$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/85CE44A4BC1111EE9E42EB2DC4F9AE02.roa File: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (raw, json) Hash identifier: FW53rlrjqKHJK94aR4EnZt9IrMO+EQKuZBZoAjfuW84= Subject key identifier: 20:3B:91:CE:ED:76:BE:B9:D3:02:8E:38:F9:54:68:FF:1E:06:9C:1D Certificate issuer: /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Certificate serial: 6D Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/85CE44A4BC1111EE9E42EB2DC4F9AE02.roa Signing time: Fri 26 Jan 2024 06:09:54 +0000 ROA not before: Fri 26 Jan 2024 06:09:54 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 151608 IP address blocks: 103.36.88.0/23 maxlen: 23 103.36.88.0/24 maxlen: 24 103.36.89.0/24 maxlen: 24 2001:df2:ae40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Validity Not Before: Jan 26 06:09:54 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65b34cb2-bdb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:93:ee:fd:9e:7f:2b:a7:22:a9:b1:4a:fe: 14:a7:85:0d:33:c3:28:b8:30:53:0b:3a:b7:e7:11: 44:8e:61:a7:e1:0b:73:17:e3:4e:ca:74:42:71:3e: ca:d1:99:cf:9a:90:b9:cb:11:20:cb:57:be:4a:7b: e1:80:dc:d5:3a:7b:bc:99:0f:8b:42:8e:c0:ff:46: dc:1f:b9:c0:f3:de:75:c1:b8:21:72:cf:fd:05:07: 84:05:5e:55:d3:bb:1f:de:5f:55:85:1a:ea:c9:89: bc:35:ee:31:30:a4:0b:b6:4f:bb:f6:25:12:04:b3: c1:4a:92:10:4a:50:f2:8a:d3:13:c4:52:c5:3e:50: be:c0:60:98:8c:77:da:f5:4f:f2:41:f1:82:fa:6f: 0b:70:fb:56:f7:06:60:ad:b8:29:d6:3b:80:05:eb: 1e:9e:91:b7:05:95:60:24:c1:0b:8b:22:98:f3:ff: 28:f8:fe:70:66:fa:c9:9a:78:2d:ff:bc:80:3d:27: 93:3c:e2:6c:c1:6e:57:41:9d:fa:b3:c2:25:62:e1: c6:7c:77:1a:81:06:66:e8:15:55:9a:d0:62:94:2a: 3f:6b:96:a1:70:92:19:08:67:97:70:d7:4d:af:30: d3:66:7f:0c:36:62:78:be:84:6c:c5:fd:ef:13:59: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3B:91:CE:ED:76:BE:B9:D3:02:8E:38:F9:54:68:FF:1E:06:9C:1D X509v3 Authority Key Identifier: keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/85CE44A4BC1111EE9E42EB2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.36.88.0/23 IPv6: 2001:df2:ae40::/48 Signature Algorithm: sha256WithRSAEncryption 1f:3c:8e:61:85:f0:d1:cb:9d:8e:a2:3e:ed:4b:ba:bb:e1:3c: 18:ec:0d:b9:ba:d3:fc:6c:4e:2b:c3:3d:a2:6d:18:25:43:e9: 03:7c:10:11:44:d5:ad:80:99:d1:82:b6:85:3b:97:71:9a:87: 92:79:b6:a2:74:95:9d:2d:c8:4a:6a:aa:17:bc:8a:a6:f7:bf: d8:0f:a7:92:33:0d:08:ad:39:c0:8a:0e:29:85:70:77:08:4f: 0b:f4:3a:5d:30:82:5e:0f:d9:e7:bf:f6:74:3e:a6:da:6b:43: 03:b6:bf:3e:70:3d:ca:74:08:16:3c:04:4d:e9:3c:da:18:e3: 92:29:52:29:b3:7f:0f:19:68:7e:68:32:27:cb:07:9e:c0:f1: 13:fe:1e:fd:94:23:56:2a:2d:6b:21:05:b3:77:89:e2:d2:c0: 56:cb:a3:be:27:0e:bb:ad:2b:dd:0a:28:07:00:1a:eb:d3:1c: 71:3b:f3:b1:64:b6:33:3e:a3:8b:f0:55:ff:be:62:ee:d9:74: 52:de:a1:d4:9d:d1:94:ae:bf:1e:b8:00:33:d8:cf:e2:c2:06: 40:e9:cb:b1:19:de:b6:57:32:1d:c0:3c:a4:c3:ff:b6:81:34: 8c:82:3f:7d:ec:dd:9f:3e:86:0d:91:55:0a:d9:63:f2:5a:e1: 7d:5d:9c:73 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDM3NjExMC8GA1UEBRMoOEE1ODE2NTVDOTIyQTdBNTEyMUUwMEZCN0E0MjdFMDE5 QUM3MzA3QjAeFw0yNDAxMjYwNjA5NTRaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YjM0Y2IyLWJkYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClKZPu/Z5/K6ciqbFK/hSnhQ0zwyi4MFMLOrfnEUSOYafhC3MX407KdEJxPsrR mc+akLnLESDLV75Ke+GA3NU6e7yZD4tCjsD/RtwfucDz3nXBuCFyz/0FB4QFXlXT ux/eX1WFGurJibw17jEwpAu2T7v2JRIEs8FKkhBKUPKK0xPEUsU+UL7AYJiMd9r1 T/JB8YL6bwtw+1b3BmCtuCnWO4AF6x6ekbcFlWAkwQuLIpjz/yj4/nBm+smaeC3/ vIA9J5M84mzBbldBnfqzwiVi4cZ8dxqBBmboFVWa0GKUKj9rlqFwkhkIZ5dw102v MNNmfww2Yni+hGzF/e8TWcn3AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUIDuRzu12 vrnTAo44+VRo/x4GnB0wHwYDVR0jBBgwFoAUilgWVckip6USHgD7ekJ+AZrHMHsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0Mzc2L0EzNTdENzk2MjA4 QjExRUVBOEI1ODkzNEM0RjlBRTAyL2lsZ1dWY2tpcDZVU0hnRDdla0otQVpySE1I cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWxnV1Zja2lwNlVTSGdEN2VrSi1BWnJITUhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM3Ni9BMzU3RDc5NjIwOEIxMUVFQThCNTg5MzRDNEY5QUUwMi84NUNFNDRBNEJD MTExMUVFOUU0MkVCMkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWckWDAPBAIAAjAJAwcAIAEN8q5AMA0GCSqGSIb3DQEBCwUA A4IBAQAfPI5hhfDRy52Ooj7tS7q74TwY7A25utP8bE4rwz2ibRglQ+kDfBARRNWt gJnRgraFO5dxmoeSebaidJWdLchKaqoXvIqm97/YD6eSMw0IrTnAig4phXB3CE8L 9DpdMIJeD9nnv/Z0Pqbaa0MDtr8+cD3KdAgWPARN6TzaGOOSKVIps38PGWh+aDIn yweewPET/h79lCNWKi1rIQWzd4ni0sBWy6O+Jw67rSvdCigHABrr0xxxO/OxZLYz PqOL8FX/vmLu2XRS3qHUndGUrr8euAAz2M/iwgZA6cuxGd62VzIdwDykw/+2gTSM gj997N2fPoYNkVUK2WPyWuF9XZxz -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:32 2024 by rpki-client on console-fra.rpki-client.org