$ rpki-client -vvf rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/0D0106EAE5BF11EB801D410DC4F9AE02.roa File: 0D0106EAE5BF11EB801D410DC4F9AE02.roa (raw, json) Hash identifier: 3jMfh6JrAWUp0w/oStB2daKxlSbx8MU7h4k/yNQbZVo= Subject key identifier: 9F:5E:68:8B:78:F2:4E:1C:C6:0C:8D:18:34:6A:A4:0D:97:2D:33:2B Certificate issuer: /CN=A911D080/serialNumber=391A6F675F4BAADC21DD79A9BB4FF095635657B2 Certificate serial: 04A5 Authority key identifier: 39:1A:6F:67:5F:4B:AA:DC:21:DD:79:A9:BB:4F:F0:95:63:56:57:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/0D0106EAE5BF11EB801D410DC4F9AE02.roa Signing time: Mon 29 Apr 2024 01:44:16 +0000 ROA not before: Mon 29 Apr 2024 01:44:16 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9341 IP address blocks: 103.111.28.0/24 maxlen: 24 103.111.29.0/24 maxlen: 24 103.111.30.0/24 maxlen: 24 103.111.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.crl rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D080/serialNumber=391A6F675F4BAADC21DD79A9BB4FF095635657B2 Validity Not Before: Apr 29 01:44:16 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=662efb70-e302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:ae:72:4c:8e:45:07:9f:7e:56:b5:f1:0e: 08:f4:34:5f:e7:96:33:09:24:e1:aa:0c:19:78:20: 65:2d:97:38:a0:b3:27:8f:15:82:7a:1e:29:72:e4: 4d:de:44:59:37:c8:1c:c2:8c:af:91:87:a8:f6:13: f2:c1:68:44:5a:6e:98:4b:08:33:fc:cf:40:e5:cb: 4d:55:8d:fc:28:14:6c:87:c5:63:bf:b5:2a:55:07: 29:12:7e:a9:08:83:d4:b3:97:48:c5:a7:f2:d1:53: ca:6c:66:62:1e:bb:0f:d3:5e:19:4e:26:08:75:00: a0:28:59:e2:17:82:33:3e:64:11:16:58:64:54:27: a8:79:fc:e5:61:f9:da:ee:aa:c3:65:db:9a:64:b9: a4:50:60:05:5c:e4:ff:4e:82:96:d5:e4:a8:d6:ad: 92:7d:1f:51:47:97:dc:a0:ad:c7:70:ac:cc:79:e5: 97:04:51:43:63:38:d0:fa:38:8b:0b:a6:2a:2b:1d: 6a:34:96:f8:4e:e1:af:ad:6c:ec:4c:64:ff:ea:e4: 9c:dc:31:93:c1:8c:41:1a:1f:40:77:d0:97:7e:1e: 65:52:0d:26:3b:d8:3c:d6:43:5f:d7:87:a6:24:05: dc:2e:79:29:7e:0e:59:bd:b7:da:91:71:37:1a:b0: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5E:68:8B:78:F2:4E:1C:C6:0C:8D:18:34:6A:A4:0D:97:2D:33:2B X509v3 Authority Key Identifier: keyid:39:1A:6F:67:5F:4B:AA:DC:21:DD:79:A9:BB:4F:F0:95:63:56:57:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/0D0106EAE5BF11EB801D410DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.28.0/22 Signature Algorithm: sha256WithRSAEncryption 35:44:5c:ab:bb:08:48:d4:d7:77:57:bc:76:4e:2c:01:49:f1: bf:31:4f:f0:45:33:9f:50:2a:cd:fd:ea:70:45:fe:76:86:c1: 22:1e:df:15:3d:bc:01:6a:0e:95:a2:0e:43:4d:62:34:88:cb: 72:04:55:11:a8:ba:0b:ad:e4:f4:1a:74:22:a1:28:77:34:80: da:e9:1e:ad:7b:50:d6:f1:d6:fd:e0:77:26:4d:35:89:00:81: e0:d2:3b:f4:35:62:d4:c9:b5:c2:2d:eb:66:b2:0a:55:fc:e0: 35:90:00:ab:d3:ae:5c:f8:22:ee:84:40:11:88:8a:da:90:18: 2e:fe:7c:26:ad:20:d7:90:43:63:a0:43:c1:b9:5c:6f:1c:55: 30:00:2a:5b:07:7c:88:c7:e4:95:bb:26:e9:d2:98:3c:04:33: df:6d:e0:3d:61:a0:18:c1:27:4f:97:b4:9c:55:7b:0d:bb:95: 4f:f1:30:6a:c2:a6:0b:b6:17:30:e4:1f:02:d7:8e:6a:08:29: c6:27:94:c3:5a:a1:71:3e:9e:a2:e0:b9:cf:38:34:7e:f7:c7: 1e:9d:5d:4f:41:c9:d3:9a:9c:9a:b2:99:01:6e:91:f5:de:b3: a9:e2:90:5d:ec:4a:1a:1a:01:08:cc:ae:d6:2a:20:6a:79:b0: b2:f2:c2:66 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQwODAxMTAvBgNVBAUTKDM5MUE2RjY3NUY0QkFBREMyMURENzlBOUJCNEZGMDk1 NjM1NjU3QjIwHhcNMjQwNDI5MDE0NDE2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjJlZmI3MC1lMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/GuckyORQeffla18Q4I9DRf55YzCSThqgwZeCBlLZc4oLMnjxWCeh4pcuRN 3kRZN8gcwoyvkYeo9hPywWhEWm6YSwgz/M9A5ctNVY38KBRsh8Vjv7UqVQcpEn6p CIPUs5dIxafy0VPKbGZiHrsP014ZTiYIdQCgKFniF4IzPmQRFlhkVCeoefzlYfna 7qrDZduaZLmkUGAFXOT/ToKW1eSo1q2SfR9RR5fcoK3HcKzMeeWXBFFDYzjQ+jiL C6YqKx1qNJb4TuGvrWzsTGT/6uSc3DGTwYxBGh9Ad9CXfh5lUg0mO9g81kNf14em JAXcLnkpfg5ZvbfakXE3GrAHGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ9eaIt4 8k4cxgyNGDRqpA2XLTMrMB8GA1UdIwQYMBaAFDkab2dfS6rcId15qbtP8JVjVley MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDA4MC81QzI0OTcwQUU0 QUMxMUVCOTk3MTBBMTVDNEY5QUUwMi9PUnB2WjE5THF0d2gzWG1wdTBfd2xXTldW N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ScHZaMTlMcXR3aDNYbXB1MF93bFdOV1Y3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQwODAvNUMyNDk3MEFFNEFDMTFFQjk5NzEwQTE1QzRGOUFFMDIvMEQwMTA2RUFF NUJGMTFFQjgwMUQ0MTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnbxwwDQYJKoZIhvcNAQELBQADggEBADVEXKu7CEjU13dX vHZOLAFJ8b8xT/BFM59QKs396nBF/naGwSIe3xU9vAFqDpWiDkNNYjSIy3IEVRGo ugut5PQadCKhKHc0gNrpHq17UNbx1v3gdyZNNYkAgeDSO/Q1YtTJtcIt62ayClX8 4DWQAKvTrlz4Iu6EQBGIitqQGC7+fCatINeQQ2OgQ8G5XG8cVTAAKlsHfIjH5JW7 JunSmDwEM99t4D1hoBjBJ0+XtJxVew27lU/xMGrCpgu2FzDkHwLXjmoIKcYnlMNa oXE+nqLguc84NH73xx6dXU9BydOanJqymQFukfXes6nikF3sShoaAQjMrtYqIGp5 sLLywmY= -----END CERTIFICATE-----Generated at Sun May 19 02:59:04 2024 by rpki-client on console-ams.rpki-client.org