$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/14BB63805EC111EEBE63A109C4F9AE02.roa File: 14BB63805EC111EEBE63A109C4F9AE02.roa (raw, json) Hash identifier: LAZ+vxPxEiGrZJLl8ywMAh3pLnZsqfIjoFLKBGbQiz8= Subject key identifier: A0:F2:AA:C6:7D:9D:FA:B2:46:BD:B1:15:EB:55:43:AF:20:E7:81:C4 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: E7 Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/14BB63805EC111EEBE63A109C4F9AE02.roa Signing time: Sun 31 Mar 2024 06:08:20 +0000 ROA not before: Sun 31 Mar 2024 06:08:20 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 150728 IP address blocks: 103.72.198.0/24 maxlen: 24 103.72.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: Mar 31 06:08:20 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=6608fdd4-3634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:1c:3a:75:c4:b1:da:fe:db:3a:2f:a1:2e: 77:1f:2a:2c:6a:a9:2a:37:64:9a:7d:b7:69:1a:b2: 4b:d3:03:a2:37:d1:75:7b:77:77:8a:f5:00:6f:c7: 82:8c:3e:15:f8:9f:f2:67:49:8b:01:fa:86:d8:a1: 51:78:91:d9:b2:c6:86:f8:91:dc:b6:33:0a:5c:71: 54:2c:38:9c:1b:1f:42:8d:5b:2e:1c:64:a7:35:1b: 47:58:de:8a:c0:62:2e:be:78:98:d2:e3:db:ad:1b: af:7f:fd:db:45:63:22:98:eb:df:07:82:96:d2:e4: 8c:01:c5:69:b5:20:d3:a4:e2:f0:63:59:c9:42:b2: e1:67:7d:54:ff:3f:6b:1e:6c:e2:a2:b6:c6:04:21: 68:28:31:2e:34:7d:f0:87:83:dd:9e:aa:f7:37:96: 44:8e:fa:cc:cc:4a:3e:32:41:17:bf:0d:40:09:16: 3e:83:86:02:12:56:82:e7:ce:24:e3:b7:84:e5:ad: ff:72:a4:d5:4b:8b:39:ee:b7:03:0c:81:eb:36:38: fe:0e:d3:04:96:da:b3:a3:a5:1c:01:c0:f0:a4:fe: 84:0c:ff:a1:7d:12:b7:97:40:b6:db:bd:6d:29:7d: d8:5d:bf:58:2d:f6:cc:03:54:bd:53:a1:21:50:de: 8c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F2:AA:C6:7D:9D:FA:B2:46:BD:B1:15:EB:55:43:AF:20:E7:81:C4 X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/14BB63805EC111EEBE63A109C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.198.0/23 Signature Algorithm: sha256WithRSAEncryption 69:1b:c8:cc:42:2d:94:2a:87:72:e6:ca:0e:bf:88:fa:fe:09: 5e:d4:1b:6c:63:48:c1:8c:8a:b2:b7:9f:a9:f3:f7:65:8a:9f: cd:62:fb:85:2b:00:36:73:2b:50:4a:e2:6d:ba:84:3b:13:5b: 5f:46:1e:44:b7:9f:4b:2e:6b:b9:9b:00:d7:e9:b5:57:23:ce: 00:df:78:27:a8:b1:67:38:15:34:24:e3:f9:d5:b6:c5:a1:38: c7:d9:25:d2:49:8a:3c:b5:61:7a:40:83:89:fe:87:d2:57:40: c6:65:b5:91:b1:6f:01:83:bf:f8:4d:0d:0c:46:8f:09:c7:22: 1f:4d:13:13:ce:03:c2:1b:0a:d1:c0:cc:6a:7d:d4:f5:11:cb: 25:a9:e0:1e:77:61:8b:f0:80:07:35:3f:d5:59:e5:ad:62:37: c8:9f:78:a4:d9:ea:b5:98:61:8c:84:09:d0:77:8d:52:92:32: 69:8c:ca:84:94:90:f6:90:b0:a2:5e:70:56:d5:61:ab:5a:41: 8f:98:bc:4d:03:49:ee:1a:3d:ab:74:79:93:76:8e:37:1d:73: 8f:9d:c4:4d:84:0f:af:1f:87:08:8c:4e:ed:19:76:ff:76:9a: be:fe:44:53:18:5e:cd:78:78:97:bf:97:0c:7d:47:c1:83:e4: 5c:2f:cd:a1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjQwMzMxMDYwODIwWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjA4ZmRkNC0zNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq90cOnXEsdr+2zovoS53HyosaqkqN2SafbdpGrJL0wOiN9F1e3d3ivUAb8eC jD4V+J/yZ0mLAfqG2KFReJHZssaG+JHctjMKXHFULDicGx9CjVsuHGSnNRtHWN6K wGIuvniY0uPbrRuvf/3bRWMimOvfB4KW0uSMAcVptSDTpOLwY1nJQrLhZ31U/z9r HmziorbGBCFoKDEuNH3wh4Pdnqr3N5ZEjvrMzEo+MkEXvw1ACRY+g4YCElaC584k 47eE5a3/cqTVS4s57rcDDIHrNjj+DtMEltqzo6UcAcDwpP6EDP+hfRK3l0C2271t KX3YXb9YLfbMA1S9U6EhUN6MUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKDyqsZ9 nfqyRr2xFetVQ68g54HEMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU1OTcvRTk3MDdEMUU5QTNBMTFFRDgxQjEyNzFEQzRGOUFFMDIvMTRCQjYzODA1 RUMxMTFFRUJFNjNBMTA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnSMYwDQYJKoZIhvcNAQELBQADggEBAGkbyMxCLZQqh3Lm yg6/iPr+CV7UG2xjSMGMirK3n6nz92WKn81i+4UrADZzK1BK4m26hDsTW19GHkS3 n0sua7mbANfptVcjzgDfeCeosWc4FTQk4/nVtsWhOMfZJdJJijy1YXpAg4n+h9JX QMZltZGxbwGDv/hNDQxGjwnHIh9NExPOA8IbCtHAzGp91PURyyWp4B53YYvwgAc1 P9VZ5a1iN8ifeKTZ6rWYYYyECdB3jVKSMmmMyoSUkPaQsKJecFbVYataQY+YvE0D Se4aPat0eZN2jjcdc4+dxE2ED68fhwiMTu0Zdv92mr7+RFMYXs14eJe/lwx9R8GD 5FwvzaE= -----END CERTIFICATE-----Generated at Wed May 8 10:07:59 2024 by rpki-client on console-ams.rpki-client.org