$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3481400917811ED904ACF83C4F9AE02.roa File: C3481400917811ED904ACF83C4F9AE02.roa (raw, json) Hash identifier: G57w3BY+oamoZrS5obrZv6SV9BGixuS9Eocll81oryM= Subject key identifier: F5:85:C6:C3:4A:65:0D:01:83:63:87:56:E6:E4:A9:90:BD:62:FA:51 Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: D1 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3481400917811ED904ACF83C4F9AE02.roa Signing time: Sat 09 Dec 2023 04:54:31 +0000 ROA not before: Sat 09 Dec 2023 04:54:31 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 10022 IP address blocks: 203.214.200.0/23 maxlen: 23 203.214.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Dec 9 04:54:31 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6573f307-be41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1b:50:b3:41:a8:a3:a6:aa:67:b3:59:5c:0e: ee:66:8d:45:de:6b:c2:a9:90:48:a1:39:00:6d:77: ad:43:79:32:8b:2b:51:42:f3:be:d2:f5:7c:92:05: e2:04:33:5c:f1:d8:f4:c1:d0:4f:b4:b1:e3:d2:4a: 36:5b:4a:9a:b1:97:32:dd:0b:2e:b0:f9:e0:be:43: 1a:b8:05:ab:b9:41:78:7f:f2:3c:0a:ba:fa:82:37: a7:fa:1d:48:70:eb:47:8e:34:f8:47:be:7d:84:38: 58:09:83:bf:55:2c:09:56:51:ce:f1:69:20:63:11: b2:cc:39:4e:9c:65:17:04:f2:cb:7d:f3:59:d9:9c: 29:21:14:26:13:76:5f:71:28:af:31:84:f4:94:d3: db:f1:54:33:bd:6a:9e:c8:ba:ba:e5:16:57:a6:84: dc:04:97:57:4b:00:ab:5a:8f:0d:3f:fe:db:50:01: c6:8e:b5:46:d7:b1:1f:39:bd:c2:33:61:ac:f9:ef: 1f:fa:6d:88:3f:4d:64:84:8c:3f:b2:e1:95:d8:26: bf:0f:12:c6:e7:b1:e9:c6:9a:a1:1e:1b:22:c4:0f: 60:c6:2c:89:91:98:e5:5c:7d:48:9f:5e:fc:46:3f: 66:9f:39:87:f2:ff:c2:95:a4:43:00:c6:b7:45:11: 77:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:85:C6:C3:4A:65:0D:01:83:63:87:56:E6:E4:A9:90:BD:62:FA:51 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3481400917811ED904ACF83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.214.200.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:f9:b3:24:5b:bb:f8:4a:77:7a:fe:52:a7:c1:64:ac:67:8a: dc:f4:65:e3:ac:8f:ee:98:b9:a0:10:93:15:88:8f:86:b3:d2: f3:c7:b5:eb:08:c0:12:37:f4:81:61:81:bd:bb:86:95:13:a5: e6:4c:d8:39:a1:49:e1:13:7a:27:ec:88:1b:9f:c1:1e:3e:83: ff:25:ce:bc:a9:0f:5f:2e:11:da:7f:98:05:80:e2:8e:4f:08: 1b:34:b7:c5:30:24:d0:11:cf:3a:37:01:fd:88:f8:a6:f3:43: 3e:9b:a4:e1:b3:1f:d4:c3:7c:a9:72:99:b5:13:5e:2e:2f:75: bd:20:39:be:ca:43:53:53:b2:58:93:7a:3b:1e:da:60:a3:f8: 0a:94:ce:a1:cd:e5:c7:42:d6:4b:4d:ca:0a:4a:45:22:57:58: 94:44:2c:d1:38:1d:ad:07:7c:a3:06:04:91:4b:9d:f9:77:a8: a7:16:ea:5b:1b:96:b1:44:8e:04:f0:b2:82:d8:2f:4b:f6:27: 71:3d:b2:bd:6c:d6:f4:91:ec:4a:16:95:70:d0:04:f3:1f:ae: cc:40:35:a1:b3:aa:d8:04:8d:6c:48:ce:d1:24:60:49:0f:ba: cb:10:a3:60:07:68:73:df:09:62:d4:a9:f4:3e:ec:ac:75:ed: 11:a0:ae:53 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjMxMjA5MDQ1NDMxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczZjMwNy1iZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0htQs0Goo6aqZ7NZXA7uZo1F3mvCqZBIoTkAbXetQ3kyiytRQvO+0vV8kgXi BDNc8dj0wdBPtLHj0ko2W0qasZcy3QsusPngvkMauAWruUF4f/I8Crr6gjen+h1I cOtHjjT4R759hDhYCYO/VSwJVlHO8WkgYxGyzDlOnGUXBPLLffNZ2ZwpIRQmE3Zf cSivMYT0lNPb8VQzvWqeyLq65RZXpoTcBJdXSwCrWo8NP/7bUAHGjrVG17EfOb3C M2Gs+e8f+m2IP01khIw/suGV2Ca/DxLG57HpxpqhHhsixA9gxiyJkZjlXH1In178 Rj9mnzmH8v/ClaRDAMa3RRF3ywIDAQABo4IClTCCApEwHQYDVR0OBBYEFPWFxsNK ZQ0Bg2OHVubkqZC9YvpRMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU5QjYvNzkxOENCMEM3RkY1MTFFRDlFRDQ2NDFEQzRGOUFFMDIvQzM0ODE0MDA5 MTc4MTFFRDkwNEFDRjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALL1sgwDQYJKoZIhvcNAQELBQADggEBADr5syRbu/hKd3r+ UqfBZKxnitz0ZeOsj+6YuaAQkxWIj4az0vPHtesIwBI39IFhgb27hpUTpeZM2Dmh SeETeifsiBufwR4+g/8lzrypD18uEdp/mAWA4o5PCBs0t8UwJNARzzo3Af2I+Kbz Qz6bpOGzH9TDfKlymbUTXi4vdb0gOb7KQ1NTsliTejse2mCj+AqUzqHN5cdC1ktN ygpKRSJXWJRELNE4Ha0HfKMGBJFLnfl3qKcW6lsblrFEjgTwsoLYL0v2J3E9sr1s 1vSR7EoWlXDQBPMfrsxANaGzqtgEjWxIztEkYEkPussQo2AHaHPfCWLUqfQ+7Kx1 7RGgrlM= -----END CERTIFICATE-----Generated at Fri May 17 06:46:20 2024 by rpki-client on console-ams.rpki-client.org