$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EDAA86E4AD6D11EE83DA6253C4F9AE02.roa File: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (raw, json) Hash identifier: 5sOO/jQ4O74yVLIuI+2i0LD1Cyn9b+LANWHRpepKL7M= Subject key identifier: BB:D4:D0:29:53:7E:19:42:45:67:F4:B1:56:DF:92:77:C5:F7:F9:4D Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 32 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EDAA86E4AD6D11EE83DA6253C4F9AE02.roa Signing time: Fri 16 Feb 2024 03:30:34 +0000 ROA not before: Fri 16 Feb 2024 03:30:34 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 40065 IP address blocks: 103.94.185.0/24 maxlen: 24 103.99.115.0/24 maxlen: 24 103.99.178.0/24 maxlen: 24 103.99.179.0/24 maxlen: 24 202.91.33.0/24 maxlen: 24 202.91.34.0/24 maxlen: 24 202.91.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 07:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Feb 16 03:30:34 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65ced6da-00cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:db:5b:ca:df:7e:f3:38:b6:45:ba:48:5e:ad: 92:92:f7:ac:35:3b:04:1a:3d:65:82:26:01:83:34: 27:b8:0b:bb:ae:99:e9:42:e9:32:92:28:aa:f7:4c: ef:6c:4c:4b:8f:e0:71:d4:ef:54:44:a2:3d:a1:11: d9:8d:8a:b0:dd:8e:35:59:d5:be:56:01:fb:30:7d: 53:f2:cf:cd:29:0d:1d:b9:a7:87:bd:d0:aa:35:47: 19:dd:92:e6:20:2d:26:5e:11:2d:ae:2c:48:4c:3b: a7:0d:b2:0a:0e:23:ba:5c:77:52:bb:e9:0d:88:e8: 78:8d:53:b1:7c:72:d1:48:ee:0a:a2:c9:b0:fa:53: 93:a6:38:3c:b6:f2:45:7b:d8:ec:4c:52:76:bb:d8: ef:df:90:37:7f:9e:f8:cf:9a:53:ba:10:2f:2d:84: 96:a4:ec:d0:c6:8c:d2:c6:3b:9e:b5:49:bd:76:54: 87:a8:da:3e:ab:5c:6a:55:79:9b:be:80:36:77:d3: c9:ef:af:a3:a8:4c:71:e8:ad:d4:c7:83:6d:53:e8: 4c:42:75:e0:5b:35:54:24:e5:8b:ff:9f:48:75:8d: 81:3f:7a:5a:93:75:67:d9:a3:fa:85:a1:5a:17:be: 9c:94:f5:2d:ec:f8:d4:c2:30:8d:31:e9:09:28:3d: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D4:D0:29:53:7E:19:42:45:67:F4:B1:56:DF:92:77:C5:F7:F9:4D X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EDAA86E4AD6D11EE83DA6253C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.185.0/24 103.99.115.0/24 103.99.178.0/23 202.91.33.0-202.91.35.255 Signature Algorithm: sha256WithRSAEncryption 60:c9:3a:f0:ff:63:2f:47:75:78:39:e7:68:49:c4:bc:2a:08: b2:78:e2:1b:b1:e2:34:a6:75:38:35:a9:2d:d6:ae:03:61:e4: 35:88:4e:e6:78:55:63:59:03:fe:8f:14:2a:18:11:e2:8b:dc: 50:f0:80:6c:9b:16:ad:a9:5a:44:67:58:8f:05:77:da:d3:fd: c9:d5:c5:b1:35:bf:2c:70:78:f6:d1:34:d5:fd:2e:b8:d0:59: 67:11:00:2e:57:87:f7:04:b3:3a:24:d8:e8:8b:46:95:0a:18: f2:69:10:77:fc:db:b7:36:44:9a:18:bd:2f:29:5e:3e:e6:71: 1b:7d:23:59:33:76:5e:a2:61:b5:a5:9b:45:da:83:6d:d2:fd: 0d:9b:0b:bb:34:a7:bd:60:02:ff:54:05:43:da:12:f6:e5:da: 28:ba:ab:ec:3d:03:42:98:97:48:60:57:0e:9a:bd:d0:38:dd: 7b:8b:ae:49:47:d1:ee:8c:d1:5b:c8:11:4d:b0:b3:9f:05:f2: 75:5e:c6:a5:6d:d9:72:5b:2f:31:a5:ca:e1:5d:09:e4:3d:4e: 58:47:7b:ed:00:88:39:66:90:08:0f:10:14:7c:3f:3e:da:81: 06:88:90:83:aa:8a:44:a1:91:17:16:19:9e:bb:7c:47:cf:39: 4d:c0:9a:bc -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUQyQzExMC8GA1UEBRMoOUQzNDE0MjgzQjIyN0I4RjUxMkYzMDVGMkFDREI0M0NE RTlFNEQxMjAeFw0yNDAyMTYwMzMwMzRaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1Y2VkNmRhLTAwY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDw21vK337zOLZFukherZKS96w1OwQaPWWCJgGDNCe4C7uumelC6TKSKKr3TO9s TEuP4HHU71REoj2hEdmNirDdjjVZ1b5WAfswfVPyz80pDR25p4e90Ko1RxndkuYg LSZeES2uLEhMO6cNsgoOI7pcd1K76Q2I6HiNU7F8ctFI7gqiybD6U5OmODy28kV7 2OxMUna72O/fkDd/nvjPmlO6EC8thJak7NDGjNLGO561Sb12VIeo2j6rXGpVeZu+ gDZ308nvr6OoTHHordTHg21T6ExCdeBbNVQk5Yv/n0h1jYE/elqTdWfZo/qFoVoX vpyU9S3s+NTCMI0x6QkoPaCnAgMBAAGjggKvMIICqzAdBgNVHQ4EFgQUu9TQKVN+ GUJFZ/SxVt+Sd8X3+U0wHwYDVR0jBBgwFoAUnTQUKDsie49RLzBfKs20PN6eTRIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFRDJDLzAwMzczQzZDOUJC QzExRUU4NTFBREQ1MEM0RjlBRTAyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRS SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvblRRVUtEc2llNDlSTHpCZktzMjBQTjZlVFJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9FREFBODZFNEFE NkQxMUVFODNEQTYyNTNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA5BggrBgEFBQcBBwEB/wQq MCgwJgQCAAEwIAMEAGdeuQMEAGdjcwMEAWdjsjAMAwQAylshAwQCylsgMA0GCSqG SIb3DQEBCwUAA4IBAQBgyTrw/2MvR3V4OedoScS8KgiyeOIbseI0pnU4Nakt1q4D YeQ1iE7meFVjWQP+jxQqGBHii9xQ8IBsmxatqVpEZ1iPBXfa0/3J1cWxNb8scHj2 0TTV/S640FlnEQAuV4f3BLM6JNjoi0aVChjyaRB3/Nu3NkSaGL0vKV4+5nEbfSNZ M3ZeomG1pZtF2oNt0v0Nmwu7NKe9YAL/VAVD2hL25doouqvsPQNCmJdIYFcOmr3Q ON17i65JR9HujNFbyBFNsLOfBfJ1XsalbdlyWy8xpcrhXQnkPU5YR3vtAIg5ZpAI DxAUfD8+2oEGiJCDqopEoZEXFhmeu3xHzzlNwJq8 -----END CERTIFICATE-----Generated at Fri May 3 09:08:45 2024 by rpki-client on console-fra.rpki-client.org