$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3430A42E01E711EDB2C82D0FC4F9AE02.roa File: 3430A42E01E711EDB2C82D0FC4F9AE02.roa (raw, json) Hash identifier: Z3wHg0UuYuLm0nqnohTVvKyFnUldmMhCETtmA2WvNO4= Subject key identifier: 80:98:BC:FD:DE:E2:91:EA:A1:4F:04:A0:D8:F7:65:10:A3:9D:21:23 Certificate issuer: /CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8 Certificate serial: 01D6 Authority key identifier: 46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3430A42E01E711EDB2C82D0FC4F9AE02.roa Signing time: Wed 01 May 2024 05:07:25 +0000 ROA not before: Wed 01 May 2024 05:07:25 +0000 ROA not after: Thu 29 Aug 2024 00:00:00 +0000 asID: 135602 IP address blocks: 103.227.57.0/24 maxlen: 24 103.227.58.0/24 maxlen: 24 103.227.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.crl rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 04:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8 Validity Not Before: May 1 05:07:25 2024 GMT Not After : Aug 29 00:00:00 2024 GMT Subject: CN=6631ce0d-c9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d8:1e:69:db:5e:9f:a7:05:ad:b2:b8:04:3f: b7:92:0a:07:d6:bc:95:27:58:ac:2f:e5:92:11:65: 67:8b:a4:0d:42:58:25:2b:ac:44:74:a5:ea:43:32: 41:e1:a6:a0:b1:21:47:fb:08:15:5d:24:01:cf:9e: ef:50:af:81:58:00:5f:56:11:14:4b:82:d9:8d:b6: b1:4f:fe:8e:38:07:60:4d:93:19:19:80:a1:0f:72: 51:cf:64:d8:ac:a8:37:72:d0:14:cd:b5:b3:da:0f: 96:08:a4:e1:43:1c:90:f5:5a:d3:f4:ed:e8:6e:f5: 22:57:fa:60:af:6e:2f:9d:b3:7e:52:1c:78:96:86: 1f:59:ed:b5:4f:42:96:35:bf:03:54:51:b6:1d:f0: 78:d9:bf:92:9e:c6:15:e1:c6:d1:d7:1c:ab:9a:bc: 51:d0:f4:23:8c:62:1a:d6:5c:ba:bb:e8:d5:68:a8: e7:eb:2d:2e:e8:70:1e:b8:da:d5:e3:00:87:80:46: 18:31:90:dd:b6:17:95:90:90:f5:17:86:64:3d:15: 3f:fc:4e:01:f0:1d:d1:e3:8a:75:73:e7:40:8f:be: 99:da:a8:9d:53:fd:dd:92:9d:1c:bb:ca:69:08:35: ff:8b:5e:be:28:6b:82:8d:4f:0b:5c:c8:97:38:83: 61:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:98:BC:FD:DE:E2:91:EA:A1:4F:04:A0:D8:F7:65:10:A3:9D:21:23 X509v3 Authority Key Identifier: keyid:46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3430A42E01E711EDB2C82D0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.227.57.0-103.227.59.255 Signature Algorithm: sha256WithRSAEncryption c5:2b:20:01:5b:f2:6e:6e:e1:49:7f:be:20:59:2f:b1:40:f3: 8c:81:13:40:72:03:4d:c7:96:fa:f2:76:7f:cc:c0:ed:4a:0e: 12:9d:b0:78:04:f3:97:cd:95:39:98:6b:b5:e3:23:3c:ed:60: 7e:82:fa:7b:0b:67:2d:db:c1:39:31:e0:55:31:f2:ec:e3:0d: 1a:69:ac:9e:4f:f4:c0:93:fd:6d:2b:6f:8b:ad:53:4f:28:86: cd:d0:52:12:c7:67:c5:4f:ff:5d:09:a0:50:32:f2:1e:be:2f: a3:a9:e0:01:51:bb:a0:1e:31:a6:a0:13:34:14:bf:89:13:fb: c2:fe:7a:e9:c6:20:0f:4f:c2:b3:49:24:e8:9e:3b:1d:de:fd: 4e:96:90:0a:8a:09:25:e3:13:07:a3:2c:91:be:95:0c:7f:60: 08:7a:8e:a8:d3:5a:2c:dc:32:c1:a9:6e:00:f4:b4:c7:0d:d3: 71:83:20:17:74:f8:91:1a:de:1a:ec:c5:bd:ad:73:a3:15:1c: af:9f:1f:bf:bb:e4:89:9c:db:3b:e3:b8:d7:be:a6:52:4f:7c: 7e:f7:ab:4b:fc:1b:9c:24:c0:06:82:43:d1:54:f2:38:0a:83: 83:58:36:19:0d:31:09:9b:ab:d7:41:46:f6:01:b4:32:50:4c: 88:dc:44:02 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGMzQxMTAvBgNVBAUTKDQ2MEZBOEZBRkZDOEJFNDA5RUMyQkRGODQ2MzcwNTg2 M0E0NUU4RTgwHhcNMjQwNTAxMDUwNzI1WhcNMjQwODI5MDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxY2UwZC1jOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndgeadten6cFrbK4BD+3kgoH1ryVJ1isL+WSEWVni6QNQlglK6xEdKXqQzJB 4aagsSFH+wgVXSQBz57vUK+BWABfVhEUS4LZjbaxT/6OOAdgTZMZGYChD3JRz2TY rKg3ctAUzbWz2g+WCKThQxyQ9VrT9O3obvUiV/pgr24vnbN+Uhx4loYfWe21T0KW Nb8DVFG2HfB42b+SnsYV4cbR1xyrmrxR0PQjjGIa1ly6u+jVaKjn6y0u6HAeuNrV 4wCHgEYYMZDdtheVkJD1F4ZkPRU//E4B8B3R44p1c+dAj76Z2qidU/3dkp0cu8pp CDX/i16+KGuCjU8LXMiXOINheQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFICYvP3e 4pHqoU8EoNj3ZRCjnSEjMB8GA1UdIwQYMBaAFEYPqPr/yL5AnsK9+EY3BYY6Rejo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUYzNC9GOTYwRDFCNDAx RTMxMUVEODEyRTUwMEJDNEY5QUUwMi9SZy1vLXZfSXZrQ2V3cjM0UmpjRmhqcEY2 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JnLW8tdl9JdmtDZXdyMzRSamNGaGpwRjZPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFGMzQvRjk2MEQxQjQwMUUzMTFFRDgxMkU1MDBCQzRGOUFFMDIvMzQzMEE0MkUw MUU3MTFFREIyQzgyRDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGfjOQMEAmfjODANBgkqhkiG9w0BAQsFAAOCAQEAxSsg AVvybm7hSX++IFkvsUDzjIETQHIDTceW+vJ2f8zA7UoOEp2weATzl82VOZhrteMj PO1gfoL6ewtnLdvBOTHgVTHy7OMNGmmsnk/0wJP9bStvi61TTyiGzdBSEsdnxU// XQmgUDLyHr4vo6ngAVG7oB4xpqATNBS/iRP7wv566cYgD0/Cs0kk6J47Hd79TpaQ CooJJeMTB6Mskb6VDH9gCHqOqNNaLNwywaluAPS0xw3TcYMgF3T4kRreGuzFva1z oxUcr58fv7vkiZzbO+O4176mUk98fverS/wbnCTABoJD0VTyOAqDg1g2GQ0xCZur 10FG9gG0MlBMiNxEAg== -----END CERTIFICATE-----Generated at Fri May 17 06:46:19 2024 by rpki-client on console-ams.rpki-client.org