$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/DFAA6EC60A5F11EEB7C7EE60C4F9AE02.roa File: DFAA6EC60A5F11EEB7C7EE60C4F9AE02.roa (raw, json) Hash identifier: 8B24cuolZRJIs6ptFgm6sE567gsrA85wODnR2z4hOzE= Subject key identifier: 9B:17:B8:EC:82:20:1B:A1:36:E2:40:9D:77:AF:EE:43:DE:18:36:E6 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 09B5 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/DFAA6EC60A5F11EEB7C7EE60C4F9AE02.roa Signing time: Wed 14 Jun 2023 03:02:19 +0000 ROA not before: Wed 14 Jun 2023 03:02:19 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 24121 IP address blocks: 103.8.176.0/22 maxlen: 22 103.8.180.0/22 maxlen: 22 2407:b001:1000::/40 maxlen: 40 2407:b001:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2485 (0x9b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Jun 14 03:02:19 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64892dba-a9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:42:2f:df:28:08:68:99:01:dd:a2:0e:21:f2: a6:1e:df:5b:2c:ea:fc:ee:d1:4f:81:f9:fb:14:9a: 20:ae:f8:6a:ea:57:15:d2:eb:15:1d:94:3e:82:df: 18:2a:7e:e2:be:0a:a6:3f:e9:64:60:8f:2d:85:02: 5c:00:69:70:ce:f0:b9:8b:e9:4b:28:58:7f:b5:5f: 94:dd:b0:10:e9:0e:4f:4f:3e:47:2e:56:3f:32:50: 01:f7:53:bd:42:63:9c:c3:e2:10:70:ad:dd:2b:4b: 7a:55:73:c5:dc:5f:ff:1d:86:f4:7c:53:e2:3f:b4: ae:68:ea:9d:e9:cd:ea:64:e7:56:cc:e4:e3:68:13: 09:32:4a:9c:71:2d:15:8e:78:ff:3d:6e:c7:10:17: 5e:b5:03:cc:dd:a7:0b:17:06:35:4b:10:05:52:48: 45:e4:1c:4e:87:e1:10:82:c5:62:9f:8b:89:d9:87: ba:b7:d5:09:84:e5:7d:79:70:2a:cd:6c:95:c2:89: 26:87:ab:7a:a4:a9:a1:38:ec:19:6f:63:a8:6e:0f: eb:58:c3:a4:6a:3d:8c:ab:dd:38:ac:63:47:58:f4: c2:4c:0f:02:ac:a4:80:64:76:1e:66:fb:5c:ab:21: cd:a2:e4:8c:12:2e:99:1e:ab:aa:ca:b9:3d:da:bb: 06:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:17:B8:EC:82:20:1B:A1:36:E2:40:9D:77:AF:EE:43:DE:18:36:E6 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/DFAA6EC60A5F11EEB7C7EE60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.8.176.0/21 IPv6: 2407:b001:1000::/40 2407:b001:3000::/40 Signature Algorithm: sha256WithRSAEncryption 15:44:e2:46:45:4e:da:2a:1f:b3:fa:7e:ec:a2:bf:d5:e5:c4: 8b:49:ca:aa:10:e1:78:d8:1b:fd:79:b4:46:ce:d2:09:1e:d4: 54:75:d8:4b:11:58:00:b6:b2:ed:97:30:92:00:3a:a8:da:a3: 1f:1e:ea:80:36:78:a6:40:17:94:2b:45:01:c1:95:ae:15:2f: 1b:63:c5:92:2a:8d:a7:d2:7c:7e:c3:21:42:69:ca:db:af:24: ee:b3:00:9b:83:07:07:4f:a9:0d:3c:f9:e8:b3:e7:d7:15:71: 85:97:cf:43:fe:eb:fe:a2:fb:74:83:a4:fa:da:7c:19:3e:48: 16:9a:68:15:7c:12:50:d1:ed:83:77:ac:c7:cb:fd:64:bf:a5: de:80:89:9e:60:7e:14:4e:05:18:dc:db:95:c4:14:e3:e8:31: 63:c9:86:aa:21:79:dd:25:04:32:a3:ee:26:ea:14:b3:22:d1: 58:ae:5b:4d:29:7f:25:67:c7:aa:97:5a:8b:11:ec:4c:b7:da: 6b:4b:27:5a:77:bc:33:0c:09:7a:c1:71:f8:cf:81:a7:70:1c: 26:88:1c:40:78:4c:66:1d:be:14:9d:64:96:74:b3:06:40:db: 1a:60:1d:9b:61:b8:f6:da:3d:96:a2:62:c7:0a:92:a5:5e:09: 16:d1:07:93 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICCbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjMwNjE0MDMwMjE5WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDg5MmRiYS1hOWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UIv3ygIaJkB3aIOIfKmHt9bLOr87tFPgfn7FJogrvhq6lcV0usVHZQ+gt8Y Kn7ivgqmP+lkYI8thQJcAGlwzvC5i+lLKFh/tV+U3bAQ6Q5PTz5HLlY/MlAB91O9 QmOcw+IQcK3dK0t6VXPF3F//HYb0fFPiP7SuaOqd6c3qZOdWzOTjaBMJMkqccS0V jnj/PW7HEBdetQPM3acLFwY1SxAFUkhF5BxOh+EQgsVin4uJ2Ye6t9UJhOV9eXAq zWyVwokmh6t6pKmhOOwZb2Oobg/rWMOkaj2Mq904rGNHWPTCTA8CrKSAZHYeZvtc qyHNouSMEi6ZHquqyrk92rsGhQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJsXuOyC IBuhNuJAnXev7kPeGDbmMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvREZBQTZFQzYw QTVGMTFFRUI3QzdFRTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBANnCLAwFgQCAAIwEAMGACQHsAEQAwYAJAewATAwDQYJKoZI hvcNAQELBQADggEBABVE4kZFTtoqH7P6fuyiv9XlxItJyqoQ4XjYG/15tEbO0gke 1FR12EsRWAC2su2XMJIAOqjaox8e6oA2eKZAF5QrRQHBla4VLxtjxZIqjafSfH7D IUJpytuvJO6zAJuDBwdPqQ08+eiz59cVcYWXz0P+6/6i+3SDpPrafBk+SBaaaBV8 ElDR7YN3rMfL/WS/pd6AiZ5gfhROBRjc25XEFOPoMWPJhqohed0lBDKj7ibqFLMi 0ViuW00pfyVnx6qXWosR7Ey32mtLJ1p3vDMMCXrBcfjPgadwHCaIHEB4TGYdvhSd ZJZ0swZA2xpgHZthuPbaPZaiYscKkqVeCRbRB5M= -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org