$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/2F7EAF12932411EB97630343C4F9AE02.roa File: 2F7EAF12932411EB97630343C4F9AE02.roa (raw, json) Hash identifier: taEGqA6seasVUG8wh6upIg7VNN7tLKDnm912bRHf+NY= Subject key identifier: 0D:7B:EF:F1:88:C7:2E:DA:75:6E:DB:0E:60:A6:63:64:80:EA:58:3D Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Certificate serial: 091B Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/2F7EAF12932411EB97630343C4F9AE02.roa Signing time: Thu 16 May 2024 21:30:28 +0000 ROA not before: Thu 16 May 2024 21:30:28 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 58713 IP address blocks: 43.240.120.0/23 maxlen: 23 43.240.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 20:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2331 (0x91b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Validity Not Before: May 16 21:30:28 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66467af4-da2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:28:8c:e6:59:c0:2b:a4:89:39:db:76:73: ac:c9:be:76:cc:2b:df:0c:ce:70:5a:9b:32:01:29: 1d:70:e8:fa:23:a0:6f:89:bb:be:f5:60:3a:59:f1: 9d:f2:ee:a5:d3:99:11:e3:01:2d:e8:e4:eb:26:e9: 67:e3:6e:e9:58:6b:1c:a5:ae:6c:a9:ca:c4:d8:25: 72:dd:96:10:40:8b:21:ac:83:6d:5f:81:aa:d1:64: 64:dc:31:c7:00:fd:2e:18:93:08:f7:9c:e4:7e:52: 1e:c8:77:75:f5:41:cb:32:ed:71:5e:c2:22:57:97: 79:e2:72:92:59:4b:df:2e:49:cc:6d:54:e4:93:a3: 09:76:d2:32:44:90:5a:08:91:47:c9:d5:64:0a:cd: 61:40:ac:d8:f3:33:56:dd:a6:df:25:35:7e:26:c9: 56:ce:f8:40:ad:cb:16:32:19:6c:63:6e:0d:4d:52: 8b:f4:3d:69:df:b6:7c:6f:ca:4d:aa:a0:fa:d3:40: 8c:5f:37:5f:cd:3f:df:74:2f:10:33:a9:99:ae:46: 1e:0c:b2:07:c1:1b:12:0f:46:0f:39:98:03:94:98: 3c:a3:78:8c:76:ee:c6:5b:3b:03:fc:b9:56:e0:61: 0f:23:f8:fe:2a:13:08:62:84:c5:29:35:4d:34:08: 94:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7B:EF:F1:88:C7:2E:DA:75:6E:DB:0E:60:A6:63:64:80:EA:58:3D X509v3 Authority Key Identifier: keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/2F7EAF12932411EB97630343C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.240.120.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:68:5c:c1:a4:69:d9:54:2d:22:5e:5c:58:a3:29:b3:34:e5: c6:5b:98:b1:9d:71:c3:c8:26:5f:ee:99:55:7f:15:2b:e2:e1: a2:d7:a6:57:19:63:6a:ba:68:c5:78:f5:88:68:6e:70:1f:de: 05:2f:a0:f4:ff:86:3e:c4:5d:69:40:75:b2:92:42:7a:be:7f: 00:c5:13:dd:41:ec:7d:a4:e0:af:01:47:02:78:80:49:b9:89: cb:fc:95:78:7d:ed:10:21:77:96:02:a5:95:d4:55:0b:d0:ec: 72:10:f7:2e:fb:7d:88:af:1f:f6:79:36:04:6e:88:d3:e9:ca: 1b:42:39:4e:a3:08:20:49:1b:b0:35:55:92:2c:58:bd:e2:c9: 7d:be:8a:5e:3a:b1:ab:90:f4:33:4d:b1:e7:5b:33:5d:73:4b: 54:da:3e:96:85:62:dd:d9:b0:bb:90:98:f4:7c:46:5e:6f:67: a3:08:ab:6b:ea:2e:b3:76:84:11:ef:50:28:b8:2f:37:22:64: b0:15:56:52:3e:fc:69:4b:11:e2:57:fb:60:cd:10:9b:40:8d: b1:2f:ec:61:e2:b2:43:35:a6:ef:0e:ef:22:82:35:78:06:78: f3:bf:b4:2c:83:ee:e6:ab:ed:ee:64:78:9a:c6:f4:ac:c7:3a: b0:22:bf:f8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NEYxMTAvBgNVBAUTKEVDNzA1QjJBRDZGQjEzRkQ2RkM0MjE0Qjk3NzI3MDQx MTNFNjY4RDcwHhcNMjQwNTE2MjEzMDI4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ2N2FmNC1kYTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgkojOZZwCukiTnbdnOsyb52zCvfDM5wWpsyASkdcOj6I6Bvibu+9WA6WfGd 8u6l05kR4wEt6OTrJuln427pWGscpa5sqcrE2CVy3ZYQQIshrINtX4Gq0WRk3DHH AP0uGJMI95zkflIeyHd19UHLMu1xXsIiV5d54nKSWUvfLknMbVTkk6MJdtIyRJBa CJFHydVkCs1hQKzY8zNW3abfJTV+JslWzvhArcsWMhlsY24NTVKL9D1p37Z8b8pN qqD600CMXzdfzT/fdC8QM6mZrkYeDLIHwRsSD0YPOZgDlJg8o3iMdu7GWzsD/LlW 4GEPI/j+KhMIYoTFKTVNNAiUFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA177/GI xy7adW7bDmCmY2SA6lg9MB8GA1UdIwQYMBaAFOxwWyrW+xP9b8QhS5dycEET5mjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY0Ri9GMTE1QjY3MjdE RUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0VfMXZ4Q0ZMbDNKd1FSUG1h TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIQmJLdGI3RV8xdnhDRkxsM0p3UVJQbWFOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ2NEYvRjExNUI2NzI3REVEMTFFQTlBNUNDQzRCQzRGOUFFMDIvMkY3RUFGMTI5 MzI0MTFFQjk3NjMwMzQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr8HgwDQYJKoZIhvcNAQELBQADggEBAExoXMGkadlULSJe XFijKbM05cZbmLGdccPIJl/umVV/FSvi4aLXplcZY2q6aMV49YhobnAf3gUvoPT/ hj7EXWlAdbKSQnq+fwDFE91B7H2k4K8BRwJ4gEm5icv8lXh97RAhd5YCpZXUVQvQ 7HIQ9y77fYivH/Z5NgRuiNPpyhtCOU6jCCBJG7A1VZIsWL3iyX2+il46sauQ9DNN sedbM11zS1TaPpaFYt3ZsLuQmPR8Rl5vZ6MIq2vqLrN2hBHvUCi4LzciZLAVVlI+ /GlLEeJX+2DNEJtAjbEv7GHiskM1pu8O7yKCNXgGePO/tCyD7uar7e5keJrG9KzH OrAiv/g= -----END CERTIFICATE-----Generated at Wed Jun 12 22:42:29 2024 by rpki-client on console-ams.rpki-client.org