$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/B394CFAA3B1C11EE9AEE717AC4F9AE02.roa File: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (raw, json) Hash identifier: VQgzjbt+yUKlk0a3cKkNbYjoYrGC1Q3yZRt8dWoxZtQ= Subject key identifier: 2A:04:88:A1:D8:5A:A7:A9:4F:46:22:FA:69:55:C5:10:B6:63:CF:04 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0994 Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/B394CFAA3B1C11EE9AEE717AC4F9AE02.roa Signing time: Tue 20 Feb 2024 20:49:16 +0000 ROA not before: Tue 20 Feb 2024 20:49:16 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 54600 IP address blocks: 103.149.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2452 (0x994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Feb 20 20:49:16 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d5104b-3d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9c:d3:7d:08:b1:c2:6e:87:c6:9e:5b:1f:a2: 10:02:c5:af:27:a0:ef:38:04:7f:2c:02:a5:c4:91: dd:3a:17:59:56:f5:4b:5c:0d:a1:52:9d:f3:c7:fc: 34:5b:1e:fe:43:15:a0:18:f8:06:09:d0:84:8c:f7: c6:18:6a:3b:f4:64:b4:11:8b:4b:44:e7:3b:3e:41: ad:18:0d:78:58:cf:8f:3a:76:1e:5c:3b:77:1c:31: 02:70:b6:79:47:06:5c:14:23:c7:61:52:ac:6d:51: dd:f2:e6:8b:ed:53:ed:44:68:b7:d0:71:cd:bb:d7: 10:33:06:f1:a8:f7:81:52:84:23:4e:5b:aa:fd:4a: c3:08:19:6e:77:66:67:6a:b2:17:b8:06:66:38:51: 9d:82:4b:9a:dc:b5:c4:1a:6c:4b:33:44:43:3b:b9: eb:d8:71:26:84:a1:c9:4e:31:37:51:8e:3e:43:20: f3:06:67:fe:81:dd:d2:c4:80:77:7d:9c:ed:a3:b4: cf:c0:dc:4d:6f:9e:7a:98:38:c1:20:b1:10:e8:06: f0:0b:68:0c:04:da:48:41:e3:44:ae:9a:a4:a8:76: d2:7a:1a:ec:ad:05:73:1a:60:cc:e3:ea:85:c7:d4: 94:e0:f9:96:7a:26:80:10:13:5f:c9:de:c1:22:80: bc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:04:88:A1:D8:5A:A7:A9:4F:46:22:FA:69:55:C5:10:B6:63:CF:04 X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/B394CFAA3B1C11EE9AEE717AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.40.0/23 Signature Algorithm: sha256WithRSAEncryption f1:0d:61:c1:0a:fb:66:ce:64:e6:f7:89:bc:63:70:8e:1c:3e: 69:2d:30:f6:7c:82:c7:f0:12:15:02:59:34:27:8e:90:de:18: 16:8d:9c:32:2a:c2:c8:47:f1:29:89:61:d4:46:5c:af:5f:7f: 45:10:6d:f6:8c:f4:6b:bc:b7:55:95:8b:87:e9:45:c5:8b:d3: 3f:5b:03:b9:76:db:bc:c7:8f:b2:07:8d:8e:17:e5:d7:1f:ee: 56:fc:8d:f0:25:58:e6:0c:c3:da:60:67:ef:2e:64:86:a3:77: 76:ef:c6:47:64:0f:89:d3:08:ba:d5:54:16:76:67:e8:08:a5: 15:71:67:e2:29:1e:9a:25:b3:9e:69:7b:d7:aa:14:1a:e2:f1: df:d2:23:25:a0:9e:5e:03:83:e8:e7:6d:4f:79:2d:ba:dd:89: 5d:8e:1a:29:20:2e:ba:85:31:bd:2d:d4:00:50:59:8d:8c:eb: 39:2d:3a:c8:9c:ba:81:b2:d8:4a:8b:7e:3e:0f:5e:2d:45:c3: ed:7e:b5:a3:07:e5:fe:ee:a1:62:55:ad:8c:c7:81:92:ad:23: da:00:ba:1f:7f:50:c1:04:93:02:c0:ed:6f:e0:a7:1e:27:a7: ea:73:47:4f:58:93:87:ec:cb:75:0d:97:e0:3c:30:21:72:79: c6:0d:4f:7f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjQwMjIwMjA0OTE2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ1MTA0Yi0zZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJzTfQixwm6Hxp5bH6IQAsWvJ6DvOAR/LAKlxJHdOhdZVvVLXA2hUp3zx/w0 Wx7+QxWgGPgGCdCEjPfGGGo79GS0EYtLROc7PkGtGA14WM+POnYeXDt3HDECcLZ5 RwZcFCPHYVKsbVHd8uaL7VPtRGi30HHNu9cQMwbxqPeBUoQjTluq/UrDCBlud2Zn arIXuAZmOFGdgkua3LXEGmxLM0RDO7nr2HEmhKHJTjE3UY4+QyDzBmf+gd3SxIB3 fZzto7TPwNxNb556mDjBILEQ6AbwC2gMBNpIQeNErpqkqHbSehrsrQVzGmDM4+qF x9SU4PmWeiaAEBNfyd7BIoC8CQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCoEiKHY WqepT0Yi+mlVxRC2Y88EMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzM0NUIvMjhEODJDODI1RjZFMTFFQTkyNEI5QjgwQzRGOUFFMDIvQjM5NENGQUEz QjFDMTFFRTlBRUU3MTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlSgwDQYJKoZIhvcNAQELBQADggEBAPENYcEK+2bOZOb3 ibxjcI4cPmktMPZ8gsfwEhUCWTQnjpDeGBaNnDIqwshH8SmJYdRGXK9ff0UQbfaM 9Gu8t1WVi4fpRcWL0z9bA7l227zHj7IHjY4X5dcf7lb8jfAlWOYMw9pgZ+8uZIaj d3bvxkdkD4nTCLrVVBZ2Z+gIpRVxZ+IpHpols55pe9eqFBri8d/SIyWgnl4Dg+jn bU95LbrdiV2OGikgLrqFMb0t1ABQWY2M6zktOsicuoGy2EqLfj4PXi1Fw+1+taMH 5f7uoWJVrYzHgZKtI9oAuh9/UMEEkwLA7W/gpx4np+pzR09Yk4fsy3UNl+A8MCFy ecYNT38= -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:51 2024 by rpki-client on console-ams.rpki-client.org