$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/B5D4A156598B11EC82C8685CC4F9AE02.roa File: B5D4A156598B11EC82C8685CC4F9AE02.roa (raw, json) Hash identifier: 9N5REIY+2HrtITjoJdJhm20sPzs6LfTpozJyTEhJPKI= Subject key identifier: DD:AB:F6:60:2B:AC:0B:7B:F2:9D:B8:03:E6:AA:DC:E9:E1:12:CE:F0 Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0D44 Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/B5D4A156598B11EC82C8685CC4F9AE02.roa Signing time: Tue 14 May 2024 18:57:32 +0000 ROA not before: Tue 14 May 2024 18:57:32 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 23860 IP address blocks: 103.215.224.0/22 maxlen: 24 157.119.104.0/22 maxlen: 24 2400:3840::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3396 (0xd44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: May 14 18:57:32 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6643b41b-82a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:97:7d:49:40:56:4c:63:be:92:da:ba:90: f0:86:f5:02:4d:4d:c5:a5:48:58:df:55:09:2f:0a: af:e9:73:a8:5a:bd:70:d7:31:0f:ca:f6:6c:9e:e0: a8:eb:e8:86:4f:38:21:b5:9f:d9:51:7a:be:85:a5: 8e:df:90:50:81:0f:64:5f:11:88:93:3f:0d:f8:49: 6c:33:e0:f2:b5:5a:f7:5f:1b:f8:5c:3e:5a:38:ab: d5:25:17:78:9a:9c:85:e8:4f:19:3f:97:52:e1:4e: 5e:e8:72:04:01:a7:a5:f5:1c:71:60:77:fd:f5:b3: b2:02:f1:60:2e:73:70:6d:87:2d:96:a6:0e:4c:34: 3c:c5:2c:33:27:fa:39:78:21:2e:6d:4d:a8:07:14: 40:90:9e:af:a3:69:08:a3:53:6c:16:fc:cb:69:ef: b6:4e:73:c2:9d:a0:8a:64:1f:ab:3d:bd:44:b6:46: 54:30:b7:5b:43:b2:43:ad:f9:ba:62:26:71:ac:e8: 5e:e2:68:6c:76:25:9a:a9:24:fd:b9:53:25:8c:eb: 41:69:0d:6d:b4:30:cc:1b:6d:7b:44:33:35:ef:b3: dd:e0:53:b8:5b:33:15:00:9a:5e:cd:8a:85:bb:55: fa:b3:dd:2f:99:fc:04:ae:f0:22:58:fd:ac:35:56: f9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AB:F6:60:2B:AC:0B:7B:F2:9D:B8:03:E6:AA:DC:E9:E1:12:CE:F0 X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/B5D4A156598B11EC82C8685CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.215.224.0/22 157.119.104.0/22 IPv6: 2400:3840::/32 Signature Algorithm: sha256WithRSAEncryption 0f:cc:d4:25:9f:ea:17:15:e3:c0:a6:3c:f3:57:9b:fc:c4:ea: 51:3d:d7:38:e5:80:dd:1f:0d:59:dc:ee:71:27:bb:ab:47:c4: 1a:cb:01:dd:f7:38:5d:ef:31:3a:09:08:b2:48:aa:01:f9:3b: 6f:77:39:98:c2:e2:11:9a:cc:54:28:71:85:b8:02:53:31:36: 07:d8:57:46:52:61:be:51:73:09:14:91:39:54:c0:dd:bd:7f: 53:bf:ea:29:75:c6:8f:e1:5c:e0:6a:90:11:24:c0:1c:c9:1d: c0:01:c5:9f:e5:d0:0f:ce:00:5d:b3:3f:7e:25:6d:8a:4f:de: 26:11:36:01:52:12:a3:c6:78:45:67:50:c6:6d:e1:59:6e:66: 8b:e3:8d:7f:80:d9:5a:f6:39:2c:a2:77:f0:06:d0:8e:55:4f: d2:33:78:0d:d6:83:bc:c0:82:e9:7b:55:c2:41:94:82:b3:2f: 2f:b3:ec:b9:6c:1d:d3:06:c4:90:fc:c3:78:f0:c9:60:b6:c9: 6d:4e:07:dd:41:cb:5b:3e:14:49:08:47:91:fb:ad:6c:a7:8b: 33:da:c8:91:b6:08:78:4d:69:33:23:4c:b2:04:85:ce:69:13: fd:f1:16:bb:ee:1d:7d:3e:26:d3:3f:16:4a:53:58:d7:3a:76: c7:4a:7f:25 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjQwNTE0MTg1NzMyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQzYjQxYi04MmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryGXfUlAVkxjvpLaupDwhvUCTU3FpUhY31UJLwqv6XOoWr1w1zEPyvZsnuCo 6+iGTzghtZ/ZUXq+haWO35BQgQ9kXxGIkz8N+ElsM+DytVr3Xxv4XD5aOKvVJRd4 mpyF6E8ZP5dS4U5e6HIEAael9RxxYHf99bOyAvFgLnNwbYctlqYOTDQ8xSwzJ/o5 eCEubU2oBxRAkJ6vo2kIo1NsFvzLae+2TnPCnaCKZB+rPb1EtkZUMLdbQ7JDrfm6 YiZxrOhe4mhsdiWaqST9uVMljOtBaQ1ttDDMG217RDM177Pd4FO4WzMVAJpezYqF u1X6s90vmfwErvAiWP2sNVb5BQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFN2r9mAr rAt78p24A+aq3OnhEs7wMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFERjQvRjQxRDFDMThCMzhFMTFFOTg2MjgyQjczQzRGOUFFMDIvQjVENEExNTY1 OThCMTFFQzgyQzg2ODVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn1+ADBAKdd2gwDQQCAAIwBwMFACQAOEAwDQYJKoZIhvcN AQELBQADggEBAA/M1CWf6hcV48CmPPNXm/zE6lE91zjlgN0fDVnc7nEnu6tHxBrL Ad33OF3vMToJCLJIqgH5O293OZjC4hGazFQocYW4AlMxNgfYV0ZSYb5RcwkUkTlU wN29f1O/6il1xo/hXOBqkBEkwBzJHcABxZ/l0A/OAF2zP34lbYpP3iYRNgFSEqPG eEVnUMZt4VluZovjjX+A2Vr2OSyid/AG0I5VT9IzeA3Wg7zAgul7VcJBlIKzLy+z 7LlsHdMGxJD8w3jwyWC2yW1OB91By1s+FEkIR5H7rWynizPayJG2CHhNaTMjTLIE hc5pE/3xFrvuHX0+JtM/FkpTWNc6dsdKfyU= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org