$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/6D8B82D0D6D811EE8BBA8938C4F9AE02.roa File: 6D8B82D0D6D811EE8BBA8938C4F9AE02.roa (raw, json) Hash identifier: XbQlgJ5ij8Zawt91ZOfJM2GofSHHlhd8JxuJOM9FhXM= Subject key identifier: 9D:AF:E7:52:FF:F8:54:78:87:2D:A7:B5:F5:AE:48:A9:2B:AE:82:AA Certificate issuer: /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3 Certificate serial: 0BA7 Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/6D8B82D0D6D811EE8BBA8938C4F9AE02.roa Signing time: Thu 16 May 2024 19:58:20 +0000 ROA not before: Thu 16 May 2024 19:58:20 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137530 IP address blocks: 103.112.56.0/24 maxlen: 24 103.112.57.0/24 maxlen: 24 103.112.58.0/23 maxlen: 23 103.112.58.0/24 maxlen: 24 103.112.59.0/24 maxlen: 24 2402:a540:56::/48 maxlen: 48 2402:a540:57::/48 maxlen: 48 2402:a540:58::/48 maxlen: 48 2402:a540:59::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 19:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2983 (0xba7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3 Validity Not Before: May 16 19:58:20 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6646655c-7c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:35:42:2f:b4:27:11:44:00:a9:43:a4:a2: b8:62:9c:f3:09:38:1a:a4:69:69:9f:30:93:f9:a8: a5:d8:06:5f:25:8b:da:18:a8:f6:20:06:e5:23:78: f0:99:5d:81:1a:1b:ce:8c:ca:2a:72:f6:4f:ea:2c: 1f:fc:91:95:30:d5:67:75:7e:b6:21:4f:2d:a5:7c: ad:7c:ab:3a:92:d3:dd:5d:9b:59:ac:6f:7e:ec:0a: 46:1b:86:63:78:c4:f9:e9:b2:ad:a7:44:89:e1:21: f1:71:e5:74:c1:8b:5a:79:4c:93:2c:91:ff:97:c6: 6a:ed:79:2a:bd:b4:db:a9:4e:b5:a1:a8:29:ce:c6: 82:64:bf:e1:62:2f:00:68:c4:68:2a:31:26:da:5f: 04:55:3f:2a:89:45:19:db:c3:c5:31:48:57:ef:f6: 79:0a:d4:73:56:6b:32:a7:0c:02:bc:d4:11:6a:2c: b0:10:c3:55:e9:6e:e7:c0:5e:58:b0:43:c4:ef:d0: 7f:ba:a2:52:7d:82:15:df:22:eb:6f:60:2e:63:5c: a0:f7:a9:3e:06:7a:a0:23:ee:2e:5a:6c:c7:a3:cd: 62:e5:fc:6f:9e:e5:e7:fb:c0:db:8e:58:21:9d:ea: d4:5a:57:51:d5:d6:3e:cb:60:4e:17:19:9f:bf:8a: 3c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AF:E7:52:FF:F8:54:78:87:2D:A7:B5:F5:AE:48:A9:2B:AE:82:AA X509v3 Authority Key Identifier: keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/6D8B82D0D6D811EE8BBA8938C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.56.0/22 IPv6: 2402:a540:56::-2402:a540:59:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b5:60:70:47:bf:9d:19:e9:be:52:b3:84:17:55:f4:52:7e:c4: 4f:b1:66:8f:25:3b:cc:c9:10:dd:09:dd:ef:79:42:a4:75:65: 0b:69:13:31:57:2d:0c:0c:c7:91:38:00:ac:f5:0e:22:fe:6c: 8f:b2:53:12:90:45:fb:7e:7f:9d:84:c1:83:d0:07:b8:d9:21: 28:fa:25:4c:18:f0:e9:41:94:b6:81:0f:d1:6b:af:2e:99:b1: e1:28:77:2c:09:d1:01:fd:3b:43:b3:19:2b:bc:1b:85:98:ba: c4:72:f5:56:3f:fc:24:fa:89:59:99:d0:c4:31:2a:ac:22:5b: 09:64:bb:52:f7:49:a8:ca:b1:a9:d5:7f:00:e8:4b:ee:b7:57: 95:6d:cf:95:c2:26:74:d7:f8:9f:60:86:61:c0:c0:7d:fb:74: cf:72:8b:3f:9a:81:15:c8:1d:2a:6f:92:03:5b:7e:ae:68:88: 64:b3:ab:51:f9:33:27:6f:f6:64:68:3f:a4:6b:7e:4c:3d:3f: b5:7e:4d:74:08:df:02:c9:32:b5:db:0a:68:80:f9:84:ee:8f: 33:eb:a1:1c:98:5c:89:63:a7:46:1a:76:34:03:77:e8:45:5d: 68:1c:27:16:1e:82:4a:9a:97:24:4d:0f:50:6e:8e:50:5d:9a: 7e:94:9c:5f -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxQTIxMTAvBgNVBAUTKDZGNEY0NjhFNDMwOEIwMEQwREY1RkVBQzg0Mjg2NkQ1 NEU3N0Y1RDMwHhcNMjQwNTE2MTk1ODIwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ2NjU1Yy03YzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtn41Qi+0JxFEAKlDpKK4YpzzCTgapGlpnzCT+ail2AZfJYvaGKj2IAblI3jw mV2BGhvOjMoqcvZP6iwf/JGVMNVndX62IU8tpXytfKs6ktPdXZtZrG9+7ApGG4Zj eMT56bKtp0SJ4SHxceV0wYtaeUyTLJH/l8Zq7XkqvbTbqU61oagpzsaCZL/hYi8A aMRoKjEm2l8EVT8qiUUZ28PFMUhX7/Z5CtRzVmsypwwCvNQRaiywEMNV6W7nwF5Y sEPE79B/uqJSfYIV3yLrb2AuY1yg96k+BnqgI+4uWmzHo81i5fxvnuXn+8Dbjlgh nerUWldR1dY+y2BOFxmfv4o82wIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFJ2v51L/ +FR4hy2ntfWuSKkrroKqMB8GA1UdIwQYMBaAFG9PRo5DCLANDfX+rIQoZtVOd/XT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFBMi9ERkQxMUYyODA2 QTYxMUVBODk3NUUzNDFDNEY5QUUwMi9iMDlHamtNSXNBME45ZjZzaENobTFVNTM5 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IwOUdqa01Jc0EwTjlmNnNoQ2htMVU1MzlkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQxQTIvREZEMTFGMjgwNkE2MTFFQTg5NzVFMzQxQzRGOUFFMDIvNkQ4QjgyRDBE NkQ4MTFFRThCQkE4OTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMAwEAgABMAYDBAJncDgwGgQCAAIwFDASAwcBJAKlQABWAwcBJAKlQABYMA0G CSqGSIb3DQEBCwUAA4IBAQC1YHBHv50Z6b5Ss4QXVfRSfsRPsWaPJTvMyRDdCd3v eUKkdWULaRMxVy0MDMeROACs9Q4i/myPslMSkEX7fn+dhMGD0Ae42SEo+iVMGPDp QZS2gQ/Ra68umbHhKHcsCdEB/TtDsxkrvBuFmLrEcvVWP/wk+olZmdDEMSqsIlsJ ZLtS90moyrGp1X8A6Evut1eVbc+VwiZ01/ifYIZhwMB9+3TPcos/moEVyB0qb5ID W36uaIhks6tR+TMnb/ZkaD+ka35MPT+1fk10CN8CyTK12wpogPmE7o8z66EcmFyJ Y6dGGnY0A3foRV1oHCcWHoJKmpckTQ9Qbo5QXZp+lJxf -----END CERTIFICATE-----Generated at Fri Jun 14 20:34:04 2024 by rpki-client on console-fra.rpki-client.org