$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/2D1405C0C6CB11ECB185E43EC4F9AE02.roa File: 2D1405C0C6CB11ECB185E43EC4F9AE02.roa (raw, json) Hash identifier: XecBqqisXSKLGQ9HAXEQoFYf4wembyQPpbTzSWQ2As0= Subject key identifier: 3C:96:48:5B:EB:EF:47:F7:4B:3D:D4:CC:C4:28:3B:29:E9:69:ED:2D Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 0278 Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/2D1405C0C6CB11ECB185E43EC4F9AE02.roa Signing time: Sat 11 May 2024 04:10:20 +0000 ROA not before: Sat 11 May 2024 04:10:20 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 132742 IP address blocks: 43.241.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: May 11 04:10:20 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=663eefac-9151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:21:4c:4c:53:7c:80:8e:f7:aa:d3:11:a7:47: 6d:5b:af:46:73:7b:a5:a0:6f:42:39:07:fa:fe:47: c9:af:5b:48:e6:17:50:82:1f:bf:63:cf:89:fe:34: 6a:04:02:1d:d3:b5:16:6f:81:14:49:11:d0:7b:f6: 55:4c:e6:8c:5d:d8:e9:51:e7:a7:4f:0a:dc:95:37: e7:7b:20:d6:59:e9:9c:e3:43:d9:82:bf:2e:ca:68: 2b:5d:32:20:93:e8:0e:4e:c3:ea:90:f8:cc:58:a6: 6c:6b:d5:1e:26:63:92:a0:33:e3:10:fb:f6:ac:6a: 13:93:77:e2:00:41:43:6e:ca:31:37:2d:94:78:91: c1:08:22:7f:5d:f8:9c:ce:7b:02:61:15:1d:da:b7: c5:26:63:9d:f4:2d:64:37:c9:8e:f0:6b:39:3d:7e: 75:2d:e6:ab:87:13:50:7e:67:1f:3b:6c:cd:f8:2f: b2:65:a8:6c:58:bd:5a:e5:db:66:60:ac:0e:11:58: 5e:ce:db:77:3c:c1:bf:10:22:28:e8:7f:9f:10:8a: 6c:93:15:d1:93:68:9b:38:5b:b5:70:d0:97:ef:0a: e5:c1:3c:f5:d8:d4:b6:ad:1a:52:03:21:8a:5f:61: 53:81:30:23:7f:b5:d0:4f:78:e8:b4:87:55:8b:54: a0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:96:48:5B:EB:EF:47:F7:4B:3D:D4:CC:C4:28:3B:29:E9:69:ED:2D X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/2D1405C0C6CB11ECB185E43EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.241.152.0/22 Signature Algorithm: sha256WithRSAEncryption 24:b4:dd:57:d7:fa:ed:e2:c0:7c:0f:d3:75:91:34:b3:5e:e3: ce:13:9c:6c:72:a4:ee:f1:9c:a8:8d:bb:bd:e0:fc:8a:d6:d9: f1:4d:dd:17:cf:5e:c2:28:45:f9:70:22:e1:45:60:3c:f1:a0: a8:51:9d:20:ac:b5:36:7a:b4:d6:21:d5:cb:c5:f2:3c:67:88: 53:88:7d:1d:93:96:1f:81:20:0b:97:f4:25:26:b8:ce:af:6f: cb:e0:c1:71:89:f8:25:cb:03:61:19:2d:f4:26:f8:31:4b:f7: 02:c1:9b:b7:12:58:41:94:9b:c0:42:17:8e:85:9c:a7:d6:6d: 35:72:11:13:e5:93:27:bb:f1:97:51:00:b1:a0:0f:f7:cd:f4: 8e:e0:b4:2f:b3:7d:85:73:22:d8:1e:db:95:8b:82:7b:4b:00: df:51:44:0c:4b:44:30:b0:ba:27:36:ad:06:00:e0:63:25:7a: d5:75:1a:39:94:c8:ff:ea:39:d5:55:32:44:27:9b:c3:e5:45: ad:ff:65:94:31:9f:e1:bc:1c:c4:37:3f:13:63:1d:30:c8:39: c7:80:0c:6d:cf:3f:5a:12:c4:7c:14:0e:11:6d:63:d0:26:4b: b1:89:74:29:34:3f:1c:6c:3e:73:e6:c3:f5:2a:28:e8:94:45: 3f:85:12:0b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjQwNTExMDQxMDIwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjNlZWZhYy05MTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iFMTFN8gI73qtMRp0dtW69Gc3uloG9COQf6/kfJr1tI5hdQgh+/Y8+J/jRq BAId07UWb4EUSRHQe/ZVTOaMXdjpUeenTwrclTfneyDWWemc40PZgr8uymgrXTIg k+gOTsPqkPjMWKZsa9UeJmOSoDPjEPv2rGoTk3fiAEFDbsoxNy2UeJHBCCJ/Xfic znsCYRUd2rfFJmOd9C1kN8mO8Gs5PX51LearhxNQfmcfO2zN+C+yZahsWL1a5dtm YKwOEVheztt3PMG/ECIo6H+fEIpskxXRk2ibOFu1cNCX7wrlwTz12NS2rRpSAyGK X2FTgTAjf7XQT3jotIdVi1SgFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDyWSFvr 70f3Sz3UzMQoOynpae0tMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEZDMkMvQjA0RTkxOUNDNTMzMTFFQzk2REYzMTBGQzRGOUFFMDIvMkQxNDA1QzBD NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr8ZgwDQYJKoZIhvcNAQELBQADggEBACS03VfX+u3iwHwP 03WRNLNe484TnGxypO7xnKiNu73g/IrW2fFN3RfPXsIoRflwIuFFYDzxoKhRnSCs tTZ6tNYh1cvF8jxniFOIfR2Tlh+BIAuX9CUmuM6vb8vgwXGJ+CXLA2EZLfQm+DFL 9wLBm7cSWEGUm8BCF46FnKfWbTVyERPlkye78ZdRALGgD/fN9I7gtC+zfYVzItge 25WLgntLAN9RRAxLRDCwuic2rQYA4GMletV1GjmUyP/qOdVVMkQnm8PlRa3/ZZQx n+G8HMQ3PxNjHTDIOceADG3PP1oSxHwUDhFtY9AmS7GJdCk0PxxsPnPmw/UqKOiU RT+FEgs= -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:42 2024 by rpki-client on console-fra.rpki-client.org