$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa File: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (raw, json) Hash identifier: 0733UsCseVDe/8K7ETFC6o7bBdf81QYokPJegssCSLo= Subject key identifier: 1F:68:A3:31:0A:2B:19:01:E9:93:60:5B:12:D7:4F:68:BC:14:19:E7 Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Certificate serial: 2391 Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa Signing time: Tue 18 Jul 2023 16:12:24 +0000 ROA not before: Tue 18 Jul 2023 16:12:24 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 134431 IP address blocks: 36.255.106.0/23 maxlen: 23 36.255.106.0/24 maxlen: 24 103.62.30.0/23 maxlen: 29 103.82.46.0/23 maxlen: 23 185.146.208.0/22 maxlen: 22 185.146.210.0/23 maxlen: 23 2407:c540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9105 (0x2391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Validity Not Before: Jul 18 16:12:24 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64b6b9e8-5ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ad:c0:8d:4f:c7:b9:d0:9b:aa:ba:4c:2e:19: ed:9c:ae:aa:cb:5a:96:ce:32:e8:3d:aa:b9:97:a7: b8:50:ff:ae:8b:24:f6:34:dd:5c:c3:59:2d:0a:70: b8:0a:49:25:a6:d1:73:66:ea:2c:a8:cf:b5:f4:5c: 50:dc:ff:71:8c:d4:c2:4b:87:8a:24:12:60:c4:e8: e4:dd:bb:b2:77:e1:4e:40:50:75:4d:f9:cb:76:5e: ae:3e:ae:0b:29:5a:38:2e:78:60:da:77:16:8d:c2: ee:10:f4:94:19:bb:16:b1:93:74:6e:95:42:6f:15: f6:6b:1b:bd:80:15:12:f1:38:bf:1e:d1:6a:f4:a1: 99:3c:68:00:8d:c0:d2:f2:d7:35:a9:f6:e6:e7:ec: a8:e6:c0:77:27:01:85:fd:f4:83:99:c4:8b:32:c4: e3:0f:32:3f:c4:7e:2c:a2:71:b4:b8:58:58:ca:1b: fe:52:92:10:c4:b8:39:37:cb:6a:f4:a7:06:08:a6: 8c:7d:7d:1e:31:00:fa:ca:90:34:74:8e:4c:b2:f6: 22:e4:59:e3:49:c0:0c:bd:75:fd:23:50:6e:9f:24: 62:6b:f5:c9:ad:a3:0a:4b:77:e2:31:c5:bf:8a:02: 4e:7e:dc:e7:eb:27:6b:d7:93:5d:bb:78:75:9a:89: 4f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:68:A3:31:0A:2B:19:01:E9:93:60:5B:12:D7:4F:68:BC:14:19:E7 X509v3 Authority Key Identifier: keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.106.0/23 103.62.30.0/23 103.82.46.0/23 185.146.208.0/22 IPv6: 2407:c540::/32 Signature Algorithm: sha256WithRSAEncryption 78:f9:f1:44:31:27:b1:cc:88:5a:59:a1:d7:fe:fb:0b:41:cb: ed:85:04:38:3e:10:5d:25:d0:b9:02:49:a3:b2:ba:80:0f:08: 19:66:b3:e2:2f:f8:24:7a:5a:c4:d4:17:43:17:d1:a5:36:9f: 42:71:f2:3e:82:c1:cb:96:f4:71:88:bf:e5:1c:a9:8f:e5:1c: 09:74:06:54:43:d2:68:99:a7:1c:b4:a1:c2:7a:ac:bf:04:f7: 1b:12:11:be:1d:82:1b:fb:c5:c4:ae:bd:86:ef:31:83:4f:1e: a8:8b:33:ab:bc:4a:37:9c:bf:87:b6:b2:59:34:1d:27:b9:fe: 64:70:58:c1:91:28:ee:4b:11:87:d1:cf:68:df:54:06:4d:77: e1:e6:90:8d:0b:5f:51:71:8f:07:4d:b7:47:6c:55:74:e9:0b: 37:da:bf:10:1f:45:6e:38:39:5f:56:cb:74:47:6f:96:63:2f: 2e:71:a8:73:e9:0a:69:0d:9f:81:7e:38:fd:11:02:34:6f:56: 88:f1:81:51:a8:69:2d:04:ac:b7:32:9d:e6:29:86:76:6e:05: fc:5d:68:a5:6b:a5:16:9d:35:5b:2f:ee:6b:75:80:df:2e:1b: 37:a6:34:f8:20:54:c1:e0:ad:84:a1:0f:b8:a2:a0:7f:88:1d: 4c:81:78:b7 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICI5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFBMEYxMTAvBgNVBAUTKDI1NTlDRjVDODBDQkZENDU0NzIwM0JEMDUxNjhDQzM2 NDlENTY0QzQwHhcNMjMwNzE4MTYxMjI0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI2YjllOC01Y2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx63AjU/HudCbqrpMLhntnK6qy1qWzjLoPaq5l6e4UP+uiyT2NN1cw1ktCnC4 CkklptFzZuosqM+19FxQ3P9xjNTCS4eKJBJgxOjk3buyd+FOQFB1TfnLdl6uPq4L KVo4Lnhg2ncWjcLuEPSUGbsWsZN0bpVCbxX2axu9gBUS8Ti/HtFq9KGZPGgAjcDS 8tc1qfbm5+yo5sB3JwGF/fSDmcSLMsTjDzI/xH4sonG0uFhYyhv+UpIQxLg5N8tq 9KcGCKaMfX0eMQD6ypA0dI5MsvYi5FnjScAMvXX9I1BunyRia/XJraMKS3fiMcW/ igJOftzn6ydr15Ndu3h1molP5QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFB9oozEK KxkB6ZNgWxLXT2i8FBnnMB8GA1UdIwQYMBaAFCVZz1yAy/1FRyA70FFozDZJ1WTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUEwRi8yMjc3NDI1MjM1 QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9VVkhJRHZRVVdqTU5rblZa TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWblBYSURMX1VWSElEdlFVV2pNTmtuVlpNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkFBMEYvMjI3NzQyNTIzNUExMTFFNUIwNTNEOTI3QzRGOUFFMDIvREZBN0ZBQ0E1 NEY3MTFFN0JGQjQ4MDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAEk/2oDBAFnPh4DBAFnUi4DBAK5ktAwDQQCAAIwBwMFACQH xUAwDQYJKoZIhvcNAQELBQADggEBAHj58UQxJ7HMiFpZodf++wtBy+2FBDg+EF0l 0LkCSaOyuoAPCBlms+Iv+CR6WsTUF0MX0aU2n0Jx8j6CwcuW9HGIv+UcqY/lHAl0 BlRD0miZpxy0ocJ6rL8E9xsSEb4dghv7xcSuvYbvMYNPHqiLM6u8Sjecv4e2slk0 HSe5/mRwWMGRKO5LEYfRz2jfVAZNd+HmkI0LX1FxjwdNt0dsVXTpCzfavxAfRW44 OV9Wy3RHb5ZjLy5xqHPpCmkNn4F+OP0RAjRvVojxgVGoaS0ErLcyneYphnZuBfxd aKVrpRadNVsv7mt1gN8uGzemNPggVMHgrYShD7iioH+IHUyBeLc= -----END CERTIFICATE-----Generated at Fri May 31 20:34:05 2024 by rpki-client on console-ams.rpki-client.org