$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/25295764036811ED9D8E5F3EC4F9AE02.roa File: 25295764036811ED9D8E5F3EC4F9AE02.roa (raw, json) Hash identifier: 6ka+anrAZuDwvYkDqguq9yKal0r9GRDduYlXVYx/bRU= Subject key identifier: 48:75:00:94:51:65:46:E2:5B:F3:02:7C:C8:EF:AE:61:6B:5B:9E:6C Certificate issuer: /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Certificate serial: 07D9 Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/25295764036811ED9D8E5F3EC4F9AE02.roa Signing time: Tue 06 Jun 2023 23:04:21 +0000 ROA not before: Tue 06 Jun 2023 23:04:21 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 140671 IP address blocks: 103.151.134.0/23 maxlen: 23 2001:df3:c180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Validity Not Before: Jun 6 23:04:21 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=647fbb74-84e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:56:a4:c5:c3:bf:92:02:2a:31:98:c5:fc: 70:c0:9e:2f:1d:6f:35:36:7b:47:d2:02:96:20:3e: 16:55:84:a6:f2:91:d7:75:2e:96:9f:e6:a5:0e:6d: 61:7f:47:f3:79:c4:a1:12:d8:24:c3:25:6a:75:85: 11:c0:78:38:ff:a9:b6:31:1d:fd:4b:c0:c1:e8:ef: b1:16:d7:c6:87:00:ec:8f:b3:92:16:db:0e:9e:5e: 04:5c:7b:5c:8d:d0:04:78:90:08:ff:ca:4c:d5:2a: 5c:a4:ec:f1:31:67:a4:73:27:1c:64:94:d1:ed:22: c3:91:72:a9:8e:d7:5e:87:ac:cc:b1:de:b2:52:b5: 3a:ed:ab:59:39:b4:1f:3c:4f:02:44:f9:87:1c:91: 3a:b1:db:f9:2d:cd:ba:c0:83:e5:f7:75:ba:3e:7f: 32:bd:7f:11:56:ab:20:3e:a6:05:e7:8a:82:08:62: e6:25:35:3b:02:c8:04:d0:2f:10:b8:e0:84:fb:39: aa:d8:7e:68:d3:d5:89:37:98:40:01:4c:4d:9b:cb: f4:fd:28:91:66:46:4a:7e:99:64:46:e3:de:b7:52: bb:fe:83:66:f8:d3:50:93:a4:f6:0c:19:bc:0a:25: 5c:69:0d:68:c7:40:59:2d:e0:25:b2:a3:22:07:55: 4b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:75:00:94:51:65:46:E2:5B:F3:02:7C:C8:EF:AE:61:6B:5B:9E:6C X509v3 Authority Key Identifier: keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/25295764036811ED9D8E5F3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.134.0/23 IPv6: 2001:df3:c180::/48 Signature Algorithm: sha256WithRSAEncryption 96:2a:d8:18:b3:62:4b:a3:ce:fb:69:36:4d:9d:7b:d5:37:e5: 44:1a:ee:7b:ed:11:9a:1b:2f:5e:bb:e7:9e:aa:d1:2a:c3:69: 3f:f6:05:22:32:4d:c3:13:0f:f6:77:db:c8:a8:b4:25:f0:81: 83:e3:a3:63:c2:7f:28:15:e7:e7:ba:15:2f:dc:18:fd:10:3d: cb:44:d1:07:a5:55:3c:99:75:93:24:8a:f7:6e:b2:0f:a0:79: 76:40:d1:eb:e1:53:02:c3:6f:2f:54:94:c6:16:5a:81:bd:ec: 66:33:a5:98:0c:be:e7:ab:d3:0e:57:72:43:65:e0:d1:01:24: 56:a4:e7:95:a7:57:e7:3c:cf:62:0f:bd:29:bf:2a:fc:33:94: 38:bb:2c:b9:ae:a6:60:ef:b3:d1:af:e2:2c:33:6a:3d:78:96: e5:fb:16:23:dc:70:b5:9a:fd:8d:85:d8:15:2d:fb:3c:0b:a1: f4:95:d4:78:57:2d:ba:b1:67:9d:3f:20:48:7d:df:d3:fb:ab: 46:41:ec:16:5f:c8:fa:4a:88:82:df:a4:ea:fe:df:22:e1:9b: 69:24:ac:3d:9d:0c:12:7d:d0:19:a0:51:67:08:fa:40:0c:ae: 56:6d:a4:a9:3c:0e:99:e9:eb:66:dc:cd:04:24:fa:f9:12:79: 2d:1d:17:72 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCOEIxMTAvBgNVBAUTKEI2QkI2MzY0QkNFNDg1Q0VDMDZEMzM5OTQ5MTU4N0E0 ODI1OTFDQkMwHhcNMjMwNjA2MjMwNDIxWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdmYmI3NC04NGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+9WpMXDv5ICKjGYxfxwwJ4vHW81NntH0gKWID4WVYSm8pHXdS6Wn+alDm1h f0fzecShEtgkwyVqdYURwHg4/6m2MR39S8DB6O+xFtfGhwDsj7OSFtsOnl4EXHtc jdAEeJAI/8pM1SpcpOzxMWekcyccZJTR7SLDkXKpjtdeh6zMsd6yUrU67atZObQf PE8CRPmHHJE6sdv5Lc26wIPl93W6Pn8yvX8RVqsgPqYF54qCCGLmJTU7AsgE0C8Q uOCE+zmq2H5o09WJN5hAAUxNm8v0/SiRZkZKfplkRuPet1K7/oNm+NNQk6T2DBm8 CiVcaQ1ox0BZLeAlsqMiB1VLzwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEh1AJRR ZUbiW/MCfMjvrmFrW55sMB8GA1UdIwQYMBaAFLa7Y2S85IXOwG0zmUkVh6SCWRy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0I4Qi83QUNDQ0I0MDlD NkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hjN0FiVE9aU1JXSHBJSlpI THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RydGpaTHpraGM3QWJUT1pTUldIcElKWkhMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNCOEIvN0FDQ0NCNDA5QzZGMTFFQThDNjU5QjNGQzRGOUFFMDIvMjUyOTU3NjQw MzY4MTFFRDlEOEU1RjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnl4YwDwQCAAIwCQMHACABDfPBgDANBgkqhkiG9w0BAQsF AAOCAQEAlirYGLNiS6PO+2k2TZ171TflRBrue+0RmhsvXrvnnqrRKsNpP/YFIjJN wxMP9nfbyKi0JfCBg+OjY8J/KBXn57oVL9wY/RA9y0TRB6VVPJl1kySK926yD6B5 dkDR6+FTAsNvL1SUxhZagb3sZjOlmAy+56vTDldyQ2Xg0QEkVqTnladX5zzPYg+9 Kb8q/DOUOLssua6mYO+z0a/iLDNqPXiW5fsWI9xwtZr9jYXYFS37PAuh9JXUeFct urFnnT8gSH3f0/urRkHsFl/I+kqIgt+k6v7fIuGbaSSsPZ0MEn3QGaBRZwj6QAyu Vm2kqTwOmenrZtzNBCT6+RJ5LR0Xcg== -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org