$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/A01CB8D409DD11EBB507BD1DC4F9AE02.roa File: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (raw, json) Hash identifier: 28zzKXSsP9euZLQheJMd1ApjifbGW5va3zP1N3tNY78= Subject key identifier: EA:BF:14:8B:A0:18:88:B3:5D:45:4C:35:8A:57:2B:B8:45:2C:A5:72 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 0625 Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/A01CB8D409DD11EBB507BD1DC4F9AE02.roa Signing time: Sat 10 Jun 2023 23:36:35 +0000 ROA not before: Sat 10 Jun 2023 23:36:35 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 55720 IP address blocks: 45.120.28.0/24 maxlen: 24 45.120.29.0/24 maxlen: 24 45.120.30.0/24 maxlen: 24 45.120.31.0/24 maxlen: 24 103.232.84.0/24 maxlen: 24 103.232.85.0/24 maxlen: 24 103.232.86.0/24 maxlen: 24 103.232.87.0/24 maxlen: 24 2402:90c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 20:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: Jun 10 23:36:35 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64850903-eaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:12:ea:9b:00:3d:f5:c0:3e:de:0e:77:ef:8d: 2d:9d:38:48:a2:5a:79:49:df:d1:b6:2d:6c:ed:f2: f6:5c:e1:c6:d5:28:53:fe:4c:82:29:58:05:d0:e5: 10:66:59:09:e2:6e:43:41:3d:f2:c4:2f:6b:ba:a5: 01:34:3f:67:a7:9f:de:cc:44:8c:75:59:14:0a:36: c9:8c:15:f5:b7:85:ba:c0:c7:c2:ae:7c:ff:70:4f: e3:59:14:1a:c9:bc:93:6f:de:29:54:bb:6b:e5:ea: 9d:b9:27:58:4e:3e:01:b4:af:82:b4:67:d8:ca:bb: 8a:7c:f1:16:98:5c:4a:ab:3e:ee:36:0a:7d:11:13: 3f:fc:47:a3:fa:23:f1:48:10:be:0d:4a:6a:25:ec: 1a:bb:08:88:32:b0:07:38:53:06:dd:5b:f9:af:1a: e2:1e:0f:68:19:a4:ca:9c:88:6d:6d:8c:b2:cc:e6: b2:f6:b8:28:31:e1:01:f1:45:8f:17:9e:14:7f:35: d0:30:31:cf:a6:8d:28:47:10:29:c8:f1:a2:12:b0: 92:21:14:8d:8a:88:c1:f9:3a:87:b2:da:1b:17:0b: 01:29:a9:bc:32:45:25:18:91:f0:e4:bf:8f:84:f6: fc:32:35:52:c2:06:65:41:62:37:53:38:1f:ab:3d: 24:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BF:14:8B:A0:18:88:B3:5D:45:4C:35:8A:57:2B:B8:45:2C:A5:72 X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/A01CB8D409DD11EBB507BD1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.28.0/22 103.232.84.0/22 IPv6: 2402:90c0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:24:a9:35:d2:6b:4e:bb:b0:0e:38:45:c6:f4:a8:af:43:1d: c4:8c:38:ab:43:38:46:89:f3:21:16:0f:a1:18:26:ee:65:81: 1b:2a:cd:2d:87:04:95:49:53:5a:55:f9:9e:fb:f1:16:7e:2f: 63:7e:83:f8:6a:dc:d4:1b:49:99:f2:9e:8d:08:bd:48:e8:37: f5:5b:27:0f:dd:76:ed:9e:da:68:41:2e:7f:a1:d1:53:ea:2e: b3:9a:ff:94:73:40:60:00:09:be:bd:4c:82:5f:68:44:91:1d: 15:e6:52:88:7b:2b:e7:f7:bc:84:ca:b4:bb:77:5a:d8:a5:ed: 5a:71:de:c2:89:af:4b:63:05:89:05:53:e6:30:85:b9:de:f7: 6a:22:a0:9f:ff:f6:e2:7c:40:4b:37:71:86:5a:04:f7:a3:3d: ef:2a:69:03:6f:8e:fa:f6:a8:9e:9c:b3:e3:4f:b8:9a:cf:69: 5b:d3:e8:1b:1f:ce:bb:1a:91:c7:c3:8c:78:de:f3:ef:bc:dd: 3b:84:4b:15:06:dd:5b:65:5f:43:25:71:7c:2b:79:24:d2:ba: a6:1f:10:d1:32:a3:2c:14:53:ac:ac:36:08:c6:f7:9b:1f:1f: fc:b4:2f:53:ca:d7:e1:d3:df:77:50:49:ec:b7:c5:a4:f1:07: bd:9e:d7:76 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjMwNjEwMjMzNjM1WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDg1MDkwMy1lYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBLqmwA99cA+3g53740tnThIolp5Sd/Rti1s7fL2XOHG1ShT/kyCKVgF0OUQ ZlkJ4m5DQT3yxC9ruqUBND9np5/ezESMdVkUCjbJjBX1t4W6wMfCrnz/cE/jWRQa ybyTb94pVLtr5eqduSdYTj4BtK+CtGfYyruKfPEWmFxKqz7uNgp9ERM//Eej+iPx SBC+DUpqJewauwiIMrAHOFMG3Vv5rxriHg9oGaTKnIhtbYyyzOay9rgoMeEB8UWP F54UfzXQMDHPpo0oRxApyPGiErCSIRSNiojB+TqHstobFwsBKam8MkUlGJHw5L+P hPb8MjVSwgZlQWI3Uzgfqz0kVQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOq/FIug GIizXUVMNYpXK7hFLKVyMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNERDkvN0M5MkI4RTIwOURDMTFFQkFGNDc5RDFDQzRGOUFFMDIvQTAxQ0I4RDQw OUREMTFFQkI1MDdCRDFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIteBwDBAJn6FQwDQQCAAIwBwMFACQCkMAwDQYJKoZIhvcN AQELBQADggEBAA8kqTXSa067sA44Rcb0qK9DHcSMOKtDOEaJ8yEWD6EYJu5lgRsq zS2HBJVJU1pV+Z778RZ+L2N+g/hq3NQbSZnyno0IvUjoN/VbJw/ddu2e2mhBLn+h 0VPqLrOa/5RzQGAACb69TIJfaESRHRXmUoh7K+f3vITKtLt3Wtil7Vpx3sKJr0tj BYkFU+Ywhbne92oioJ//9uJ8QEs3cYZaBPejPe8qaQNvjvr2qJ6cs+NPuJrPaVvT 6BsfzrsakcfDjHje8++83TuESxUG3VtlX0MlcXwreSTSuqYfENEyoywUU6ysNgjG 95sfH/y0L1PK1+HT33dQSey3xaTxB72e13Y= -----END CERTIFICATE-----Generated at Sun Apr 14 23:40:36 2024 by rpki-client on console-ams.rpki-client.org