$ rpki-client -vvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/25234272DF4311EDA83C7074C4F9AE02.roa File: 25234272DF4311EDA83C7074C4F9AE02.roa (raw, json) Hash identifier: AVNjkoFWbdoZ3mYkyFU+MZFdfxVSMXxBvpkDPbahK84= Subject key identifier: D8:02:DE:D2:63:8A:56:C5:CF:E5:D1:BB:3D:BB:62:AB:B1:F0:DF:3A Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Certificate serial: 0B7C Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/25234272DF4311EDA83C7074C4F9AE02.roa Signing time: Tue 20 Feb 2024 19:27:26 +0000 ROA not before: Tue 20 Feb 2024 19:27:26 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 136176 IP address blocks: 103.83.15.0/24 maxlen: 24 103.84.133.0/24 maxlen: 24 2401:32c0::/32 maxlen: 32 2401:32c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 19:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2940 (0xb7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Validity Not Before: Feb 20 19:27:26 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d4fd1e-74ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fd:26:b8:51:25:6d:e1:77:45:56:89:d6:9a: 31:74:ad:b8:8b:79:99:55:aa:45:e5:7d:ad:c4:ef: ad:ab:d6:f4:b0:1e:97:1d:60:49:0b:40:e5:cc:19: 4e:41:d4:be:a0:25:d1:6d:08:be:39:03:b8:75:ab: e6:fe:8f:de:49:24:2f:0c:fe:28:41:76:f0:83:14: 8d:36:b5:da:8d:9a:9b:f5:5d:74:96:5f:bc:16:92: 58:14:04:4a:75:39:6c:cf:23:62:41:fc:e7:81:a8: 26:15:a5:7a:c7:6c:c6:77:e0:e0:d7:f0:42:c8:d6: 39:e9:90:68:bc:cf:70:d0:b3:07:0c:fc:be:dc:72: ae:28:e7:38:7f:a8:72:16:21:2b:ff:4a:60:e3:61: a8:1c:a6:fa:48:84:1f:87:00:8a:32:2c:aa:05:da: 96:fd:56:36:ee:ca:22:b8:7a:fe:48:ab:3b:d0:54: e1:c1:5e:92:92:30:b5:49:59:98:d4:92:b6:19:7e: 5e:d1:6c:d7:6f:c4:50:58:67:de:f9:e4:72:ae:20: 15:17:15:dd:8c:e0:e0:13:2a:84:31:85:b3:7b:d9: 68:3d:d6:a6:53:c6:48:fd:6b:0b:5d:1e:2c:07:6b: e4:19:f0:17:13:75:72:80:ff:3a:dd:08:a9:bd:9e: 1f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:02:DE:D2:63:8A:56:C5:CF:E5:D1:BB:3D:BB:62:AB:B1:F0:DF:3A X509v3 Authority Key Identifier: keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/25234272DF4311EDA83C7074C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.15.0/24 103.84.133.0/24 IPv6: 2401:32c0::/32 Signature Algorithm: sha256WithRSAEncryption a2:74:06:83:ee:15:43:86:e4:02:37:5c:45:b7:12:8b:8c:eb: 55:43:05:38:6a:98:06:f8:69:68:88:02:e6:d9:4e:44:e9:37: cd:dc:fd:4f:98:03:6d:9b:5f:5b:28:3b:1d:65:aa:b4:93:a0: 1a:6a:ac:a7:3c:85:09:6d:c1:e7:d0:e7:4a:0f:8d:4b:36:ef: 53:22:8e:0a:61:c3:32:98:75:8e:c9:6a:13:03:12:a1:f6:01: 20:67:7f:41:12:5a:ad:72:7e:14:5f:c5:8c:23:dd:fa:db:81: cd:ae:20:90:4c:f7:71:e4:23:ff:d7:ad:b5:e9:fd:4c:c6:c5: e1:53:70:94:ca:e4:eb:1a:34:69:3d:df:5f:ef:2d:d6:77:40: 41:47:ce:d1:1d:5a:c5:90:6c:2f:39:37:11:fb:9d:10:89:e1: c6:00:22:5d:0d:86:7f:91:b2:01:10:f6:e4:57:11:a3:4a:9f: f6:83:71:69:70:c0:d3:aa:e2:1b:f2:45:7c:4a:84:44:9d:be: 9b:cf:de:c3:87:e9:4f:30:4d:18:db:94:be:8e:e5:4b:52:e5: 90:be:e1:39:cc:62:87:a8:83:b6:2b:8c:cc:c7:cb:25:19:2c: 43:be:ef:90:9f:8b:86:12:63:a2:69:e4:3d:41:07:0d:c5:6e: c7:81:61:d0 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyQ0UxMTAvBgNVBAUTKEFFMTYwNDU4NzJERERBQzNEQ0YxMkYwNzk1Q0FENzBF NEMwOUQ5NkMwHhcNMjQwMjIwMTkyNzI2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ0ZmQxZS03NGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqf0muFElbeF3RVaJ1poxdK24i3mZVapF5X2txO+tq9b0sB6XHWBJC0DlzBlO QdS+oCXRbQi+OQO4davm/o/eSSQvDP4oQXbwgxSNNrXajZqb9V10ll+8FpJYFARK dTlszyNiQfzngagmFaV6x2zGd+Dg1/BCyNY56ZBovM9w0LMHDPy+3HKuKOc4f6hy FiEr/0pg42GoHKb6SIQfhwCKMiyqBdqW/VY27soiuHr+SKs70FThwV6SkjC1SVmY 1JK2GX5e0WzXb8RQWGfe+eRyriAVFxXdjODgEyqEMYWze9loPdamU8ZI/WsLXR4s B2vkGfAXE3VygP863QipvZ4fAQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNgC3tJj ilbFz+XRuz27Yqux8N86MB8GA1UdIwQYMBaAFK4WBFhy3drD3PEvB5XK1w5MCdls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDJDRS8yQjBFNzI0MDAx MzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJzUGM4UzhIbGNyWERrd0oy V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoWUVXSExkMnNQYzhTOEhsY3JYRGt3SjJXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQyQ0UvMkIwRTcyNDAwMTM2MTFFQUIwMDA2NDM4QzRGOUFFMDIvMjUyMzQyNzJE RjQzMTFFREE4M0M3MDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnUw8DBABnVIUwDQQCAAIwBwMFACQBMsAwDQYJKoZIhvcN AQELBQADggEBAKJ0BoPuFUOG5AI3XEW3EouM61VDBThqmAb4aWiIAubZTkTpN83c /U+YA22bX1soOx1lqrSToBpqrKc8hQltwefQ50oPjUs271MijgphwzKYdY7JahMD EqH2ASBnf0ESWq1yfhRfxYwj3frbgc2uIJBM93HkI//XrbXp/UzGxeFTcJTK5Osa NGk931/vLdZ3QEFHztEdWsWQbC85NxH7nRCJ4cYAIl0Nhn+RsgEQ9uRXEaNKn/aD cWlwwNOq4hvyRXxKhESdvpvP3sOH6U8wTRjblL6O5UtS5ZC+4TnMYoeog7YrjMzH yyUZLEO+75Cfi4YSY6Jp5D1BBw3FbseBYdA= -----END CERTIFICATE-----Generated at Tue May 14 19:55:09 2024 by rpki-client on console-fra.rpki-client.org