$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/6CE4307243AB11E98FAE6F0AC4F9AE02.roa File: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (raw, json) Hash identifier: C3t+NehZCmSbxSRABiEsj0jBSfoJdT1ufKsC9pvYusY= Subject key identifier: A2:A9:39:18:D4:28:30:32:D6:4B:85:01:4E:20:A5:F9:56:D9:BD:28 Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Certificate serial: 0F78 Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/6CE4307243AB11E98FAE6F0AC4F9AE02.roa Signing time: Tue 02 Jul 2024 18:05:39 +0000 ROA not before: Tue 02 Jul 2024 18:05:39 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 132370 IP address blocks: 103.15.73.0/24 maxlen: 24 103.88.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3960 (0xf78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Validity Not Before: Jul 2 18:05:39 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66844173-22a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:96:92:25:4d:a2:0e:22:cd:4e:e5:c5:7e: bd:3c:02:c3:af:cf:ca:a2:6b:59:df:de:db:65:58: f2:9b:a9:71:c3:2d:1d:15:1c:b7:90:37:f4:88:25: 0d:4e:15:ec:6b:94:8d:79:00:61:55:44:da:36:e3: ab:4d:ce:81:3b:67:46:d6:cd:b7:ec:82:31:ff:74: 70:1c:58:b2:d9:0c:ff:9b:16:7b:55:c1:77:8b:c6: b7:38:25:d7:3b:b1:f0:ad:78:0f:b0:98:16:dc:e5: b1:14:4a:99:4a:a7:b7:6c:60:34:1d:5a:94:fc:d2: 55:44:88:36:ae:03:54:d7:64:6e:16:c5:ad:eb:74: 57:85:9d:0f:a3:80:b8:68:43:ef:22:1c:ae:9a:39: 2e:0b:dd:98:50:2b:23:59:fd:bc:55:45:60:95:61: a3:c5:c1:82:23:13:c7:68:7a:96:b8:c9:de:6d:76: 76:e7:20:80:50:48:24:15:ad:d6:c0:a7:d8:0f:70: 9d:28:b3:0e:1f:8f:9f:b1:47:68:69:08:76:ed:e5: 31:a2:b0:4a:d5:7a:59:06:3a:5c:23:08:0a:fb:e5: ff:ee:a1:81:75:4c:dd:1f:32:3b:57:6f:ca:b5:5d: e0:f2:6b:5e:40:03:33:e4:bc:f8:db:82:5a:0a:da: f3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A9:39:18:D4:28:30:32:D6:4B:85:01:4E:20:A5:F9:56:D9:BD:28 X509v3 Authority Key Identifier: keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/6CE4307243AB11E98FAE6F0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.73.0/24 103.88.181.0/24 Signature Algorithm: sha256WithRSAEncryption a6:d9:28:a2:eb:f5:9a:cc:e8:0d:6e:b4:e6:08:62:9c:50:4d: 65:49:52:50:88:84:be:23:08:73:a0:82:a4:27:c3:b6:0a:85: 49:c6:76:f3:cc:6a:79:ee:48:dc:a9:e4:bd:b6:16:14:3c:e1: f3:06:ad:89:0e:ac:66:82:d3:34:10:83:c4:54:c7:c2:8c:b5: 16:fe:c1:51:b0:bb:86:52:74:ca:40:37:ac:55:86:fd:35:fb: b4:50:1d:b0:c5:c7:21:5b:47:8a:00:ba:6b:1c:9a:f9:5c:10: 66:80:51:36:e3:f5:5f:fe:dc:73:5f:3c:46:7b:51:d5:0f:24: 57:de:1d:3a:c1:15:60:ef:56:29:a3:df:10:f1:7d:e6:1a:8d: 8f:99:8c:aa:3b:17:e6:2b:97:47:dd:7b:2a:a4:1d:95:ba:ae: b9:7c:2c:99:26:ce:e6:4a:61:b9:c5:a1:c5:0b:46:d4:69:3f: 94:40:3a:f9:ec:59:3a:84:d5:63:e1:0d:55:72:5b:0e:60:61: 03:93:0a:e9:e8:a1:e5:d1:1d:aa:64:79:43:79:60:ee:00:83: 70:03:33:56:64:99:67:a7:87:a1:14:28:9e:12:4c:f8:8e:a4: 9d:61:e5:e8:d1:04:d4:4d:1a:5b:c4:b4:97:58:88:d6:04:b0: ed:ed:e4:65 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICD3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBOTgxMTAvBgNVBAUTKDE4Nzc1QjdCNkJBQ0YyODFFQUVENzhEQTc2ODY4Njgy RTUzMUIxRjAwHhcNMjQwNzAyMTgwNTM5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0NDE3My0yMmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqmWkiVNog4izU7lxX69PALDr8/KomtZ397bZVjym6lxwy0dFRy3kDf0iCUN ThXsa5SNeQBhVUTaNuOrTc6BO2dG1s237IIx/3RwHFiy2Qz/mxZ7VcF3i8a3OCXX O7HwrXgPsJgW3OWxFEqZSqe3bGA0HVqU/NJVRIg2rgNU12RuFsWt63RXhZ0Po4C4 aEPvIhyumjkuC92YUCsjWf28VUVglWGjxcGCIxPHaHqWuMnebXZ25yCAUEgkFa3W wKfYD3CdKLMOH4+fsUdoaQh27eUxorBK1XpZBjpcIwgK++X/7qGBdUzdHzI7V2/K tV3g8mteQAMz5Lz424JaCtrzPwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKKpORjU KDAy1kuFAU4gpflW2b0oMB8GA1UdIwQYMBaAFBh3W3trrPKB6u142naGhoLlMbHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUE5OC8zMjNFQzRENDQz QTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhvSHE3WGphZG9hR2d1VXhz ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIZGJlMnVzOG9IcTdYamFkb2FHZ3VVeHNmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTVBOTgvMzIzRUM0RDQ0M0E5MTFFOUE2QzQ3RDg0QzRGOUFFMDIvNkNFNDMwNzI0 M0FCMTFFOThGQUU2RjBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnD0kDBABnWLUwDQYJKoZIhvcNAQELBQADggEBAKbZKKLr 9ZrM6A1utOYIYpxQTWVJUlCIhL4jCHOggqQnw7YKhUnGdvPMannuSNyp5L22FhQ8 4fMGrYkOrGaC0zQQg8RUx8KMtRb+wVGwu4ZSdMpAN6xVhv01+7RQHbDFxyFbR4oA umscmvlcEGaAUTbj9V/+3HNfPEZ7UdUPJFfeHTrBFWDvVimj3xDxfeYajY+ZjKo7 F+Yrl0fdeyqkHZW6rrl8LJkmzuZKYbnFocULRtRpP5RAOvnsWTqE1WPhDVVyWw5g YQOTCunooeXRHapkeUN5YO4Ag3ADM1ZkmWenh6EUKJ4STPiOpJ1h5ejRBNRNGlvE tJdYiNYEsO3t5GU= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:55 2024 by rpki-client on console-fra.rpki-client.org