$ rpki-client -vvf rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/1DA7074E94AC11EE9DC7D24AC4F9AE02.roa File: 1DA7074E94AC11EE9DC7D24AC4F9AE02.roa (raw, json) Hash identifier: p/1tF2/ilvemUOVEPtMudUJxCOZQyGRW0Ck2u46HSpo= Subject key identifier: CD:D4:EF:55:0E:68:25:6D:E4:D1:D7:4D:F5:D3:F4:EC:E3:9A:AD:D9 Certificate issuer: /CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E Certificate serial: 0B1B Authority key identifier: 81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/1DA7074E94AC11EE9DC7D24AC4F9AE02.roa Signing time: Thu 07 Dec 2023 02:55:45 +0000 ROA not before: Thu 07 Dec 2023 02:55:45 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 24557 IP address blocks: 103.7.136.0/24 maxlen: 24 103.7.137.0/24 maxlen: 24 103.11.76.0/24 maxlen: 24 103.11.78.0/24 maxlen: 24 113.20.0.0/24 maxlen: 24 113.20.1.0/24 maxlen: 24 113.20.2.0/24 maxlen: 24 113.20.3.0/24 maxlen: 24 113.20.4.0/22 maxlen: 22 113.20.8.0/21 maxlen: 21 117.55.224.0/21 maxlen: 21 117.55.232.0/21 maxlen: 21 2405:5000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.crl rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 19:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2843 (0xb1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E Validity Not Before: Dec 7 02:55:45 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65713431-2688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:26:7c:35:a7:ee:ad:b4:79:ab:32:a7:23:52: 65:7f:11:34:db:39:61:c4:29:04:c6:36:f5:ac:ba: 4a:23:d7:5a:2e:80:6b:71:9d:dc:ce:2d:10:79:c6: 30:c1:7b:f1:c0:df:be:19:87:a9:a4:df:00:d7:93: e3:13:4f:9a:7d:53:90:54:a0:89:c8:fc:db:47:56: 96:cc:8c:d6:b0:0e:8e:e9:c1:8b:ec:2f:86:4e:99: c4:e4:3b:d9:31:3d:00:37:e7:d0:25:ba:d8:91:37: 2b:df:66:43:69:14:73:1a:79:f9:39:65:25:5e:0f: 69:7f:05:75:4f:55:0f:b0:be:06:fe:10:41:fc:f1: f7:56:10:a9:fc:0f:94:52:0d:07:a6:67:ee:8c:04: f6:89:17:14:c0:f2:09:32:c9:7b:c5:05:4c:c1:1c: 59:40:d3:49:29:80:b5:07:72:e0:2a:19:3f:0d:9d: ac:c4:f5:69:09:33:af:6b:fb:0b:38:a6:88:87:6c: 9a:70:81:63:af:51:a4:7a:29:3e:5d:13:f8:8d:a8: f6:9b:a7:37:54:cc:bf:c4:1f:b7:42:0a:1f:17:aa: 8d:b3:b3:be:cc:74:6a:51:7a:21:dc:81:6b:65:c0: c9:90:ce:d9:9f:f0:23:7f:b6:19:78:6d:e5:88:85: 6b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D4:EF:55:0E:68:25:6D:E4:D1:D7:4D:F5:D3:F4:EC:E3:9A:AD:D9 X509v3 Authority Key Identifier: keyid:81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/1DA7074E94AC11EE9DC7D24AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.7.136.0/23 103.11.76.0/24 103.11.78.0/24 113.20.0.0/20 117.55.224.0/20 IPv6: 2405:5000::/32 Signature Algorithm: sha256WithRSAEncryption 8e:b0:93:f6:e5:bb:f7:fb:0d:98:ac:a2:ed:7b:48:05:56:44: af:cf:de:90:cf:35:d4:a4:2c:2c:0d:66:4d:b9:e0:b1:9d:9d: 61:3e:34:96:08:e2:1f:70:0e:4c:19:66:36:f7:c9:76:da:b6: c3:d0:5f:03:9d:68:06:c3:a8:82:76:bf:d6:9d:88:82:32:35: ab:a6:98:94:4f:c8:dd:b1:0a:8c:2f:31:b4:26:e4:84:d6:6f: e1:d4:7f:bb:d6:5d:b9:48:15:90:45:70:dc:62:85:1f:2b:29: e6:25:11:46:e4:3c:b6:6c:fc:9e:95:0d:dc:ed:cb:0f:ef:ac: f9:3b:21:b9:a7:45:9c:2a:8a:a1:93:9f:30:aa:c6:0f:1f:7b: 0a:50:bb:55:1b:05:89:0f:93:b2:c9:a2:ec:81:26:93:cf:5d: 33:19:44:3d:8d:68:e5:7f:81:cc:6b:a3:46:c5:45:bd:f7:40: bf:06:13:b2:18:6b:04:ec:e3:6b:c7:47:9f:01:1a:fa:0c:75: 34:e3:4d:69:d0:74:3c:66:fb:45:8d:01:a5:3b:a4:9c:f0:17: 85:d3:c2:61:ac:ab:06:7c:5c:1c:06:fd:94:c9:0a:f5:77:ec: 71:a3:ed:5b:b0:be:75:ef:f9:16:3d:a5:e3:d2:ba:06:ed:8f: 18:fc:d2:4f -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJGNTIxMTAvBgNVBAUTKDgxNDI4QTAxQzUxNjkxRTdBOEM1RDg0M0VDQjZCMUQz RDlBRTQyNEUwHhcNMjMxMjA3MDI1NTQ1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTcxMzQzMS0yNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyZ8NafurbR5qzKnI1JlfxE02zlhxCkExjb1rLpKI9daLoBrcZ3czi0QecYw wXvxwN++GYeppN8A15PjE0+afVOQVKCJyPzbR1aWzIzWsA6O6cGL7C+GTpnE5DvZ MT0AN+fQJbrYkTcr32ZDaRRzGnn5OWUlXg9pfwV1T1UPsL4G/hBB/PH3VhCp/A+U Ug0HpmfujAT2iRcUwPIJMsl7xQVMwRxZQNNJKYC1B3LgKhk/DZ2sxPVpCTOva/sL OKaIh2yacIFjr1Gkeik+XRP4jaj2m6c3VMy/xB+3QgofF6qNs7O+zHRqUXoh3IFr ZcDJkM7Zn/Ajf7YZeG3liIVr9QIDAQABo4ICvDCCArgwHQYDVR0OBBYEFM3U71UO aCVt5NHXTfXT9Ozjmq3ZMB8GA1UdIwQYMBaAFIFCigHFFpHnqMXYQ+y2sdPZrkJO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkY1Mi84OEVCQ0ZEQzFE NDkxMUVBQUU3NzVCMzRDNEY5QUUwMi9nVUtLQWNVV2tlZW94ZGhEN0xheDA5bXVR azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dVS0tBY1VXa2Vlb3hkaEQ3TGF4MDltdVFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJGNTIvODhFQkNGREMxRDQ5MTFFQUFFNzc1QjM0QzRGOUFFMDIvMURBNzA3NEU5 NEFDMTFFRTlEQzdEMjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAFnB4gDBABnC0wDBABnC04DBARxFAADBAR1N+AwDQQCAAIw BwMFACQFUAAwDQYJKoZIhvcNAQELBQADggEBAI6wk/blu/f7DZisou17SAVWRK/P 3pDPNdSkLCwNZk254LGdnWE+NJYI4h9wDkwZZjb3yXbatsPQXwOdaAbDqIJ2v9ad iIIyNaummJRPyN2xCowvMbQm5ITWb+HUf7vWXblIFZBFcNxihR8rKeYlEUbkPLZs /J6VDdztyw/vrPk7IbmnRZwqiqGTnzCqxg8fewpQu1UbBYkPk7LJouyBJpPPXTMZ RD2NaOV/gcxro0bFRb33QL8GE7IYawTs42vHR58BGvoMdTTjTWnQdDxm+0WNAaU7 pJzwF4XTwmGsqwZ8XBwG/ZTJCvV37HGj7VuwvnXv+RY9pePSugbtjxj80k8= -----END CERTIFICATE-----Generated at Mon May 20 21:17:37 2024 by rpki-client on console-ams.rpki-client.org