$ rpki-client -vvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/514DBDFC98C711EAA0CFE582C4F9AE02.roa File: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (raw, json) Hash identifier: nUZZe1DuURBitjsrbGMu0Shu+UEoZmChhg4YIukAhM0= Subject key identifier: 72:AA:41:A5:FD:1A:C4:1A:D7:41:90:FC:3E:2F:BA:6A:C8:97:18:29 Certificate issuer: /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Certificate serial: 3381 Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/514DBDFC98C711EAA0CFE582C4F9AE02.roa Signing time: Mon 06 Nov 2023 15:21:02 +0000 ROA not before: Mon 06 Nov 2023 15:21:02 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 45925 IP address blocks: 103.230.104.0/22 maxlen: 22 103.230.104.0/23 maxlen: 23 103.230.104.0/24 maxlen: 24 103.230.105.0/24 maxlen: 24 103.230.106.0/23 maxlen: 23 103.230.106.0/24 maxlen: 24 103.230.107.0/24 maxlen: 24 123.253.132.0/22 maxlen: 22 123.253.132.0/23 maxlen: 23 123.253.132.0/24 maxlen: 24 123.253.133.0/24 maxlen: 24 123.253.134.0/23 maxlen: 23 123.253.134.0/24 maxlen: 24 123.253.135.0/24 maxlen: 24 202.4.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 15:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13185 (0x3381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Validity Not Before: Nov 6 15:21:02 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6549045e-8fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:39:54:bf:77:4e:6e:06:10:8c:aa:20:a5:e3: fa:a1:ae:5c:9a:7e:81:77:ef:8d:9c:82:1a:6f:63: 15:9e:a7:b4:3e:52:93:61:29:0a:a8:04:a3:61:00: 0e:ed:29:31:78:9f:7f:2b:66:7b:09:8e:1d:a2:66: bf:47:7c:a6:e4:a5:8d:f0:96:2b:0d:87:0d:e0:23: 25:58:d4:f3:2b:b0:75:a1:fa:8b:a0:57:62:e1:0e: 39:5c:8a:07:e1:06:eb:af:fc:72:8e:9d:80:90:b1: 7b:15:cc:9f:09:e5:92:2d:45:72:92:ad:50:5b:32: b1:37:1c:c3:f4:15:09:4d:35:56:51:70:0b:26:5d: bd:f0:8e:f3:9e:3d:7c:91:d7:c8:16:9e:ea:1a:ec: f3:e0:3c:02:95:28:f9:73:69:ab:16:a9:37:0d:8b: c9:71:05:c0:78:df:4d:5c:1d:5b:3b:ce:b3:e8:b8: 3b:cd:2f:68:0f:9d:e8:21:f6:cb:b2:86:ad:6d:4f: 1a:3e:7e:db:78:8a:65:0e:b8:eb:2f:ef:64:ce:e7: ed:ed:aa:f1:79:f7:f6:af:97:03:b9:4a:2b:5a:4c: 2c:a5:d0:b3:4f:3f:54:b7:ad:14:8c:06:cb:94:d5: 5a:02:b8:2a:64:e4:37:ec:cb:3f:6d:9e:7f:98:54: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AA:41:A5:FD:1A:C4:1A:D7:41:90:FC:3E:2F:BA:6A:C8:97:18:29 X509v3 Authority Key Identifier: keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/514DBDFC98C711EAA0CFE582C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.230.104.0/22 123.253.132.0/22 202.4.173.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:6f:b1:3f:12:7a:7e:27:35:db:4e:be:9b:3b:de:d8:d0:76: b1:45:4d:ea:9b:58:4d:e7:53:99:d0:70:4e:9e:0c:aa:62:cb: 54:a2:53:b0:fd:9a:7f:83:23:30:5f:d7:7e:a0:7a:89:c8:b8: 30:d3:62:e7:b4:e3:72:ac:68:57:65:09:8f:d0:b6:10:1a:49: 81:a4:c1:7a:4c:93:bf:fc:fa:37:97:e7:4d:3e:df:62:e7:e0: bd:f9:66:3f:ef:0a:2c:7f:a9:b3:8b:9c:10:7b:0c:67:2a:e1: b1:6c:1a:8b:0e:74:f9:64:3f:5a:5f:67:ce:12:25:45:3f:ad: e7:24:12:70:fe:ed:95:c6:65:a8:4f:59:05:4d:38:36:0e:4c: af:96:4d:0f:71:ba:26:61:4a:98:75:9f:ce:99:8a:1a:5d:11: c4:c5:c3:10:63:23:09:87:57:c9:98:80:98:09:4a:98:de:97: 40:31:98:03:13:49:78:c6:5e:89:2e:98:f3:57:87:f1:9d:1e: b1:05:00:d0:f9:d9:9e:97:7e:0f:d1:2e:6b:83:68:57:c6:6c: c6:f4:f0:de:55:18:72:9e:95:ad:35:77:87:35:e3:bc:80:27: 8f:38:b3:5a:a1:93:5e:0d:30:22:21:d8:d3:b1:32:37:32:c5: ee:3d:2a:14 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICM4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJBRUIxMTAvBgNVBAUTKDBGOTUyQTI3RUYzRUYyN0NFQTA4QzU3RDIwMkEzODA2 OUVDQjU4NDAwHhcNMjMxMTA2MTUyMTAyWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ5MDQ1ZS04ZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTlUv3dObgYQjKogpeP6oa5cmn6Bd++NnIIab2MVnqe0PlKTYSkKqASjYQAO 7SkxeJ9/K2Z7CY4doma/R3ym5KWN8JYrDYcN4CMlWNTzK7B1ofqLoFdi4Q45XIoH 4Qbrr/xyjp2AkLF7FcyfCeWSLUVykq1QWzKxNxzD9BUJTTVWUXALJl298I7znj18 kdfIFp7qGuzz4DwClSj5c2mrFqk3DYvJcQXAeN9NXB1bO86z6Lg7zS9oD53oIfbL soatbU8aPn7beIplDrjrL+9kzuft7arxeff2r5cDuUorWkwspdCzTz9Ut60UjAbL lNVaArgqZOQ37Ms/bZ5/mFSVnwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHKqQaX9 GsQa10GQ/D4vumrIlxgpMB8GA1UdIwQYMBaAFA+VKifvPvJ86gjFfSAqOAaey1hA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkFFQi9FRjI5QkEyQTFE QTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThuenFDTVY5SUNvNEJwN0xX RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1VXFKLTgtOG56cUNNVjlJQ280QnA3TFdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzJBRUIvRUYyOUJBMkExREExMTFFMjg2OEI2ODk0MDhCMDJDRDIvNTE0REJERkM5 OEM3MTFFQUEwQ0ZFNTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJn5mgDBAJ7/YQDBADKBK0wDQYJKoZIhvcNAQELBQADggEB AE5vsT8Sen4nNdtOvps73tjQdrFFTeqbWE3nU5nQcE6eDKpiy1SiU7D9mn+DIzBf 136geonIuDDTYue043KsaFdlCY/QthAaSYGkwXpMk7/8+jeX500+32Ln4L35Zj/v Cix/qbOLnBB7DGcq4bFsGosOdPlkP1pfZ84SJUU/reckEnD+7ZXGZahPWQVNODYO TK+WTQ9xuiZhSph1n86ZihpdEcTFwxBjIwmHV8mYgJgJSpjel0AxmAMTSXjGXoku mPNXh/GdHrEFAND52Z6Xfg/RLmuDaFfGbMb08N5VGHKela01d4c147yAJ484s1qh k14NMCIh2NOxMjcyxe49KhQ= -----END CERTIFICATE-----Generated at Wed May 22 16:21:35 2024 by rpki-client on console-ams.rpki-client.org