$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B9A42F96FEA211EDB9013076C4F9AE02.roa File: B9A42F96FEA211EDB9013076C4F9AE02.roa (raw, json) Hash identifier: ArEg32Cuq9ncM3zIARMue2qcKrb8uSEE2v+HVPiVbo8= Subject key identifier: 49:22:C5:FD:07:CD:DF:9E:BF:D4:A3:34:89:38:C9:33:AC:5D:55:21 Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Certificate serial: 0494 Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B9A42F96FEA211EDB9013076C4F9AE02.roa Signing time: Wed 25 Oct 2023 00:32:51 +0000 ROA not before: Wed 25 Oct 2023 00:32:51 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 9667 IP address blocks: 103.20.208.0/24 maxlen: 24 103.20.209.0/24 maxlen: 24 103.20.210.0/24 maxlen: 24 103.20.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Validity Not Before: Oct 25 00:32:51 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65386233-edfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:fe:22:74:9c:8c:3b:bf:30:03:ff:52:42: 87:65:97:7c:3e:bf:b7:f4:27:f8:22:1b:de:c2:ff: 21:bd:92:fc:32:70:75:85:41:87:78:11:30:77:ac: 33:67:f6:c1:42:f5:15:b3:0b:7d:b2:4c:22:21:62: 91:ca:25:b6:e4:24:e1:e4:c9:35:4c:c8:8d:3d:9c: d9:60:34:d8:8c:51:c9:ed:4f:22:b4:ad:ca:d1:77: 6e:6a:f4:c0:f9:c9:b8:50:29:a5:8a:4f:1a:c7:c8: 69:d7:b2:2e:c6:13:19:c0:0a:ae:dc:73:b2:d5:32: 5b:34:d7:ed:4b:12:5d:af:2c:d0:12:21:9d:d9:c6: 9e:de:83:e1:bc:8e:89:3a:4a:09:9d:2f:cf:cf:65: 55:ed:41:d8:13:8b:0e:21:b6:34:5a:cf:06:d4:19: ca:61:21:95:04:b5:1e:1a:3e:c9:a3:8c:81:01:86: 7b:da:f4:e5:e9:9a:c6:2f:08:bc:85:74:24:1c:4b: 8e:1b:bf:17:57:2f:4e:ef:9f:3a:18:3d:48:15:75: 16:b1:d2:97:58:9c:32:81:81:23:70:61:35:03:8c: 34:e0:20:98:88:ec:f4:c9:78:04:6b:7d:65:3d:e8: d0:7d:70:8b:c0:75:95:11:8c:8d:bd:3f:7f:ce:3f: 25:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:22:C5:FD:07:CD:DF:9E:BF:D4:A3:34:89:38:C9:33:AC:5D:55:21 X509v3 Authority Key Identifier: keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B9A42F96FEA211EDB9013076C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.208.0/22 Signature Algorithm: sha256WithRSAEncryption ac:38:80:fd:97:71:99:49:f1:4b:9d:30:ef:9a:f0:01:c8:94: 02:f3:5e:c6:61:45:b1:cc:97:44:5d:5a:bc:b7:8f:d3:58:90: 3e:75:b4:03:f7:e9:75:a8:18:22:ac:24:52:ca:76:97:b4:cc: ef:b6:d4:f4:58:c9:c7:1f:05:3d:f5:aa:44:9a:2c:34:c1:25: d4:e6:b5:5c:36:a0:9f:45:b5:5b:9a:c2:20:79:01:ab:11:dc: 85:48:85:39:8c:08:e7:36:b5:49:7d:32:aa:6d:71:eb:14:18: 55:0b:01:13:60:23:bd:66:a9:59:bb:11:c0:bf:ea:f1:35:e2: cc:b2:11:65:96:3b:60:ef:cf:58:39:03:60:79:99:75:e4:01: 81:b4:a6:ac:34:1c:05:d3:60:48:be:11:d6:29:00:bd:3a:2a: a7:f4:bb:ad:55:97:a5:85:c1:d8:90:f6:60:a8:a2:0a:cd:9e: cd:6e:02:18:6d:d0:4f:58:11:74:60:c6:00:4a:41:5f:ee:cf: 28:aa:0d:9c:33:ea:4d:0a:da:be:bb:11:bc:ae:39:6a:5e:65: 1f:76:1e:59:75:88:b6:52:b6:e7:1d:2b:22:f9:9b:40:e1:14: 4b:9f:c9:e3:68:0e:b0:6c:c2:61:26:62:d3:e0:78:2d:01:44: 2a:6e:1e:79 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5 RTYyRjkzNjUwHhcNMjMxMDI1MDAzMjUxWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTM4NjIzMy1lZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4j+InScjDu/MAP/UkKHZZd8Pr+39Cf4Ihvewv8hvZL8MnB1hUGHeBEwd6wz Z/bBQvUVswt9skwiIWKRyiW25CTh5Mk1TMiNPZzZYDTYjFHJ7U8itK3K0XduavTA +cm4UCmlik8ax8hp17IuxhMZwAqu3HOy1TJbNNftSxJdryzQEiGd2cae3oPhvI6J OkoJnS/Pz2VV7UHYE4sOIbY0Ws8G1BnKYSGVBLUeGj7Jo4yBAYZ72vTl6ZrGLwi8 hXQkHEuOG78XVy9O7586GD1IFXUWsdKXWJwygYEjcGE1A4w04CCYiOz0yXgEa31l PejQfXCLwHWVEYyNvT9/zj8lYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEkixf0H zd+ev9SjNIk4yTOsXVUhMB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQzRjMvQjI1NDQ4MUFDQTM0MTFFQjhDOTBEOTQxQzRGOUFFMDIvQjlBNDJGOTZG RUEyMTFFREI5MDEzMDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnFNAwDQYJKoZIhvcNAQELBQADggEBAKw4gP2XcZlJ8Uud MO+a8AHIlALzXsZhRbHMl0RdWry3j9NYkD51tAP36XWoGCKsJFLKdpe0zO+21PRY yccfBT31qkSaLDTBJdTmtVw2oJ9FtVuawiB5AasR3IVIhTmMCOc2tUl9MqptcesU GFULARNgI71mqVm7EcC/6vE14syyEWWWO2Dvz1g5A2B5mXXkAYG0pqw0HAXTYEi+ EdYpAL06Kqf0u61Vl6WFwdiQ9mCoogrNns1uAhht0E9YEXRgxgBKQV/uzyiqDZwz 6k0K2r67EbyuOWpeZR92Hll1iLZStucdKyL5m0DhFEufyeNoDrBswmEmYtPgeC0B RCpuHnk= -----END CERTIFICATE-----Generated at Sat Jun 1 02:55:15 2024 by rpki-client on console-fra.rpki-client.org