$ rpki-client -vvf rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/8D57BBAAC0B811EEA3B71039C4F9AE02.roa File: 8D57BBAAC0B811EEA3B71039C4F9AE02.roa (raw, json) Hash identifier: PrUyc59DEyR83y5aqmuMGmWb+fN+hx3xQ8wkLjUps6s= Subject key identifier: 47:01:10:E2:53:74:EF:1A:B0:E1:14:B9:5F:50:4B:CE:8A:39:62:30 Certificate issuer: /CN=A913914F/serialNumber=10E14B8CE5296312A8CD118EEAAF6DB7E46EA7DB Certificate serial: 01CD Authority key identifier: 10:E1:4B:8C:E5:29:63:12:A8:CD:11:8E:EA:AF:6D:B7:E4:6E:A7:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/8D57BBAAC0B811EEA3B71039C4F9AE02.roa Signing time: Tue 13 Feb 2024 03:55:08 +0000 ROA not before: Tue 13 Feb 2024 03:55:08 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 134736 IP address blocks: 59.153.108.0/22 maxlen: 22 59.153.108.0/24 maxlen: 24 59.153.109.0/24 maxlen: 24 59.153.110.0/24 maxlen: 24 59.153.111.0/24 maxlen: 24 103.198.148.0/22 maxlen: 22 103.198.148.0/24 maxlen: 24 103.198.149.0/24 maxlen: 24 103.198.150.0/24 maxlen: 24 103.198.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.crl rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913914F/serialNumber=10E14B8CE5296312A8CD118EEAAF6DB7E46EA7DB Validity Not Before: Feb 13 03:55:08 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65cae81c-dc6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:d3:e7:98:9a:a0:eb:6c:59:bd:9d:e7:69: 37:9f:69:71:52:9b:3c:79:24:ee:1c:1d:b1:48:3e: 15:df:b4:f9:94:5f:9b:1e:7c:c4:83:a2:19:3e:3b: a8:ae:2e:db:d6:22:9b:c2:a9:48:40:61:7d:cb:5e: 5f:5d:45:ce:f8:b3:47:29:9e:a9:3d:74:f6:7c:78: 68:47:52:39:a1:5d:b3:53:42:78:c9:11:39:8c:f6: 2b:bb:10:1d:32:68:37:7f:62:aa:15:59:0f:6a:29: 1d:4c:cb:9c:b8:d2:cc:7d:f7:a1:02:5f:bc:61:fe: 13:7d:86:81:c2:26:56:6e:57:f5:35:88:4f:7c:6a: 1c:98:8a:6b:8e:88:9e:65:d2:15:1d:b8:73:76:4a: 42:db:7d:de:62:a5:94:78:36:c7:9e:b8:6b:f3:a5: be:0d:da:37:51:47:c1:3f:68:6b:75:d2:2c:84:bb: 25:2c:11:b9:53:93:62:46:82:1c:42:68:60:09:7b: 78:fb:35:24:5b:42:f9:be:08:e4:a8:d8:77:35:d5: 32:e8:12:70:05:69:9c:6c:f5:07:ef:11:fa:d9:2f: 06:03:e5:f9:56:70:30:ff:88:82:66:3f:f1:11:d6: 8e:95:0b:13:96:c4:a1:6e:50:3b:85:f2:46:78:1d: cb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:01:10:E2:53:74:EF:1A:B0:E1:14:B9:5F:50:4B:CE:8A:39:62:30 X509v3 Authority Key Identifier: keyid:10:E1:4B:8C:E5:29:63:12:A8:CD:11:8E:EA:AF:6D:B7:E4:6E:A7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/EOFLjOUpYxKozRGO6q9tt-Rup9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOFLjOUpYxKozRGO6q9tt-Rup9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913914F/B1AE8434F69311ECBA29042DC4F9AE02/8D57BBAAC0B811EEA3B71039C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.153.108.0/22 103.198.148.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:6b:fc:bc:c3:4e:44:73:5d:d1:ad:c9:21:d7:dd:6b:59:36: 16:70:9a:91:db:30:9c:c7:15:6e:b2:47:27:00:54:d4:08:ca: d8:30:09:2d:4e:74:78:25:c8:f3:83:07:ef:d4:52:ef:5b:68: 99:0d:0c:e3:fa:a4:0d:22:ea:1b:29:8a:41:9c:f6:d4:ef:3d: 75:a7:85:33:75:92:b9:df:60:18:5d:d9:d9:54:62:6a:05:d1: 80:34:f0:9b:3d:e4:dd:55:d4:44:62:4f:3c:52:34:08:8b:0f: e7:d6:ae:e2:ff:85:d6:bb:2a:05:87:fc:ac:e4:e8:95:10:04: 8f:c1:37:c5:4c:f7:82:d9:50:ab:9a:f6:a9:ab:ae:dd:60:d3: 35:61:61:98:f8:41:ab:d4:0c:74:5f:35:7e:10:54:02:3b:c4: d4:a9:95:1d:f9:1a:4f:26:66:b9:57:4e:73:83:52:5b:28:a2: 11:fd:8e:cd:06:94:61:07:16:54:43:86:43:3e:df:29:1b:74: 8c:f7:1a:ea:f1:e2:c3:79:2c:24:63:21:b2:e8:49:12:b8:63: 56:38:ed:77:96:08:79:64:a2:8e:74:a0:30:5d:dc:1d:6e:01: fa:30:c3:a4:15:24:7b:7f:c9:f0:0c:82:bf:39:f9:0f:08:cb: 43:96:58:02 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkxNEYxMTAvBgNVBAUTKDEwRTE0QjhDRTUyOTYzMTJBOENEMTE4RUVBQUY2REI3 RTQ2RUE3REIwHhcNMjQwMjEzMDM1NTA4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNhZTgxYy1kYzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BrT55iaoOtsWb2d52k3n2lxUps8eSTuHB2xSD4V37T5lF+bHnzEg6IZPjuo ri7b1iKbwqlIQGF9y15fXUXO+LNHKZ6pPXT2fHhoR1I5oV2zU0J4yRE5jPYruxAd Mmg3f2KqFVkPaikdTMucuNLMffehAl+8Yf4TfYaBwiZWblf1NYhPfGocmIprjoie ZdIVHbhzdkpC233eYqWUeDbHnrhr86W+Ddo3UUfBP2hrddIshLslLBG5U5NiRoIc QmhgCXt4+zUkW0L5vgjkqNh3NdUy6BJwBWmcbPUH7xH62S8GA+X5VnAw/4iCZj/x EdaOlQsTlsShblA7hfJGeB3L3QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEcBEOJT dO8asOEUuV9QS86KOWIwMB8GA1UdIwQYMBaAFBDhS4zlKWMSqM0Rjuqvbbfkbqfb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTE0Ri9CMUFFODQzNEY2 OTMxMUVDQkEyOTA0MkRDNEY5QUUwMi9FT0ZMak9VcFl4S296UkdPNnE5dHQtUnVw OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VPRkxqT1VwWXhLb3pSR082cTl0dC1SdXA5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkxNEYvQjFBRTg0MzRGNjkzMTFFQ0JBMjkwNDJEQzRGOUFFMDIvOEQ1N0JCQUFD MEI4MTFFRUEzQjcxMDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAI7mWwDBAJnxpQwDQYJKoZIhvcNAQELBQADggEBAI1r/LzD TkRzXdGtySHX3WtZNhZwmpHbMJzHFW6yRycAVNQIytgwCS1OdHglyPODB+/UUu9b aJkNDOP6pA0i6hspikGc9tTvPXWnhTN1krnfYBhd2dlUYmoF0YA08Js95N1V1ERi TzxSNAiLD+fWruL/hda7KgWH/Kzk6JUQBI/BN8VM94LZUKua9qmrrt1g0zVhYZj4 QavUDHRfNX4QVAI7xNSplR35Gk8mZrlXTnODUlsoohH9js0GlGEHFlRDhkM+3ykb dIz3Gurx4sN5LCRjIbLoSRK4Y1Y47XeWCHlkoo50oDBd3B1uAfoww6QVJHt/yfAM gr85+Q8Iy0OWWAI= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:34 2024 by rpki-client on console-fra.rpki-client.org