$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa File: 8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa (raw, json) Hash identifier: fmLFWf/mQN23ivfz+XPN5RMVSxs9MAhpdzQIsqVJ1tM= Subject key identifier: 06:1F:EC:A9:00:D9:E9:75:0E:49:5F:6A:0F:40:44:88:70:11:3B:DC Certificate issuer: /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Certificate serial: 069D Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa Signing time: Wed 22 Nov 2023 02:21:55 +0000 ROA not before: Wed 22 Nov 2023 02:21:55 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 23862 IP address blocks: 103.53.58.0/24 maxlen: 24 103.53.59.0/24 maxlen: 24 202.92.128.0/24 maxlen: 24 202.92.129.0/24 maxlen: 24 202.92.130.0/24 maxlen: 24 202.92.131.0/24 maxlen: 24 202.92.132.0/24 maxlen: 24 202.92.134.0/24 maxlen: 24 202.92.135.0/24 maxlen: 24 202.92.136.0/22 maxlen: 22 202.92.136.0/24 maxlen: 24 202.92.141.0/24 maxlen: 24 202.92.159.0/24 maxlen: 24 2400:b000:100::/48 maxlen: 48 2400:b000:c0e::/48 maxlen: 48 2400:b000:eee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1693 (0x69d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Validity Not Before: Nov 22 02:21:55 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=655d65c3-e7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b7:af:e7:38:8f:87:35:99:01:d3:3c:ce:50: 70:34:f5:f5:74:c9:ce:19:82:47:b1:50:9f:72:8a: 56:0f:12:62:3c:d0:b7:13:4c:e2:3f:4f:bd:53:22: c3:b6:fa:72:d9:fa:12:0d:b2:e0:05:4d:98:95:fc: 98:a4:53:6f:bd:14:d9:a2:98:99:96:f2:3f:30:11: 37:f2:1a:e5:0f:3b:0a:95:43:19:d2:f8:f7:02:05: 21:55:66:21:91:4e:1a:3f:89:05:16:7a:92:c7:47: 44:9a:01:8c:02:9d:92:cb:90:3c:ac:b8:e5:90:06: 66:4b:6e:1d:88:fe:ab:e2:6f:d2:cd:77:52:61:8e: 20:bc:a8:55:bf:c3:a1:fd:d3:8b:92:4b:ee:9d:2f: d2:28:7b:06:90:84:c2:ec:5e:0d:ef:e2:75:ab:95: 65:10:da:f3:84:0c:9c:f7:a3:eb:3e:7a:c2:6d:6d: c2:bd:7f:8e:7f:d0:ed:88:1e:33:4f:b5:8c:f0:cd: 9a:36:88:f9:e2:29:7e:db:87:4f:9f:66:2c:35:4e: 95:c7:0a:5d:68:5c:92:8d:31:52:c8:be:7b:fe:c5: c2:2a:5b:18:1b:13:b8:28:9c:8d:91:19:b0:bd:a2: 46:ae:71:3b:7c:e2:aa:f8:83:04:20:ca:3d:ec:30: 63:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1F:EC:A9:00:D9:E9:75:0E:49:5F:6A:0F:40:44:88:70:11:3B:DC X509v3 Authority Key Identifier: keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.53.58.0/23 202.92.128.0-202.92.132.255 202.92.134.0-202.92.139.255 202.92.141.0/24 202.92.159.0/24 IPv6: 2400:b000:100::/48 2400:b000:c0e::/48 2400:b000:eee::/48 Signature Algorithm: sha256WithRSAEncryption 57:ab:32:30:67:1c:7a:9b:76:68:92:21:6d:c1:34:67:d0:ec: 27:5d:6b:56:24:e4:a3:a5:cc:a5:f6:e1:f0:5b:4d:08:af:5d: 1e:de:42:58:d2:1f:04:5b:95:d4:a0:7e:00:61:5d:9a:e4:65: d2:21:2f:db:24:23:4e:39:99:02:4b:86:b1:d0:f9:85:1f:a3: 25:17:91:5b:83:8f:c5:e8:6e:be:24:71:79:13:c7:2b:69:51: 1a:e9:93:7d:2f:46:14:a0:8f:ab:9a:bf:e3:55:a5:4f:5d:c8: 6d:34:d3:5a:e8:8e:bb:f8:1f:1a:4b:79:0d:f1:67:67:cf:12: ce:47:02:a8:57:e2:cd:9c:31:55:a4:a9:ec:0c:bd:8b:95:40: 58:47:04:77:cf:e3:07:59:22:cd:fa:ca:c5:ee:c6:cc:ff:e7: 60:37:37:33:3c:d7:f4:ce:a6:83:95:8b:56:dc:6d:ea:80:9c: 8c:f2:e9:f1:5d:2d:e9:5e:b5:33:ab:11:f2:33:60:c7:e1:00: 53:cb:50:29:79:0e:24:48:70:d9:1b:b0:43:1f:3e:a5:90:0b: 00:0e:55:5a:c5:de:f0:56:a9:d5:72:18:81:f5:d7:6c:2f:11: 46:98:6e:ca:d9:c6:d9:5e:f4:8a:8a:25:7b:d3:33:3a:32:e0: b2:ef:ac:e9 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MTgxMTAvBgNVBAUTKDc2MTc0NjI1RTgxNjMyRDM4REY2MkE4M0I1N0IwM0JB Mjg4N0U2RjUwHhcNMjMxMTIyMDIyMTU1WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTVkNjVjMy1lN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rev5ziPhzWZAdM8zlBwNPX1dMnOGYJHsVCfcopWDxJiPNC3E0ziP0+9UyLD tvpy2foSDbLgBU2YlfyYpFNvvRTZopiZlvI/MBE38hrlDzsKlUMZ0vj3AgUhVWYh kU4aP4kFFnqSx0dEmgGMAp2Sy5A8rLjlkAZmS24diP6r4m/SzXdSYY4gvKhVv8Oh /dOLkkvunS/SKHsGkITC7F4N7+J1q5VlENrzhAyc96PrPnrCbW3CvX+Of9DtiB4z T7WM8M2aNoj54il+24dPn2YsNU6VxwpdaFySjTFSyL57/sXCKlsYGxO4KJyNkRmw vaJGrnE7fOKq+IMEIMo97DBjyQIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFAYf7KkA 2el1Dklfag9ARIhwETvcMB8GA1UdIwQYMBaAFHYXRiXoFjLTjfYqg7V7A7ooh+b1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcxOC85MjgzRURFRTBF OTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010T045aXFEdFhzRHVpaUg1 dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoZEdKZWdXTXRPTjlpcUR0WHNEdWlpSDV2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTA3MTgvOTI4M0VERUUwRTk0MTFFQjk2NjlFMTMzQzRGOUFFMDIvODQzM0ZGNkEw RTk3MTFFQjlBNkMyQjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwagYIKwYBBQUHAQcBAf8E WzBZMDQEAgABMC4DBAFnNTowDAMEB8pcgAMEAMpchDAMAwQBylyGAwQCylyIAwQA ylyNAwQAylyfMCEEAgACMBsDBwAkALAAAQADBwAkALAADA4DBwAkALAADu4wDQYJ KoZIhvcNAQELBQADggEBAFerMjBnHHqbdmiSIW3BNGfQ7Cdda1Yk5KOlzKX24fBb TQivXR7eQljSHwRbldSgfgBhXZrkZdIhL9skI045mQJLhrHQ+YUfoyUXkVuDj8Xo br4kcXkTxytpURrpk30vRhSgj6uav+NVpU9dyG0001rojrv4HxpLeQ3xZ2fPEs5H AqhX4s2cMVWkqewMvYuVQFhHBHfP4wdZIs36ysXuxsz/52A3NzM81/TOpoOVi1bc beqAnIzy6fFdLeletTOrEfIzYMfhAFPLUCl5DiRIcNkbsEMfPqWQCwAOVVrF3vBW qdVyGIH112wvEUaYbsrZxtle9IqKJXvTMzoy4LLvrOk= -----END CERTIFICATE-----Generated at Thu May 16 23:39:13 2024 by rpki-client on console-ams.rpki-client.org