$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa File: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (raw, json) Hash identifier: YJ76HhaPfBCtCqTNn8tqhJhNOJ+Bfaxx/ZJ3mQYsBwU= Subject key identifier: 53:0E:70:BE:2E:A7:9C:2A:C9:B1:6C:6B:4B:4D:28:47:E6:45:7A:9F Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Certificate serial: 0A5F Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa Signing time: Wed 08 May 2024 10:37:59 +0000 ROA not before: Wed 08 May 2024 10:37:59 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134204 IP address blocks: 103.211.28.0/22 maxlen: 22 103.211.28.0/24 maxlen: 24 103.211.29.0/24 maxlen: 24 103.211.30.0/24 maxlen: 24 103.211.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2655 (0xa5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Validity Not Before: May 8 10:37:59 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=663b5607-665a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:54:19:9d:b9:fc:59:07:3a:c0:e8:6b:e2: 89:26:09:c4:8b:95:67:d0:0d:db:04:00:d2:2a:1e: 4a:79:92:cd:54:a8:69:65:16:6d:88:c8:59:c0:3b: 2c:fc:cd:62:7a:6a:7e:d2:eb:62:2a:81:c1:4e:27: f7:81:7e:37:b9:8e:7f:a0:1b:74:57:fa:77:78:98: 40:a4:0a:c4:b6:91:c8:5f:2b:9f:4b:2d:fc:dc:f5: ae:fc:33:b9:4f:16:19:f2:a1:7f:41:c4:6d:4d:af: 29:09:57:07:22:dd:d9:df:ec:8c:23:54:f8:c6:e0: 65:b2:78:c4:f8:22:03:62:45:c2:0e:48:92:eb:8b: 1b:38:23:29:af:65:02:93:57:40:10:5f:89:0d:68: 2a:d9:b7:aa:ee:e7:61:63:0c:e7:57:26:47:fa:9d: 70:78:52:1e:0a:52:b4:41:0b:a2:85:f6:11:36:b1: 5e:da:59:ec:21:99:1d:f7:3b:e9:a5:e5:54:4c:af: 63:e9:e4:98:a2:af:88:58:2a:d5:bd:a2:c2:26:27: 65:2f:f7:6b:96:58:84:8b:d2:ce:a2:60:5a:fc:d8: cc:87:de:81:0f:25:f4:c6:f9:a5:60:78:25:53:1f: 9c:0b:69:d3:71:f9:16:f5:2c:87:cb:47:c7:89:cf: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0E:70:BE:2E:A7:9C:2A:C9:B1:6C:6B:4B:4D:28:47:E6:45:7A:9F X509v3 Authority Key Identifier: keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.211.28.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:8f:94:c1:9d:33:3f:e9:49:88:99:ab:00:ed:03:5a:93:c9: 59:af:71:70:00:60:63:4b:e6:2e:65:f9:05:a3:33:a1:cc:4a: 89:39:49:06:63:1f:50:88:42:1e:ec:53:16:0a:d6:55:8f:d3: 5c:c1:bf:9a:aa:14:73:85:e9:3f:aa:44:f9:8e:9c:75:03:8d: 39:ef:42:cc:ce:c1:ec:aa:dd:c8:80:8e:b5:62:f4:ba:28:d3: 96:8a:97:07:6d:1a:10:94:ec:c1:c4:36:b6:b2:55:9a:d6:03: dd:75:6f:17:92:9c:77:94:19:3c:e2:2b:ca:bb:4c:1f:e6:e0: d7:f6:dc:33:fe:2f:bc:13:4c:91:ae:a8:09:fc:01:55:b2:4e: ed:a7:ca:b7:a7:db:57:12:46:70:c0:ca:a8:84:b6:63:7a:69: af:c5:e5:37:be:3d:e0:bd:0f:85:10:6f:17:0e:c6:62:a2:b3: 2d:de:6f:76:f8:aa:3a:e8:3e:2a:02:eb:04:3a:60:41:3d:38: 6c:78:c4:71:90:99:71:5d:87:56:2c:1a:e0:f9:e2:36:27:f3: 73:56:a8:ef:6a:62:8d:3c:d6:be:79:70:6a:a4:2f:1f:ff:96: a5:c7:d2:55:a3:cc:0f:08:59:b1:e0:f3:ca:8e:1a:8d:8f:9f: 2a:6b:b8:01 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA2RjIxMTAvBgNVBAUTKEU3NEY0NjRDNDA4NjU5RUQyNTg5REI2NjRDRThFRjZB NkM2MDBDNDcwHhcNMjQwNTA4MTAzNzU5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjNiNTYwNy02NjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApalUGZ25/FkHOsDoa+KJJgnEi5Vn0A3bBADSKh5KeZLNVKhpZRZtiMhZwDss /M1iemp+0utiKoHBTif3gX43uY5/oBt0V/p3eJhApArEtpHIXyufSy383PWu/DO5 TxYZ8qF/QcRtTa8pCVcHIt3Z3+yMI1T4xuBlsnjE+CIDYkXCDkiS64sbOCMpr2UC k1dAEF+JDWgq2beq7udhYwznVyZH+p1weFIeClK0QQuihfYRNrFe2lnsIZkd9zvp peVUTK9j6eSYoq+IWCrVvaLCJidlL/drlliEi9LOomBa/NjMh96BDyX0xvmlYHgl Ux+cC2nTcfkW9SyHy0fHic9MvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFMOcL4u p5wqybFsa0tNKEfmRXqfMB8GA1UdIwQYMBaAFOdPRkxAhlntJYnbZkzo72psYAxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDZGMi84QjhDNEREMjNG NDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dlMGxpZHRtVE9qdmFteGdE RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUwOUdURUNHV2UwbGlkdG1UT2p2YW14Z0RFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA2RjIvOEI4QzRERDIzRjQ3MTFFQThFNURBODdDQzRGOUFFMDIvOEIzN0QyQzQw RDI1MTFFRkEyRTREOTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn0xwwDQYJKoZIhvcNAQELBQADggEBAEuPlMGdMz/pSYiZ qwDtA1qTyVmvcXAAYGNL5i5l+QWjM6HMSok5SQZjH1CIQh7sUxYK1lWP01zBv5qq FHOF6T+qRPmOnHUDjTnvQszOweyq3ciAjrVi9Loo05aKlwdtGhCU7MHENrayVZrW A911bxeSnHeUGTziK8q7TB/m4Nf23DP+L7wTTJGuqAn8AVWyTu2nyren21cSRnDA yqiEtmN6aa/F5Te+PeC9D4UQbxcOxmKisy3eb3b4qjroPioC6wQ6YEE9OGx4xHGQ mXFdh1YsGuD54jYn83NWqO9qYo081r55cGqkLx//lqXH0lWjzA8IWbHg88qOGo2P nypruAE= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:36 2024 by rpki-client on console-ams.rpki-client.org