$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/EC873B66F37911EEA9FCAF6BC4F9AE02.roa File: EC873B66F37911EEA9FCAF6BC4F9AE02.roa (raw, json) Hash identifier: rsabR21jqtcvoz4XthX1FqvEg0esDGA7DmhhfFQxiEY= Subject key identifier: E9:5A:9E:32:7F:88:ED:99:D7:CB:94:C5:F8:B5:11:9D:2C:D1:1E:8D Certificate issuer: /CN=A913DF8A/serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Certificate serial: 04 Authority key identifier: 6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/EC873B66F37911EEA9FCAF6BC4F9AE02.roa Signing time: Sun 07 Apr 2024 05:09:12 +0000 ROA not before: Sun 07 Apr 2024 05:09:12 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 152679 IP address blocks: 119.15.152.0/23 maxlen: 24 2001:df3:a640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF8A/serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Validity Not Before: Apr 7 05:09:12 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66122a77-bb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:28:e4:ee:7b:1b:92:e9:2d:de:a2:2b:ee: 60:f5:23:d5:f0:20:8e:60:40:e0:d3:1e:f9:0f:f1: 9b:54:80:d4:f1:1c:77:9f:24:ea:d6:13:77:9d:a8: a7:1e:c3:8c:a4:e0:5e:98:ed:be:b4:63:b4:47:eb: 54:82:e8:85:ae:b6:eb:95:8b:b9:81:b4:ca:64:cc: 80:59:1a:22:43:da:87:95:bc:2f:c3:e4:07:5c:c6: 6d:a9:1e:cc:ec:26:8f:1a:6b:9a:4d:df:dd:62:66: ff:9a:e5:b2:e3:63:01:0a:a2:f9:09:9e:de:e3:22: 8f:c5:a6:0e:ac:61:2a:93:fe:4e:e8:5b:05:06:78: b8:7f:24:a4:c7:be:95:b0:47:b2:57:92:d2:2a:ab: bf:33:71:e7:06:80:d0:43:03:5b:c2:d0:f6:d5:db: 69:63:5a:6a:3a:07:4f:8a:53:6b:bc:2b:6f:fd:58: a5:e5:e9:1b:1a:c9:ea:61:d6:2e:cd:8a:48:09:7d: 31:63:65:2f:f0:ca:90:34:06:1d:c1:1d:d4:f1:a5: ec:be:c9:65:11:22:2b:20:d9:39:ad:f9:16:9a:6f: 24:15:c5:33:c4:07:fc:c8:24:3a:79:95:bb:ae:4c: 56:55:60:bb:2f:b4:53:8e:27:e1:4b:f4:50:3e:58: 05:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5A:9E:32:7F:88:ED:99:D7:CB:94:C5:F8:B5:11:9D:2C:D1:1E:8D X509v3 Authority Key Identifier: keyid:6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/EC873B66F37911EEA9FCAF6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.15.152.0/23 IPv6: 2001:df3:a640::/48 Signature Algorithm: sha256WithRSAEncryption 1b:a3:f9:46:0b:26:e0:4e:51:8a:0a:0b:a0:bf:55:bd:c7:29: 74:ad:5b:69:03:cb:f8:5f:df:45:b3:26:7f:4a:88:9f:10:0a: ce:ca:4c:9e:41:18:77:68:7d:67:37:54:45:ef:3a:68:c0:ff: 6f:86:6c:d6:c7:93:00:6a:32:bb:00:5f:ed:cd:61:7b:0f:90: dc:3d:a6:2a:49:c3:7b:1a:08:44:7a:76:7e:f4:32:af:78:2a: e2:15:12:c0:c6:72:fb:d5:a1:e5:e5:07:43:fc:e4:ae:89:76: ed:e3:04:f9:4d:3a:b8:f9:a7:74:9c:42:2d:0b:51:80:a2:a8: a8:60:d2:d3:82:9a:9a:ff:29:22:83:44:c8:86:d5:6f:bc:fd: 95:e1:b9:70:c5:63:a8:17:58:2f:e9:ca:dd:7b:8b:ba:56:5b: ba:b8:f2:b1:a4:ba:c7:31:9d:9d:a1:e9:2b:92:fb:2a:e5:01: 91:10:8a:06:36:48:f2:49:84:d7:da:be:79:c3:62:bd:3e:b3: b0:e9:27:a0:9c:a6:6e:fa:5c:91:e0:e6:77:45:c9:f0:89:bf: 72:f4:5b:18:1c:79:83:f4:9d:69:9b:32:05:a5:55:e6:be:dc: 39:30:f0:ee:1f:0b:15:7b:b5:59:4f:7f:99:33:f2:79:13:cc: 3c:ee:95:44 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REY4QTExMC8GA1UEBRMoNkM4REZBMDQzQzIyQjhBMjdFQUI2MDQ3MEFGNDA2NjAy NEE2ODQ0MDAeFw0yNDA0MDcwNTA5MTJaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MTIyYTc3LWJiMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCznCjk7nsbkukt3qIr7mD1I9XwII5gQODTHvkP8ZtUgNTxHHefJOrWE3edqKce w4yk4F6Y7b60Y7RH61SC6IWutuuVi7mBtMpkzIBZGiJD2oeVvC/D5Adcxm2pHszs Jo8aa5pN391iZv+a5bLjYwEKovkJnt7jIo/Fpg6sYSqT/k7oWwUGeLh/JKTHvpWw R7JXktIqq78zcecGgNBDA1vC0PbV22ljWmo6B0+KU2u8K2/9WKXl6Rsayeph1i7N ikgJfTFjZS/wypA0Bh3BHdTxpey+yWURIisg2Tmt+RaabyQVxTPEB/zIJDp5lbuu TFZVYLsvtFOOJ+FL9FA+WAXXAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU6VqeMn+I 7ZnXy5TF+LURnSzRHo0wHwYDVR0jBBgwFoAUbI36BDwiuKJ+q2BHCvQGYCSmhEAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERjhBLzhGMDExQzZFRjM3 OTExRUVCN0U5REM2QUM0RjlBRTAyL2JJMzZCRHdpdUtKLXEyQkhDdlFHWUNTbWhF QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkkzNkJEd2l1S0otcTJCSEN2UUdZQ1NtaEVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REY4QS84RjAxMUM2RUYzNzkxMUVFQjdFOURDNkFDNEY5QUUwMi9FQzg3M0I2NkYz NzkxMUVFQTlGQ0FGNkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAXcPmDAPBAIAAjAJAwcAIAEN86ZAMA0GCSqGSIb3DQEBCwUA A4IBAQAbo/lGCybgTlGKCgugv1W9xyl0rVtpA8v4X99FsyZ/SoifEArOykyeQRh3 aH1nN1RF7zpowP9vhmzWx5MAajK7AF/tzWF7D5DcPaYqScN7GghEenZ+9DKveCri FRLAxnL71aHl5QdD/OSuiXbt4wT5TTq4+ad0nEItC1GAoqioYNLTgpqa/ykig0TI htVvvP2V4blwxWOoF1gv6crde4u6Vlu6uPKxpLrHMZ2doekrkvsq5QGREIoGNkjy SYTX2r55w2K9PrOw6SegnKZu+lyR4OZ3Rcnwib9y9FsYHHmD9J1pmzIFpVXmvtw5 MPDuHwsVe7VZT3+ZM/J5E8w87pVE -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:11 2024 by rpki-client on console-ams.rpki-client.org