$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/440FC47687C211EEA6A0667BC4F9AE02.roa File: 440FC47687C211EEA6A0667BC4F9AE02.roa (raw, json) Hash identifier: 6O8csL9rEmKpGA0+g6+1hX4YH6tXwN3WNyqAyDg62Rk= Subject key identifier: ED:B6:55:B9:64:0D:6B:37:BF:8B:10:DB:21:BC:24:45:1B:56:29:5F Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 0656 Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/440FC47687C211EEA6A0667BC4F9AE02.roa Signing time: Fri 24 Nov 2023 23:10:00 +0000 ROA not before: Fri 24 Nov 2023 23:10:00 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 55803 IP address blocks: 103.29.84.0/23 maxlen: 24 103.42.224.0/23 maxlen: 24 114.142.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Nov 24 23:10:00 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65612d47-0d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:1f:dc:8b:64:7c:08:70:0b:f7:03:d9:30: 8e:b2:95:a2:99:96:3b:cc:a8:61:11:2e:8a:42:32: 97:42:7a:34:39:a6:f5:0e:80:cd:45:bf:95:74:f4: d9:6d:f2:28:35:fd:97:a9:c5:97:d3:c6:15:34:5d: ba:5f:9f:13:82:39:5e:3c:ac:79:62:b6:8a:63:2e: 5f:8a:ea:86:b6:7b:02:a3:24:a5:50:67:6b:98:ec: eb:0e:35:79:ed:9b:c4:b6:c6:71:c4:2f:5e:a2:5d: 9f:47:b2:02:ee:63:58:c8:55:51:ae:0d:76:64:b8: de:e6:d8:f6:82:0b:f2:c9:b7:e8:9c:0e:89:d7:99: ac:f4:83:d5:8f:30:a2:36:b4:d4:2b:0e:7a:21:60: 6b:cb:9c:df:35:24:a0:ef:93:5a:bf:22:a1:ba:48: a9:32:6e:1a:45:85:ad:33:d3:03:48:be:9c:c6:27: 01:79:49:4a:2b:03:b8:ef:c5:ad:42:77:30:6d:87: 58:03:74:95:c1:25:32:e2:75:a2:74:94:83:a5:08: 72:8d:8f:88:5c:39:49:37:2e:87:c4:dd:16:78:a0: 67:95:d4:62:fe:65:4f:2f:3d:4d:04:aa:02:75:4f: 87:ff:0d:4c:5d:4c:9a:9e:f9:fd:c4:1c:47:1e:96: 6a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B6:55:B9:64:0D:6B:37:BF:8B:10:DB:21:BC:24:45:1B:56:29:5F X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/440FC47687C211EEA6A0667BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.84.0/23 103.42.224.0/23 114.142.160.0/22 Signature Algorithm: sha256WithRSAEncryption 80:18:d8:28:bc:33:d1:eb:5c:e1:cd:2d:d7:a0:ff:01:a7:78: ce:6c:8e:e9:c5:c7:73:45:83:71:a0:ff:eb:11:92:62:17:be: 42:e8:de:4b:88:ca:0b:17:a4:bd:e0:1d:61:02:ee:4a:f9:42: 99:70:41:99:d3:a9:f5:0f:37:c9:05:ce:33:84:91:d8:ef:24: 92:2f:ca:08:fc:51:63:ed:5a:7b:b0:81:4e:9d:3b:51:91:46: f4:0f:b0:87:5f:87:2a:03:73:35:47:30:f5:6a:03:99:34:a7: 62:f5:4d:67:ce:cd:0e:fb:92:f7:89:e1:85:6c:b8:b3:d5:0c: 0c:22:88:b6:b2:1c:97:77:14:38:93:c0:81:49:1d:ce:d3:26: f5:92:8c:22:cc:92:19:fe:12:7d:db:9f:06:10:9a:95:77:73: 52:90:ee:80:6f:a7:b5:8d:86:b9:3a:06:6c:32:fb:f8:54:9d: 3b:9f:44:6a:f2:21:d6:8e:e4:09:ad:8b:be:ca:99:46:c8:dc: d1:dc:31:f2:22:9f:c2:1c:10:45:56:87:44:2b:35:06:73:12: 94:9f:95:0a:c0:c7:f6:15:d3:40:8d:5f:ba:31:49:e9:bb:45: 3a:15:af:a7:5d:8a:2a:98:8d:b1:0d:d7:bd:e6:01:c0:2d:23: 61:95:97:92 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjMxMTI0MjMxMDAwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTYxMmQ0Ny0wZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSIf3ItkfAhwC/cD2TCOspWimZY7zKhhES6KQjKXQno0Oab1DoDNRb+VdPTZ bfIoNf2XqcWX08YVNF26X58TgjlePKx5YraKYy5fiuqGtnsCoySlUGdrmOzrDjV5 7ZvEtsZxxC9eol2fR7IC7mNYyFVRrg12ZLje5tj2ggvyybfonA6J15ms9IPVjzCi NrTUKw56IWBry5zfNSSg75NavyKhukipMm4aRYWtM9MDSL6cxicBeUlKKwO478Wt QncwbYdYA3SVwSUy4nWidJSDpQhyjY+IXDlJNy6HxN0WeKBnldRi/mVPLz1NBKoC dU+H/w1MXUyanvn9xBxHHpZqWwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFO22Vblk DWs3v4sQ2yG8JEUbVilfMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI4NzEvOEEyREFCRTAxREE3MTFFQjgwNzEyQTRGQzRGOUFFMDIvNDQwRkM0NzY4 N0MyMTFFRUE2QTA2NjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFnHVQDBAFnKuADBAJyjqAwDQYJKoZIhvcNAQELBQADggEB AIAY2Ci8M9HrXOHNLdeg/wGneM5sjunFx3NFg3Gg/+sRkmIXvkLo3kuIygsXpL3g HWEC7kr5QplwQZnTqfUPN8kFzjOEkdjvJJIvygj8UWPtWnuwgU6dO1GRRvQPsIdf hyoDczVHMPVqA5k0p2L1TWfOzQ77kveJ4YVsuLPVDAwiiLayHJd3FDiTwIFJHc7T JvWSjCLMkhn+En3bnwYQmpV3c1KQ7oBvp7WNhrk6Bmwy+/hUnTufRGryIdaO5Amt i77KmUbI3NHcMfIin8IcEEVWh0QrNQZzEpSflQrAx/YV00CNX7oxSem7RToVr6dd iiqYjbEN173mAcAtI2GVl5I= -----END CERTIFICATE-----Generated at Wed May 29 02:29:28 2024 by rpki-client on console-ams.rpki-client.org