$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/611D8094B13D11E59299870AC4F9AE02.roa File: 611D8094B13D11E59299870AC4F9AE02.roa (raw, json) Hash identifier: 3yLI1G9CDO88xmuEKu7WMAe/TJefaC7wumODSumchPk= Subject key identifier: B5:94:58:C5:48:55:3D:1E:28:7E:1C:EF:46:22:85:BB:AC:B7:A8:88 Certificate issuer: /CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8 Certificate serial: 2CAB Authority key identifier: F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/611D8094B13D11E59299870AC4F9AE02.roa Signing time: Sat 28 Oct 2023 16:02:06 +0000 ROA not before: Sat 28 Oct 2023 16:02:06 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 133075 IP address blocks: 103.72.208.0/23 maxlen: 23 103.242.68.0/22 maxlen: 22 220.158.212.0/22 maxlen: 22 220.158.212.0/24 maxlen: 24 220.158.213.0/24 maxlen: 24 220.158.214.0/24 maxlen: 24 220.158.215.0/24 maxlen: 24 2407:f100::/32 maxlen: 32 2407:f100:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 15:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11435 (0x2cab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8 Validity Not Before: Oct 28 16:02:06 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=653d307e-65e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d3:94:e4:d1:54:0f:60:bd:8b:38:6f:5e:29: 9d:4e:db:23:a9:db:65:9b:10:cb:90:cc:71:8d:31: f8:07:33:bd:ed:e4:af:b7:e4:e8:59:2a:66:56:4e: 2c:c6:98:5d:30:fc:4b:94:b8:c6:24:f9:0f:99:25: 9e:0a:b1:88:9a:39:51:c7:58:1e:93:1e:35:24:ec: 85:4a:2d:16:3d:0c:fe:6f:65:cb:2d:1a:57:fe:3f: 21:ea:7c:61:3b:04:c2:8c:15:d2:8b:cb:e1:28:5b: ef:3b:74:94:e5:0f:19:24:13:d4:f1:3e:27:e0:7b: 3f:50:3b:4f:79:ab:cf:5d:5f:33:0c:99:1b:e6:f9: 1b:a3:6c:74:8d:76:52:cf:6e:02:e9:7e:1a:30:04: 70:99:71:fc:19:13:17:d0:9e:df:ea:37:41:0f:ea: 52:23:2e:dc:12:c8:fb:ab:08:7e:cd:80:45:6c:5f: d2:b2:09:05:c5:02:2b:ea:df:7d:05:73:09:f7:5a: 3e:5d:4a:5d:12:e6:61:5a:87:3d:cf:70:2b:19:a0: 7d:2a:b0:7e:91:e6:ba:25:37:6e:ce:c4:d0:27:60: 95:af:9b:93:21:26:6f:40:66:e2:28:7d:ba:b6:f8: 61:be:b0:f6:68:aa:cc:c9:37:7d:b8:cc:83:d0:52: 5b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:94:58:C5:48:55:3D:1E:28:7E:1C:EF:46:22:85:BB:AC:B7:A8:88 X509v3 Authority Key Identifier: keyid:F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/611D8094B13D11E59299870AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.208.0/23 103.242.68.0/22 220.158.212.0/22 IPv6: 2407:f100::/32 Signature Algorithm: sha256WithRSAEncryption 4a:7b:b8:2b:98:b0:dd:21:f4:4e:69:cb:38:54:15:39:29:25: 60:be:ba:8b:69:e0:f9:99:06:88:ea:79:8f:4a:11:41:98:95: e5:c6:d6:0f:92:be:df:9d:1d:7e:df:2f:1a:24:0d:41:89:54: ba:5a:ed:c0:31:98:57:87:2e:57:b2:d0:c8:ed:47:00:68:92: 91:8a:04:fd:43:6e:de:b1:a2:6b:cd:c1:86:4a:bf:72:93:79: d4:48:c6:05:a8:31:17:08:5b:ae:ee:c6:71:15:40:11:22:c4: bb:41:3b:1d:ff:41:4d:04:40:e2:1a:59:a0:b5:22:90:0b:36: 74:e5:0d:39:45:14:d2:e0:a8:f8:9e:5a:eb:cb:ff:f0:95:4e: d6:4c:e3:46:68:5c:7e:b3:32:67:95:e8:f7:a2:44:76:b8:69: 2c:b8:ce:a7:04:40:c0:27:4a:7b:3e:ed:0d:a0:3f:e4:c7:f1: 38:cd:cc:83:6c:b7:a2:1b:66:19:14:41:ff:57:9c:dc:27:43: 40:93:1b:97:b0:ab:ae:47:a0:63:93:2e:aa:5b:1c:c8:6c:11: e4:59:0d:74:2a:fe:e3:21:42:59:57:e6:7d:28:66:bc:15:79: 7b:0c:ea:07:30:31:a8:87:2e:8e:57:18:be:cd:b0:1c:7b:15: 88:eb:93:59 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICLKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxMDIxMTAvBgNVBAUTKEY5MUEzQTk4MzE0Mzg0QzQwM0E4RkYyMkE0NTNCQ0Ex QTNCQTZDRDgwHhcNMjMxMDI4MTYwMjA2WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNkMzA3ZS02NWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NOU5NFUD2C9izhvXimdTtsjqdtlmxDLkMxxjTH4BzO97eSvt+ToWSpmVk4s xphdMPxLlLjGJPkPmSWeCrGImjlRx1gekx41JOyFSi0WPQz+b2XLLRpX/j8h6nxh OwTCjBXSi8vhKFvvO3SU5Q8ZJBPU8T4n4Hs/UDtPeavPXV8zDJkb5vkbo2x0jXZS z24C6X4aMARwmXH8GRMX0J7f6jdBD+pSIy7cEsj7qwh+zYBFbF/SsgkFxQIr6t99 BXMJ91o+XUpdEuZhWoc9z3ArGaB9KrB+kea6JTduzsTQJ2CVr5uTISZvQGbiKH26 tvhhvrD2aKrMyTd9uMyD0FJbbQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFLWUWMVI VT0eKH4c70Yihbust6iIMB8GA1UdIwQYMBaAFPkaOpgxQ4TEA6j/IqRTvKGjumzY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEwMi9ENEFFRTJDODc2 OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhNUURxUDhpcEZPOG9hTzZi TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1SbzZtREZEaE1RRHFQOGlwRk84b2FPNmJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMxMDIvRDRBRUUyQzg3NjhFMTFFMzk5QTk1NzQ1NTkxMUVBMzIvNjExRDgwOTRC MTNEMTFFNTkyOTk4NzBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAFnSNADBAJn8kQDBALcntQwDQQCAAIwBwMFACQH8QAwDQYJ KoZIhvcNAQELBQADggEBAEp7uCuYsN0h9E5pyzhUFTkpJWC+uotp4PmZBojqeY9K EUGYleXG1g+Svt+dHX7fLxokDUGJVLpa7cAxmFeHLley0MjtRwBokpGKBP1Dbt6x omvNwYZKv3KTedRIxgWoMRcIW67uxnEVQBEixLtBOx3/QU0EQOIaWaC1IpALNnTl DTlFFNLgqPieWuvL//CVTtZM40ZoXH6zMmeV6PeiRHa4aSy4zqcEQMAnSns+7Q2g P+TH8TjNzINst6IbZhkUQf9XnNwnQ0CTG5ewq65HoGOTLqpbHMhsEeRZDXQq/uMh QllX5n0oZrwVeXsM6gcwMaiHLo5XGL7NsBx7FYjrk1k= -----END CERTIFICATE-----Generated at Thu Jun 6 21:11:35 2024 by rpki-client on console-ams.rpki-client.org