$ rpki-client -vvf rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/1F7330CCDC8311EB8F2ECB2EC4F9AE02.roa File: 1F7330CCDC8311EB8F2ECB2EC4F9AE02.roa (raw, json) Hash identifier: EoN38EqVgde8oeRmds8M1kMIlF2cjWzNWcGDtFGNC7M= Subject key identifier: 21:B3:11:D6:24:BE:16:EE:85:0D:F2:AE:CF:43:CE:98:AA:B7:F3:B7 Certificate issuer: /CN=A918E157/serialNumber=BAE5630D2A61330FACBA37F8CCFDCF892807F045 Certificate serial: 05C0 Authority key identifier: BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/1F7330CCDC8311EB8F2ECB2EC4F9AE02.roa Signing time: Sat 28 Oct 2023 23:31:17 +0000 ROA not before: Sat 28 Oct 2023 23:31:17 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 10143 IP address blocks: 103.20.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.crl rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1472 (0x5c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E157/serialNumber=BAE5630D2A61330FACBA37F8CCFDCF892807F045 Validity Not Before: Oct 28 23:31:17 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=653d99c5-5af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:01:ef:14:a5:00:c1:e7:83:d2:14:d0:07: 07:fa:c4:89:31:db:07:6b:c7:b2:15:bb:9f:5c:1a: 55:d7:fb:2b:fa:ee:a0:9a:5f:17:ce:e9:aa:0a:09: 16:cf:cd:6d:5d:86:52:36:01:98:5e:48:1d:bb:43: e8:ee:2d:5e:a0:08:5c:b3:bf:2c:c3:73:f4:3b:e1: 63:21:87:7a:4b:9e:e5:f0:07:95:7e:d0:d7:a7:f3: ea:63:c5:b2:31:f2:2a:ab:a7:ca:3f:98:27:f2:38: f0:6b:2e:51:83:6b:98:f9:9e:21:24:56:c4:42:4d: 84:48:cc:c3:6c:ef:5a:5a:c9:1c:24:13:fd:89:ec: 0c:9c:51:c4:e2:3f:41:74:81:40:e2:2a:43:e7:ad: 4e:b4:84:ec:1e:03:48:c1:fc:4c:14:13:46:e3:ab: 1a:60:ef:ca:b4:24:98:c9:5c:2c:7c:88:03:50:66: ad:01:a6:8e:64:c8:2e:ac:7a:1d:ff:5f:a1:6a:a1: 63:2c:ef:d0:69:42:bb:69:5e:80:84:d9:11:5b:90: 18:59:a9:18:84:ff:ba:a9:b7:f8:51:98:28:60:e3: 45:4c:0d:d7:bb:4c:66:81:ca:f7:96:ad:bf:1c:46: 06:78:6e:71:b6:2f:70:ae:6b:48:c2:e2:cf:5c:85: 89:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B3:11:D6:24:BE:16:EE:85:0D:F2:AE:CF:43:CE:98:AA:B7:F3:B7 X509v3 Authority Key Identifier: keyid:BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/1F7330CCDC8311EB8F2ECB2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.247.0/24 Signature Algorithm: sha256WithRSAEncryption 10:75:44:3c:da:e3:35:38:88:a3:0b:34:89:74:51:fb:8d:78: 5d:c6:4e:0d:1c:26:48:85:5a:ad:db:82:ed:76:b8:a0:a4:d1: 9e:3a:25:f1:d0:19:dd:0d:c4:92:4d:17:9d:76:30:ec:bc:7a: cd:05:37:f7:d6:1f:22:a5:c8:4c:4e:9d:c0:53:e4:46:b0:06: 39:b9:26:98:ad:13:83:59:d4:10:fd:0e:3d:d5:77:4f:38:54: 05:df:d8:0f:28:1f:77:b8:1f:49:dc:c0:ce:52:4f:4e:b7:2c: f8:52:78:29:90:69:33:cf:56:3c:50:73:87:fa:bf:46:b8:1f: c8:5f:d4:6b:bc:a7:e8:57:bf:57:0e:c7:4c:c1:b7:98:14:94: e0:ce:25:35:9a:75:82:6c:28:30:a7:97:dd:bd:ff:d6:fc:41: 4f:15:1d:c6:b6:eb:73:b8:cb:3d:b7:5c:9b:f5:1e:a2:82:03: 3f:07:84:28:43:95:54:58:d7:a8:aa:37:d5:0b:e5:40:39:ea: 14:1f:71:11:4d:d8:aa:37:aa:59:81:96:f3:3a:26:4d:55:44: 2a:13:26:08:ed:cd:07:aa:3c:59:af:d8:c1:f7:96:26:a3:dd: ee:4e:cd:b8:d1:0c:49:a1:bc:0d:7d:a3:0e:bb:f4:5f:80:07: 52:bc:28:d2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUxNTcxMTAvBgNVBAUTKEJBRTU2MzBEMkE2MTMzMEZBQ0JBMzdGOENDRkRDRjg5 MjgwN0YwNDUwHhcNMjMxMDI4MjMzMTE3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNkOTljNS01YWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHMB7xSlAMHng9IU0AcH+sSJMdsHa8eyFbufXBpV1/sr+u6gml8XzumqCgkW z81tXYZSNgGYXkgdu0Po7i1eoAhcs78sw3P0O+FjIYd6S57l8AeVftDXp/PqY8Wy MfIqq6fKP5gn8jjway5Rg2uY+Z4hJFbEQk2ESMzDbO9aWskcJBP9iewMnFHE4j9B dIFA4ipD561OtITsHgNIwfxMFBNG46saYO/KtCSYyVwsfIgDUGatAaaOZMgurHod /1+haqFjLO/QaUK7aV6AhNkRW5AYWakYhP+6qbf4UZgoYONFTA3Xu0xmgcr3lq2/ HEYGeG5xti9wrmtIwuLPXIWJLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCGzEdYk vhbuhQ3yrs9Dzpiqt/O3MB8GA1UdIwQYMBaAFLrlYw0qYTMPrLo3+Mz9z4koB/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTE1Ny9FM0FGOTQ5QzU5 RTAxMUVCQTkxNjEzNTJDNEY5QUUwMi91dVZqRFNwaE13LXN1amY0elAzUGlTZ0g4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V1VmpEU3BoTXctc3VqZjR6UDNQaVNnSDhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEUxNTcvRTNBRjk0OUM1OUUwMTFFQkE5MTYxMzUyQzRGOUFFMDIvMUY3MzMwQ0NE QzgzMTFFQjhGMkVDQjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnFPcwDQYJKoZIhvcNAQELBQADggEBABB1RDza4zU4iKML NIl0UfuNeF3GTg0cJkiFWq3bgu12uKCk0Z46JfHQGd0NxJJNF512MOy8es0FN/fW HyKlyExOncBT5EawBjm5JpitE4NZ1BD9Dj3Vd084VAXf2A8oH3e4H0ncwM5ST063 LPhSeCmQaTPPVjxQc4f6v0a4H8hf1Gu8p+hXv1cOx0zBt5gUlODOJTWadYJsKDCn l929/9b8QU8VHca263O4yz23XJv1HqKCAz8HhChDlVRY16iqN9UL5UA56hQfcRFN 2Ko3qlmBlvM6Jk1VRCoTJgjtzQeqPFmv2MH3liaj3e5OzbjRDEmhvA19ow679F+A B1K8KNI= -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:45 2024 by rpki-client on console-fra.rpki-client.org