$ rpki-client -vvf rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/BDAC3ACA1E7111EB93874336C4F9AE02.roa File: BDAC3ACA1E7111EB93874336C4F9AE02.roa (raw, json) Hash identifier: 94ZEhCloSNNdL8tuIKR2FHNPzGO7lqHRz+YRirwFlKs= Subject key identifier: CC:C3:09:3A:4C:D3:13:92:0F:AB:E5:08:A6:E5:CC:59:A2:7D:12:D2 Certificate issuer: /CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Certificate serial: 065F Authority key identifier: 50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/BDAC3ACA1E7111EB93874336C4F9AE02.roa Signing time: Thu 04 Jan 2024 23:01:21 +0000 ROA not before: Thu 04 Jan 2024 23:01:21 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 134980 IP address blocks: 103.204.117.0/24 maxlen: 24 103.210.154.0/23 maxlen: 24 103.210.192.0/24 maxlen: 24 2001:df0:1600::/48 maxlen: 48 2406:3d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Validity Not Before: Jan 4 23:01:21 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=659738c1-a614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:4e:7e:06:ce:7f:ae:d3:ea:61:15:44:80: 02:58:d8:26:f1:34:61:20:dd:bb:81:a0:b2:51:21: 8a:6d:cf:83:29:47:20:52:9f:7f:92:4a:a9:0f:f4: 5b:a3:ff:50:2f:d4:b4:0e:ad:b5:2a:2c:45:d4:3e: 70:19:48:93:8b:b4:4f:08:7b:e6:f7:ea:03:d5:36: ba:02:16:c6:74:1a:61:8b:84:ec:97:bd:29:7b:d5: 08:d0:61:12:a7:2f:36:57:da:b6:90:d8:61:37:2d: d5:07:36:60:b8:d2:c7:ef:a8:49:09:d2:18:a4:9e: cc:70:cb:59:5f:b6:0c:78:9b:68:c3:18:fb:bc:6b: 58:1c:7d:d5:d6:bf:6b:45:40:d0:db:16:13:cf:f6: 8b:fd:e4:ec:cf:eb:32:cf:53:55:3f:4f:72:9c:21: d8:1f:20:28:e3:95:ba:97:85:fb:6c:a0:fc:c0:fa: 01:c6:8d:56:9d:40:90:99:df:35:08:ff:de:b9:72: 43:d0:45:cf:78:8b:7d:7f:ab:67:6b:1c:9b:dd:ca: 08:9a:e4:0b:5a:9f:24:cd:72:cf:df:06:44:29:5b: 3e:88:9b:f7:f5:cf:4a:95:60:c3:22:65:fb:04:9b: f2:65:49:0c:a5:6e:19:81:24:25:b4:3a:b7:4c:03: 9a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C3:09:3A:4C:D3:13:92:0F:AB:E5:08:A6:E5:CC:59:A2:7D:12:D2 X509v3 Authority Key Identifier: keyid:50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/BDAC3ACA1E7111EB93874336C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.117.0/24 103.210.154.0/23 103.210.192.0/24 IPv6: 2001:df0:1600::/48 2406:3d40::/32 Signature Algorithm: sha256WithRSAEncryption 22:7b:49:b8:da:ba:61:68:42:ef:c6:b9:60:fe:6d:03:db:64: 01:40:26:57:fc:ce:97:83:d4:b3:f0:1e:47:56:e7:30:cf:7a: 73:d5:08:5b:51:f8:fa:ca:f7:49:fd:66:79:96:7c:ca:49:dd: dd:90:f5:bd:fd:72:0a:39:31:96:98:cf:48:78:cb:02:23:33: 55:52:63:d3:d9:bd:15:31:80:09:93:52:48:d0:10:a2:5f:39: b6:65:67:0f:da:2c:30:24:f9:62:94:61:bf:5a:1b:36:c6:3b: b2:45:1d:07:6d:c7:cc:4e:da:56:11:63:05:7b:a6:bb:49:fa: c4:0b:31:7a:78:a3:f5:84:f6:d1:02:c9:0c:0b:e2:b1:8f:f1: 5f:38:f6:4e:28:f0:47:da:a5:8c:bc:1b:cb:43:9c:87:24:7b: f4:5e:a2:aa:ea:e3:e9:da:f4:ee:f3:09:b4:0a:87:e5:87:f9: bb:c6:b8:ad:41:56:13:dd:4d:19:f4:97:8c:bd:5e:34:36:55: 08:9c:88:c6:23:6b:76:01:f6:d1:fc:50:b0:db:1c:e6:d0:25: 0e:b5:3f:7f:ab:cf:39:22:77:c4:f6:b0:8d:7e:03:97:61:ed: 2b:86:6b:13:4f:45:82:29:62:80:e2:05:6f:b8:3e:24:0e:89: 85:3c:f5:ca -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MkIxMTAvBgNVBAUTKDUwNzE3RTlGQTBDQzM3QzQwNjdGODMzRTkwRkI3RTcy MTBGM0M1OTMwHhcNMjQwMTA0MjMwMTIxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk3MzhjMS1hNjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNNOfgbOf67T6mEVRIACWNgm8TRhIN27gaCyUSGKbc+DKUcgUp9/kkqpD/Rb o/9QL9S0Dq21KixF1D5wGUiTi7RPCHvm9+oD1Ta6AhbGdBphi4Tsl70pe9UI0GES py82V9q2kNhhNy3VBzZguNLH76hJCdIYpJ7McMtZX7YMeJtowxj7vGtYHH3V1r9r RUDQ2xYTz/aL/eTsz+syz1NVP09ynCHYHyAo45W6l4X7bKD8wPoBxo1WnUCQmd81 CP/euXJD0EXPeIt9f6tnaxyb3coImuQLWp8kzXLP3wZEKVs+iJv39c9KlWDDImX7 BJvyZUkMpW4ZgSQltDq3TAOaDwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFMzDCTpM 0xOSD6vlCKblzFmifRLSMB8GA1UdIwQYMBaAFFBxfp+gzDfEBn+DPpD7fnIQ88WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyQi9EODNENjI5NDFF NkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44UUdmNE0ta1B0LWNoRHp4 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIRi1uNkRNTjhRR2Y0TS1rUHQtY2hEenhaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU1MkIvRDgzRDYyOTQxRTZGMTFFQkFBMTM5RTMzQzRGOUFFMDIvQkRBQzNBQ0Ex RTcxMTFFQjkzODc0MzM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMBgEAgABMBIDBABnzHUDBAFn0poDBABn0sAwFgQCAAIwEAMHACABDfAWAAMF ACQGPUAwDQYJKoZIhvcNAQELBQADggEBACJ7SbjaumFoQu/GuWD+bQPbZAFAJlf8 zpeD1LPwHkdW5zDPenPVCFtR+PrK90n9ZnmWfMpJ3d2Q9b39cgo5MZaYz0h4ywIj M1VSY9PZvRUxgAmTUkjQEKJfObZlZw/aLDAk+WKUYb9aGzbGO7JFHQdtx8xO2lYR YwV7prtJ+sQLMXp4o/WE9tECyQwL4rGP8V849k4o8EfapYy8G8tDnIcke/Reoqrq 4+na9O7zCbQKh+WH+bvGuK1BVhPdTRn0l4y9XjQ2VQiciMYja3YB9tH8ULDbHObQ JQ61P3+rzzkid8T2sI1+A5dh7SuGaxNPRYIpYoDiBW+4PiQOiYU89co= -----END CERTIFICATE-----Generated at Wed May 29 02:29:42 2024 by rpki-client on console-ams.rpki-client.org