$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/0038D872072E11EB8914E540C4F9AE02.roa File: 0038D872072E11EB8914E540C4F9AE02.roa (raw, json) Hash identifier: y0+Gv+ZWp6qwBaBdw9FoHQj+CTNMkEHp70fW9+cJ5JI= Subject key identifier: 25:59:A5:B0:69:74:5E:C2:93:4C:74:C5:7D:01:AC:AF:A8:08:29:F9 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 11E5 Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/0038D872072E11EB8914E540C4F9AE02.roa Signing time: Fri 08 Dec 2023 17:45:02 +0000 ROA not before: Fri 08 Dec 2023 17:45:02 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 9678 IP address blocks: 103.131.189.0/24 maxlen: 24 2403:cfc0:1004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4581 (0x11e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: Dec 8 17:45:02 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6573561d-91c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:d3:67:1d:63:c7:b9:f2:38:f9:0c:27:01: 55:c1:30:9e:8c:93:3c:36:d8:d4:7b:bc:d0:f5:af: ca:18:f7:e2:b0:4c:52:16:a1:15:26:bc:7d:fa:3c: cb:83:45:81:33:de:06:28:5d:ca:22:7c:00:2f:97: e8:31:e7:f6:df:61:33:e5:d3:87:04:96:b1:f1:76: b9:24:ea:b0:b4:0e:8a:b0:9e:af:37:79:a0:e2:22: 79:65:91:bb:00:80:46:b3:dd:65:f5:6d:f4:9c:c9: 3b:5a:6b:f8:f8:50:8c:4c:69:4a:13:f6:8b:9e:1f: e0:34:3f:23:9a:59:c0:9d:fb:16:5e:5f:a6:c7:f6: 84:44:64:ab:9b:65:f5:a3:49:89:6f:cd:b1:73:d1: 36:89:da:d3:c0:6d:e5:e4:a5:93:32:08:91:b5:20: 50:65:98:0c:15:ae:fc:4e:f6:3f:ff:b6:fc:21:1a: 95:e3:c5:91:44:15:4c:53:2f:93:21:eb:1f:32:31: 2f:f5:82:0e:5e:21:7f:18:13:eb:e1:bf:75:06:77: 7b:13:42:93:7c:a6:b0:aa:90:d6:90:77:ec:c2:21: 2b:fd:fb:7a:88:16:77:db:c5:a2:d4:51:f4:a7:86: 88:56:b8:ce:ef:37:c7:12:c0:d0:e4:57:db:ce:eb: f5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:59:A5:B0:69:74:5E:C2:93:4C:74:C5:7D:01:AC:AF:A8:08:29:F9 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/0038D872072E11EB8914E540C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.189.0/24 IPv6: 2403:cfc0:1004::/48 Signature Algorithm: sha256WithRSAEncryption 37:ba:44:65:1e:20:04:2a:82:cc:9c:dc:6d:fb:66:eb:30:e2: 23:32:a9:4a:29:27:99:14:18:fc:9a:3d:d6:b5:ec:0b:87:cc: 1a:e4:6d:e3:d7:f4:0a:94:fd:f5:fb:64:00:c4:a7:2d:6d:a5: d1:e4:3f:4d:dc:7d:a3:34:48:8b:f0:f7:63:21:fd:c2:1d:2e: 9f:60:7b:1d:bf:b3:5a:5f:2b:72:98:93:32:28:5a:0f:65:81: d3:8a:7b:78:29:e6:21:20:6f:32:b0:c0:66:a5:17:e1:40:98: 92:45:3e:dc:63:99:cb:65:6d:6f:22:ea:d5:3f:dc:c2:5d:e5: 7e:17:95:78:a2:17:b2:db:b9:46:52:3d:85:7c:a4:05:a7:7e: 47:b2:0a:99:47:79:53:b6:fb:3b:f2:62:f5:68:6b:66:5a:42: e7:d4:35:8a:ac:92:a2:21:c5:44:c5:1c:c0:3d:91:8e:c6:95: 95:1e:97:f1:02:0f:57:94:ac:91:c3:f9:96:c0:64:4f:80:2b: 7c:5a:e9:b4:43:a3:33:5e:d3:50:c2:2a:b7:4c:2d:b3:d1:43: 5d:c8:39:fa:c4:43:63:ae:60:f1:bc:95:e1:19:74:9a:43:4d: c7:d6:72:65:c6:b7:d0:0c:18:44:dd:49:f5:28:3c:b3:ae:0b: ee:4f:ed:1e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICEeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjMxMjA4MTc0NTAyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczNTYxZC05MWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiDTZx1jx7nyOPkMJwFVwTCejJM8NtjUe7zQ9a/KGPfisExSFqEVJrx9+jzL g0WBM94GKF3KInwAL5foMef232Ez5dOHBJax8Xa5JOqwtA6KsJ6vN3mg4iJ5ZZG7 AIBGs91l9W30nMk7Wmv4+FCMTGlKE/aLnh/gND8jmlnAnfsWXl+mx/aERGSrm2X1 o0mJb82xc9E2idrTwG3l5KWTMgiRtSBQZZgMFa78TvY//7b8IRqV48WRRBVMUy+T IesfMjEv9YIOXiF/GBPr4b91Bnd7E0KTfKawqpDWkHfswiEr/ft6iBZ328Wi1FH0 p4aIVrjO7zfHEsDQ5Ffbzuv1DQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCVZpbBp dF7Ck0x0xX0BrK+oCCn5MB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvMDAzOEQ4NzIw NzJFMTFFQjg5MTRFNTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABng70wDwQCAAIwCQMHACQDz8AQBDANBgkqhkiG9w0BAQsF AAOCAQEAN7pEZR4gBCqCzJzcbftm6zDiIzKpSiknmRQY/Jo91rXsC4fMGuRt49f0 CpT99ftkAMSnLW2l0eQ/Tdx9ozRIi/D3YyH9wh0un2B7Hb+zWl8rcpiTMihaD2WB 04p7eCnmISBvMrDAZqUX4UCYkkU+3GOZy2VtbyLq1T/cwl3lfheVeKIXstu5RlI9 hXykBad+R7IKmUd5U7b7O/Ji9WhrZlpC59Q1iqySoiHFRMUcwD2RjsaVlR6X8QIP V5SskcP5lsBkT4ArfFrptEOjM17TUMIqt0wts9FDXcg5+sRDY65g8byV4Rl0mkNN x9ZyZca30AwYRN1J9Sg8s64L7k/tHg== -----END CERTIFICATE-----Generated at Fri May 31 20:34:03 2024 by rpki-client on console-ams.rpki-client.org