$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/C769D73088FD11EE8616C748C4F9AE02.roa File: C769D73088FD11EE8616C748C4F9AE02.roa (raw, json) Hash identifier: a0fjPDhgtm9PUcFJNQ615sgwP2k23xUhtm+qsxP3y/Q= Subject key identifier: 71:FA:C4:91:0A:F3:8A:87:6D:5C:71:8A:30:38:DB:E4:3A:6B:F8:C3 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0560 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/C769D73088FD11EE8616C748C4F9AE02.roa Signing time: Wed 22 Nov 2023 06:10:05 +0000 ROA not before: Wed 22 Nov 2023 06:10:05 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 132422 IP address blocks: 43.252.208.0/24 maxlen: 24 43.252.209.0/24 maxlen: 24 43.252.210.0/24 maxlen: 24 103.228.64.0/24 maxlen: 24 103.234.54.0/24 maxlen: 24 150.107.0.0/24 maxlen: 24 150.107.1.0/24 maxlen: 24 150.107.2.0/24 maxlen: 24 150.107.3.0/24 maxlen: 24 150.129.42.0/24 maxlen: 24 163.53.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1376 (0x560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Nov 22 06:10:05 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=655d9b3d-e152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4b:88:b5:b3:42:fb:0d:b5:b7:43:89:fa:52: 0a:cc:b1:ba:81:1b:09:9b:b0:ea:69:c6:e3:01:1b: 00:6d:c8:cd:48:70:aa:a6:e8:1c:08:fa:63:78:65: 8b:3c:0d:50:3f:56:be:31:48:d2:e0:e6:1e:0a:d0: ff:50:05:83:eb:4f:03:ea:d1:12:1b:bd:85:f0:d6: 98:d3:7a:34:6e:9e:0e:69:18:5c:59:a5:41:1b:37: c0:30:1b:06:e9:d5:4e:eb:38:af:41:71:0a:d7:2f: 1a:8a:b7:9e:91:eb:a2:99:da:96:79:37:fe:34:12: 75:5c:33:6f:62:01:c8:39:72:fb:af:44:28:81:57: 84:eb:50:8f:64:b4:41:9b:3c:3c:53:cb:cc:4d:05: 80:1a:e6:ae:e9:d2:cd:91:56:82:22:6a:3b:20:eb: 5c:2a:58:e7:92:b2:51:8d:4b:1f:0d:2e:be:a1:3f: 01:72:0d:8a:5a:ab:f8:9c:fa:fb:e7:77:60:24:27: d2:34:a5:1d:9a:a5:cc:e2:f2:bb:8c:f2:54:f9:b2: 3c:31:ae:b1:11:f8:05:55:13:82:3e:d5:b6:5c:56: d5:7d:4f:03:27:2f:f4:05:fc:0a:d0:4a:d5:4c:d7: 27:3a:47:b0:97:ff:c3:26:29:0b:39:25:4a:7d:66: 12:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FA:C4:91:0A:F3:8A:87:6D:5C:71:8A:30:38:DB:E4:3A:6B:F8:C3 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/C769D73088FD11EE8616C748C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.208.0-43.252.210.255 103.228.64.0/24 103.234.54.0/24 150.107.0.0/22 150.129.42.0/24 163.53.16.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:c4:4b:b0:a3:16:43:ac:e5:b7:41:41:73:18:8c:1f:8d:c7: f5:4b:1d:b9:80:46:cc:05:22:fe:9f:6c:2f:4d:e2:c8:51:7f: e9:15:63:51:8c:85:d4:d4:d0:78:d2:50:c6:ec:cf:ee:d9:8d: fb:0b:2a:02:7c:ef:b3:b8:45:38:6e:60:21:68:99:c5:cb:97: 8a:28:26:bb:c7:5c:70:22:e5:fc:8b:89:30:ea:e5:4b:3e:e5: 96:82:7c:cf:fe:d6:76:d4:e9:0f:f1:8a:15:5a:02:5a:5c:34: f8:34:5d:7b:88:81:24:f8:88:de:32:b4:00:5c:37:ee:b1:9d: 95:99:d6:01:29:09:c4:e6:71:38:39:20:f6:1c:d9:c7:c6:cb: d0:3e:fa:1f:6e:7b:65:7b:59:a0:04:28:ae:1b:9c:82:e4:be: 52:73:ca:01:8d:10:a7:7c:ba:ef:e3:8c:53:ae:28:e2:b6:2f: fa:f3:20:ca:7f:64:8f:9f:db:78:3f:3e:17:8a:da:7e:05:e2: 77:a2:2e:78:bb:15:ab:85:0a:76:7a:9b:7f:03:c0:f3:8b:68: 42:b6:5a:78:bb:ef:50:48:a8:29:d4:26:df:c2:12:7f:a5:49: 9b:43:67:b0:be:80:ab:f0:92:17:91:da:1a:34:66:4c:52:99: f3:ba:7f:a3 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICBWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjMxMTIyMDYxMDA1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTVkOWIzZC1lMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00uItbNC+w21t0OJ+lIKzLG6gRsJm7DqacbjARsAbcjNSHCqpugcCPpjeGWL PA1QP1a+MUjS4OYeCtD/UAWD608D6tESG72F8NaY03o0bp4OaRhcWaVBGzfAMBsG 6dVO6zivQXEK1y8aireekeuimdqWeTf+NBJ1XDNvYgHIOXL7r0QogVeE61CPZLRB mzw8U8vMTQWAGuau6dLNkVaCImo7IOtcKljnkrJRjUsfDS6+oT8Bcg2KWqv4nPr7 53dgJCfSNKUdmqXM4vK7jPJU+bI8Ma6xEfgFVROCPtW2XFbVfU8DJy/0BfwK0ErV TNcnOkewl//DJikLOSVKfWYSrQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFHH6xJEK 84qHbVxxijA42+Q6a/jDMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvQzc2OUQ3MzA4 OEZEMTFFRTg2MTZDNzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwwDAMEBCv80AMEACv80gMEAGfkQAMEAGfqNgMEApZrAAMEAJaB KgMEAKM1EDANBgkqhkiG9w0BAQsFAAOCAQEAe8RLsKMWQ6zlt0FBcxiMH43H9Usd uYBGzAUi/p9sL03iyFF/6RVjUYyF1NTQeNJQxuzP7tmN+wsqAnzvs7hFOG5gIWiZ xcuXiigmu8dccCLl/IuJMOrlSz7lloJ8z/7WdtTpD/GKFVoCWlw0+DRde4iBJPiI 3jK0AFw37rGdlZnWASkJxOZxODkg9hzZx8bL0D76H257ZXtZoAQorhucguS+UnPK AY0Qp3y67+OMU64o4rYv+vMgyn9kj5/beD8+F4rafgXid6IueLsVq4UKdnqbfwPA 84toQrZaeLvvUEioKdQm38ISf6VJm0NnsL6Aq/CSF5HaGjRmTFKZ87p/ow== -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:27 2024 by rpki-client on console-ams.rpki-client.org