$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/04CC562A444E11E88204061CC4F9AE02.roa File: 04CC562A444E11E88204061CC4F9AE02.roa (raw, json) Hash identifier: 2IdXQ4yovx6Rj31KLXFcNXpKV6RnWk4e20Noq8RrtXg= Subject key identifier: CD:92:DD:BE:04:11:8E:55:E7:94:7E:DC:4E:7C:48:0D:7D:CB:57:85 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 2401 Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/04CC562A444E11E88204061CC4F9AE02.roa Signing time: Thu 29 Feb 2024 06:23:02 +0000 ROA not before: Thu 29 Feb 2024 06:23:02 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 58779 IP address blocks: 45.125.112.0/23 maxlen: 23 45.125.113.0/24 maxlen: 24 45.125.114.0/23 maxlen: 23 45.125.114.0/24 maxlen: 24 45.125.115.0/24 maxlen: 24 103.193.248.0/23 maxlen: 23 103.193.250.0/23 maxlen: 23 103.193.250.0/24 maxlen: 24 103.193.251.0/24 maxlen: 24 2402:b780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jul 2024 16:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9217 (0x2401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Feb 29 06:23:02 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65e022c6-01f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:8f:c7:bc:ba:e7:3e:19:ce:2e:49:9c:bb: 28:be:c8:91:3e:c2:52:bf:8d:ee:44:8a:ef:de:33: 73:23:e7:07:b5:d4:70:a8:7d:fe:58:28:ca:17:31: 9d:b3:39:51:62:9f:9e:33:e3:30:38:c6:cb:f1:6d: 7c:e9:43:60:ce:e0:98:e5:2e:82:89:46:c9:d9:7f: 06:aa:f3:e5:46:e4:bd:3c:a6:f2:aa:61:e3:41:b3: f9:54:70:d7:e0:62:be:ec:23:7b:81:0e:2e:83:e2: 9c:fc:1f:75:38:06:bf:d9:f5:d8:8c:86:6f:e9:7b: da:63:6d:89:df:26:f2:28:ee:63:ba:1a:c0:4b:b0: 61:a3:13:e9:e2:14:74:7c:dc:34:48:00:d6:bb:ad: 42:97:1c:2a:61:dc:06:3d:45:aa:e0:4d:e5:18:a4: 20:8c:9e:7c:b1:ad:51:71:bc:f9:ae:01:43:d0:a4: 92:a3:30:2a:cd:4c:28:52:65:df:86:69:6d:39:ac: ec:4d:bd:d6:5f:c5:47:80:ba:2d:1a:99:09:aa:6a: 56:ef:ff:ed:38:db:af:f6:70:22:cc:e2:7d:de:c7: 5b:4c:f2:82:68:66:21:bd:aa:08:0b:1f:4a:e5:d6: f9:83:b3:9a:fb:30:3f:20:d6:f5:d5:04:f8:49:30: 50:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:92:DD:BE:04:11:8E:55:E7:94:7E:DC:4E:7C:48:0D:7D:CB:57:85 X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/04CC562A444E11E88204061CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.125.112.0/22 103.193.248.0/22 IPv6: 2402:b780::/32 Signature Algorithm: sha256WithRSAEncryption 30:30:8e:71:99:24:8c:a3:6c:16:e5:6f:d1:90:ae:19:74:f0: c4:e7:cf:1e:c0:31:a3:e0:d1:75:6a:a1:f2:37:e8:d7:c5:3e: 5c:be:4c:c1:37:47:46:6d:63:7d:69:18:fd:77:8a:c9:f3:a2: b5:b4:80:c0:f9:ab:16:32:49:cf:a2:e7:db:00:0e:87:04:58: b3:66:4b:6e:1e:8f:a4:44:ba:14:73:f6:87:8f:ac:e8:66:2c: f2:6c:13:40:a0:fb:49:2c:e0:29:ed:ef:38:e8:b9:5d:54:a3: 4d:e0:e2:66:11:52:e6:0e:85:65:ca:53:65:44:d3:1c:fa:4c: 49:b2:42:74:ef:53:fa:04:7a:41:89:1e:36:01:10:77:8f:33: d0:06:fa:8d:a6:1d:90:a4:ca:aa:ee:0a:2e:6f:47:5f:5e:23: 93:bd:0d:4a:df:d2:bb:33:c1:dd:3a:1c:3a:5e:ac:47:a2:c1: 35:a4:3f:21:60:7f:6c:57:ea:19:eb:43:71:6d:2c:66:6c:fb: 08:68:24:93:bc:dd:d2:81:c3:75:c5:e6:8b:e0:a9:b5:99:27: 79:80:db:14:dd:aa:c8:91:ed:fa:e1:f2:3a:65:a2:17:3b:b3: db:6a:58:93:09:25:16:80:c0:a7:d6:ac:e7:59:6d:09:3c:b4: 7f:eb:2a:be -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICJAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjQwMjI5MDYyMzAyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUwMjJjNi0wMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslmPx7y65z4Zzi5JnLsovsiRPsJSv43uRIrv3jNzI+cHtdRwqH3+WCjKFzGd szlRYp+eM+MwOMbL8W186UNgzuCY5S6CiUbJ2X8GqvPlRuS9PKbyqmHjQbP5VHDX 4GK+7CN7gQ4ug+Kc/B91OAa/2fXYjIZv6XvaY22J3ybyKO5juhrAS7BhoxPp4hR0 fNw0SADWu61ClxwqYdwGPUWq4E3lGKQgjJ58sa1Rcbz5rgFD0KSSozAqzUwoUmXf hmltOazsTb3WX8VHgLotGpkJqmpW7//tONuv9nAizOJ93sdbTPKCaGYhvaoICx9K 5db5g7Oa+zA/INb11QT4STBQBQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFM2S3b4E EY5V55R+3E58SA19y1eFMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc0NTYvNjE1NEQxNjgzNzJFMTFFNTgxRjBGQjM5QzRGOUFFMDIvMDRDQzU2MkE0 NDRFMTFFODgyMDQwNjFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItfXADBAJnwfgwDQQCAAIwBwMFACQCt4AwDQYJKoZIhvcN AQELBQADggEBADAwjnGZJIyjbBblb9GQrhl08MTnzx7AMaPg0XVqofI36NfFPly+ TME3R0ZtY31pGP13isnzorW0gMD5qxYySc+i59sADocEWLNmS24ej6REuhRz9oeP rOhmLPJsE0Cg+0ks4Cnt7zjouV1Uo03g4mYRUuYOhWXKU2VE0xz6TEmyQnTvU/oE ekGJHjYBEHePM9AG+o2mHZCkyqruCi5vR19eI5O9DUrf0rszwd06HDperEeiwTWk PyFgf2xX6hnrQ3FtLGZs+whoJJO83dKBw3XF5ovgqbWZJ3mA2xTdqsiR7frh8jpl ohc7s9tqWJMJJRaAwKfWrOdZbQk8tH/rKr4= -----END CERTIFICATE-----Generated at Fri Jun 28 17:10:39 2024 by rpki-client on console-ams.rpki-client.org