$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/CC72753A7CE511E985E29B7BC4F9AE02.roa File: CC72753A7CE511E985E29B7BC4F9AE02.roa (raw, json) Hash identifier: b5Owfwn6jPYwYgeFR1LD7MMPVgj0pI+xo1vVwUav/8Y= Subject key identifier: 52:ED:96:24:D0:DD:3E:F3:E7:2A:C9:BD:AF:A6:DD:00:8C:C2:51:78 Certificate issuer: /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73 Certificate serial: 0EBE Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/CC72753A7CE511E985E29B7BC4F9AE02.roa Signing time: Tue 14 May 2024 18:27:10 +0000 ROA not before: Tue 14 May 2024 18:27:10 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 139002 IP address blocks: 103.138.94.0/24 maxlen: 24 2001:df0:3a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3774 (0xebe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73 Validity Not Before: May 14 18:27:10 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6643acfd-e84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:ef:93:27:c3:b5:90:1f:93:37:15:81:0c: 51:9b:79:5a:49:27:9d:e9:f9:75:2c:16:6a:1a:3d: c4:f5:74:86:6f:a8:fa:b4:f6:5b:68:7a:22:0e:08: 70:09:56:dc:f8:80:0c:b3:65:a8:87:0b:ee:22:ed: 14:56:9e:45:8b:23:3c:7d:82:4a:74:5f:b6:f0:22: b8:0f:8d:aa:c3:3f:53:b2:ba:ad:cb:e3:63:e3:c3: 42:ac:73:0c:9e:f3:5e:bf:60:0f:0a:57:2c:e6:51: 16:6c:e9:6b:57:d5:94:ee:92:cc:f6:c6:2c:41:98: 66:84:3e:15:ee:8f:40:90:1a:3a:85:30:a0:29:c1: 8d:d3:b0:26:04:7b:3a:8c:3a:a9:0b:6f:7c:97:8f: 44:73:07:e3:d3:3c:5a:05:33:30:1d:d8:55:19:b0: 2e:4a:4f:89:94:a6:4d:3f:89:c5:64:fb:9c:dc:d1: c6:87:33:11:52:43:bc:45:98:43:c5:3b:b0:4b:01: d2:d9:e8:80:a7:86:ac:5a:94:6e:01:2c:ea:6a:d6: 40:c4:19:19:ca:f2:62:ff:62:b1:62:9e:d2:56:68: ba:52:5c:2a:c5:af:90:9f:39:2e:5a:a5:0e:8c:50: 20:e6:1d:99:9d:86:74:fe:27:24:95:fe:f6:db:c5: 87:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:ED:96:24:D0:DD:3E:F3:E7:2A:C9:BD:AF:A6:DD:00:8C:C2:51:78 X509v3 Authority Key Identifier: keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/CC72753A7CE511E985E29B7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.94.0/24 IPv6: 2001:df0:3a80::/48 Signature Algorithm: sha256WithRSAEncryption 7a:f9:ef:42:ac:33:22:1e:98:e7:37:b4:13:45:d6:a3:3f:b2: 1c:6f:37:f3:d4:04:1e:3f:7b:d2:78:89:be:32:57:c2:e6:a2: 3c:1d:c0:7b:37:ea:23:a9:40:20:04:d7:a2:75:be:df:6c:37: 99:f7:f2:2f:23:fd:60:f5:f4:f7:7d:c3:2f:22:e1:1d:92:7e: af:3c:ec:24:d4:3a:2a:e0:2a:30:30:c4:e4:1c:70:d3:80:6e: e9:34:17:3d:9e:5e:a1:1f:33:e5:9b:3c:e3:97:35:06:d4:0e: 78:00:41:02:5d:91:16:d3:63:fd:b0:e4:34:14:88:8a:fa:9d: c3:06:77:28:84:f1:94:0d:57:3e:43:2d:ab:ed:5c:7b:59:61: d9:88:1e:01:9e:8d:42:64:7d:5f:4e:04:c2:ec:9d:3e:1d:db: aa:61:ca:6e:51:7f:56:62:01:4a:41:3f:d2:35:c0:93:b6:16: 03:bd:be:d4:ad:9f:f2:98:dd:68:22:ba:28:58:a7:15:dc:cd: f0:ab:37:bb:9b:09:99:20:cf:4a:81:df:97:3c:fb:87:7c:b3: 2d:0b:d3:6f:2e:32:84:97:7c:cc:d6:fa:2d:16:6b:d4:15:cf: c7:1a:4f:c9:d6:2c:cf:d7:6d:68:f3:fe:e8:b6:85:68:02:0a: b7:6a:c2:c3 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRUIxMTAvBgNVBAUTKDg5NURBNjhCQUQ4QTdGOUQzMTc4ODU2QzdCNjJFOUMx Njg4QjJCNzMwHhcNMjQwNTE0MTgyNzEwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQzYWNmZC1lODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXzvkyfDtZAfkzcVgQxRm3laSSed6fl1LBZqGj3E9XSGb6j6tPZbaHoiDghw CVbc+IAMs2WohwvuIu0UVp5FiyM8fYJKdF+28CK4D42qwz9Tsrqty+Nj48NCrHMM nvNev2APClcs5lEWbOlrV9WU7pLM9sYsQZhmhD4V7o9AkBo6hTCgKcGN07AmBHs6 jDqpC298l49Ecwfj0zxaBTMwHdhVGbAuSk+JlKZNP4nFZPuc3NHGhzMRUkO8RZhD xTuwSwHS2eiAp4asWpRuASzqatZAxBkZyvJi/2KxYp7SVmi6Ulwqxa+QnzkuWqUO jFAg5h2ZnYZ0/icklf7228WHOQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFLtliTQ 3T7z5yrJva+m3QCMwlF4MB8GA1UdIwQYMBaAFIldpoutin+dMXiFbHti6cFoiytz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNFQi83REE1ODNFNDY1 NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1MHhlSVZzZTJMcHdXaUxL M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWMm1pNjJLZjUweGVJVnNlMkxwd1dpTEszTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlDRUIvN0RBNTgzRTQ2NTU2MTFFOTg1ODEwRDM3QzRGOUFFMDIvQ0M3Mjc1M0E3 Q0U1MTFFOTg1RTI5QjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnil4wDwQCAAIwCQMHACABDfA6gDANBgkqhkiG9w0BAQsF AAOCAQEAevnvQqwzIh6Y5ze0E0XWoz+yHG8389QEHj970niJvjJXwuaiPB3Aezfq I6lAIATXonW+32w3mffyLyP9YPX0933DLyLhHZJ+rzzsJNQ6KuAqMDDE5Bxw04Bu 6TQXPZ5eoR8z5Zs845c1BtQOeABBAl2RFtNj/bDkNBSIivqdwwZ3KITxlA1XPkMt q+1ce1lh2YgeAZ6NQmR9X04EwuydPh3bqmHKblF/VmIBSkE/0jXAk7YWA72+1K2f 8pjdaCK6KFinFdzN8Ks3u5sJmSDPSoHflzz7h3yzLQvTby4yhJd8zNb6LRZr1BXP xxpPydYsz9dtaPP+6LaFaAIKt2rCww== -----END CERTIFICATE-----Generated at Thu May 16 19:10:55 2024 by rpki-client on console-fra.rpki-client.org