$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/581485C0590911EE9C70C86EC4F9AE02.roa File: 581485C0590911EE9C70C86EC4F9AE02.roa (raw, json) Hash identifier: 4Ss+y80pdvb3E6dpgTF293UbJ9J8OkxHMsUb6tspv+w= Subject key identifier: 9E:86:CE:72:E9:B2:40:1B:A5:5E:93:1F:2F:7E:9F:5A:19:01:57:B0 Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Certificate serial: 05B6 Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/581485C0590911EE9C70C86EC4F9AE02.roa Signing time: Sat 01 Jun 2024 01:35:30 +0000 ROA not before: Sat 01 Jun 2024 01:35:30 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 138970 IP address blocks: 103.137.209.0/24 maxlen: 24 103.237.85.0/24 maxlen: 24 2401:3be0::/32 maxlen: 32 2401:3be0:1000::/36 maxlen: 36 2401:3be0:2000::/36 maxlen: 36 2401:3be0:3000::/36 maxlen: 36 2401:3be0:4000::/36 maxlen: 36 2401:3be0:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Validity Not Before: Jun 1 01:35:30 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=665a7ae2-f661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:33:39:b6:f0:81:44:74:01:1e:14:db:3b: ec:58:e3:4b:14:38:b7:f5:fb:77:6e:6f:93:48:e4: e5:40:62:30:64:e7:62:35:6c:c1:22:c6:af:ce:3b: be:e0:bd:ef:f2:ea:38:c3:36:eb:c6:3e:ad:41:f2: 34:9b:94:8a:91:46:f7:15:df:2c:a7:58:f1:30:10: 9b:69:21:58:1d:fa:68:ef:9e:14:92:ff:55:6b:43: 16:19:b2:24:ea:b7:c5:a2:17:d3:69:30:58:92:b3: f8:e7:34:c2:97:34:1c:82:46:5c:c7:3f:83:95:95: 73:d8:9d:ea:de:0d:b6:e8:b4:82:9e:48:2e:79:51: ce:d2:f8:ec:ed:5e:f8:20:54:46:0c:71:f0:25:1f: da:ec:94:64:4f:f8:09:50:04:07:e9:ed:5a:8b:76: 3b:4b:d3:f0:9b:64:b7:ee:ef:80:19:a1:c5:64:b7: 8e:b6:38:60:b6:8e:4d:93:35:97:a7:48:b4:77:b0: 87:e2:81:08:07:6d:d9:dc:c6:e9:13:2d:92:6b:af: 26:fd:f2:b3:c1:f2:e0:44:4b:68:83:40:c0:c9:05: ae:38:df:60:00:77:ae:d3:f1:3e:50:09:61:11:0e: 8e:d6:7d:bf:35:89:c0:c5:3a:52:08:c6:cd:86:79: 38:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:86:CE:72:E9:B2:40:1B:A5:5E:93:1F:2F:7E:9F:5A:19:01:57:B0 X509v3 Authority Key Identifier: keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/581485C0590911EE9C70C86EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.209.0/24 103.237.85.0/24 IPv6: 2401:3be0::/32 Signature Algorithm: sha256WithRSAEncryption 31:75:49:e7:0a:9d:5c:a9:69:30:af:96:5c:19:cb:68:16:ef: 1a:c7:c4:80:8f:fd:20:0d:26:0d:62:17:fa:34:57:45:98:37: 8b:f4:82:bf:72:46:73:71:0d:db:54:1b:be:84:ff:d3:99:01: ed:2a:b7:a9:df:2a:70:c6:88:8a:74:85:5f:c4:31:9f:7f:81: f5:ab:9e:94:5d:d4:53:de:ed:e4:44:87:a1:2c:2b:44:7c:b7: ec:33:46:87:5b:69:db:14:11:bd:87:a9:b9:0e:32:2f:57:51: db:26:e3:e7:3f:d6:b6:aa:27:c0:44:c3:85:85:00:1a:6a:cd: 64:c0:ab:7d:58:f1:44:76:09:83:de:a3:66:68:c8:d0:94:dd: ee:23:b6:a9:04:45:e6:bb:c6:83:5c:8a:81:57:19:79:20:e9: 4f:ef:59:57:ab:1e:7b:f9:3e:11:d0:fd:f4:79:69:99:70:08: a9:44:05:dc:d7:df:4b:e9:f8:fa:5e:89:d9:b5:37:12:16:8f: b6:13:c4:29:c2:9d:a8:a8:6e:26:4e:04:0d:07:32:95:67:16: a9:be:40:4a:c4:05:24:ca:c6:cc:1e:a5:78:ca:9b:42:0a:9d: e9:1f:63:c2:43:d0:43:ab:3f:8e:af:c6:9f:6c:87:13:43:42: bd:9b:c4:45 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxNUYxMTAvBgNVBAUTKEU2OTlEQkNERTA5QzBBQTVGOEU2NkFFMEE3MzI1NERD QTA1RDg1RDQwHhcNMjQwNjAxMDEzNTMwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVhN2FlMi1mNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkVAzObbwgUR0AR4U2zvsWONLFDi39ft3bm+TSOTlQGIwZOdiNWzBIsavzju+ 4L3v8uo4wzbrxj6tQfI0m5SKkUb3Fd8sp1jxMBCbaSFYHfpo754Ukv9Va0MWGbIk 6rfFohfTaTBYkrP45zTClzQcgkZcxz+DlZVz2J3q3g226LSCnkgueVHO0vjs7V74 IFRGDHHwJR/a7JRkT/gJUAQH6e1ai3Y7S9Pwm2S37u+AGaHFZLeOtjhgto5NkzWX p0i0d7CH4oEIB23Z3MbpEy2Sa68m/fKzwfLgREtog0DAyQWuON9gAHeu0/E+UAlh EQ6O1n2/NYnAxTpSCMbNhnk4pQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJ6GznLp skAbpV6THy9+n1oZAVewMB8GA1UdIwQYMBaAFOaZ283gnAql+OZq4KcyVNygXYXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzE1Ri85MzI5QjBCNjhD NjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0NxWDQ1bXJncHpKVTNLQmRo ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwbmJ6ZUNjQ3FYNDVtcmdwekpVM0tCZGhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUMxNUYvOTMyOUIwQjY4QzY3MTFFQkI3RUU4NjNFQzRGOUFFMDIvNTgxNDg1QzA1 OTA5MTFFRTlDNzBDODZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnidEDBABn7VUwDQQCAAIwBwMFACQBO+AwDQYJKoZIhvcN AQELBQADggEBADF1SecKnVypaTCvllwZy2gW7xrHxICP/SANJg1iF/o0V0WYN4v0 gr9yRnNxDdtUG76E/9OZAe0qt6nfKnDGiIp0hV/EMZ9/gfWrnpRd1FPe7eREh6Es K0R8t+wzRodbadsUEb2HqbkOMi9XUdsm4+c/1raqJ8BEw4WFABpqzWTAq31Y8UR2 CYPeo2ZoyNCU3e4jtqkERea7xoNcioFXGXkg6U/vWVerHnv5PhHQ/fR5aZlwCKlE BdzX30vp+Ppeidm1NxIWj7YTxCnCnaiobiZOBA0HMpVnFqm+QErEBSTKxswepXjK m0IKnekfY8JD0EOrP46vxp9shxNDQr2bxEU= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:40 2024 by rpki-client on console-ams.rpki-client.org