$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/25295764036811ED9D8E5F3EC4F9AE02.roa File: 25295764036811ED9D8E5F3EC4F9AE02.roa (raw, json) Hash identifier: EalLcrhJ2pf9J6rJzGCAE06JbZRtA/SwMcMPpTqGCFo= Subject key identifier: E4:CC:79:03:7D:77:D5:CB:8E:80:73:66:D2:8C:66:08:EC:93:85:1D Certificate issuer: /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Certificate serial: 08AB Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/25295764036811ED9D8E5F3EC4F9AE02.roa Signing time: Tue 16 Jul 2024 21:18:42 +0000 ROA not before: Tue 16 Jul 2024 21:18:42 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 140671 IP address blocks: 103.151.134.0/23 maxlen: 23 2001:df3:c180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Validity Not Before: Jul 16 21:18:42 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6696e3b2-4a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3b:cc:8b:d7:af:69:ca:42:00:76:7f:31:b3: 91:3e:f9:89:90:54:11:b9:bd:21:82:60:46:49:16: d1:fb:53:e6:14:60:fd:6a:b2:11:05:b1:4e:81:9b: 55:e1:75:87:ba:78:c7:07:9b:28:87:c5:fb:4e:4e: 5a:ae:59:ed:7d:f3:69:7a:4e:39:7c:27:3c:b8:08: 42:87:61:af:04:46:1d:be:bf:1c:e5:87:52:c7:da: d1:72:cc:32:44:fd:f6:e7:c4:af:1d:93:81:f8:a6: 04:8c:96:ee:f8:1f:83:c9:19:5a:b1:c7:cc:06:f3: 66:2b:dc:57:dd:da:47:76:e5:69:a7:91:51:79:9d: 2e:9c:5c:ed:ff:b3:bf:7c:37:20:98:2c:13:7b:c0: a9:3b:cf:45:69:e0:54:b4:b4:a0:14:cd:2d:a8:9e: d1:6c:95:cf:3c:80:29:db:8a:98:0b:9d:73:8f:3a: e6:b9:2b:d1:50:81:23:dc:92:5f:fb:b6:f2:62:71: 39:ca:c3:4b:d5:28:4e:23:d6:62:4b:a4:b9:90:af: 6d:4c:36:36:91:10:4e:6e:79:f5:09:77:dd:31:78: 3b:49:13:41:6b:17:02:38:73:6b:8c:fe:4c:00:91: a8:81:96:b0:d6:e6:a6:6c:9e:9c:fd:49:71:ed:91: d8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CC:79:03:7D:77:D5:CB:8E:80:73:66:D2:8C:66:08:EC:93:85:1D X509v3 Authority Key Identifier: keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/25295764036811ED9D8E5F3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.134.0/23 IPv6: 2001:df3:c180::/48 Signature Algorithm: sha256WithRSAEncryption 41:21:15:9f:77:7a:5d:98:6e:5f:fe:cf:da:b4:db:96:f8:f9: 64:88:df:34:1a:42:03:8c:b7:90:74:90:2a:22:d6:43:0e:9f: 7b:4c:af:00:1d:b5:c0:96:cd:86:49:d9:1c:c9:37:47:07:5d: 4e:64:5b:67:ef:79:51:d7:57:4d:4a:52:fc:60:bb:24:60:26: 9d:0b:1c:1c:a6:be:42:3a:8c:b5:27:e8:5b:2c:19:22:18:d3: bf:d7:bb:db:b0:23:ea:60:13:02:12:86:51:d1:c5:ad:7f:53: d9:cd:0a:78:d8:82:9d:ad:f8:be:f6:3c:24:a0:2a:61:63:9b: 30:a2:12:d7:ee:79:66:5f:fd:f4:a4:f8:c3:ae:9d:45:0b:19: f3:12:f0:d4:ea:2a:11:b4:f4:53:a5:64:48:cd:54:0d:e6:fd: cb:d3:f2:e2:f8:85:4c:33:ae:29:cf:c0:06:c8:46:6b:ec:43: 52:b9:1d:e0:2b:69:f3:c4:d4:dd:22:05:25:54:ae:15:bb:f4: f0:fd:d1:b9:c4:71:35:57:7e:c1:4b:46:96:68:08:3a:09:ea: 81:a8:15:6b:7d:57:79:85:56:71:d8:6c:b7:73:4b:16:65:c0: 9d:22:ca:d5:d4:9f:ff:8e:49:41:e3:ce:07:48:7b:c9:c1:3e: 1e:9d:d4:a0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCOEIxMTAvBgNVBAUTKEI2QkI2MzY0QkNFNDg1Q0VDMDZEMzM5OTQ5MTU4N0E0 ODI1OTFDQkMwHhcNMjQwNzE2MjExODQyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ZTNiMi00YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTvMi9evacpCAHZ/MbORPvmJkFQRub0hgmBGSRbR+1PmFGD9arIRBbFOgZtV 4XWHunjHB5soh8X7Tk5arlntffNpek45fCc8uAhCh2GvBEYdvr8c5YdSx9rRcswy RP3258SvHZOB+KYEjJbu+B+DyRlascfMBvNmK9xX3dpHduVpp5FReZ0unFzt/7O/ fDcgmCwTe8CpO89FaeBUtLSgFM0tqJ7RbJXPPIAp24qYC51zjzrmuSvRUIEj3JJf +7byYnE5ysNL1ShOI9ZiS6S5kK9tTDY2kRBObnn1CXfdMXg7SRNBaxcCOHNrjP5M AJGogZaw1uambJ6c/Ulx7ZHYhQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOTMeQN9 d9XLjoBzZtKMZgjsk4UdMB8GA1UdIwQYMBaAFLa7Y2S85IXOwG0zmUkVh6SCWRy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0I4Qi83QUNDQ0I0MDlD NkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hjN0FiVE9aU1JXSHBJSlpI THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RydGpaTHpraGM3QWJUT1pTUldIcElKWkhMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNCOEIvN0FDQ0NCNDA5QzZGMTFFQThDNjU5QjNGQzRGOUFFMDIvMjUyOTU3NjQw MzY4MTFFRDlEOEU1RjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnl4YwDwQCAAIwCQMHACABDfPBgDANBgkqhkiG9w0BAQsF AAOCAQEAQSEVn3d6XZhuX/7P2rTblvj5ZIjfNBpCA4y3kHSQKiLWQw6fe0yvAB21 wJbNhknZHMk3RwddTmRbZ+95UddXTUpS/GC7JGAmnQscHKa+QjqMtSfoWywZIhjT v9e727Aj6mATAhKGUdHFrX9T2c0KeNiCna34vvY8JKAqYWObMKIS1+55Zl/99KT4 w66dRQsZ8xLw1OoqEbT0U6VkSM1UDeb9y9Py4viFTDOuKc/ABshGa+xDUrkd4Ctp 88TU3SIFJVSuFbv08P3RucRxNVd+wUtGlmgIOgnqgagVa31XeYVWcdhst3NLFmXA nSLK1dSf/45JQePOB0h7ycE+Hp3UoA== -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org