$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa File: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (raw, json) Hash identifier: rK8LNE70vEcEXQqVgfhb/qql1fI8LntfPvWUogqa3lE= Subject key identifier: 27:75:A9:EB:C6:41:1D:37:F8:BD:FC:24:09:9B:F6:90:83:6A:11:C5 Certificate issuer: /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Certificate serial: 02D5 Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa Signing time: Mon 27 Nov 2023 02:34:17 +0000 ROA not before: Mon 27 Nov 2023 02:34:17 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 147314 IP address blocks: 103.174.214.0/23 maxlen: 24 2400:1620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Validity Not Before: Nov 27 02:34:17 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65640029-4059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ca:58:7f:0a:83:b3:8e:3c:08:9c:f8:37:c3: a7:9d:67:18:48:7a:98:27:0d:b6:b6:2a:45:13:f3: 89:b0:13:d3:82:fa:10:93:72:52:ba:41:8f:7b:5f: 4d:1c:a7:cd:8b:45:58:7c:32:d7:09:5d:fe:c1:78: a7:41:cc:3e:21:f7:0f:ef:56:35:a6:00:16:22:52: 66:7c:46:49:2c:2c:86:5c:30:2e:75:de:12:c4:ef: 89:d5:7f:90:c5:95:1e:49:a1:07:b0:e3:32:9e:81: da:0a:b1:9f:93:4c:cd:16:52:78:38:6a:16:a3:40: f1:be:56:12:3e:a1:82:4a:94:f5:f4:cf:30:27:b6: c8:92:5f:94:3c:d5:f0:a3:7e:aa:75:00:07:54:97: 92:22:ff:56:a4:d6:8b:78:e4:5d:fe:2f:96:ac:0a: 58:59:25:af:58:b6:fa:d8:f7:26:fc:89:14:7a:bb: 73:31:88:c5:3a:20:65:8d:13:3b:47:bd:6c:30:77: 8e:72:11:82:e4:f5:00:cf:c2:70:3e:7b:13:1a:77: ca:0d:bf:a2:ab:fd:42:d8:b2:50:c2:1b:2c:88:a4: d6:a6:6e:9b:88:57:6f:fe:b7:f0:82:31:b4:e3:4e: 21:cd:83:30:1c:a8:eb:f9:a1:62:6a:54:0f:ba:34: 35:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:75:A9:EB:C6:41:1D:37:F8:BD:FC:24:09:9B:F6:90:83:6A:11:C5 X509v3 Authority Key Identifier: keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.214.0/23 IPv6: 2400:1620::/32 Signature Algorithm: sha256WithRSAEncryption be:8d:fa:79:82:61:e3:80:ce:19:6b:a5:20:43:d4:62:44:85: 8c:a8:5f:fa:78:55:b7:22:e7:d0:b7:70:8e:58:99:56:b8:ad: e7:a4:e9:b5:29:20:ab:88:90:22:2a:52:48:2a:14:a9:35:62: a6:ec:64:d7:67:4d:49:65:51:f1:3a:40:07:52:10:45:b4:02: 79:e7:ac:18:b8:ad:65:f6:c6:c7:e0:24:e1:48:9f:02:a0:1d: 23:fb:43:8c:ed:b4:9e:0a:b2:33:c5:60:49:11:c5:c8:b8:db: e0:d8:e0:32:65:0c:40:82:6c:7b:15:b1:04:95:c8:5f:22:ed: a6:da:d8:22:d0:c4:be:51:09:29:b1:27:1b:57:df:9a:02:33: 95:c7:76:49:4a:db:8d:82:5c:e6:16:bc:c2:ae:96:81:84:5d: cf:06:15:de:5d:ba:df:66:97:80:95:2d:d0:f9:08:16:e7:4c: 92:36:1a:a8:29:e7:53:72:ef:26:b7:dd:a7:36:2d:8b:ce:0a: 64:83:95:dc:b8:f9:d4:b2:e3:bd:0e:04:45:72:eb:6c:0e:47: d9:b0:06:a9:16:44:08:36:08:7a:c8:28:ed:f0:f7:09:18:2a: 2f:1d:36:7b:e8:f9:80:8c:37:45:5b:98:eb:14:a4:4d:ad:af: a0:b5:3e:81 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwNkIxMTAvBgNVBAUTKENCOTNGNTk5QjA1RTNGQ0I3QjIxMjRCNkZDM0Y5OUND MzYyMEY4NDcwHhcNMjMxMTI3MDIzNDE3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY0MDAyOS00MDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8pYfwqDs448CJz4N8OnnWcYSHqYJw22tipFE/OJsBPTgvoQk3JSukGPe19N HKfNi0VYfDLXCV3+wXinQcw+IfcP71Y1pgAWIlJmfEZJLCyGXDAudd4SxO+J1X+Q xZUeSaEHsOMynoHaCrGfk0zNFlJ4OGoWo0DxvlYSPqGCSpT19M8wJ7bIkl+UPNXw o36qdQAHVJeSIv9WpNaLeORd/i+WrApYWSWvWLb62Pcm/IkUertzMYjFOiBljRM7 R71sMHeOchGC5PUAz8JwPnsTGnfKDb+iq/1C2LJQwhssiKTWpm6biFdv/rfwgjG0 404hzYMwHKjr+aFialQPujQ16wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCd1qevG QR03+L38JAmb9pCDahHFMB8GA1UdIwQYMBaAFMuT9ZmwXj/LeyEktvw/mcw2IPhH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDA2Qi9ENjM4MjdBRTdD MjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4dDdJU1MyX0QtWnpEWWct RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1UDFtYkJlUDh0N0lTUzJfRC1aekRZZy1FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQwNkIvRDYzODI3QUU3QzI5MTFFQzhFRTM2MTBEQzRGOUFFMDIvRUNFNUQ3MkM3 QzJEMTFFQzhDQUQ5NjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnrtYwDQQCAAIwBwMFACQAFiAwDQYJKoZIhvcNAQELBQAD ggEBAL6N+nmCYeOAzhlrpSBD1GJEhYyoX/p4Vbci59C3cI5YmVa4reek6bUpIKuI kCIqUkgqFKk1YqbsZNdnTUllUfE6QAdSEEW0AnnnrBi4rWX2xsfgJOFInwKgHSP7 Q4zttJ4KsjPFYEkRxci42+DY4DJlDECCbHsVsQSVyF8i7aba2CLQxL5RCSmxJxtX 35oCM5XHdklK242CXOYWvMKuloGEXc8GFd5dut9ml4CVLdD5CBbnTJI2Gqgp51Ny 7ya33ac2LYvOCmSDldy4+dSy470OBEVy62wOR9mwBqkWRAg2CHrIKO3w9wkYKi8d Nnvo+YCMN0VbmOsUpE2tr6C1PoE= -----END CERTIFICATE-----Generated at Wed May 15 03:49:54 2024 by rpki-client on console-fra.rpki-client.org