$ rpki-client -vvf rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/5A530D08ADE611EDB7013F5DC4F9AE02.roa File: 5A530D08ADE611EDB7013F5DC4F9AE02.roa (raw, json) Hash identifier: qHTAFNT1CrC2TX+FCvgSqGoQaj7rxEFQu/7DJVyzNcQ= Subject key identifier: B3:F7:E3:10:80:39:13:08:5C:CF:75:F3:98:DB:EC:65:1C:BF:A5:A4 Certificate issuer: /CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Certificate serial: 332D Authority key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/5A530D08ADE611EDB7013F5DC4F9AE02.roa Signing time: Fri 28 Jul 2023 14:50:43 +0000 ROA not before: Fri 28 Jul 2023 14:50:43 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 38310 IP address blocks: 122.200.16.0/24 maxlen: 24 122.200.17.0/24 maxlen: 24 122.200.18.0/24 maxlen: 24 122.200.19.0/24 maxlen: 24 122.200.20.0/24 maxlen: 24 122.200.21.0/24 maxlen: 24 122.200.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 14:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13101 (0x332d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Validity Not Before: Jul 28 14:50:43 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c3d5c3-d847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:05:60:e9:92:51:ff:49:28:50:3d:f0:14: a5:80:26:eb:56:7f:6c:69:98:14:95:d4:c4:b3:e6: 6c:43:85:15:7c:59:07:b8:0a:04:73:89:66:c8:62: 9f:fe:97:f4:4d:49:5a:fe:c1:71:2a:fe:ce:57:e0: 98:70:7b:d1:b9:ad:01:e0:22:7d:03:ac:67:43:47: 34:51:1d:51:0b:98:bf:70:34:46:8f:1b:9c:0d:0b: 88:45:5e:7e:3e:25:75:c1:b9:89:f0:87:32:60:b3: 16:a7:86:cc:c8:27:34:d8:82:fa:9a:0b:e1:ef:79: a7:90:ae:41:f1:b4:b6:44:67:fc:14:2f:fa:92:40: db:29:0a:7e:b1:4c:f8:dc:5d:71:0c:1b:22:08:58: a5:37:e0:ec:96:a7:f6:38:e6:a0:e1:e2:99:ab:0c: f3:3a:6d:56:86:3d:8a:f8:08:bd:41:d2:63:23:08: fa:50:2a:23:ad:12:a7:f0:ba:26:c8:53:bd:3a:97: 7c:12:e0:40:8e:ac:67:eb:9f:1b:a8:dd:24:26:b4: da:c5:7b:5c:15:44:81:f6:2d:30:49:e9:d4:10:f9: 2d:dc:d1:5a:a3:88:50:db:ac:ad:31:73:ca:cf:63: cc:92:20:92:27:e1:fe:d9:01:d5:ff:b3:db:0c:83: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F7:E3:10:80:39:13:08:5C:CF:75:F3:98:DB:EC:65:1C:BF:A5:A4 X509v3 Authority Key Identifier: keyid:D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/5A530D08ADE611EDB7013F5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.200.16.0-122.200.22.255 Signature Algorithm: sha256WithRSAEncryption 9d:93:b9:88:54:19:ad:17:3b:3e:93:c7:49:d3:58:10:ab:2a: 1b:f3:d3:80:a9:95:63:32:a0:14:ca:00:3e:8b:e2:88:1d:74: 73:38:6f:d3:44:57:f6:d8:81:3d:fe:73:db:5d:72:53:7d:44: 52:98:a6:83:80:a1:6d:fb:45:83:0a:d9:ad:ae:e8:0f:55:22: 54:e8:93:56:fd:f7:08:de:6d:5c:e1:7a:34:c7:25:ba:e4:6c: 09:e9:0b:c3:e7:e3:67:d4:48:c0:7c:c1:37:d7:7b:c4:fb:29: 09:80:cb:eb:cf:0f:dd:bf:61:3d:e5:3e:3f:99:49:09:a9:8e: ea:9a:ce:e2:d8:77:f4:85:c6:bc:53:30:26:5e:fe:c2:1d:2c: 0d:2a:c6:a9:b7:61:39:1a:58:7d:bc:50:0d:87:6a:44:e3:51: 71:1d:6b:6e:5a:a7:0b:00:c7:73:ea:37:20:eb:8b:20:a3:b1: 01:6c:44:30:31:bc:17:71:aa:c6:18:52:dc:ef:1e:78:b1:dc: 07:87:a3:ec:59:78:c6:4f:0d:6e:d3:c2:f1:60:0e:3d:08:f7: c1:00:41:4c:99:6b:39:c9:b4:77:05:c6:b0:9a:83:8e:1c:5d: 7f:14:89:da:1d:c7:99:11:d0:b4:84:b6:b0:bc:ec:c9:7c:11: 2a:eb:d4:38 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICMy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3OUExMTAvBgNVBAUTKEQ1NTYwNEUxQ0RCMDk1QjFBQzBBRDQzMTdCNjU1NzA2 MjMwNEIxRDAwHhcNMjMwNzI4MTQ1MDQzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGMzZDVjMy1kODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyU8FYOmSUf9JKFA98BSlgCbrVn9saZgUldTEs+ZsQ4UVfFkHuAoEc4lmyGKf /pf0TUla/sFxKv7OV+CYcHvRua0B4CJ9A6xnQ0c0UR1RC5i/cDRGjxucDQuIRV5+ PiV1wbmJ8IcyYLMWp4bMyCc02IL6mgvh73mnkK5B8bS2RGf8FC/6kkDbKQp+sUz4 3F1xDBsiCFilN+Dslqf2OOag4eKZqwzzOm1Whj2K+Ai9QdJjIwj6UCojrRKn8Lom yFO9Opd8EuBAjqxn658bqN0kJrTaxXtcFUSB9i0wSenUEPkt3NFao4hQ26ytMXPK z2PMkiCSJ+H+2QHV/7PbDIP91QIDAQABo4ICnTCCApkwHQYDVR0OBBYEFLP34xCA ORMIXM9185jb7GUcv6WkMB8GA1UdIwQYMBaAFNVWBOHNsJWxrArUMXtlVwYjBLHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODc5QS8wQzUzNjQyNjFE OTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xiR3NDdFF4ZTJWWEJpTUVz ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFWWUU0YzJ3bGJHc0N0UXhlMlZYQmlNRXNkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjg3OUEvMEM1MzY0MjYxRDkyMTFFMjgxNjZCNUY0MDhCMDJDRDIvNUE1MzBEMDhB REU2MTFFREI3MDEzRjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBHrIEAMEAHrIFjANBgkqhkiG9w0BAQsFAAOCAQEAnZO5 iFQZrRc7PpPHSdNYEKsqG/PTgKmVYzKgFMoAPoviiB10czhv00RX9tiBPf5z211y U31EUpimg4ChbftFgwrZra7oD1UiVOiTVv33CN5tXOF6NMcluuRsCekLw+fjZ9RI wHzBN9d7xPspCYDL688P3b9hPeU+P5lJCamO6prO4th39IXGvFMwJl7+wh0sDSrG qbdhORpYfbxQDYdqRONRcR1rblqnCwDHc+o3IOuLIKOxAWxEMDG8F3GqxhhS3O8e eLHcB4ej7Fl4xk8NbtPC8WAOPQj3wQBBTJlrOcm0dwXGsJqDjhxdfxSJ2h3HmRHQ tIS2sLzsyXwRKuvUOA== -----END CERTIFICATE-----Generated at Fri Jun 14 19:09:18 2024 by rpki-client on console-ams.rpki-client.org