$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/FE02E774CFFD11EC8CFDFF68C4F9AE02.roa File: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (raw, json) Hash identifier: bd4/8uksSz0JPVe0/MP4TV4QuwgHbxYqvp3g/9deP6E= Subject key identifier: ED:2A:07:76:A5:83:F8:D0:D9:00:9A:54:45:62:74:3B:5C:56:D2:F3 Certificate issuer: /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Certificate serial: 06AF Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/FE02E774CFFD11EC8CFDFF68C4F9AE02.roa Signing time: Mon 30 Oct 2023 04:50:14 +0000 ROA not before: Mon 30 Oct 2023 04:50:14 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 140892 IP address blocks: 103.153.8.0/23 maxlen: 23 203.34.11.0/24 maxlen: 24 2401:3020::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Validity Not Before: Oct 30 04:50:14 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=653f3606-67c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9b:64:cd:4a:41:37:72:27:dc:93:09:85:7d: 4b:f9:8a:b5:e5:ff:fb:22:14:31:a8:79:d4:65:d8: 29:a3:2b:ec:a3:64:0d:0e:17:b7:fe:8a:e1:d4:60: 9e:9f:df:34:f3:66:db:25:d9:12:03:fc:25:07:96: 04:e0:e0:f7:41:bb:ce:ae:94:31:42:36:ed:c0:51: 77:6a:6f:39:0e:b9:0b:40:df:b5:81:10:6c:86:f1: b4:65:f6:a5:17:70:00:44:c8:7f:58:aa:73:12:2f: ba:a3:0d:d1:47:a3:42:0a:a1:a6:b5:15:55:bb:f1: e6:52:b1:6a:8c:2b:4a:42:16:c3:82:a1:9a:6e:bb: 3b:d8:65:fd:80:66:55:7d:54:57:6f:75:e6:b0:4c: 18:78:89:a9:e1:20:ec:03:78:3e:0a:fd:b2:98:d6: a0:41:fd:e7:f1:9f:80:46:6a:c8:e1:af:84:99:5f: 54:8d:5e:bd:25:93:71:bc:55:ad:cf:0d:54:fe:3d: 18:ca:da:cc:2f:2f:94:d6:c9:d3:05:77:9c:d9:09: 2c:4a:e2:ce:40:a3:38:3e:a2:dd:50:27:a6:90:12: 7f:5d:0d:26:91:aa:e3:06:4f:12:29:40:34:6f:ea: c1:33:77:9d:e0:e8:f7:41:a8:cd:30:18:2a:93:30: 53:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2A:07:76:A5:83:F8:D0:D9:00:9A:54:45:62:74:3B:5C:56:D2:F3 X509v3 Authority Key Identifier: keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/FE02E774CFFD11EC8CFDFF68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.8.0/23 203.34.11.0/24 IPv6: 2401:3020::/32 Signature Algorithm: sha256WithRSAEncryption 48:86:0b:72:ef:8c:74:5d:8b:01:8b:14:af:e1:15:61:fd:8d: 94:4c:89:0c:b9:92:be:a9:5c:a5:1d:97:c9:cf:ec:57:ed:da: 58:56:da:1b:b8:c7:4a:fd:a0:f1:11:2e:5c:68:e8:02:93:5c: ed:c0:e4:9d:9b:a2:0d:b5:65:38:a0:8b:f9:66:60:8f:98:bd: 32:e6:90:3e:69:9e:b0:d1:51:4b:05:cd:52:03:6b:d5:16:9a: 4a:4e:0d:11:62:7b:2e:ce:f4:21:c3:b5:af:d2:12:e2:94:62: 49:5f:6e:fe:f3:a7:59:0a:b7:c0:a1:0f:ac:11:b3:27:84:1a: 37:b6:90:30:ef:55:6f:12:d2:08:a9:52:88:04:2b:ab:d0:33: 81:ea:13:74:10:e0:ca:4c:80:30:e5:9c:47:b1:98:0c:2a:c8: 09:8e:25:58:f8:24:cf:60:53:c4:bf:5b:6b:41:70:56:22:f5: a5:ac:ba:0c:60:86:d6:ba:67:3b:b5:e7:32:85:7b:4f:37:5b: 18:ff:b9:07:dc:06:b5:cd:30:73:2a:df:54:97:d2:c9:18:5e: 27:7c:c7:7e:53:b6:76:dd:a4:d0:f0:85:53:7a:fe:43:4e:5f: ec:ce:21:b9:3a:bc:8e:0b:97:03:a3:cf:1d:ad:2c:a1:a6:c7: bd:f6:ee:53 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU0MDMxMTAvBgNVBAUTKDVGRTMwQ0FGNkY1QTMyQzkxOUQzMzVBQTk0RDBFNzMz M0NEMDU0MzUwHhcNMjMxMDMwMDQ1MDE0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNmMzYwNi02N2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmptkzUpBN3In3JMJhX1L+Yq15f/7IhQxqHnUZdgpoyvso2QNDhe3/orh1GCe n98082bbJdkSA/wlB5YE4OD3QbvOrpQxQjbtwFF3am85DrkLQN+1gRBshvG0Zfal F3AARMh/WKpzEi+6ow3RR6NCCqGmtRVVu/HmUrFqjCtKQhbDgqGabrs72GX9gGZV fVRXb3XmsEwYeImp4SDsA3g+Cv2ymNagQf3n8Z+ARmrI4a+EmV9UjV69JZNxvFWt zw1U/j0YytrMLy+U1snTBXec2QksSuLOQKM4PqLdUCemkBJ/XQ0mkarjBk8SKUA0 b+rBM3ed4Oj3QajNMBgqkzBTAQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFO0qB3al g/jQ2QCaVEVidDtcVtLzMB8GA1UdIwQYMBaAFF/jDK9vWjLJGdM1qpTQ5zM80FQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTQwMy9BMUNDRUNGRUY4 QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1za1oweldxbE5Ebk16elFW RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtTU1yMjlhTXNrWjB6V3FsTkRuTXp6UVZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU0MDMvQTFDQ0VDRkVGOEJCMTFFQTg3QjFERTZCQzRGOUFFMDIvRkUwMkU3NzRD RkZEMTFFQzhDRkRGRjY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnmQgDBADLIgswDQQCAAIwBwMFACQBMCAwDQYJKoZIhvcN AQELBQADggEBAEiGC3LvjHRdiwGLFK/hFWH9jZRMiQy5kr6pXKUdl8nP7Fft2lhW 2hu4x0r9oPERLlxo6AKTXO3A5J2bog21ZTigi/lmYI+YvTLmkD5pnrDRUUsFzVID a9UWmkpODRFiey7O9CHDta/SEuKUYklfbv7zp1kKt8ChD6wRsyeEGje2kDDvVW8S 0gipUogEK6vQM4HqE3QQ4MpMgDDlnEexmAwqyAmOJVj4JM9gU8S/W2tBcFYi9aWs ugxghta6Zzu15zKFe083Wxj/uQfcBrXNMHMq31SX0skYXid8x35TtnbdpNDwhVN6 /kNOX+zOIbk6vI4LlwOjzx2tLKGmx7327lM= -----END CERTIFICATE-----Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org