$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/A1D479B878D411EAA8C57711C4F9AE02.roa File: A1D479B878D411EAA8C57711C4F9AE02.roa (raw, json) Hash identifier: f/OYcKgJTCnL8tuuo/kt3yp3h+qpGdrKS6DF6woKA8I= Subject key identifier: 02:1C:B0:70:11:DC:F9:AE:81:D7:89:B4:65:A9:E0:BB:A0:6A:CC:59 Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0961 Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/A1D479B878D411EAA8C57711C4F9AE02.roa Signing time: Thu 22 Feb 2024 20:58:54 +0000 ROA not before: Thu 22 Feb 2024 20:58:54 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 135026 IP address blocks: 14.192.8.0/24 maxlen: 24 14.192.9.0/24 maxlen: 24 14.192.10.0/24 maxlen: 24 14.192.11.0/24 maxlen: 24 103.17.93.0/24 maxlen: 24 103.17.94.0/24 maxlen: 24 103.17.95.0/24 maxlen: 24 103.206.120.0/24 maxlen: 24 103.206.121.0/24 maxlen: 24 103.206.122.0/24 maxlen: 24 103.206.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 20:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2401 (0x961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: Feb 22 20:58:54 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d7b58e-0d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:52:10:13:81:23:23:04:4b:e4:aa:0e:88: 4c:1a:de:5a:b9:4a:0a:78:cd:dd:79:22:bc:46:1f: da:3b:e6:68:6b:71:ab:4d:33:97:89:f8:7a:a9:b8: 19:e0:6a:d6:4a:70:ab:10:0d:70:92:64:86:25:be: 97:93:5b:e0:e0:7a:0c:a3:82:1e:91:33:23:7b:8c: da:c3:a3:b2:54:e3:fd:3b:50:2f:4b:c7:1f:ad:ad: f4:1a:56:87:19:35:ca:e5:f8:ac:d0:b3:cc:0f:a7: 65:27:d4:1d:2a:c4:02:79:e0:30:52:ed:01:c9:aa: 02:80:f4:33:0b:d3:e6:3d:46:d9:e0:5d:fb:a5:b0: 99:71:78:0c:b8:cf:54:02:41:97:da:80:26:cf:8b: 2c:cd:a4:a0:ef:1a:ea:7e:60:30:8d:0e:9a:d7:95: 5d:50:c4:15:02:66:70:01:3f:3d:fa:93:4f:aa:1a: 78:46:65:9b:59:66:21:0d:56:59:96:71:f1:ec:6f: 15:82:36:00:1c:c1:aa:f4:57:dc:ac:fe:eb:9c:73: 9c:42:cd:0d:a7:d4:5e:3e:d6:8c:f6:56:92:44:10: 2c:72:54:ce:12:c1:61:d2:3a:3a:18:75:5f:05:98: dd:ca:07:25:ce:9b:3a:81:c9:07:8b:53:64:37:bc: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1C:B0:70:11:DC:F9:AE:81:D7:89:B4:65:A9:E0:BB:A0:6A:CC:59 X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/A1D479B878D411EAA8C57711C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.8.0/22 103.17.93.0-103.17.95.255 103.206.120.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:12:31:de:c6:cb:79:aa:af:87:7a:80:9a:d5:75:cd:80:73: 8e:47:94:5b:35:84:2a:7d:87:a0:77:cb:1f:24:f8:9e:2e:37: 5f:96:94:70:90:fb:14:5f:a3:7b:8f:21:dd:85:b1:60:f4:2b: 33:f6:91:ef:bd:05:b0:94:85:e1:8a:99:82:00:fb:bb:8e:99: cf:d9:41:19:6f:bb:ca:3e:f5:ac:df:c8:69:45:23:53:ef:06: 0d:20:55:9d:b5:54:05:b3:05:7c:56:a2:f2:ab:3a:0f:8a:e7: a2:59:2a:bb:90:1a:9a:66:4f:75:04:fc:d2:98:4d:ba:71:d5: 8e:70:98:10:cc:9b:84:1f:08:84:f5:0a:cd:de:5a:1f:ad:3f: a3:28:ff:4d:3d:84:6e:6a:80:a3:6d:27:df:ec:51:92:96:33: 19:85:15:1f:54:76:5c:11:84:58:f3:df:48:ac:58:5a:a5:de: 98:ed:9c:ad:5d:f2:db:94:f5:bb:1e:8c:6c:ac:86:f0:1f:80: 20:a4:c7:c7:99:c2:98:ee:d7:0f:52:71:ad:eb:0e:ac:87:90: 08:91:c3:d1:92:6a:52:83:0d:ba:2c:55:42:1f:50:a6:24:fd: 07:6d:1e:a5:4c:c9:d0:3e:ed:f8:0b:5e:03:3b:8e:1a:15:5a: ef:14:27:e4 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjQwMjIyMjA1ODU0WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ3YjU4ZS0wZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi9SEBOBIyMES+SqDohMGt5auUoKeM3deSK8Rh/aO+Zoa3GrTTOXifh6qbgZ 4GrWSnCrEA1wkmSGJb6Xk1vg4HoMo4IekTMje4zaw6OyVOP9O1AvS8cfra30GlaH GTXK5fis0LPMD6dlJ9QdKsQCeeAwUu0ByaoCgPQzC9PmPUbZ4F37pbCZcXgMuM9U AkGX2oAmz4sszaSg7xrqfmAwjQ6a15VdUMQVAmZwAT89+pNPqhp4RmWbWWYhDVZZ lnHx7G8VgjYAHMGq9FfcrP7rnHOcQs0Np9RePtaM9laSRBAsclTOEsFh0jo6GHVf BZjdygclzps6gckHi1NkN7zzkQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFAIcsHAR 3PmugdeJtGWp4LugasxZMB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjMzRDQvMjVBMDYxODA2QjFGMTFFQTgxMzBBNjVGQzRGOUFFMDIvQTFENDc5Qjg3 OEQ0MTFFQUE4QzU3NzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBAIOwAgwDAMEAGcRXQMEBWcRQAMEAmfOeDANBgkqhkiG9w0B AQsFAAOCAQEAXRIx3sbLeaqvh3qAmtV1zYBzjkeUWzWEKn2HoHfLHyT4ni43X5aU cJD7FF+je48h3YWxYPQrM/aR770FsJSF4YqZggD7u46Zz9lBGW+7yj71rN/IaUUj U+8GDSBVnbVUBbMFfFai8qs6D4rnolkqu5AammZPdQT80phNunHVjnCYEMybhB8I hPUKzd5aH60/oyj/TT2EbmqAo20n3+xRkpYzGYUVH1R2XBGEWPPfSKxYWqXemO2c rV3y25T1ux6MbKyG8B+AIKTHx5nCmO7XD1JxresOrIeQCJHD0ZJqUoMNuixVQh9Q piT9B20epUzJ0D7t+AteAzuOGhVa7xQn5A== -----END CERTIFICATE-----Generated at Tue Apr 16 22:13:04 2024 by rpki-client on console-fra.rpki-client.org