$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa File: FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa (raw, json) Hash identifier: 88rHQVPR1JUl3cf/OTRoNqatod6IR47YQyVPqlvmZBA= Subject key identifier: 6D:32:4A:3E:AE:B7:85:AD:52:1D:F6:FF:1D:C8:FC:F0:68:71:D6:23 Certificate issuer: /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Certificate serial: 0CF4 Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa Signing time: Fri 28 Jun 2024 18:39:46 +0000 ROA not before: Fri 28 Jun 2024 18:39:46 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 139089 IP address blocks: 103.139.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3316 (0xcf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Validity Not Before: Jun 28 18:39:46 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667f0372-0699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:9c:58:be:69:d8:bb:8c:49:b2:5e:13:23: 74:f3:08:9b:ad:a5:8d:d8:80:12:4b:16:c7:55:91: 89:7a:2d:bd:ef:eb:9b:23:0f:a4:3f:1b:58:10:17: 60:05:5e:dd:00:00:90:dd:de:f5:a7:55:23:69:4d: 43:41:a4:ca:d8:a4:22:0f:96:b8:22:b8:db:4c:ae: 19:ae:79:fb:93:6c:d2:d1:e7:05:a6:fe:2a:84:56: 1a:4d:a9:20:f6:d1:0e:0f:d8:ed:cc:05:95:24:c1: 74:30:22:e2:a0:9e:71:a8:53:c9:12:25:ab:5c:67: 7f:5e:47:bc:df:48:b6:20:08:7c:7f:85:3f:22:16: a2:40:7c:1c:40:f3:a9:f4:d6:f0:69:27:78:1d:fe: 72:8b:0e:c3:1c:a7:f0:ef:0d:95:56:b5:cb:ab:6f: 72:4b:e5:16:70:f1:83:e1:07:c2:0a:6d:d6:47:40: e6:a7:0a:44:b2:b4:e1:20:65:22:76:02:f4:62:d6: 74:00:1f:06:73:94:16:1b:ca:45:7a:05:c9:f7:4c: be:d1:8f:9b:10:51:b6:c9:91:c8:b7:84:55:ba:ee: dd:3d:27:83:12:5f:7a:0f:fd:77:65:7e:84:f5:f4: 85:81:bc:28:1f:0f:0b:b7:97:3f:92:98:e9:e8:5f: 61:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:32:4A:3E:AE:B7:85:AD:52:1D:F6:FF:1D:C8:FC:F0:68:71:D6:23 X509v3 Authority Key Identifier: keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.146.0/23 Signature Algorithm: sha256WithRSAEncryption cf:c4:2e:c9:e1:aa:7d:1d:4e:0a:7c:5d:df:60:2e:1b:ca:c7: 50:76:8e:34:1e:59:e3:9c:a9:8b:40:6c:fa:a8:23:54:1e:a2: 6f:b8:db:23:65:16:ff:18:27:f1:ad:d5:12:5d:f3:7c:44:43: ae:f8:20:f0:6c:ad:5c:9b:38:87:18:77:5b:20:f8:cc:04:b1: 10:f4:12:e0:a5:e8:b3:e7:8e:e6:79:82:02:e0:b1:f9:12:b9: d9:f8:ee:3d:30:cb:52:32:1d:75:93:53:10:c6:37:21:1e:16: b4:cf:5b:dc:2a:77:32:8f:a0:f4:41:d1:2c:e3:bf:18:2f:54: fb:02:07:77:21:66:24:3c:ad:01:de:d3:ee:87:d4:96:7a:36: e4:3e:72:bf:2b:59:24:fa:36:3d:28:cb:e0:ba:4c:9f:33:52: e1:45:50:a3:40:e7:7d:b6:37:6f:b2:43:7b:f6:2e:ea:fd:55: 11:e4:70:35:db:bf:48:f6:98:fd:d1:53:22:72:c7:74:26:71: 26:ab:78:ff:fd:d7:a7:44:77:79:48:79:f5:cf:ea:30:ad:8c: d0:cf:05:f4:98:31:ef:aa:25:e7:6b:68:43:e1:e3:88:0f:54: 8c:28:03:8d:2f:c0:d6:a9:83:31:9c:87:a2:9d:51:71:88:70: f3:4c:ec:7e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwMTAxMTAvBgNVBAUTKDcyMjE3OEQ1OTFEOTg1OTY4OUU0QjkyRjJEMEM4N0ZB NDdFMzVFMEEwHhcNMjQwNjI4MTgzOTQ2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdmMDM3Mi0wNjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXecWL5p2LuMSbJeEyN08wibraWN2IASSxbHVZGJei297+ubIw+kPxtYEBdg BV7dAACQ3d71p1UjaU1DQaTK2KQiD5a4IrjbTK4Zrnn7k2zS0ecFpv4qhFYaTakg 9tEOD9jtzAWVJMF0MCLioJ5xqFPJEiWrXGd/Xke830i2IAh8f4U/IhaiQHwcQPOp 9NbwaSd4Hf5yiw7DHKfw7w2VVrXLq29yS+UWcPGD4QfCCm3WR0DmpwpEsrThIGUi dgL0YtZ0AB8Gc5QWG8pFegXJ90y+0Y+bEFG2yZHIt4RVuu7dPSeDEl96D/13ZX6E 9fSFgbwoHw8Lt5c/kpjp6F9htQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG0ySj6u t4WtUh32/x3I/PBocdYjMB8GA1UdIwQYMBaAFHIheNWR2YWWieS5Ly0Mh/pH414K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAxMC81N0I3NjcxQUMy MUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmhaYUo1TGt2TFF5SC1rZmpY Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpRjQxWkhaaFphSjVMa3ZMUXlILWtmalhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQwMTAvNTdCNzY3MUFDMjFDMTFFOTg0QTE1RDEyQzRGOUFFMDIvRkNGRUFBNzRE QjkxMTFFOUI3MEVERDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFni5IwDQYJKoZIhvcNAQELBQADggEBAM/ELsnhqn0dTgp8 Xd9gLhvKx1B2jjQeWeOcqYtAbPqoI1Qeom+42yNlFv8YJ/Gt1RJd83xEQ674IPBs rVybOIcYd1sg+MwEsRD0EuCl6LPnjuZ5ggLgsfkSudn47j0wy1IyHXWTUxDGNyEe FrTPW9wqdzKPoPRB0SzjvxgvVPsCB3chZiQ8rQHe0+6H1JZ6NuQ+cr8rWST6Nj0o y+C6TJ8zUuFFUKNA5322N2+yQ3v2Lur9VRHkcDXbv0j2mP3RUyJyx3QmcSareP/9 16dEd3lIefXP6jCtjNDPBfSYMe+qJedraEPh44gPVIwoA40vwNapgzGch6KdUXGI cPNM7H4= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org