$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/BA536126685D11EE8F1C1849C4F9AE02.roa File: BA536126685D11EE8F1C1849C4F9AE02.roa (raw, json) Hash identifier: TeOT08pZdJKZYXgJoC3uQ37VY/ZhoZkFKgmuL0OEmdg= Subject key identifier: 49:84:5C:D1:3A:5F:1F:6A:D6:AF:4C:1D:48:82:7E:2D:97:E1:4F:76 Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 13 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/BA536126685D11EE8F1C1849C4F9AE02.roa Signing time: Wed 11 Oct 2023 17:43:46 +0000 ROA not before: Wed 11 Oct 2023 17:43:46 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 55501 IP address blocks: 103.72.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Oct 11 17:43:46 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6526ded2-1ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ac:a4:f3:aa:f1:35:94:63:50:54:40:8f:25: 75:88:b2:06:a6:aa:3d:23:ca:0a:bc:15:03:b8:65: 64:b7:4a:de:9b:41:9a:e5:c3:1d:19:dc:33:44:f9: d7:cd:d3:f2:ec:56:9d:8e:40:39:1a:86:53:a3:d6: b6:b4:75:3d:ff:cb:c7:bb:4b:f9:b8:b6:25:9b:03: de:9c:1a:0e:ac:dc:d2:a6:6f:fe:13:14:b7:b7:c3: 69:2f:7c:fa:a4:e9:89:b6:33:51:b9:b7:1c:1b:e1: d3:71:e2:99:57:1f:11:a4:5b:fb:13:24:76:81:aa: e2:75:54:12:78:21:74:01:39:20:f5:a4:58:d2:b4: 42:76:96:34:a3:8a:29:ef:91:d1:a1:fc:c5:19:12: 19:56:71:f9:e3:b3:2e:15:53:05:02:45:ab:a5:71: 8b:ea:19:ad:01:30:59:6c:c5:da:3a:57:50:66:66: 58:1b:c2:48:1b:52:c0:b1:7c:67:f0:7e:9f:d9:cc: ba:f9:66:93:95:29:3a:43:92:59:5c:fc:af:0c:02: f1:52:58:d5:2f:c6:54:56:e7:c0:0c:26:6c:44:8e: 76:b0:d6:ef:9c:b1:9b:62:a3:2f:ee:ae:3b:1a:e9: c7:12:8a:93:73:f1:5d:fa:bd:2f:c7:d3:d9:f4:81: ee:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:84:5C:D1:3A:5F:1F:6A:D6:AF:4C:1D:48:82:7E:2D:97:E1:4F:76 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/BA536126685D11EE8F1C1849C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.65.0/24 Signature Algorithm: sha256WithRSAEncryption 25:85:9b:80:73:f2:26:85:be:b9:01:a7:73:ec:47:4c:35:a9: a4:a1:0a:21:44:b0:c4:74:8d:40:02:b8:59:44:38:d7:de:ec: fa:e5:dd:65:91:0e:5e:44:ec:d1:11:f2:b5:b8:24:00:b3:d2: d8:ca:cd:3c:c9:be:63:5e:eb:e3:3a:bc:b3:58:97:77:ce:28: bf:52:ff:68:6c:e3:5e:e5:9d:13:9d:48:be:6e:1c:6d:d3:ef: b9:31:7d:b3:26:22:f0:9c:e5:bf:34:e5:c2:5a:d9:cb:37:a8: 8e:78:fa:4f:0d:6b:d8:cf:1f:a8:77:8f:b2:3a:03:ff:97:6e: 0c:c3:8c:4c:16:d0:ec:f3:9a:34:b2:9c:5e:df:6d:91:4f:0d: e1:8a:de:ba:39:08:9e:92:ec:21:83:f1:ec:bc:41:87:d3:ae: e2:d4:39:08:03:74:4e:7d:c3:0f:4f:ce:7e:c0:47:7f:81:d3: dc:be:5a:77:90:18:c8:c6:b9:59:1c:59:54:85:ed:f8:8a:ff: 94:c7:40:e9:9b:08:d4:92:0a:20:8a:83:64:97:fe:e1:bd:1c: 47:e3:b0:f6:99:fd:a4:be:91:54:8c:67:19:22:06:44:53:32: e2:da:1a:c3:74:66:8f:53:04:03:c7:d0:54:ba:5f:63:91:0a: c1:ee:c8:47 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RkYyNTExMC8GA1UEBRMoRjExRjI0OUI4MjFERkNDMkIxQjk3QUY0RTcwNTI2REQ5 MzNBMTI3RDAeFw0yMzEwMTExNzQzNDZaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MjZkZWQyLTFhZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUrKTzqvE1lGNQVECPJXWIsgamqj0jygq8FQO4ZWS3St6bQZrlwx0Z3DNE+dfN 0/LsVp2OQDkahlOj1ra0dT3/y8e7S/m4tiWbA96cGg6s3NKmb/4TFLe3w2kvfPqk 6Ym2M1G5txwb4dNx4plXHxGkW/sTJHaBquJ1VBJ4IXQBOSD1pFjStEJ2ljSjiinv kdGh/MUZEhlWcfnjsy4VUwUCRaulcYvqGa0BMFlsxdo6V1BmZlgbwkgbUsCxfGfw fp/ZzLr5ZpOVKTpDkllc/K8MAvFSWNUvxlRW58AMJmxEjnaw1u+csZtioy/urjsa 6ccSipNz8V36vS/H09n0ge6BAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUSYRc0Tpf H2rWr0wdSIJ+LZfhT3YwHwYDVR0jBBgwFoAU8R8km4Id/MKxuXr05wUm3ZM6En0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGRjI1LzYwNjRCQUIyNTJG NDExRUU4OThCOUI0M0M0RjlBRTAyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVu MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFI4a200SWRfTUt4dVhyMDV3VW0zWk02RW4wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi9CQTUzNjEyNjY4 NUQxMUVFOEYxQzE4NDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGdIQTANBgkqhkiG9w0BAQsFAAOCAQEAJYWbgHPyJoW+uQGn c+xHTDWppKEKIUSwxHSNQAK4WUQ4197s+uXdZZEOXkTs0RHytbgkALPS2MrNPMm+ Y17r4zq8s1iXd84ov1L/aGzjXuWdE51Ivm4cbdPvuTF9syYi8JzlvzTlwlrZyzeo jnj6Tw1r2M8fqHePsjoD/5duDMOMTBbQ7POaNLKcXt9tkU8N4YreujkInpLsIYPx 7LxBh9Ou4tQ5CAN0Tn3DD0/OfsBHf4HT3L5ad5AYyMa5WRxZVIXt+Ir/lMdA6ZsI 1JIKIIqDZJf+4b0cR+Ow9pn9pL6RVIxnGSIGRFMy4toaw3Rmj1MEA8fQVLpfY5EK we7IRw== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:08 2024 by rpki-client on console-ams.rpki-client.org