$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/9AD04EAAD58A11EE9992494AC4F9AE02.roa File: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (raw, json) Hash identifier: nUSyY5pV4HKlRbCaWBmD/behWP2f2LCPHEfA2gVoG/g= Subject key identifier: D2:6E:99:E6:CE:DB:AF:05:A1:B3:51:A1:64:A0:E7:7D:97:8A:BC:B3 Certificate issuer: /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Certificate serial: 2AEF Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/9AD04EAAD58A11EE9992494AC4F9AE02.roa Signing time: Mon 20 May 2024 15:52:32 +0000 ROA not before: Mon 20 May 2024 15:52:32 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 59365 IP address blocks: 103.231.228.0/24 maxlen: 24 103.231.230.0/24 maxlen: 24 103.231.231.0/24 maxlen: 24 157.119.48.0/22 maxlen: 24 2404:4b80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10991 (0x2aef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Validity Not Before: May 20 15:52:32 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=664b71c0-f1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:6b:22:71:d5:a7:41:9a:b1:31:d0:60:48: c1:96:aa:45:ff:85:88:83:f3:a2:4e:f0:a7:3a:e1: ce:8e:4e:51:99:87:21:e6:b7:14:e4:28:c6:22:e9: 11:6b:0b:0e:81:0d:09:bc:bc:47:08:ac:2a:14:f2: 25:b5:af:a1:49:56:ac:0a:01:92:26:60:db:90:95: 6b:4c:00:f9:84:fd:20:62:6b:9a:1b:f2:35:db:fd: dc:45:d8:7a:f3:37:9c:93:92:a9:8d:27:66:da:fb: 90:73:d8:21:bf:d6:30:d3:0f:df:cf:97:67:18:b8: b7:7f:6f:4e:ca:ef:ea:af:d4:10:ca:ec:a6:34:2a: 61:2c:81:28:6d:7d:87:71:ee:93:87:ba:22:ef:60: 1b:ea:79:7f:11:f0:a1:71:86:65:e3:c3:3b:4b:50: 6d:13:d9:d0:b8:dc:27:9c:b5:66:cb:51:ac:b3:b1: 3d:e5:52:24:45:b3:dd:28:22:05:5a:06:10:8c:d0: fc:a4:bb:b8:ae:f3:0e:7e:94:b3:96:5e:ef:f6:32: d8:7f:6a:00:2c:16:40:2d:6d:f0:f2:08:d4:b4:2d: bc:93:42:ba:6d:29:10:7f:5f:bf:16:65:e8:45:35: b9:3e:77:38:16:a9:ef:aa:20:5b:a5:17:36:50:25: f4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6E:99:E6:CE:DB:AF:05:A1:B3:51:A1:64:A0:E7:7D:97:8A:BC:B3 X509v3 Authority Key Identifier: keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/9AD04EAAD58A11EE9992494AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.231.228.0/24 103.231.230.0/23 157.119.48.0/22 IPv6: 2404:4b80::/32 Signature Algorithm: sha256WithRSAEncryption 40:f9:63:d1:46:6a:b0:e7:35:01:3f:e3:d0:e1:71:59:43:12: d3:37:71:da:33:fc:47:5a:0d:e4:67:d3:83:ef:82:87:a4:71: 5f:5a:13:00:95:40:e5:66:96:72:6e:d8:59:50:ff:b9:f2:45: cd:62:aa:74:d3:f5:88:37:c9:c3:f8:23:d9:08:16:77:ce:13: ff:fd:b2:de:22:e0:e0:7a:43:83:5f:5a:2b:e1:26:68:21:05: 77:b9:9f:eb:c7:a9:03:a9:33:d8:5a:44:b9:6a:db:53:b0:3c: 2d:27:9b:d0:61:1c:4d:d3:a1:19:45:97:84:ae:f6:3e:0a:ae: 82:09:43:cb:53:1f:f0:d1:7b:ff:cc:2a:2b:bb:01:86:e2:98: 4e:a3:d5:80:47:cd:14:ac:82:9e:0c:9b:8e:82:83:c6:03:47: 7d:ef:71:5f:36:77:3e:d0:51:9c:dc:58:c3:68:7e:35:2d:89: 25:3b:01:06:54:41:e5:2e:82:27:7e:fd:3f:b3:b3:60:42:e2: 59:aa:8b:cb:18:2c:44:e0:12:ae:a6:5a:16:dc:5d:40:e4:c9: 18:fb:d3:6e:24:ec:b6:9f:c5:37:b6:65:44:0e:60:3c:ec:65: 4f:1b:49:a1:a7:97:58:dd:c7:7b:4a:d1:93:18:81:df:be:e0: e7:1e:0a:06 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICKu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlBRDYxMTAvBgNVBAUTKEE1QTZBOUVBQzFBQ0Y3NkU1NTJDNzhCREQ3OEJBNzRG RURERDNGRjkwHhcNMjQwNTIwMTU1MjMyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRiNzFjMC1mMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqm5rInHVp0GasTHQYEjBlqpF/4WIg/OiTvCnOuHOjk5RmYch5rcU5CjGIukR awsOgQ0JvLxHCKwqFPIlta+hSVasCgGSJmDbkJVrTAD5hP0gYmuaG/I12/3cRdh6 8zeck5KpjSdm2vuQc9ghv9Yw0w/fz5dnGLi3f29Oyu/qr9QQyuymNCphLIEobX2H ce6Th7oi72Ab6nl/EfChcYZl48M7S1BtE9nQuNwnnLVmy1Gss7E95VIkRbPdKCIF WgYQjND8pLu4rvMOfpSzll7v9jLYf2oALBZALW3w8gjUtC28k0K6bSkQf1+/FmXo RTW5Pnc4FqnvqiBbpRc2UCX0qwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFNJumebO 268FobNRoWSg532XiryzMB8GA1UdIwQYMBaAFKWmqerBrPduVSx4vdeLp0/t3T/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFENi9ENjc3REM5NERG RDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczkyNVZMSGk5MTR1blQtM2RQ X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BhYXA2c0dzOTI1VkxIaTkxNHVuVC0zZFBfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjlBRDYvRDY3N0RDOTRERkQwMTFFMzkzREI3OTVGNTkxMUVBMzIvOUFEMDRFQUFE NThBMTFFRTk5OTI0OTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABn5+QDBAFn5+YDBAKddzAwDQQCAAIwBwMFACQES4AwDQYJ KoZIhvcNAQELBQADggEBAED5Y9FGarDnNQE/49DhcVlDEtM3cdoz/EdaDeRn04Pv goekcV9aEwCVQOVmlnJu2FlQ/7nyRc1iqnTT9Yg3ycP4I9kIFnfOE//9st4i4OB6 Q4NfWivhJmghBXe5n+vHqQOpM9haRLlq21OwPC0nm9BhHE3ToRlFl4Su9j4KroIJ Q8tTH/DRe//MKiu7AYbimE6j1YBHzRSsgp4Mm46Cg8YDR33vcV82dz7QUZzcWMNo fjUtiSU7AQZUQeUugid+/T+zs2BC4lmqi8sYLETgEq6mWhbcXUDkyRj7024k7Laf xTe2ZUQOYDzsZU8bSaGnl1jdx3tK0ZMYgd++4OceCgY= -----END CERTIFICATE-----Generated at Fri May 31 16:40:54 2024 by rpki-client on console-ams.rpki-client.org