$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa File: 0853C13CA2F011E9B721795CC4F9AE02.roa (raw, json) Hash identifier: hSJnkgK3aDza8hCL3/Rha7E5DHZ4RYM6R7P4dsPPPRk= Subject key identifier: 56:F6:87:41:68:B6:6F:4C:47:75:CD:EB:00:F7:34:48:82:A5:B5:68 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0CF0 Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa Signing time: Mon 28 Aug 2023 18:35:51 +0000 ROA not before: Mon 28 Aug 2023 18:35:51 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 139301 IP address blocks: 103.141.6.0/24 maxlen: 24 103.141.7.0/24 maxlen: 24 2405:8c0::/48 maxlen: 48 2405:8c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 18:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: Aug 28 18:35:51 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ece907-ef65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:7c:33:87:98:89:39:82:3c:34:8c:e4:a1: 6f:b9:8b:d4:1a:ae:6b:0e:2f:01:31:6e:3b:fd:16: a8:98:a3:0c:39:3e:a7:9f:67:3b:99:5a:72:ff:d3: 23:38:0f:13:b7:15:1d:18:2d:14:57:b1:c0:c7:3f: a4:40:5e:c2:68:eb:1e:84:7e:af:6e:72:0e:cf:9d: 59:e2:53:15:81:49:7f:be:9d:70:ce:64:ab:3e:6a: b1:7d:5e:38:8b:26:1d:5d:9c:8d:4e:cb:57:c7:6a: ed:aa:9f:ea:68:1a:01:c4:14:c7:f1:62:23:4b:73: 3e:67:21:b2:6a:50:cb:14:54:6c:73:c6:5c:bd:67: 21:01:c8:c2:e3:3f:7e:87:8e:46:3b:8e:5d:fa:61: da:ca:2f:23:83:8d:3b:c5:ea:1a:1d:f0:32:c6:90: b9:79:84:dd:a0:c9:7e:76:bc:fd:b1:b8:60:9c:7b: 8e:4d:0a:8d:6b:bb:1b:83:13:79:6e:a5:4a:da:5b: 2b:06:cd:94:ed:ec:68:9c:fd:da:b4:fc:54:2f:37: 95:14:34:4d:b8:f1:cf:37:52:2c:51:35:88:a8:e8: ab:79:3b:da:fd:11:6d:f8:42:96:c8:bf:32:b8:1c: 2f:53:29:3d:27:e2:fb:58:77:fd:93:6b:1f:d2:1e: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F6:87:41:68:B6:6F:4C:47:75:CD:EB:00:F7:34:48:82:A5:B5:68 X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.6.0/23 IPv6: 2405:8c0::/47 Signature Algorithm: sha256WithRSAEncryption 80:66:8a:3c:19:15:1f:84:c2:7f:fa:a7:1f:89:6e:04:d0:0a: 90:c7:ed:41:7e:2b:c1:d0:1d:0b:20:90:85:27:fb:db:46:77: 5a:15:11:3d:e5:c2:4a:1c:49:f0:72:26:3e:fc:b6:60:28:27: e0:89:3b:9f:ac:9c:f3:8c:f7:88:a3:cb:60:7f:1b:53:34:08: b9:ec:40:86:ae:38:91:5f:38:35:f1:77:61:5a:24:44:e1:fc: d4:80:49:cf:8a:bb:0a:d9:77:b3:6e:a1:87:a4:28:98:01:e0: f2:da:3d:a3:7d:1c:f8:c3:2d:ec:38:1a:71:3f:38:ca:7a:17: 3c:0a:d8:75:fb:42:bd:43:56:72:b1:3e:ee:60:e6:58:53:50: 8a:2b:e1:be:3f:c0:42:82:a0:33:f3:72:4b:3f:ee:07:2a:84: c4:0f:21:f7:b0:b4:99:06:e4:82:ed:13:85:99:62:bb:12:21: 9c:64:37:15:7b:81:80:df:c9:6b:36:5d:7e:af:3d:a1:d7:4a: b7:6c:aa:dc:65:70:49:2b:ae:f0:cf:93:0b:5b:d3:8b:b0:15: 90:b7:46:76:a8:57:e9:f9:95:3b:a2:08:25:1d:be:0b:00:81: a9:87:29:de:f1:4f:b5:81:67:65:7d:c7:f2:35:90:ea:24:6c: df:a9:f3:7f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjMwODI4MTgzNTUxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVjZTkwNy1lZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVJ8M4eYiTmCPDSM5KFvuYvUGq5rDi8BMW47/RaomKMMOT6nn2c7mVpy/9Mj OA8TtxUdGC0UV7HAxz+kQF7CaOsehH6vbnIOz51Z4lMVgUl/vp1wzmSrPmqxfV44 iyYdXZyNTstXx2rtqp/qaBoBxBTH8WIjS3M+ZyGyalDLFFRsc8ZcvWchAcjC4z9+ h45GO45d+mHayi8jg407xeoaHfAyxpC5eYTdoMl+drz9sbhgnHuOTQqNa7sbgxN5 bqVK2lsrBs2U7exonP3atPxULzeVFDRNuPHPN1IsUTWIqOireTva/RFt+EKWyL8y uBwvUyk9J+L7WHf9k2sf0h5llQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFb2h0Fo tm9MR3XN6wD3NEiCpbVoMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI4ODAvMUY1MTE4QTRBMkVGMTFFOTlENEUwQTVCQzRGOUFFMDIvMDg1M0MxM0NB MkYwMTFFOUI3MjE3OTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjQYwDwQCAAIwCQMHASQFCMAAADANBgkqhkiG9w0BAQsF AAOCAQEAgGaKPBkVH4TCf/qnH4luBNAKkMftQX4rwdAdCyCQhSf720Z3WhURPeXC ShxJ8HImPvy2YCgn4Ik7n6yc84z3iKPLYH8bUzQIuexAhq44kV84NfF3YVokROH8 1IBJz4q7Ctl3s26hh6QomAHg8to9o30c+MMt7DgacT84ynoXPArYdftCvUNWcrE+ 7mDmWFNQiivhvj/AQoKgM/NySz/uByqExA8h97C0mQbkgu0ThZliuxIhnGQ3FXuB gN/JazZdfq89oddKt2yq3GVwSSuu8M+TC1vTi7AVkLdGdqhX6fmVO6IIJR2+CwCB qYcp3vFPtYFnZX3H8jWQ6iRs36nzfw== -----END CERTIFICATE-----Generated at Sun Jun 2 19:19:58 2024 by rpki-client on console-fra.rpki-client.org