$ rpki-client -vvf rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/80C4CAC6AE5311E983E98A4FC4F9AE02.roa File: 80C4CAC6AE5311E983E98A4FC4F9AE02.roa (raw, json) Hash identifier: FnZHey3rMS8XYtVSXTghg880bf4pMQDXQUruX/gl9Us= Subject key identifier: 6B:6E:CA:70:45:FC:3E:C2:6A:1B:36:40:AD:E6:C9:D8:CF:58:B5:5F Certificate issuer: /CN=A9115854/serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF Certificate serial: 0D00 Authority key identifier: 9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/80C4CAC6AE5311E983E98A4FC4F9AE02.roa Signing time: Tue 28 Nov 2023 18:45:54 +0000 ROA not before: Tue 28 Nov 2023 18:45:54 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 139335 IP address blocks: 103.103.124.0/22 maxlen: 22 103.103.124.0/24 maxlen: 24 103.103.125.0/24 maxlen: 24 103.103.126.0/24 maxlen: 24 103.103.127.0/24 maxlen: 24 2403:f940::/32 maxlen: 32 2403:f940::/36 maxlen: 36 2403:f940:1000::/36 maxlen: 36 2403:f940:2000::/36 maxlen: 36 2403:f940:3000::/36 maxlen: 36 2403:f940:4000::/36 maxlen: 36 2403:f940:5000::/36 maxlen: 36 2403:f940:6000::/36 maxlen: 36 2403:f940:7000::/36 maxlen: 36 2403:f940:8000::/36 maxlen: 36 2403:f940:9000::/36 maxlen: 36 2403:f940:a000::/36 maxlen: 36 2403:f940:b000::/36 maxlen: 36 2403:f940:c000::/36 maxlen: 36 2403:f940:d000::/36 maxlen: 36 2403:f940:e000::/36 maxlen: 36 2403:f940:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115854/serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF Validity Not Before: Nov 28 18:45:54 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65663561-fe11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:88:8e:86:98:a0:53:47:95:66:29:b8:f2: cf:83:f9:86:7a:3c:44:bd:f4:15:32:26:63:d0:83: 61:58:92:3c:f2:c6:83:d5:78:ea:3e:9f:b8:83:f9: 21:97:70:b3:0e:57:ed:e2:0c:03:6c:66:da:23:e3: b7:96:e6:00:5b:29:21:db:f7:7b:7b:0c:25:8e:df: d0:17:cf:81:92:65:6d:40:46:c4:ef:70:c5:29:9b: 51:64:d7:c8:cd:61:2a:f5:c0:f6:bf:04:92:30:17: 6b:89:17:a7:18:f2:ff:61:fe:68:25:f2:b8:b7:04: 04:b2:ca:3a:6b:74:dc:93:ad:4c:d2:9b:60:1b:c9: ca:28:9a:05:02:a2:34:40:39:12:db:a0:91:7b:df: f0:51:4b:1e:48:26:8e:c1:9d:9f:f2:d6:a1:bc:96: 27:03:c3:67:28:71:92:ca:9f:db:46:5a:c3:c6:f3: 42:e8:a3:aa:c6:7c:91:2a:2a:44:80:53:2e:31:0e: 35:59:52:e0:c4:05:aa:a2:92:e7:a5:04:f4:91:ee: 48:db:42:d4:b6:56:c7:d3:3d:5f:8a:da:2e:7a:0b: 33:7b:a9:6b:3a:e4:a2:d7:de:b1:7d:bb:48:a1:cc: 11:24:72:3b:16:17:ac:d9:2c:92:29:f3:89:ea:b7: 8c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6E:CA:70:45:FC:3E:C2:6A:1B:36:40:AD:E6:C9:D8:CF:58:B5:5F X509v3 Authority Key Identifier: keyid:9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/80C4CAC6AE5311E983E98A4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.124.0/22 IPv6: 2403:f940::/32 Signature Algorithm: sha256WithRSAEncryption 63:ad:58:50:24:e7:ec:f5:48:de:3b:9d:40:35:57:16:b7:1d: e3:cf:ad:60:45:02:52:6b:26:43:3e:bd:cc:7f:b4:1b:a9:f6: 32:f6:ce:a3:4d:40:9c:c0:f7:92:5c:2e:ed:bf:80:fa:1a:c4: 63:82:96:f9:43:e0:90:01:5d:ca:48:cb:fe:97:ed:13:9f:81: af:2c:37:53:da:32:ff:38:74:3e:dd:b3:b7:1c:7d:8e:2d:fd: c7:13:9a:83:41:a3:2b:3e:bc:80:c5:18:78:93:19:db:41:36: 01:31:3e:7e:a6:5c:a6:5a:0d:04:5a:e9:d4:bb:e7:73:75:94: d6:b2:1b:59:f9:89:f8:b5:0c:f3:b1:51:df:8f:e2:a6:42:93: 67:f4:0e:eb:7c:28:b4:74:02:f8:7d:76:cd:ca:93:ab:d4:fb: 29:70:84:55:f4:5d:c1:a0:3e:f4:c4:a0:41:81:3b:65:1b:25: b9:34:7d:b6:be:3c:28:9a:0a:d8:e3:09:a7:ba:2d:e6:e0:ac: 54:30:5c:a3:70:03:97:e8:42:ee:e6:42:56:46:a2:df:2d:ea: 65:81:5b:a7:cb:4a:da:25:39:8a:a0:ea:c9:aa:4d:4a:92:17: f0:cb:55:70:9b:17:3a:bb:2a:3a:ef:30:64:87:95:44:15:6a: e8:0c:96:c8 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU4NTQxMTAvBgNVBAUTKDlCQTM5NTFDQ0I1RDgzQTlGM0RDNEE3NUJFQTAxRkY1 QUZENzFGRkYwHhcNMjMxMTI4MTg0NTU0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY2MzU2MS1mZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4WIjoaYoFNHlWYpuPLPg/mGejxEvfQVMiZj0INhWJI88saD1XjqPp+4g/kh l3CzDlft4gwDbGbaI+O3luYAWykh2/d7ewwljt/QF8+BkmVtQEbE73DFKZtRZNfI zWEq9cD2vwSSMBdriRenGPL/Yf5oJfK4twQEsso6a3Tck61M0ptgG8nKKJoFAqI0 QDkS26CRe9/wUUseSCaOwZ2f8tahvJYnA8NnKHGSyp/bRlrDxvNC6KOqxnyRKipE gFMuMQ41WVLgxAWqopLnpQT0ke5I20LUtlbH0z1fitouegsze6lrOuSi196xfbtI ocwRJHI7Fhes2SySKfOJ6reMJQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGtuynBF /D7Cahs2QK3mydjPWLVfMB8GA1UdIwQYMBaAFJujlRzLXYOp89xKdb6gH/Wv1x// MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTg1NC8zNjM4MEZBQUFD QzcxMUU5ODI4OTAyNTNDNEY5QUUwMi9tNk9WSE10ZGc2bnozRXAxdnFBZjlhX1hI XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL202T1ZITXRkZzZuejNFcDF2cUFmOWFfWEhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTU4NTQvMzYzODBGQUFBQ0M3MTFFOTgyODkwMjUzQzRGOUFFMDIvODBDNENBQzZB RTUzMTFFOTgzRTk4QTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnZ3wwDQQCAAIwBwMFACQD+UAwDQYJKoZIhvcNAQELBQAD ggEBAGOtWFAk5+z1SN47nUA1Vxa3HePPrWBFAlJrJkM+vcx/tBup9jL2zqNNQJzA 95JcLu2/gPoaxGOClvlD4JABXcpIy/6X7ROfga8sN1PaMv84dD7ds7ccfY4t/ccT moNBoys+vIDFGHiTGdtBNgExPn6mXKZaDQRa6dS753N1lNayG1n5ifi1DPOxUd+P 4qZCk2f0Dut8KLR0Avh9ds3Kk6vU+ylwhFX0XcGgPvTEoEGBO2UbJbk0fba+PCia CtjjCae6LebgrFQwXKNwA5foQu7mQlZGot8t6mWBW6fLStolOYqg6smqTUqSF/DL VXCbFzq7KjrvMGSHlUQVaugMlsg= -----END CERTIFICATE-----Generated at Wed May 8 20:35:47 2024 by rpki-client on console-ams.rpki-client.org