$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/802FBE707FEB11EB8B5E2817C4F9AE02.roa File: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (raw, json) Hash identifier: gDPmhuG/wdMnafUf5dBasLWrj/x8i3ETlWBwiJtNRys= Subject key identifier: 81:70:3D:03:CD:4B:9D:7D:E1:05:96:D4:99:A6:DC:5E:1D:36:53:8F Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 24F7 Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/802FBE707FEB11EB8B5E2817C4F9AE02.roa Signing time: Mon 10 Jul 2023 16:12:16 +0000 ROA not before: Mon 10 Jul 2023 16:12:16 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 58666 IP address blocks: 43.245.80.0/22 maxlen: 23 103.14.68.0/22 maxlen: 23 103.232.180.0/22 maxlen: 23 2404:5700::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9463 (0x24f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Jul 10 16:12:16 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64ac2de0-d547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:25:9d:34:a1:bc:46:4b:f4:89:63:d0:f0: dc:a2:bc:d8:65:db:cf:c4:bc:ee:b7:6d:9f:03:8a: 4a:15:29:28:57:43:38:2b:f2:31:2d:e6:a9:e6:f0: 36:8d:7a:15:00:40:9f:5d:4e:6d:1e:25:5a:b5:81: d7:a9:ec:b8:f2:2e:77:ee:48:b1:ce:f6:99:65:f7: 1d:4f:3d:60:7b:fe:85:28:50:18:47:ac:3b:20:5c: c2:9e:f3:4f:7e:a9:e4:be:1e:13:54:51:fb:4a:6b: b0:1e:e7:35:e0:7d:1b:8e:9a:4d:6a:66:49:7d:56: dc:fb:1b:78:ba:52:ae:80:58:35:f5:47:cd:96:9b: ce:77:6b:6a:90:45:ad:22:6c:72:c8:3c:ab:3d:1d: c8:8b:ac:a5:91:8e:b3:0c:3f:20:52:cd:9b:94:27: aa:35:09:7f:4d:bc:68:bb:3b:a6:8d:0e:6d:60:14: 80:05:42:ef:6f:24:32:ed:ef:e8:0e:ee:97:aa:24: d4:47:db:1b:27:a5:a4:97:e5:22:4c:d9:e4:32:7f: 12:a1:e1:c9:49:1f:17:37:2c:3a:e7:98:db:7f:b2: 2c:9d:21:98:81:84:43:e0:da:70:3a:52:92:40:34: 4b:71:9f:cf:88:22:13:4c:52:fa:13:f6:ff:4e:79: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:70:3D:03:CD:4B:9D:7D:E1:05:96:D4:99:A6:DC:5E:1D:36:53:8F X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/802FBE707FEB11EB8B5E2817C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.80.0/22 103.14.68.0/22 103.232.180.0/22 IPv6: 2404:5700::/32 Signature Algorithm: sha256WithRSAEncryption 30:94:fd:fd:50:38:a0:2e:83:ac:45:f5:bb:05:32:9b:66:8e: 16:61:ef:45:17:e9:3d:04:da:89:50:a0:55:2d:df:31:6e:7c: 23:1d:aa:3e:98:a4:c3:d9:cf:0c:f3:fc:67:12:57:98:5f:3a: ec:e5:10:12:e4:5e:ed:54:a1:e5:7b:04:b6:b7:e4:c5:4c:d0: 02:1f:bf:86:86:e8:a0:7c:35:9e:24:57:6a:8f:d5:57:66:c4: 76:41:28:f3:78:7a:87:dd:ef:c0:0c:4b:61:8a:8f:3a:a8:78: 16:eb:1b:f7:f7:bc:92:fd:61:aa:f1:01:a0:b9:42:9a:7c:c2: 47:60:3e:44:e3:85:e8:17:14:9a:98:27:4e:c9:1f:09:ac:b4: e5:57:f9:53:c6:ff:ed:0c:0d:89:b8:1a:9d:63:a0:bc:de:09: 7a:af:2d:4d:82:97:07:29:0f:2e:07:f6:32:99:f0:33:59:de: 28:a6:b6:2a:bb:40:3c:a5:e6:ac:1b:5d:c1:4d:ae:26:26:d1: 79:24:db:c5:c3:89:97:7e:e5:52:94:92:39:82:09:4b:9e:b6: d6:f1:eb:e2:b3:ee:88:10:36:e3:89:26:69:a0:02:af:19:ac: bb:b7:c7:57:c7:e9:9b:94:bc:e4:16:a2:fb:db:55:12:96:7a: 5a:2e:0e:a8 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICJPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjMwNzEwMTYxMjE2WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGFjMmRlMC1kNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWslnTShvEZL9Ilj0PDcorzYZdvPxLzut22fA4pKFSkoV0M4K/IxLeap5vA2 jXoVAECfXU5tHiVatYHXqey48i537kixzvaZZfcdTz1ge/6FKFAYR6w7IFzCnvNP fqnkvh4TVFH7SmuwHuc14H0bjppNamZJfVbc+xt4ulKugFg19UfNlpvOd2tqkEWt ImxyyDyrPR3Ii6ylkY6zDD8gUs2blCeqNQl/TbxouzumjQ5tYBSABULvbyQy7e/o Du6XqiTUR9sbJ6Wkl+UiTNnkMn8SoeHJSR8XNyw655jbf7IsnSGYgYRD4NpwOlKS QDRLcZ/PiCITTFL6E/b/TnmS3QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIFwPQPN S5194QWW1Jmm3F4dNlOPMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg5NEYvOTYzQ0YwQ0VFQzVFMTFFNDhFN0QwMTE5QzRGOUFFMDIvODAyRkJFNzA3 RkVCMTFFQjhCNUUyODE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr9VADBAJnDkQDBAJn6LQwDQQCAAIwBwMFACQEVwAwDQYJ KoZIhvcNAQELBQADggEBADCU/f1QOKAug6xF9bsFMptmjhZh70UX6T0E2olQoFUt 3zFufCMdqj6YpMPZzwzz/GcSV5hfOuzlEBLkXu1UoeV7BLa35MVM0AIfv4aG6KB8 NZ4kV2qP1VdmxHZBKPN4eofd78AMS2GKjzqoeBbrG/f3vJL9YarxAaC5Qpp8wkdg PkTjhegXFJqYJ07JHwmstOVX+VPG/+0MDYm4Gp1joLzeCXqvLU2ClwcpDy4H9jKZ 8DNZ3iimtiq7QDyl5qwbXcFNriYm0Xkk28XDiZd+5VKUkjmCCUuettbx6+Kz7ogQ NuOJJmmgAq8ZrLu3x1fH6ZuUvOQWovvbVRKWelouDqg= -----END CERTIFICATE-----Generated at Thu May 16 17:51:17 2024 by rpki-client on console-ams.rpki-client.org