$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/894D6CDE1C3511EFA78E995CC4F9AE02.roa File: 894D6CDE1C3511EFA78E995CC4F9AE02.roa (raw, json) Hash identifier: uii8sBoCCA9oMiaCp6gGjIs44iklY2+Z8HWMoERYSKg= Subject key identifier: 2B:90:02:30:C7:98:59:AF:0A:20:4C:B0:AC:E7:F5:08:65:F4:26:CC Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Certificate serial: 2C Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/894D6CDE1C3511EFA78E995CC4F9AE02.roa Signing time: Tue 02 Jul 2024 00:50:21 +0000 ROA not before: Tue 02 Jul 2024 00:50:21 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 152708 IP address blocks: 103.40.52.0/23 maxlen: 24 2001:df3:b7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Validity Not Before: Jul 2 00:50:21 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66834ecd-aa48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:30:1a:ad:4c:e0:7d:d1:25:06:ad:58:bb: 9a:54:cc:2f:e1:f1:f9:b9:6b:6e:dc:98:3f:98:ab: 79:6b:46:69:f9:14:d4:fe:43:16:0e:0f:b7:84:e0: d1:54:d4:fe:3c:bc:92:f1:6d:57:c7:7e:40:ef:d5: ad:dd:71:45:c4:5d:54:02:3e:b8:91:e2:71:6b:cf: d7:c9:05:e8:f9:33:fc:4c:98:0c:ef:81:a1:9a:d8: bb:33:9c:98:27:3b:9b:ab:dc:e2:29:0a:34:e4:d7: 78:aa:74:4b:86:58:ef:c9:d3:3d:e1:95:de:82:df: 33:9b:20:22:64:f9:19:00:4c:a9:fc:e4:90:2d:00: e5:44:0c:a0:68:7b:d9:d7:e3:50:dd:33:97:8e:3d: 4f:21:cc:ab:45:99:a2:08:d8:de:37:d9:25:12:05: 92:a5:84:dc:f6:b4:63:98:5a:3c:28:dd:24:11:b4: c0:2a:ab:2b:fc:2e:4e:34:db:0a:21:13:cc:ad:e1: 2e:88:72:de:76:29:4b:bf:46:8a:80:52:db:db:94: 6c:49:9b:9b:c6:5d:64:e4:50:58:21:b1:43:39:0b: 58:f6:f4:78:b5:d1:6d:c3:39:88:1a:36:e8:87:ae: 06:4d:1b:cf:eb:5d:0f:ed:28:88:19:3e:bd:2d:7e: e2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:90:02:30:C7:98:59:AF:0A:20:4C:B0:AC:E7:F5:08:65:F4:26:CC X509v3 Authority Key Identifier: keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/894D6CDE1C3511EFA78E995CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.52.0/23 IPv6: 2001:df3:b7c0::/48 Signature Algorithm: sha256WithRSAEncryption 64:b5:2c:e9:e9:68:8e:9b:d3:54:44:7b:e4:49:af:55:03:54: fe:d1:2c:fb:ef:d4:5f:4d:f3:89:72:e4:34:f3:f0:20:ab:8b: 58:0c:26:af:d4:23:33:a9:24:f1:bc:2f:53:6a:2c:70:54:87: b9:dd:cf:d8:d1:f5:f1:87:c6:6c:dd:24:b1:32:65:0d:4e:19: ff:e3:07:26:2c:e3:72:28:ac:a5:70:9f:e2:6d:4d:d1:7e:ed: 01:9a:22:2a:84:d8:e7:ad:e3:4c:0d:e9:89:89:b6:8c:eb:44: f7:98:20:54:b0:e5:0c:4b:8e:4a:f1:a6:c4:82:48:e0:65:09: a9:38:b9:e7:55:e4:7d:76:b0:52:92:3d:62:ad:03:0c:69:3c: 42:72:d7:62:6a:87:86:a7:eb:79:77:11:a5:7a:d5:55:c9:3b: a4:3b:13:76:30:68:51:a8:6e:66:fa:c5:67:7a:a1:cb:37:0c: 63:77:a6:ba:00:93:75:ef:35:82:9b:39:02:88:80:0e:23:5c: ab:57:21:b7:88:9e:af:9d:33:44:bf:d4:30:68:2c:7b:b0:f6: 43:7a:90:da:ab:56:b7:99:6f:8d:69:28:2e:fc:2f:bb:33:c8: 14:88:e9:e2:4f:60:86:af:ca:09:8f:47:21:b1:55:a6:ef:c8: 13:95:12:55 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0ZDRTExMC8GA1UEBRMoODY2RTc4RDFBNDVFOEZEMTI2ODA4QUZGN0NFQTRGQzA4 RTdEOTJBODAeFw0yNDA3MDIwMDUwMjFaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ODM0ZWNkLWFhNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC34TAarUzgfdElBq1Yu5pUzC/h8fm5a27cmD+Yq3lrRmn5FNT+QxYOD7eE4NFU 1P48vJLxbVfHfkDv1a3dcUXEXVQCPriR4nFrz9fJBej5M/xMmAzvgaGa2LsznJgn O5ur3OIpCjTk13iqdEuGWO/J0z3hld6C3zObICJk+RkATKn85JAtAOVEDKBoe9nX 41DdM5eOPU8hzKtFmaII2N432SUSBZKlhNz2tGOYWjwo3SQRtMAqqyv8Lk402woh E8yt4S6Ict52KUu/RoqAUtvblGxJm5vGXWTkUFghsUM5C1j29Hi10W3DOYgaNuiH rgZNG8/rXQ/tKIgZPr0tfuLTAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUK5ACMMeY Wa8KIEywrOf1CGX0JswwHwYDVR0jBBgwFoAUhm540aRej9EmgIr/fOpPwI59kqgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDRkNFL0UwQkUzNkFDMDIz RjExRUY4RTVDMUU1OEM0RjlBRTAyL2htNTQwYVJlajlFbWdJcl9mT3BQd0k1OWtx Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaG01NDBhUmVqOUVtZ0lyX2ZPcFB3STU5a3FnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0ZDRS9FMEJFMzZBQzAyM0YxMUVGOEU1QzFFNThDNEY5QUUwMi84OTRENkNERTFD MzUxMUVGQTc4RTk5NUNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWcoNDAPBAIAAjAJAwcAIAEN87fAMA0GCSqGSIb3DQEBCwUA A4IBAQBktSzp6WiOm9NURHvkSa9VA1T+0Sz779RfTfOJcuQ08/Agq4tYDCav1CMz qSTxvC9TaixwVIe53c/Y0fXxh8Zs3SSxMmUNThn/4wcmLONyKKylcJ/ibU3Rfu0B miIqhNjnreNMDemJibaM60T3mCBUsOUMS45K8abEgkjgZQmpOLnnVeR9drBSkj1i rQMMaTxCctdiaoeGp+t5dxGletVVyTukOxN2MGhRqG5m+sVneqHLNwxjd6a6AJN1 7zWCmzkCiIAOI1yrVyG3iJ6vnTNEv9QwaCx7sPZDepDaq1a3mW+NaSgu/C+7M8gU iOniT2CGr8oJj0chsVWm78gTlRJV -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org