$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa File: 1D77B4081BD911EAB49CC840C4F9AE02.roa (raw, json) Hash identifier: 9XDYOx1rdlQJD/+61BsCm1V8YndgoRNu5fEy3zd6fcY= Subject key identifier: 02:20:5F:D1:EA:C0:93:00:E9:F9:38:36:86:BF:42:A7:A7:5A:07:D4 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0A89 Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa Signing time: Fri 04 Aug 2023 19:37:00 +0000 ROA not before: Fri 04 Aug 2023 19:37:00 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 135600 IP address blocks: 45.114.4.0/23 maxlen: 23 45.114.6.0/23 maxlen: 23 103.67.170.0/24 maxlen: 24 103.67.171.0/24 maxlen: 24 202.133.192.0/20 maxlen: 20 202.133.208.0/20 maxlen: 20 203.17.180.0/24 maxlen: 24 203.17.181.0/24 maxlen: 24 203.17.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 19:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2697 (0xa89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Aug 4 19:37:00 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cd535c-6e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:97:d8:8c:1e:6f:27:44:06:60:32:99:56: b7:2a:27:2a:0c:a7:5c:ea:4b:e1:d7:98:3b:fa:b0: bb:0c:63:72:5d:75:3d:5b:9a:6e:51:a1:09:2d:13: e9:8d:b3:15:bb:7b:bc:4f:6b:0d:51:54:f7:70:ef: ff:e4:33:fc:77:df:d4:02:9d:d4:74:ba:4a:d7:90: d7:c5:bf:e3:06:21:81:88:99:03:3d:c9:85:19:cc: 81:19:84:ce:af:8b:f7:52:01:2d:24:43:3d:b6:9a: 8b:c4:fc:3b:11:57:bb:10:40:84:53:b5:e1:59:a0: 80:02:d0:bc:46:60:aa:79:06:cf:7c:d3:2b:8f:ec: 50:c1:3e:94:e5:87:f2:3f:b3:0a:10:c0:71:2b:5c: e6:88:d0:18:3a:7c:1d:d6:d4:a6:59:f3:35:7f:07: 90:3f:ca:20:f7:8a:e9:33:b4:2e:72:1d:9e:b7:0d: 2f:ed:e7:4e:c6:a4:03:43:be:c8:d0:7c:0d:6e:71: c1:08:4f:f0:6a:07:9d:50:ca:3e:7d:d1:f7:31:28: 79:49:b9:cd:fa:66:88:38:88:72:a7:bd:c3:63:64: 43:59:e6:c7:ca:da:7b:19:e1:47:75:02:1c:37:1d: e8:07:e5:c9:fd:ad:22:74:6f:b8:4e:c8:f4:be:3e: 7d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:20:5F:D1:EA:C0:93:00:E9:F9:38:36:86:BF:42:A7:A7:5A:07:D4 X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.4.0/22 103.67.170.0/23 202.133.192.0/19 203.17.180.0/22 Signature Algorithm: sha256WithRSAEncryption 30:0f:9d:2f:57:a0:22:00:7f:60:b7:7e:d1:55:62:07:10:e6: d7:cb:74:6d:d0:d1:89:7a:2b:78:8a:4a:04:f9:30:e7:7d:a0: ab:ca:f3:a9:10:86:08:a2:86:f5:ed:3c:6c:be:23:3c:59:94: 1f:00:44:d6:22:f3:c5:fa:6c:d0:f9:0a:97:05:04:f7:be:90: 59:4e:6f:f7:9d:2d:89:78:af:b3:3e:61:6c:c2:ba:c5:cd:06: 91:55:5a:de:60:cd:f0:2d:d3:7f:e5:8e:95:a3:7f:f9:dd:8b: a1:58:70:28:a6:01:94:b0:f9:2c:41:4f:fd:e1:fd:52:18:23: 5d:81:3f:f2:5a:00:39:e2:3e:eb:85:d9:b0:73:6e:12:c4:26: da:36:10:96:7f:f6:da:24:50:99:47:56:78:7d:51:b9:fa:cf: 13:b2:70:25:ac:25:5b:ec:9e:06:20:67:77:d7:bc:a4:6a:52: a9:46:2e:45:73:9f:79:23:88:d7:bf:db:3d:e2:f3:88:34:07: a2:99:62:e5:6b:25:2a:f2:32:7c:e0:3f:69:f2:57:1e:a5:6f: 98:f8:a1:10:ba:55:9b:4d:44:b2:58:81:46:02:4f:87:6e:b4: 74:c7:20:91:1d:39:95:d4:59:a1:f6:b8:30:cc:c0:2e:02:af: a8:d9:5d:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjMwODA0MTkzNzAwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNkNTM1Yy02ZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgqX2IwebydEBmAymVa3KicqDKdc6kvh15g7+rC7DGNyXXU9W5puUaEJLRPp jbMVu3u8T2sNUVT3cO//5DP8d9/UAp3UdLpK15DXxb/jBiGBiJkDPcmFGcyBGYTO r4v3UgEtJEM9tpqLxPw7EVe7EECEU7XhWaCAAtC8RmCqeQbPfNMrj+xQwT6U5Yfy P7MKEMBxK1zmiNAYOnwd1tSmWfM1fweQP8og94rpM7Quch2etw0v7edOxqQDQ77I 0HwNbnHBCE/wagedUMo+fdH3MSh5SbnN+maIOIhyp73DY2RDWebHytp7GeFHdQIc Nx3oB+XJ/a0idG+4Tsj0vj59ewIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFAIgX9Hq wJMA6fk4Noa/QqenWgfUMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjhERTkvRDY5QjQ1RTgxQkQ1MTFFQTgwQ0JDRjM2QzRGOUFFMDIvMUQ3N0I0MDgx QkQ5MTFFQUI0OUNDODQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAItcgQDBAFnQ6oDBAXKhcADBALLEbQwDQYJKoZIhvcNAQEL BQADggEBADAPnS9XoCIAf2C3ftFVYgcQ5tfLdG3Q0Yl6K3iKSgT5MOd9oKvK86kQ hgiihvXtPGy+IzxZlB8ARNYi88X6bND5CpcFBPe+kFlOb/edLYl4r7M+YWzCusXN BpFVWt5gzfAt03/ljpWjf/ndi6FYcCimAZSw+SxBT/3h/VIYI12BP/JaADniPuuF 2bBzbhLEJto2EJZ/9tokUJlHVnh9Ubn6zxOycCWsJVvsngYgZ3fXvKRqUqlGLkVz n3kjiNe/2z3i84g0B6KZYuVrJSryMnzgP2nyVx6lb5j4oRC6VZtNRLJYgUYCT4du tHTHIJEdOZXUWaH2uDDMwC4Cr6jZXUw= -----END CERTIFICATE-----Generated at Thu Apr 18 20:34:30 2024 by rpki-client on console-ams.rpki-client.org