$ rpki-client -vvf rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/2323F9621D5D11EBA3A7E71CC4F9AE02.roa File: 2323F9621D5D11EBA3A7E71CC4F9AE02.roa (raw, json) Hash identifier: 7aqFTC0pvymz2qNJgMgOiSvmjJnWEvFpbf7HqEGVxms= Subject key identifier: 0E:47:BB:6D:ED:C8:F2:4E:F8:AF:B5:D0:86:EA:47:7E:8C:1A:2B:C6 Certificate issuer: /CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B Certificate serial: 06DE Authority key identifier: 2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/2323F9621D5D11EBA3A7E71CC4F9AE02.roa Signing time: Wed 04 Sep 2024 22:41:43 +0000 ROA not before: Wed 04 Sep 2024 22:41:43 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 137980 IP address blocks: 103.119.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B Validity Not Before: Sep 4 22:41:43 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d8e227-2ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:87:44:eb:a7:01:f2:11:72:c3:c3:59:8e: 65:05:a6:e0:9b:38:3d:25:36:ad:d1:b2:6b:57:8d: 31:95:fa:5b:60:6d:5b:0f:b4:4e:11:47:49:4c:92: 45:1d:8f:02:dc:39:33:ba:bc:a6:f7:25:ab:ad:d5: 55:07:93:c2:25:a1:7b:70:e0:1d:6d:f3:cc:f0:1a: 4a:00:24:42:5d:3e:23:c1:84:87:26:fa:b0:31:d3: 46:be:b5:4a:38:a6:64:d2:37:e7:be:3b:28:44:5f: 46:27:46:f5:b1:4d:f7:ac:a9:39:23:a3:96:13:40: 89:c5:d0:d8:c9:e1:a5:70:eb:f8:26:98:b8:00:0b: d3:db:d9:08:94:9e:f1:43:a3:86:21:ee:af:cc:19: b1:b9:be:6c:42:be:7e:b3:03:29:53:45:c1:3e:cc: 3b:ab:b8:57:7f:9e:58:92:da:39:b1:3e:40:54:49: a3:23:6b:25:f0:eb:0f:e4:fb:47:7d:dc:57:ab:87: b7:e3:14:c6:17:4d:a1:69:84:39:b1:bd:7f:86:63: 40:8b:41:a0:0a:90:6a:8a:3e:c7:20:6b:cc:21:b7: c5:12:e3:fa:17:d7:fd:27:ff:fb:cf:e2:6d:d7:0e: 69:30:01:1f:4b:93:46:e8:b3:5d:74:5d:6d:8b:59: a0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:47:BB:6D:ED:C8:F2:4E:F8:AF:B5:D0:86:EA:47:7E:8C:1A:2B:C6 X509v3 Authority Key Identifier: keyid:2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/2323F9621D5D11EBA3A7E71CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.32.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:18:e2:a3:90:11:08:e8:57:38:7c:98:24:9b:ee:78:03:1d: d2:3b:13:26:4d:c4:9c:f3:7d:15:08:01:81:3c:53:c9:14:71: 1a:c4:54:e2:b3:b9:59:cf:a8:96:2d:cb:b7:d1:d9:d9:c0:cb: 8d:b5:f1:49:a4:13:78:c9:89:e3:bc:dc:84:07:a4:e2:c5:d6: e9:ae:72:05:72:1d:41:c9:19:6d:6b:62:41:69:c2:f9:55:1f: 01:e7:6f:87:59:e3:f2:ed:ca:1e:f7:e5:a5:94:1e:b2:36:c7: 94:2b:df:c9:d6:00:1f:b2:ef:6d:e3:b7:4e:df:3b:fd:2c:63: df:ed:cc:7d:b7:60:14:9f:72:f9:f3:8a:64:53:1f:27:65:f9: 25:40:df:7e:96:69:79:9e:e9:f2:63:ae:b8:23:b5:98:73:8a: 6b:5e:7b:87:62:4f:5c:54:c3:22:a6:67:9c:d2:b5:fb:6e:ca: c7:57:6d:50:24:f1:54:6f:8e:d0:59:06:6d:5b:ce:73:22:5f: 3c:89:a6:de:e5:c6:69:e7:6a:14:69:2d:58:ec:f4:58:9e:33: 73:c4:66:66:4f:71:b6:6a:ea:99:07:34:ac:82:76:19:92:86: 64:4f:bc:a8:82:79:30:94:79:7f:24:ec:b1:13:32:27:ad:98: 1a:8d:5c:aa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1NUUxMTAvBgNVBAUTKDJGNUM5QkVGNzBFNUQwMjNCNzFDNDZDQjY2Q0ZFMkEx RkRCNDgzNUIwHhcNMjQwOTA0MjI0MTQzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4ZTIyNy0yYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtduHROunAfIRcsPDWY5lBabgmzg9JTat0bJrV40xlfpbYG1bD7ROEUdJTJJF HY8C3Dkzurym9yWrrdVVB5PCJaF7cOAdbfPM8BpKACRCXT4jwYSHJvqwMdNGvrVK OKZk0jfnvjsoRF9GJ0b1sU33rKk5I6OWE0CJxdDYyeGlcOv4Jpi4AAvT29kIlJ7x Q6OGIe6vzBmxub5sQr5+swMpU0XBPsw7q7hXf55Ykto5sT5AVEmjI2sl8OsP5PtH fdxXq4e34xTGF02haYQ5sb1/hmNAi0GgCpBqij7HIGvMIbfFEuP6F9f9J//7z+Jt 1w5pMAEfS5NG6LNddF1ti1mgkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA5Hu23t yPJO+K+10IbqR36MGivGMB8GA1UdIwQYMBaAFC9cm+9w5dAjtxxGy2bP4qH9tINb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDU1RS82MkE1RUI2QTFE NUIxMUVCODNBQzg3MUFDNEY5QUUwMi9MMXliNzNEbDBDTzNIRWJMWnNfaW9mMjBn MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxeWI3M0RsMENPM0hFYkxac19pb2YyMGcxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ1NUUvNjJBNUVCNkExRDVCMTFFQjgzQUM4NzFBQzRGOUFFMDIvMjMyM0Y5NjIx RDVEMTFFQkEzQTdFNzFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABndyAwDQYJKoZIhvcNAQELBQADggEBAI4Y4qOQEQjoVzh8 mCSb7ngDHdI7EyZNxJzzfRUIAYE8U8kUcRrEVOKzuVnPqJYty7fR2dnAy4218Umk E3jJieO83IQHpOLF1umucgVyHUHJGW1rYkFpwvlVHwHnb4dZ4/Ltyh735aWUHrI2 x5Qr38nWAB+y723jt07fO/0sY9/tzH23YBSfcvnzimRTHydl+SVA336WaXme6fJj rrgjtZhzimtee4diT1xUwyKmZ5zStftuysdXbVAk8VRvjtBZBm1bznMiXzyJpt7l xmnnahRpLVjs9FieM3PEZmZPcbZq6pkHNKyCdhmShmRPvKiCeTCUeX8k7LETMiet mBqNXKo= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:40 2024 by rpki-client on console-ams.rpki-client.org