$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/015594DCF0D911EEA6B1AC5CC4F9AE02.roa File: 015594DCF0D911EEA6B1AC5CC4F9AE02.roa (raw, json) Hash identifier: PJtsgbBvToeR9XY/XhwPkNmw7aystL5t6cf45F7Ban0= Subject key identifier: 1F:95:F0:54:A1:49:D4:4D:96:30:99:27:70:4F:76:97:83:22:7B:55 Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 06B8 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/015594DCF0D911EEA6B1AC5CC4F9AE02.roa Signing time: Tue 02 Apr 2024 10:13:31 +0000 ROA not before: Tue 02 Apr 2024 10:13:31 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 9449 IP address blocks: 103.84.226.0/23 maxlen: 23 2400:a4c0:e024::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 20:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1720 (0x6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Apr 2 10:13:31 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=660bda4a-ca09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:70:59:36:5e:c2:d4:0c:80:c2:a4:c6:ae: b4:72:28:44:29:62:0a:97:a2:59:eb:7f:74:42:03: 80:28:fa:af:cb:46:10:bd:29:06:5e:5c:54:14:29: ae:61:24:cc:03:95:cc:5b:c6:5b:9f:d2:54:d2:fe: 6d:13:45:56:af:8a:72:96:ca:69:bd:96:88:2d:b3: 56:f2:f0:24:ff:50:28:3d:80:18:82:ff:f1:30:14: 8a:69:9e:8f:ad:44:69:4f:77:7c:98:74:f3:54:ce: b5:5a:04:be:84:ae:c3:e1:9b:dd:74:2d:ba:18:1e: 30:02:4e:aa:30:17:f4:a9:0d:09:78:b7:bb:2b:54: 57:95:e1:94:03:ef:19:f3:8b:f0:28:ad:b1:ed:d9: 04:4b:db:6b:03:ad:21:01:11:52:af:a8:9f:8c:ed: f0:93:42:01:d8:c3:6b:71:db:25:1e:1e:ac:22:cd: 84:39:d3:70:88:cf:5e:8b:f8:2d:aa:df:04:9f:08: 46:a1:7f:96:86:64:27:aa:78:ce:54:3d:6a:89:7c: 57:b8:a5:55:c5:d1:92:60:bc:72:c0:97:66:5e:1d: 16:34:f5:20:ce:55:c3:1b:12:a9:47:dc:55:99:a0: 79:c7:74:ec:4d:0b:68:92:a3:40:ce:9b:68:5d:2c: d4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:95:F0:54:A1:49:D4:4D:96:30:99:27:70:4F:76:97:83:22:7B:55 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/015594DCF0D911EEA6B1AC5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.226.0/23 IPv6: 2400:a4c0:e024::/48 Signature Algorithm: sha256WithRSAEncryption 14:9f:7a:83:4a:2e:7b:d1:cc:a5:1e:06:ee:a7:58:6f:92:be: da:ae:4d:c7:b6:1e:42:3c:c7:d4:a3:7b:27:e7:d4:f5:4b:b7: b6:af:dd:10:4b:02:8c:07:9b:f0:95:61:af:62:ab:a8:a6:80: 0d:0d:62:f1:d2:9a:f3:1e:39:fe:c8:a0:51:04:87:ca:1d:d0: 45:5d:24:cf:34:e4:63:5a:b1:18:0d:c7:9f:01:99:ba:c3:f7: f3:e7:bf:ab:a7:b8:84:0a:1d:09:4c:c1:09:67:79:57:7f:94: 19:10:8b:49:5d:ad:d2:3c:53:b5:e4:d9:5e:36:d6:9b:60:bf: d5:24:a4:6c:5e:45:e5:76:05:ad:a5:36:71:fc:3b:a5:c6:6d: 7a:e9:05:09:23:34:ab:1b:44:28:f2:ac:13:47:8e:c9:51:71: 3a:f2:7b:73:a1:79:e8:20:b0:5f:1a:e8:91:22:5a:aa:17:48: 3e:98:fa:76:37:6e:73:81:fe:87:b6:d7:18:14:84:0d:df:27: a4:a0:fc:4a:c7:45:57:e4:6c:3c:c7:30:09:53:a8:f0:a9:9a: 8e:b2:58:05:ec:74:8a:eb:00:3f:ae:8a:50:72:b2:67:12:ec: 5a:8d:c7:d1:fa:32:e4:ef:d4:63:37:62:8c:04:77:7b:81:f3: ec:22:f3:96 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjQwNDAyMTAxMzMxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjBiZGE0YS1jYTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDVwWTZewtQMgMKkxq60cihEKWIKl6JZ6390QgOAKPqvy0YQvSkGXlxUFCmu YSTMA5XMW8Zbn9JU0v5tE0VWr4pylsppvZaILbNW8vAk/1AoPYAYgv/xMBSKaZ6P rURpT3d8mHTzVM61WgS+hK7D4ZvddC26GB4wAk6qMBf0qQ0JeLe7K1RXleGUA+8Z 84vwKK2x7dkES9trA60hARFSr6ifjO3wk0IB2MNrcdslHh6sIs2EOdNwiM9ei/gt qt8EnwhGoX+WhmQnqnjOVD1qiXxXuKVVxdGSYLxywJdmXh0WNPUgzlXDGxKpR9xV maB5x3TsTQtokqNAzptoXSzUHwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB+V8FSh SdRNljCZJ3BPdpeDIntVMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTlFRDYvRDMxNzA5MkMwRTZDMTFFQkI1NDE0RDIwQzRGOUFFMDIvMDE1NTk0RENG MEQ5MTFFRUE2QjFBQzVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnVOIwDwQCAAIwCQMHACQApMDgJDANBgkqhkiG9w0BAQsF AAOCAQEAFJ96g0oue9HMpR4G7qdYb5K+2q5Nx7YeQjzH1KN7J+fU9Uu3tq/dEEsC jAeb8JVhr2KrqKaADQ1i8dKa8x45/sigUQSHyh3QRV0kzzTkY1qxGA3HnwGZusP3 8+e/q6e4hAodCUzBCWd5V3+UGRCLSV2t0jxTteTZXjbWm2C/1SSkbF5F5XYFraU2 cfw7pcZteukFCSM0qxtEKPKsE0eOyVFxOvJ7c6F56CCwXxrokSJaqhdIPpj6djdu c4H+h7bXGBSEDd8npKD8SsdFV+RsPMcwCVOo8KmajrJYBex0iusAP66KUHKyZxLs Wo3H0foy5O/UYzdijAR3e4Hz7CLzlg== -----END CERTIFICATE-----Generated at Sun Apr 21 00:23:30 2024 by rpki-client on console-ams.rpki-client.org