$ rpki-client -vvf rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/A9E0680E094611EAADB2B84EC4F9AE02.roa File: A9E0680E094611EAADB2B84EC4F9AE02.roa (raw, json) Hash identifier: vl3UBSRpyexuG+AmDfNQkiHjPBfDCHJQVvoGsEpXW+c= Subject key identifier: E3:CE:40:94:B6:50:CD:D0:E6:0E:04:CF:15:75:E3:DE:C0:9E:2E:F4 Certificate issuer: /CN=A916D547/serialNumber=F95EB0E7F9A7A837E6C44C6EFE1BD90195897F2D Certificate serial: 0B18 Authority key identifier: F9:5E:B0:E7:F9:A7:A8:37:E6:C4:4C:6E:FE:1B:D9:01:95:89:7F:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/A9E0680E094611EAADB2B84EC4F9AE02.roa Signing time: Tue 14 Nov 2023 19:27:40 +0000 ROA not before: Tue 14 Nov 2023 19:27:40 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 138343 IP address blocks: 103.130.172.0/22 maxlen: 24 2403:be40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.crl rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2840 (0xb18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D547/serialNumber=F95EB0E7F9A7A837E6C44C6EFE1BD90195897F2D Validity Not Before: Nov 14 19:27:40 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6553ca2b-96ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:67:13:54:f1:90:65:12:79:d3:31:b5:68: 0b:83:50:6e:29:83:ea:2a:6b:d7:e2:da:21:62:f0: 72:4b:e1:4d:ce:6d:62:22:cf:83:e5:f3:ed:d0:de: 82:81:08:a3:52:98:b2:3e:8f:aa:8e:70:43:72:79: fc:4a:f4:fd:c2:30:64:3a:db:03:df:7d:0e:89:79: 1b:e7:6c:b1:8e:65:cf:8d:44:8c:b6:c5:a9:ad:30: 98:63:8f:67:7b:15:dd:c3:e9:dc:78:64:87:0b:5f: 10:3b:79:4f:5f:7f:b0:25:41:5f:fb:10:a3:05:62: 77:c7:d3:7e:a5:27:83:30:80:03:29:eb:0b:f6:4f: 97:92:1b:38:4a:52:ac:c0:ea:ef:f3:c6:15:f0:27: a0:fa:a0:68:ac:c0:9f:14:50:74:67:fe:f3:b5:07: 24:1b:39:d0:50:5b:90:f9:33:f2:10:77:a2:b8:93: c0:18:05:1a:73:90:9c:1c:1c:b4:d7:4e:fe:62:0b: fe:27:6f:d5:1e:ff:5a:47:b6:0a:f6:5a:4b:f1:4a: 1f:ea:2b:68:f1:f2:7e:d5:51:9a:d3:b3:bc:69:19: 6a:3b:5c:13:ea:9b:c3:7d:24:95:71:08:35:dd:73: d8:cb:5b:d1:47:f5:b5:fa:d2:c9:42:a7:32:c3:bb: fa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CE:40:94:B6:50:CD:D0:E6:0E:04:CF:15:75:E3:DE:C0:9E:2E:F4 X509v3 Authority Key Identifier: keyid:F9:5E:B0:E7:F9:A7:A8:37:E6:C4:4C:6E:FE:1B:D9:01:95:89:7F:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/A9E0680E094611EAADB2B84EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.130.172.0/22 IPv6: 2403:be40::/32 Signature Algorithm: sha256WithRSAEncryption 2e:d4:d5:83:c1:33:ad:1e:25:9a:d2:f3:8e:5e:1a:87:6f:93: 3f:1a:7d:46:52:9e:0e:37:3b:ab:58:fb:bc:af:fc:a2:a2:2c: 46:d2:74:1e:58:67:66:03:b0:53:89:0a:0e:74:20:eb:c3:ac: be:f2:cb:4c:4c:cf:17:ba:54:a8:41:99:29:dc:45:33:d5:71: a3:bf:55:0f:85:55:58:4c:63:55:dc:6a:c6:c2:04:4b:34:0f: 8c:b9:18:a9:d1:2f:84:44:55:58:ab:ae:f1:5f:78:4e:6b:93: c2:5c:93:a0:39:c2:f7:21:bb:74:73:37:f7:b3:0d:59:af:c8: 0b:ab:5c:ba:6b:88:bc:45:80:f5:a0:c4:02:5e:0f:53:43:ff: 49:b3:c8:ac:a5:e7:c3:95:bc:51:95:3f:5a:e8:a0:7e:59:36: 82:16:14:42:37:e6:a3:f5:4d:1b:5f:d3:9c:e4:a7:0e:6f:86: 30:5e:0e:50:a6:c1:7c:00:a8:2a:7a:90:f7:6b:e9:6c:ed:93: 35:fa:8b:ce:1e:50:ed:e6:29:a7:b6:d6:79:66:e1:17:c7:aa: 40:d4:73:55:7b:5d:f0:bd:1e:d7:43:e6:24:9f:0a:ad:05:5a: cd:be:86:03:91:db:c8:01:f5:69:a0:12:31:64:cc:5c:34:f9: 4e:1c:68:ce -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ1NDcxMTAvBgNVBAUTKEY5NUVCMEU3RjlBN0E4MzdFNkM0NEM2RUZFMUJEOTAx OTU4OTdGMkQwHhcNMjMxMTE0MTkyNzQwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTUzY2EyYi05NmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEhnE1TxkGUSedMxtWgLg1BuKYPqKmvX4tohYvByS+FNzm1iIs+D5fPt0N6C gQijUpiyPo+qjnBDcnn8SvT9wjBkOtsD330OiXkb52yxjmXPjUSMtsWprTCYY49n exXdw+nceGSHC18QO3lPX3+wJUFf+xCjBWJ3x9N+pSeDMIADKesL9k+Xkhs4SlKs wOrv88YV8Ceg+qBorMCfFFB0Z/7ztQckGznQUFuQ+TPyEHeiuJPAGAUac5CcHBy0 107+Ygv+J2/VHv9aR7YK9lpL8Uof6ito8fJ+1VGa07O8aRlqO1wT6pvDfSSVcQg1 3XPYy1vRR/W1+tLJQqcyw7v6NwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOPOQJS2 UM3Q5g4EzxV1497Ani70MB8GA1UdIwQYMBaAFPlesOf5p6g35sRMbv4b2QGViX8t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDU0Ny8xNUIwMTk5RTA5 MzMxMUVBQTc5RTQ5MUFDNEY5QUUwMi8tVjZ3NV9tbnFEZm14RXh1X2h2WkFaV0pm eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1WNnc1X21ucURmbXhFeHVfaHZaQVpXSmZ5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQ1NDcvMTVCMDE5OUUwOTMzMTFFQUE3OUU0OTFBQzRGOUFFMDIvQTlFMDY4MEUw OTQ2MTFFQUFEQjJCODRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJngqwwDQQCAAIwBwMFACQDvkAwDQYJKoZIhvcNAQELBQAD ggEBAC7U1YPBM60eJZrS845eGodvkz8afUZSng43O6tY+7yv/KKiLEbSdB5YZ2YD sFOJCg50IOvDrL7yy0xMzxe6VKhBmSncRTPVcaO/VQ+FVVhMY1XcasbCBEs0D4y5 GKnRL4REVVirrvFfeE5rk8Jck6A5wvchu3RzN/ezDVmvyAurXLpriLxFgPWgxAJe D1ND/0mzyKyl58OVvFGVP1rooH5ZNoIWFEI35qP1TRtf05zkpw5vhjBeDlCmwXwA qCp6kPdr6WztkzX6i84eUO3mKae21nlm4RfHqkDUc1V7XfC9HtdD5iSfCq0FWs2+ hgOR28gB9WmgEjFkzFw0+U4caM4= -----END CERTIFICATE-----Generated at Fri May 31 22:13:05 2024 by rpki-client on console-fra.rpki-client.org