$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/885DA760AA8811E799348329C4F9AE02.roa File: 885DA760AA8811E799348329C4F9AE02.roa (raw, json) Hash identifier: yqEcj3SZ3T1pYpHMLtfx0ZxmS715TGOM5EI1dS08gyg= Subject key identifier: 23:9E:E5:ED:1C:0A:97:E8:15:02:77:C3:02:F2:0D:29:8A:8F:E5:D9 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 1905 Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/885DA760AA8811E799348329C4F9AE02.roa Signing time: Tue 28 May 2024 17:25:24 +0000 ROA not before: Tue 28 May 2024 17:25:24 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135330 IP address blocks: 103.214.144.0/24 maxlen: 24 103.214.145.0/24 maxlen: 24 103.214.146.0/24 maxlen: 24 103.214.147.0/24 maxlen: 24 2404:c680::/32 maxlen: 32 2404:c680::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6405 (0x1905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Validity Not Before: May 28 17:25:24 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66561384-e84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:c0:30:73:35:a4:06:31:a3:a5:7e:4a:08: 2d:a1:d4:e4:aa:3f:83:eb:cf:30:e5:14:86:87:d4: 6b:cd:ea:aa:db:30:ae:7d:d5:01:0b:c2:4e:21:b1: 73:65:5e:6b:49:08:ce:aa:f6:e1:05:95:28:7c:96: fa:03:8f:f6:6c:4d:ae:24:e4:dc:72:21:b1:13:79: 09:c4:3f:fe:82:6d:62:1a:a6:23:e6:b7:27:fe:ff: 8e:c8:2b:12:3d:94:7d:bb:49:d8:0f:bf:f4:d3:e5: 05:83:f7:b7:6c:6d:10:9f:ea:d5:e5:fc:57:9b:be: d6:57:cb:97:81:d2:0b:dc:19:09:3a:08:b7:ab:e5: be:27:c8:60:23:23:2e:35:d2:b4:48:39:92:b4:3b: 2b:9d:67:c1:a2:b1:b1:03:63:de:c1:b6:4e:71:16: 33:1b:12:3b:44:6e:2b:ce:88:22:70:65:8e:3c:b3: 53:fa:64:8d:4f:3c:07:05:e0:3c:d6:1a:03:1e:cf: 42:e5:44:49:24:df:88:09:3c:7f:46:12:c4:1e:26: 93:4e:4a:54:0f:b6:33:d2:9d:9d:15:80:d9:06:4e: dd:4e:bb:62:79:ef:43:ce:88:62:57:8a:1d:a4:6b: ed:e1:89:64:06:90:45:49:66:dd:7e:ad:a8:fa:8f: 55:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9E:E5:ED:1C:0A:97:E8:15:02:77:C3:02:F2:0D:29:8A:8F:E5:D9 X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/885DA760AA8811E799348329C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.214.144.0/22 IPv6: 2404:c680::/32 Signature Algorithm: sha256WithRSAEncryption 2c:ce:3f:99:68:4a:57:f7:22:81:b1:bd:a4:2d:72:98:24:8e: 3e:cc:28:26:fa:8c:3c:98:bc:cc:ff:aa:85:7e:75:0f:7f:3b: ba:40:7f:43:99:d6:b5:c4:e9:71:e8:2e:e1:a2:ee:62:cb:ef: 94:ce:2a:e8:57:ae:85:22:aa:45:0d:10:c1:9b:1b:36:81:1c: 43:a5:fe:73:9f:a2:4a:54:90:d2:f5:10:82:53:2d:dc:36:07: 6f:99:05:0d:47:11:79:88:1a:09:9c:8c:34:6e:b3:5d:da:7e: d8:fe:ca:39:f5:f0:c7:d1:64:6b:f2:7c:eb:12:26:21:41:83: 49:f8:97:e7:ca:1e:c0:0b:ab:92:4d:2e:6c:13:13:1a:0f:c9: ae:c5:4e:d6:e1:65:3b:f1:6a:e5:bb:2e:ec:85:2f:09:e8:00: 99:84:b0:c3:f4:89:ce:e8:03:c4:21:79:77:0a:96:56:2f:a2: 27:84:29:1c:f7:d0:ff:de:a9:b3:c8:2b:e3:0a:3c:e3:a9:e7: 50:e4:a3:db:46:6b:7d:6d:c8:e3:23:4a:eb:66:f9:a3:a1:0c: fb:f8:e8:c9:ef:cc:33:63:f5:4e:34:e9:76:64:12:e6:9f:05: ac:72:08:76:7a:c2:b6:db:ca:79:df:60:f1:9d:3b:5d:0d:d0: da:48:f1:5c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICGQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjQwNTI4MTcyNTI0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU2MTM4NC1lODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPrAMHM1pAYxo6V+SggtodTkqj+D688w5RSGh9Rrzeqq2zCufdUBC8JOIbFz ZV5rSQjOqvbhBZUofJb6A4/2bE2uJOTcciGxE3kJxD/+gm1iGqYj5rcn/v+OyCsS PZR9u0nYD7/00+UFg/e3bG0Qn+rV5fxXm77WV8uXgdIL3BkJOgi3q+W+J8hgIyMu NdK0SDmStDsrnWfBorGxA2PewbZOcRYzGxI7RG4rzogicGWOPLNT+mSNTzwHBeA8 1hoDHs9C5URJJN+ICTx/RhLEHiaTTkpUD7Yz0p2dFYDZBk7dTrtiee9DzohiV4od pGvt4YlkBpBFSWbdfq2o+o9VKQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCOe5e0c CpfoFQJ3wwLyDSmKj+XZMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODkyNjUvRDhCNEI2MUU2MDIyMTFFN0I5NkZDMjY0QzRGOUFFMDIvODg1REE3NjBB QTg4MTFFNzk5MzQ4MzI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn1pAwDQQCAAIwBwMFACQExoAwDQYJKoZIhvcNAQELBQAD ggEBACzOP5loSlf3IoGxvaQtcpgkjj7MKCb6jDyYvMz/qoV+dQ9/O7pAf0OZ1rXE 6XHoLuGi7mLL75TOKuhXroUiqkUNEMGbGzaBHEOl/nOfokpUkNL1EIJTLdw2B2+Z BQ1HEXmIGgmcjDRus13aftj+yjn18MfRZGvyfOsSJiFBg0n4l+fKHsALq5JNLmwT ExoPya7FTtbhZTvxauW7LuyFLwnoAJmEsMP0ic7oA8QheXcKllYvoieEKRz30P/e qbPIK+MKPOOp51Dko9tGa31tyOMjSutm+aOhDPv46MnvzDNj9U406XZkEuafBaxy CHZ6wrbbynnfYPGdO10N0NpI8Vw= -----END CERTIFICATE-----Generated at Fri May 31 20:34:07 2024 by rpki-client on console-ams.rpki-client.org