$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/86BED34677F011EB9E69B472C4F9AE02.roa File: 86BED34677F011EB9E69B472C4F9AE02.roa (raw, json) Hash identifier: zdi/+1WQskL/04zl/FoLC5faHUhvFiIOPMzm/x+eO30= Subject key identifier: DA:22:F3:C1:E3:13:A0:CA:02:32:4B:CD:D8:C7:B3:69:7D:8A:82:F7 Certificate issuer: /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883 Certificate serial: 05FD Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/86BED34677F011EB9E69B472C4F9AE02.roa Signing time: Thu 30 Nov 2023 23:51:24 +0000 ROA not before: Thu 30 Nov 2023 23:51:24 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 134847 IP address blocks: 103.204.8.0/22 maxlen: 22 103.204.8.0/24 maxlen: 24 103.204.9.0/24 maxlen: 24 103.204.10.0/24 maxlen: 24 103.204.11.0/24 maxlen: 24 202.133.80.0/22 maxlen: 22 202.133.80.0/24 maxlen: 24 202.133.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1533 (0x5fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883 Validity Not Before: Nov 30 23:51:24 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65691ffc-67c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:09:44:f2:e6:4a:83:50:7e:6c:0d:66:ef: 45:c2:cb:f9:ef:8a:ab:62:3f:96:1d:59:2b:d3:d4: bb:4e:34:19:ec:51:06:65:1c:92:f9:d3:a5:fa:c9: 7a:c5:80:80:97:82:80:b1:bc:1b:bc:19:9f:fd:5a: 55:b2:d6:62:2e:87:a7:5f:51:3c:3e:4c:2f:54:82: d7:9c:8c:ff:46:0a:dc:f6:ae:59:4c:f3:c2:aa:70: d0:c3:1d:4d:35:6e:a9:ed:a9:e3:8c:de:57:2d:f3: d6:99:bb:d0:42:59:c1:8f:01:fe:fd:0a:ed:24:08: ab:15:97:3f:af:e6:ff:da:fa:66:7f:2a:6c:a4:48: 32:47:86:35:30:94:a4:90:f8:22:97:d4:fa:81:b7: 12:af:72:89:5d:f4:f5:de:fd:e5:e6:c1:e4:e9:c8: b2:5d:a7:8e:5f:1a:bc:b7:cb:20:6c:a8:a2:4b:5f: cf:14:55:c4:c1:d4:cd:00:3d:31:c6:3d:db:62:12: 88:51:4c:ab:d3:06:37:d7:97:61:6a:13:95:08:e9: a6:88:43:ef:88:59:88:b0:ef:3c:7d:71:f8:99:91: 5d:5e:5d:13:c2:db:53:0d:d9:46:18:b4:e7:c3:02: db:69:8d:95:9b:da:2f:16:75:d4:0b:0e:8a:da:bc: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:22:F3:C1:E3:13:A0:CA:02:32:4B:CD:D8:C7:B3:69:7D:8A:82:F7 X509v3 Authority Key Identifier: keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/86BED34677F011EB9E69B472C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.8.0/22 202.133.80.0/22 Signature Algorithm: sha256WithRSAEncryption 96:e1:ee:8b:9a:22:f1:f2:56:ee:86:e8:2e:f7:ee:3e:ae:f0: b4:ec:56:5c:dd:e2:7b:c0:35:b2:a9:f5:3c:24:96:89:9b:c5: 3f:0a:2a:c3:fd:1a:e1:e4:1b:98:51:47:17:c8:8c:4e:4e:e1: 9f:30:d3:ed:45:a8:4b:39:dc:48:db:ac:e9:38:1e:c7:04:2e: 03:ac:9d:a1:cc:35:68:d0:73:32:57:b2:01:77:eb:61:87:ba: 90:20:81:8d:c9:71:e2:a6:bb:6d:b0:83:99:a5:3e:99:b8:3c: a7:1b:ff:0d:e2:42:0c:23:0b:9e:7e:a9:57:01:49:1c:5e:d5: 3c:bc:ec:3e:78:f1:99:80:e8:cf:23:4c:47:02:9f:3d:b1:c1: ee:aa:da:b2:0d:8a:6d:08:c0:89:af:b5:72:81:f6:89:8b:7b: 93:a4:af:4b:9b:0c:ff:0a:93:82:d6:b9:33:f4:e4:c4:35:b1: 2c:15:39:f5:63:f1:b6:c5:83:f8:0b:1d:cc:5a:11:b2:61:28: 68:93:5d:46:ce:91:67:2c:be:e9:bb:c3:40:a5:22:e3:85:85: fa:b3:2b:c7:9f:a9:89:00:d8:9c:dd:41:8c:a6:50:d4:a0:d5: b0:07:a5:2e:96:6e:ba:3f:49:31:1b:7c:7d:36:0d:24:95:84: 8a:e6:f8:0d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNTYxMTAvBgNVBAUTKDZBREUwRUQ3NDJEOEM1QUZBMTMzM0I5MDM1OEMwNkIz RkU4NzY4ODMwHhcNMjMxMTMwMjM1MTI0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY5MWZmYy02N2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnAJRPLmSoNQfmwNZu9Fwsv574qrYj+WHVkr09S7TjQZ7FEGZRyS+dOl+sl6 xYCAl4KAsbwbvBmf/VpVstZiLoenX1E8PkwvVILXnIz/Rgrc9q5ZTPPCqnDQwx1N NW6p7anjjN5XLfPWmbvQQlnBjwH+/QrtJAirFZc/r+b/2vpmfypspEgyR4Y1MJSk kPgil9T6gbcSr3KJXfT13v3l5sHk6ciyXaeOXxq8t8sgbKiiS1/PFFXEwdTNAD0x xj3bYhKIUUyr0wY315dhahOVCOmmiEPviFmIsO88fXH4mZFdXl0TwttTDdlGGLTn wwLbaY2Vm9ovFnXUCw6K2rzIEQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNoi88Hj E6DKAjJLzdjHs2l9ioL3MB8GA1UdIwQYMBaAFGreDtdC2MWvoTM7kDWMBrP+h2iD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM1Ni82NzFCN0RBNjQw MUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhhLWhNenVRTll3R3NfNkhh SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0NE8xMExZeGEtaE16dVFOWXdHc182SGFJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMzNTYvNjcxQjdEQTY0MDFEMTFFQjhFMENDQjVFQzRGOUFFMDIvODZCRUQzNDY3 N0YwMTFFQjlFNjlCNDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnzAgDBALKhVAwDQYJKoZIhvcNAQELBQADggEBAJbh7oua IvHyVu6G6C737j6u8LTsVlzd4nvANbKp9TwklombxT8KKsP9GuHkG5hRRxfIjE5O 4Z8w0+1FqEs53EjbrOk4HscELgOsnaHMNWjQczJXsgF362GHupAggY3JceKmu22w g5mlPpm4PKcb/w3iQgwjC55+qVcBSRxe1Ty87D548ZmA6M8jTEcCnz2xwe6q2rIN im0IwImvtXKB9omLe5Okr0ubDP8Kk4LWuTP05MQ1sSwVOfVj8bbFg/gLHcxaEbJh KGiTXUbOkWcsvum7w0ClIuOFhfqzK8efqYkA2JzdQYymUNSg1bAHpS6Wbro/STEb fH02DSSVhIrm+A0= -----END CERTIFICATE-----Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org