFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAFnL/YDBAFnzGgDBALAjPgwDQQCAAIwBwMFACQCEoAwDQYJ KoZIhvcNAQELBQADggEBAEupyUgQXHf+1xOmGNr4meC3MiFmtf0TNqFhgFTKPADS L2qnEdmY4H6euF04EojQ2OL7gXQsqMMOj8OlguzQ0s+mfDJHJEGEA8QQbBLEaRha IdtLr/iyIJRNFFigGDc9ybjFA8wck4hBvA6fnEu4pD9i68Mi+iysj5OzLewKpxR8 hbwI2Om7eCml1DTYPgk0XhsnoRJOXdrWsEsSG+kzrqfbpdKkZ764LD+Wi0Sd3EP3 Bt8WkT5ZiUaYbxOzUWFMEsCW0fMKxb9jeyHxAXBzjOgDd0FzXk0TrZVzZDoPLIgZ eNtrIO8K9qhWI4sijTinulwj70JDMdqAAvWMnpF3rY8= -----END CERTIFICATE-----Generated at Fri Jun 14 23:58:20 2024 by rpki-client on console-fra.rpki-client.org