$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/6339493A516311ED90F04711C4F9AE02.roa File: 6339493A516311ED90F04711C4F9AE02.roa (raw, json) Hash identifier: WXF55ahHLLIxuCdgdv6S5K66iBb3zG6OgjxwlWvJGNU= Subject key identifier: 26:1D:DE:76:A3:3D:E6:88:F1:95:0F:29:E3:A9:90:48:A0:C0:CA:7B Certificate issuer: /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Certificate serial: 052E Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/6339493A516311ED90F04711C4F9AE02.roa Signing time: Sat 11 Nov 2023 00:12:00 +0000 ROA not before: Sat 11 Nov 2023 00:12:00 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 53587 IP address blocks: 45.64.244.0/22 maxlen: 24 103.242.108.0/22 maxlen: 22 103.242.108.0/24 maxlen: 24 103.242.109.0/24 maxlen: 24 103.242.110.0/24 maxlen: 24 103.242.111.0/24 maxlen: 24 2401:9c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1326 (0x52e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Validity Not Before: Nov 11 00:12:00 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=654ec6d0-cda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:36:5e:39:43:b5:c6:90:1b:90:55:f0:92: 8a:58:8b:e0:e1:9c:14:28:31:d8:22:c1:17:2f:19: b2:92:bb:97:16:84:cc:27:b4:cd:0f:b8:77:1c:ed: c6:58:ac:04:88:c1:65:d8:22:fd:b1:10:38:91:06: 3a:2a:69:0d:43:df:3b:1b:83:1b:ef:f3:0a:6d:52: 5a:47:2b:de:c1:3a:10:87:44:61:a1:30:47:41:15: 3b:c2:18:bc:15:9c:a8:77:f0:cf:6a:43:78:f7:37: 39:1d:68:85:09:49:a4:aa:87:eb:30:35:38:e7:ff: cf:47:a3:84:d1:81:6d:04:82:87:d3:eb:c1:47:6d: 74:d0:1f:79:a7:56:ad:a2:cc:13:8e:2a:fb:fd:2c: ff:67:9a:8c:b4:03:b9:e0:95:2e:ba:ad:46:64:cf: 45:de:80:cf:1a:78:f7:9f:58:91:9f:1f:0a:4b:6c: 7d:3c:5c:d6:c5:38:cf:dc:2b:d4:fc:0f:3a:57:b5: 11:45:e7:6b:66:ce:ed:62:46:e0:d9:92:91:8a:b7: 7c:0a:b9:22:72:15:de:31:6b:74:fc:93:05:f1:4a: 5f:da:cb:cc:03:8a:6a:b4:9e:14:5e:55:58:d7:8c: 55:a6:d6:22:9a:3a:30:28:b0:88:1f:57:fd:f8:9b: 14:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1D:DE:76:A3:3D:E6:88:F1:95:0F:29:E3:A9:90:48:A0:C0:CA:7B X509v3 Authority Key Identifier: keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/6339493A516311ED90F04711C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.244.0/22 103.242.108.0/22 IPv6: 2401:9c80::/32 Signature Algorithm: sha256WithRSAEncryption 08:c3:ec:1d:4c:b7:e5:6d:68:75:25:b7:6c:a6:d1:89:80:9f: a0:fd:7d:de:b1:22:6f:44:a9:63:2f:40:90:32:ae:5d:7b:50: 4d:3a:b8:f2:8f:d2:40:46:be:18:b2:ff:24:2f:1b:b4:a5:dd: 31:18:67:ea:f8:9e:35:f6:c0:29:01:8c:bc:91:71:c1:8a:9d: b1:4c:1e:fe:b2:fc:46:16:62:c2:6e:da:53:40:b0:24:02:8d: 89:2c:27:87:b8:55:19:38:5a:bb:d2:8a:02:81:67:8d:74:eb: 0d:0e:2b:1c:87:c0:ac:35:a8:01:02:96:af:f8:91:e1:a6:2d: 64:29:de:37:ab:38:c1:6c:a0:73:bc:bc:87:40:0e:24:6a:ac: 1e:83:c6:6b:aa:aa:92:49:a9:59:f5:70:ab:dd:4f:3e:52:d7: 8b:af:3d:1b:c6:70:30:f3:4c:c6:95:79:0a:22:16:84:14:8b: e3:08:bd:a9:32:df:04:92:32:f5:68:bf:c4:4e:4c:93:04:0e: 95:dd:c4:91:f5:e9:ce:71:a1:8a:9d:66:33:a4:47:b3:98:45: 8e:a2:83:5a:fc:6f:ff:73:34:d2:3e:73:d7:be:6f:0e:13:23: 40:2b:21:de:28:b2:05:74:12:de:c7:99:23:77:98:04:0b:81: c1:74:3c:90 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MDIxMTAvBgNVBAUTKDg4RDFDOTk0RTgxMDhGQzBBNTMzREY0QkI4RTJDRThE MUM0QjlGMTcwHhcNMjMxMTExMDAxMjAwWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTRlYzZkMC1jZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfA2XjlDtcaQG5BV8JKKWIvg4ZwUKDHYIsEXLxmykruXFoTMJ7TND7h3HO3G WKwEiMFl2CL9sRA4kQY6KmkNQ987G4Mb7/MKbVJaRyvewToQh0RhoTBHQRU7whi8 FZyod/DPakN49zc5HWiFCUmkqofrMDU45//PR6OE0YFtBIKH0+vBR2100B95p1at oswTjir7/Sz/Z5qMtAO54JUuuq1GZM9F3oDPGnj3n1iRnx8KS2x9PFzWxTjP3CvU /A86V7URRedrZs7tYkbg2ZKRird8CrkichXeMWt0/JMF8Upf2svMA4pqtJ4UXlVY 14xVptYimjowKLCIH1f9+JsU/wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCYd3naj PeaI8ZUPKeOpkEigwMp7MB8GA1UdIwQYMBaAFIjRyZToEI/ApTPfS7jizo0cS58X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwMi85MzlDQUUyQzhE RDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4Q2xNOTlMdU9MT2pSeExu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lOSEpsT2dRajhDbE05OUx1T0xPalJ4TG54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUE3MDIvOTM5Q0FFMkM4REQ5MTFFQjhFRkI0MTU4QzRGOUFFMDIvNjMzOTQ5M0E1 MTYzMTFFRDkwRjA0NzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItQPQDBAJn8mwwDQQCAAIwBwMFACQBnIAwDQYJKoZIhvcN AQELBQADggEBAAjD7B1Mt+VtaHUlt2ym0YmAn6D9fd6xIm9EqWMvQJAyrl17UE06 uPKP0kBGvhiy/yQvG7Sl3TEYZ+r4njX2wCkBjLyRccGKnbFMHv6y/EYWYsJu2lNA sCQCjYksJ4e4VRk4WrvSigKBZ4106w0OKxyHwKw1qAEClq/4keGmLWQp3jerOMFs oHO8vIdADiRqrB6DxmuqqpJJqVn1cKvdTz5S14uvPRvGcDDzTMaVeQoiFoQUi+MI vaky3wSSMvVov8ROTJMEDpXdxJH16c5xoYqdZjOkR7OYRY6ig1r8b/9zNNI+c9e+ bw4TI0ArId4osgV0Et7HmSN3mAQLgcF0PJA= -----END CERTIFICATE-----Generated at Fri May 17 01:06:58 2024 by rpki-client on console-fra.rpki-client.org