$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/4950E3D278DD11EE8A6C4021C4F9AE02.roa File: 4950E3D278DD11EE8A6C4021C4F9AE02.roa (raw, json) Hash identifier: N7VzH0midsTlxjV19OTYCmxTCrS2K3GJgRsMKbOU77U= Subject key identifier: CD:53:11:15:7E:D0:87:AA:DE:01:A7:39:2C:63:C6:DA:75:A1:70:0D Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Certificate serial: 30 Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/4950E3D278DD11EE8A6C4021C4F9AE02.roa Signing time: Wed 01 Nov 2023 17:37:11 +0000 ROA not before: Wed 01 Nov 2023 17:37:11 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 7480 IP address blocks: 103.69.92.0/23 maxlen: 24 2001:df2:5740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Validity Not Before: Nov 1 17:37:11 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65428cc7-04c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:ed:2a:00:a3:9b:5c:3d:23:fe:83:89:57: 3a:f9:7c:89:67:0b:06:ce:6f:39:29:81:2c:95:07: 7e:5b:a3:d0:88:9e:04:01:04:69:76:e4:40:0b:2e: 30:2f:ac:0b:27:1f:55:52:c0:c8:6f:ca:d2:b5:d6: b3:f6:4f:7e:ba:09:7a:5a:87:1e:24:2e:83:41:fe: 7a:2e:d3:47:90:98:e2:77:5b:e6:08:91:a4:aa:d2: 8f:48:67:79:8e:c4:f1:b5:2a:3f:16:20:5f:36:15: 30:60:40:51:27:95:81:2c:94:45:a8:bb:87:c3:3b: 46:9c:0f:01:be:65:5d:41:50:e6:5f:d8:eb:5c:92: c3:e2:e3:c5:ba:89:6b:ac:9c:af:61:0a:15:8b:60: 56:1c:a8:bd:44:56:5b:2c:35:56:a4:cb:4a:d9:9c: 7c:8a:5d:d3:1f:3c:ce:cc:bf:1c:41:50:d5:cc:3d: e1:00:27:52:b4:97:29:73:22:bf:23:0c:71:5a:b8: 0b:49:88:55:a3:83:50:7a:67:c8:fd:41:95:f6:cf: 90:d9:66:e9:ae:ad:65:11:4b:b7:9f:bc:ec:3f:9e: dc:78:eb:bd:11:70:a7:80:1b:01:8a:ad:32:c8:23: 04:10:01:59:a0:b2:4c:7b:e5:73:da:71:6d:e7:7a: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:53:11:15:7E:D0:87:AA:DE:01:A7:39:2C:63:C6:DA:75:A1:70:0D X509v3 Authority Key Identifier: keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/4950E3D278DD11EE8A6C4021C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.69.92.0/23 IPv6: 2001:df2:5740::/48 Signature Algorithm: sha256WithRSAEncryption 0a:13:fb:04:23:5e:61:f2:63:5c:cf:f8:9f:10:c9:f6:00:21: a3:94:7c:71:c7:f1:36:ce:be:09:87:94:a8:50:c7:77:16:f8: 49:ed:8b:76:a8:2f:c9:30:89:dc:aa:7f:47:06:b0:34:f2:30: cc:5e:52:15:9a:e2:31:48:8d:66:2d:6d:d7:78:da:40:22:ce: 71:33:75:c6:ea:79:3d:8e:96:51:bb:60:3d:b1:ee:24:03:7f: 87:73:7a:df:b5:f3:a8:24:4b:c2:10:14:ec:db:5a:eb:25:b9: b7:a8:f9:13:40:23:b8:f2:30:20:cf:dd:dc:9b:77:f9:94:df: 9a:b5:6e:39:ad:eb:96:e3:15:df:8b:9e:c2:d7:99:7c:ba:47: df:07:d4:3b:3f:dc:ff:b7:3b:a8:60:3c:55:82:87:09:fc:cd: 8f:91:6d:a8:8b:b8:a6:14:fe:be:2b:01:1c:5a:69:ee:5c:a9: bc:49:9d:4c:db:dd:02:c1:a1:60:27:bf:a5:da:eb:0e:d1:4f: 7d:3c:6d:62:0a:a0:31:23:45:35:d0:91:09:c8:ea:f4:4f:83: 7b:05:e8:94:02:ed:d7:6e:e4:c0:b5:1b:ba:31:57:d3:a4:7a: b8:12:2c:00:87:e8:b9:0d:fc:26:f4:2d:84:0a:66:59:dc:5e: 78:b4:5d:ff -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjM3QjExMC8GA1UEBRMoNjQzQTg5RUEwODBBQUM4NkY4QTY4QjU1MTA4RTc3QjEw NkExNDFDQTAeFw0yMzExMDExNzM3MTFaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NDI4Y2M3LTA0YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCMe0qAKObXD0j/oOJVzr5fIlnCwbObzkpgSyVB35bo9CIngQBBGl25EALLjAv rAsnH1VSwMhvytK11rP2T366CXpahx4kLoNB/nou00eQmOJ3W+YIkaSq0o9IZ3mO xPG1Kj8WIF82FTBgQFEnlYEslEWou4fDO0acDwG+ZV1BUOZf2OtcksPi48W6iWus nK9hChWLYFYcqL1EVlssNVaky0rZnHyKXdMfPM7MvxxBUNXMPeEAJ1K0lylzIr8j DHFauAtJiFWjg1B6Z8j9QZX2z5DZZumurWURS7efvOw/ntx4670RcKeAGwGKrTLI IwQQAVmgskx75XPacW3nepUXAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUzVMRFX7Q h6reAac5LGPG2nWhcA0wHwYDVR0jBBgwFoAUZDqJ6ggKrIb4potVEI53sQahQcow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMzdCL0FBODZCMTFFMzFC MDExRUU5QTUwRDc2MUM0RjlBRTAyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkRxSjZnZ0tySWI0cG90VkVJNTNzUWFoUWNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi80OTUwRTNEMjc4 REQxMUVFOEE2QzQwMjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWdFXDAPBAIAAjAJAwcAIAEN8ldAMA0GCSqGSIb3DQEBCwUA A4IBAQAKE/sEI15h8mNcz/ifEMn2ACGjlHxxx/E2zr4Jh5SoUMd3FvhJ7Yt2qC/J MIncqn9HBrA08jDMXlIVmuIxSI1mLW3XeNpAIs5xM3XG6nk9jpZRu2A9se4kA3+H c3rftfOoJEvCEBTs21rrJbm3qPkTQCO48jAgz93cm3f5lN+atW45reuW4xXfi57C 15l8ukffB9Q7P9z/tzuoYDxVgocJ/M2PkW2oi7imFP6+KwEcWmnuXKm8SZ1M290C waFgJ7+l2usO0U99PG1iCqAxI0U10JEJyOr0T4N7BeiUAu3XbuTAtRu6MVfTpHq4 EiwAh+i5Dfwm9C2ECmZZ3F54tF3/ -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:45 2024 by rpki-client on console-ams.rpki-client.org