$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/15F05240B73511EC8392922AC4F9AE02.roa File: 15F05240B73511EC8392922AC4F9AE02.roa (raw, json) Hash identifier: Q7tqx8PfjXXe/4YsfVLtvfNz13QYAz3gljaN9IXyzfg= Subject key identifier: C3:E9:AC:AA:29:CA:D5:32:10:53:FB:3C:C7:C2:42:DF:DF:4C:A8:90 Certificate issuer: /CN=A913B6D4/serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED Certificate serial: 051D Authority key identifier: 0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/15F05240B73511EC8392922AC4F9AE02.roa Signing time: Wed 15 Nov 2023 00:32:04 +0000 ROA not before: Wed 15 Nov 2023 00:32:04 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 48024 IP address blocks: 58.84.52.0/22 maxlen: 24 103.197.68.0/22 maxlen: 24 116.206.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 00:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1309 (0x51d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B6D4/serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED Validity Not Before: Nov 15 00:32:04 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65541184-7d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5d:26:33:b4:ef:e6:64:c7:6b:8e:c4:e8:2b: 70:99:36:b4:9e:56:25:88:f8:91:22:63:c9:ba:9f: 87:e0:76:b6:4f:71:21:db:26:6e:e6:7c:5f:24:aa: f1:3b:02:fc:4c:a8:08:58:36:1b:22:e1:bc:86:e6: 6e:fb:36:4f:62:a0:92:9a:3c:fa:45:dc:58:e4:3d: 18:51:86:37:98:bb:b1:a4:83:74:78:96:d8:91:32: c9:3b:ec:69:11:74:74:e7:e5:f6:95:e8:ca:ec:48: 59:0f:da:8a:cb:83:27:c0:e0:0b:39:28:c2:f1:3f: 2f:76:a4:00:31:be:24:1b:32:cb:ff:de:39:c9:f1: cb:81:d5:fa:00:33:a4:e9:98:ac:1f:bd:a1:47:57: 2b:18:60:a5:8e:7c:a0:ba:7e:f9:06:57:da:ee:26: 0f:8d:d2:58:d8:4f:bc:f9:a3:90:c3:e9:65:b9:44: 04:07:10:74:09:df:cf:eb:75:73:83:9e:63:fe:3b: be:25:c5:6c:e3:77:a4:e5:78:df:b1:0d:be:cd:fe: 00:be:a5:fe:45:84:2b:6a:cd:91:21:c2:98:84:c6: 95:6c:70:27:35:ac:d6:b0:70:7f:f8:b3:02:40:8f: 54:0e:5b:bb:82:6e:d2:f0:95:9b:84:bc:dc:0b:c8: 26:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E9:AC:AA:29:CA:D5:32:10:53:FB:3C:C7:C2:42:DF:DF:4C:A8:90 X509v3 Authority Key Identifier: keyid:0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/15F05240B73511EC8392922AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.84.52.0/22 103.197.68.0/22 116.206.100.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:1f:f9:03:6e:ad:e6:3b:cd:71:84:76:5e:d2:2e:d5:c9:ce: 54:b4:2d:9d:0c:62:0f:fd:6a:fc:94:00:fd:ee:b9:be:8f:12: ed:d1:6b:5b:b0:c6:97:cf:71:96:81:f4:41:89:e6:ce:9b:c7: 5a:32:1b:c2:65:ab:18:d8:ef:07:de:10:3f:5e:e2:53:bf:bc: 55:d9:0e:47:85:07:ee:bc:46:ed:0f:18:2b:15:a1:3b:a6:d2: 03:af:b3:37:8d:ca:67:74:94:20:b7:27:48:43:84:dc:ac:e1: 51:41:f4:fc:bb:78:71:4b:27:e3:ee:ff:7a:73:23:34:7d:7d: 59:4c:f4:ff:a3:55:07:87:c8:93:f8:59:fe:5d:3a:69:dc:32: d8:3d:44:83:01:e7:32:47:45:d7:fb:25:b3:c1:ef:3c:27:64: bf:28:b8:d9:0e:0b:56:14:9b:70:29:8b:0d:c4:e1:03:16:29: 98:66:e6:ae:c8:cd:24:97:b3:61:3e:0e:4e:ee:69:11:99:ea: 9e:90:57:90:cc:20:db:3e:22:03:27:eb:13:19:d4:c5:cc:76: 7e:83:99:49:05:c8:6f:b6:7e:8e:9f:81:57:86:06:55:49:d8: 9c:7a:29:07:92:a8:d3:20:9d:52:93:50:30:cf:0c:84:63:28: de:a9:df:12 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I2RDQxMTAvBgNVBAUTKDBENTAyODk4NkEzNTZCNjlCNEFGN0QyRjY2NDlENkJC RENCRThCRUQwHhcNMjMxMTE1MDAzMjA0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTU0MTE4NC03ZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA110mM7Tv5mTHa47E6CtwmTa0nlYliPiRImPJup+H4Ha2T3Eh2yZu5nxfJKrx OwL8TKgIWDYbIuG8huZu+zZPYqCSmjz6RdxY5D0YUYY3mLuxpIN0eJbYkTLJO+xp EXR05+X2lejK7EhZD9qKy4MnwOALOSjC8T8vdqQAMb4kGzLL/945yfHLgdX6ADOk 6ZisH72hR1crGGCljnygun75Blfa7iYPjdJY2E+8+aOQw+lluUQEBxB0Cd/P63Vz g55j/ju+JcVs43ek5XjfsQ2+zf4AvqX+RYQras2RIcKYhMaVbHAnNazWsHB/+LMC QI9UDlu7gm7S8JWbhLzcC8gmZwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMPprKop ytUyEFP7PMfCQt/fTKiQMB8GA1UdIwQYMBaAFA1QKJhqNWtptK99L2ZJ1rvcvovt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjZENC85NTcyNTM2ODlF NzkxMUVCOEY3QTQ0ODdDNEY5QUUwMi9EVkFvbUdvMWEybTByMzB2WmtuV3U5eS1p LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RWQW9tR28xYTJtMHIzMHZaa25XdTl5LWktMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0I2RDQvOTU3MjUzNjg5RTc5MTFFQjhGN0E0NDg3QzRGOUFFMDIvMTVGMDUyNDBC NzM1MTFFQzgzOTI5MjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAI6VDQDBAJnxUQDBAJ0zmQwDQYJKoZIhvcNAQELBQADggEB AD4f+QNureY7zXGEdl7SLtXJzlS0LZ0MYg/9avyUAP3uub6PEu3Ra1uwxpfPcZaB 9EGJ5s6bx1oyG8JlqxjY7wfeED9e4lO/vFXZDkeFB+68Ru0PGCsVoTum0gOvszeN ymd0lCC3J0hDhNys4VFB9Py7eHFLJ+Pu/3pzIzR9fVlM9P+jVQeHyJP4Wf5dOmnc Mtg9RIMB5zJHRdf7JbPB7zwnZL8ouNkOC1YUm3Apiw3E4QMWKZhm5q7IzSSXs2E+ Dk7uaRGZ6p6QV5DMINs+IgMn6xMZ1MXMdn6DmUkFyG+2fo6fgVeGBlVJ2Jx6KQeS qNMgnVKTUDDPDIRjKN6p3xI= -----END CERTIFICATE-----Generated at Tue May 7 01:58:15 2024 by rpki-client on console-fra.rpki-client.org