$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/F2DDD4EEFB3211EB967B1759C4F9AE02.roa File: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (raw, json) Hash identifier: sbkQxmyHF5zPQR/UDBWCWEbbyoVFQKNcg9AzuA7dWNo= Subject key identifier: D8:C6:64:7E:DF:4C:7B:BF:C8:20:B7:78:29:08:11:7E:B5:E6:E0:9A Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Certificate serial: 0466 Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/F2DDD4EEFB3211EB967B1759C4F9AE02.roa Signing time: Sat 03 Feb 2024 01:14:02 +0000 ROA not before: Sat 03 Feb 2024 01:14:02 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 137455 IP address blocks: 103.161.24.0/24 maxlen: 32 2001:df5:b480::/56 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 01:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1126 (0x466) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Validity Not Before: Feb 3 01:14:02 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65bd9359-7cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:85:57:4b:d0:a1:31:d9:42:b9:81:a5:c8: 9f:8f:d1:cd:1d:c0:0b:05:c0:c1:0b:e8:e9:e8:df: 8f:bc:eb:93:90:6b:d4:00:59:f7:c1:39:71:5b:7b: 11:c9:4d:11:dd:a9:3d:43:9d:9b:95:c6:05:f0:20: d1:5e:96:e4:01:24:bf:94:8a:9f:fc:2d:6f:f5:a0: fa:3f:c2:ad:1a:59:fd:79:4f:37:7c:74:b6:eb:de: 52:2d:45:d1:ba:26:0a:f9:21:07:9b:c8:2d:e9:3c: 74:6b:c2:4e:80:7f:e5:1a:9a:e7:5e:2c:4a:de:f4: 1e:04:26:d3:50:55:f3:a9:1f:56:d5:b5:2a:c4:7a: b2:95:fb:b6:93:b2:84:d9:31:1f:21:0a:2d:8d:4f: ba:fe:ef:8b:9b:fd:f7:85:06:99:77:bc:b9:b0:90: 5b:fa:d8:ee:76:3e:cc:91:1e:c7:48:1b:61:f0:22: 7c:0e:38:67:4a:de:dc:fa:cf:d3:20:fc:04:42:fb: 6c:5b:8a:a7:c1:73:ff:a2:9b:f1:67:66:a1:66:b6: 45:cf:6d:a1:58:93:3a:54:cb:04:81:67:b0:30:1d: 35:60:3b:b9:f5:47:5b:bd:b6:f9:46:8b:9a:d1:df: 67:73:4d:34:5a:05:73:b3:25:c1:c3:a7:39:de:d5: 92:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C6:64:7E:DF:4C:7B:BF:C8:20:B7:78:29:08:11:7E:B5:E6:E0:9A X509v3 Authority Key Identifier: keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/F2DDD4EEFB3211EB967B1759C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.24.0/24 IPv6: 2001:df5:b480::/56 Signature Algorithm: sha256WithRSAEncryption ac:d0:73:37:ca:86:17:1d:87:8f:03:93:2e:57:6b:95:9b:f5: c4:eb:c4:83:6a:d3:9e:32:53:0e:d1:93:46:7b:7c:b4:c3:b4: 3b:79:04:fa:31:6d:30:c5:df:bb:ea:dc:f9:90:1f:78:ef:92: 52:4c:dc:64:59:43:23:79:fb:cf:cf:1f:94:a4:de:44:50:57: d2:f5:87:6a:82:b2:b0:fa:d4:be:9b:55:e7:cf:12:3f:ad:1f: 51:84:d0:3e:5f:b2:5c:8f:d9:12:8c:8d:94:4f:cf:f6:96:6f: 5e:85:1a:f2:89:68:3f:85:4e:4e:2c:f7:10:13:a3:51:b3:26: 96:7a:9b:99:fb:31:6f:46:e8:b3:8e:72:71:e2:11:46:b8:49: 8c:42:10:5d:e9:8d:a7:19:89:69:53:4b:cf:31:97:89:73:d2: 40:d1:1d:38:6f:e2:13:cd:5f:61:6a:0f:37:1f:f4:ab:8d:1d: 8a:35:16:a7:17:ce:c3:54:38:01:9b:a7:99:4d:50:67:6a:d4: da:03:ca:9b:59:57:3e:20:2c:35:7c:47:ba:ab:05:cf:e9:f4: ca:64:cb:09:ec:48:0c:59:3c:54:41:e2:27:a4:df:b2:25:ec: 67:2a:99:e1:c8:8b:0f:ee:69:10:60:6d:87:f6:10:39:70:df: d2:60:50:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc4NDMxMTAvBgNVBAUTKDVBMjIzQjlDNTI0RkFBRUQ4NzI3MjFBNDJCM0MzMDJE OTcxRTM4MDQwHhcNMjQwMjAzMDExNDAyWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJkOTM1OS03Y2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwC+FV0vQoTHZQrmBpcifj9HNHcALBcDBC+jp6N+PvOuTkGvUAFn3wTlxW3sR yU0R3ak9Q52blcYF8CDRXpbkASS/lIqf/C1v9aD6P8KtGln9eU83fHS2695SLUXR uiYK+SEHm8gt6Tx0a8JOgH/lGprnXixK3vQeBCbTUFXzqR9W1bUqxHqylfu2k7KE 2TEfIQotjU+6/u+Lm/33hQaZd7y5sJBb+tjudj7MkR7HSBth8CJ8DjhnSt7c+s/T IPwEQvtsW4qnwXP/opvxZ2ahZrZFz22hWJM6VMsEgWewMB01YDu59Udbvbb5Roua 0d9nc000WgVzsyXBw6c53tWSPQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFNjGZH7f THu/yCC3eCkIEX615uCaMB8GA1UdIwQYMBaAFFoiO5xST6rthychpCs8MC2XHjgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzg0My8zNkNBRDgwOEVB MEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1MkhKeUdrS3p3d0xaY2VP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dpSTduRkpQcXUySEp5R2tLend3TFpjZU9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzc4NDMvMzZDQUQ4MDhFQTBGMTFFQjg4QTU0RTJGQzRGOUFFMDIvRjJEREQ0RUVG QjMyMTFFQjk2N0IxNzU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMAwEAgABMAYDBABnoRgwEAQCAAIwCgMIACABDfW0gAAwDQYJKoZIhvcNAQEL BQADggEBAKzQczfKhhcdh48Dky5Xa5Wb9cTrxINq054yUw7Rk0Z7fLTDtDt5BPox bTDF37vq3PmQH3jvklJM3GRZQyN5+8/PH5Sk3kRQV9L1h2qCsrD61L6bVefPEj+t H1GE0D5fslyP2RKMjZRPz/aWb16FGvKJaD+FTk4s9xATo1GzJpZ6m5n7MW9G6LOO cnHiEUa4SYxCEF3pjacZiWlTS88xl4lz0kDRHThv4hPNX2FqDzcf9KuNHYo1FqcX zsNUOAGbp5lNUGdq1NoDyptZVz4gLDV8R7qrBc/p9MpkywnsSAxZPFRB4iek37Il 7GcqmeHIiw/uaRBgbYf2EDlw39JgUBo= -----END CERTIFICATE-----Generated at Wed May 15 03:08:22 2024 by rpki-client on console-ams.rpki-client.org