$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/C86BC12E4D8011EE972A6F42C4F9AE02.roa File: C86BC12E4D8011EE972A6F42C4F9AE02.roa (raw, json) Hash identifier: +6vn5lS0B/B+F7/pj3pLi35Hb114w+SSlqsg+HjZndA= Subject key identifier: ED:68:0F:3D:3F:BC:38:2F:81:29:CA:2B:23:CF:16:C9:43:A7:C8:56 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 266E Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/C86BC12E4D8011EE972A6F42C4F9AE02.roa Signing time: Thu 07 Sep 2023 13:16:41 +0000 ROA not before: Thu 07 Sep 2023 13:16:41 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 35913 IP address blocks: 103.192.179.0/24 maxlen: 24 103.196.20.0/24 maxlen: 24 103.196.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9838 (0x266e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Sep 7 13:16:41 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64f9cd39-7301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:dd:a8:7e:81:d0:a4:65:39:eb:84:92:93: 4e:6a:0f:23:b1:df:8a:05:3c:4c:24:f7:ef:f8:fd: 41:f2:25:00:6d:55:7d:ea:1c:59:20:f1:fd:0d:43: 5e:b1:bc:3a:3a:a6:80:37:83:c7:2f:4e:f7:ce:25: 71:43:d5:63:21:57:86:63:e3:78:e2:67:2c:34:ab: e6:34:13:3b:b2:bd:12:f7:66:34:a7:34:54:c5:ad: f5:e1:fd:14:0e:17:a2:e5:e4:6b:33:28:72:14:f0: 3c:fe:53:5f:15:c7:23:02:35:de:e3:5d:d9:ad:da: 29:26:97:f2:a7:24:6d:f5:28:1e:4e:1b:ba:7d:f1: 8a:c5:81:ad:e2:d1:5e:9c:fc:0a:0f:24:21:b6:db: 34:50:81:59:4e:8c:61:21:b7:70:ab:ba:f1:20:35: 9d:94:8e:68:78:b1:50:bb:95:38:a6:42:0f:19:ee: cd:fd:ed:ee:64:7e:c5:44:c7:06:f0:1f:55:91:d4: 89:d4:0e:86:e1:95:eb:7d:ea:a6:c2:45:e7:3e:f9: e0:d6:81:05:f3:00:bc:b6:80:39:95:57:cb:3b:8e: 1e:8a:05:b3:4e:84:b6:ae:c8:e8:b9:6b:5a:0a:78: 25:2a:10:0f:40:98:fd:be:dc:f0:34:e4:a6:c1:ad: b5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:68:0F:3D:3F:BC:38:2F:81:29:CA:2B:23:CF:16:C9:43:A7:C8:56 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/C86BC12E4D8011EE972A6F42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.192.179.0/24 103.196.20.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:7f:54:97:16:45:22:a9:fc:64:ff:3a:39:8d:2f:65:52:97: 90:4b:1d:67:da:7c:23:af:94:ce:32:b1:8c:41:00:9f:69:d8: a7:32:7c:6b:34:4e:f6:c3:a8:c1:5c:ed:54:87:cf:b6:5e:e5: d0:f5:ef:1a:bf:71:4e:6d:83:27:f0:e7:9b:16:ca:77:c5:50: ce:2f:96:78:38:4b:30:6e:21:39:dd:fc:fd:d4:9d:33:cc:05: 7a:b5:e3:6a:f5:fe:59:7f:bb:9f:f6:3f:33:41:63:54:6b:5a: 42:e6:36:7b:a7:80:32:42:07:24:49:b0:03:05:ae:e2:dc:5f: a3:6f:a8:4d:e2:77:bf:aa:5f:72:6d:6b:32:25:a2:4e:93:dc: ac:a0:44:78:24:ca:75:28:73:7b:98:a6:be:d8:f3:ef:26:48: 05:e0:56:cd:6e:15:b8:ba:09:57:ed:26:b4:10:e0:72:f1:19: b2:46:fb:b1:59:de:3d:85:f9:a8:3e:3b:26:69:ed:9e:8a:3b: 6e:c8:e3:e5:8d:45:b6:06:a7:50:ed:cf:13:b6:4b:b4:ec:ab: 2c:6b:f0:3a:e7:35:95:1f:af:19:ae:a1:55:eb:09:f4:17:bb: a1:8a:a5:13:fd:50:1b:c9:ed:98:54:54:08:45:f2:ec:e6:a5: 09:b6:5b:c1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICJm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjMwOTA3MTMxNjQxWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY5Y2QzOS03MzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv3dqH6B0KRlOeuEkpNOag8jsd+KBTxMJPfv+P1B8iUAbVV96hxZIPH9DUNe sbw6OqaAN4PHL073ziVxQ9VjIVeGY+N44mcsNKvmNBM7sr0S92Y0pzRUxa314f0U Dhei5eRrMyhyFPA8/lNfFccjAjXe413ZrdopJpfypyRt9SgeThu6ffGKxYGt4tFe nPwKDyQhtts0UIFZToxhIbdwq7rxIDWdlI5oeLFQu5U4pkIPGe7N/e3uZH7FRMcG 8B9VkdSJ1A6G4ZXrfeqmwkXnPvng1oEF8wC8toA5lVfLO44eigWzToS2rsjouWta CnglKhAPQJj9vtzwNOSmwa21KQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFO1oDz0/ vDgvgSnKKyPPFslDp8hWMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvQzg2QkMxMkU0 RDgwMTFFRTk3MkE2RjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnwLMDBAFnxBQwDQYJKoZIhvcNAQELBQADggEBAAp/VJcW RSKp/GT/OjmNL2VSl5BLHWfafCOvlM4ysYxBAJ9p2KcyfGs0TvbDqMFc7VSHz7Ze 5dD17xq/cU5tgyfw55sWynfFUM4vlng4SzBuITnd/P3UnTPMBXq142r1/ll/u5/2 PzNBY1RrWkLmNnungDJCByRJsAMFruLcX6NvqE3id7+qX3JtazIlok6T3KygRHgk ynUoc3uYpr7Y8+8mSAXgVs1uFbi6CVftJrQQ4HLxGbJG+7FZ3j2F+ag+OyZp7Z6K O27I4+WNRbYGp1DtzxO2S7Tsqyxr8DrnNZUfrxmuoVXrCfQXu6GKpRP9UBvJ7ZhU VAhF8uzmpQm2W8E= -----END CERTIFICATE-----Generated at Tue Apr 30 19:20:46 2024 by rpki-client on console-ams.rpki-client.org