$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/73A482FC9A8C11EAB72EA56DC4F9AE02.roa File: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (raw, json) Hash identifier: y0IVg6IKxUm3csPbusIpeqIGZmaXYMDUyk8KKZg6iLw= Subject key identifier: D0:AC:DA:23:03:E4:9E:64:D6:CB:FD:BE:4F:2E:40:D5:58:73:2D:B6 Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Certificate serial: 084B Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/73A482FC9A8C11EAB72EA56DC4F9AE02.roa Signing time: Fri 26 Jan 2024 21:19:15 +0000 ROA not before: Fri 26 Jan 2024 21:19:15 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 37973 IP address blocks: 203.176.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Validity Not Before: Jan 26 21:19:15 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65b421d3-09aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:aa:d5:5b:ef:0b:8b:f9:a8:a6:01:63:3e: 28:53:ad:c1:14:22:c6:b1:27:be:94:ea:99:06:e3: 1e:d8:07:ab:19:74:f0:79:a0:1f:71:0b:96:d4:39: 64:f3:de:6e:5c:da:30:ef:e7:6a:b8:e8:96:4d:c5: f1:1b:49:be:8d:a5:36:e8:fc:f6:6d:2e:47:79:93: be:35:3c:6c:d6:63:19:00:db:d4:7f:97:42:99:0a: 12:3b:97:f5:73:4c:e0:98:63:46:1d:67:7b:db:ca: 9b:c1:18:f6:44:30:ad:b3:46:eb:92:b3:ed:aa:ac: 53:2c:f0:25:a8:6b:3e:20:d7:d0:99:d2:31:a1:0b: 21:78:fd:91:46:1e:43:21:03:0a:9d:7e:a0:a2:bd: e5:70:3d:f3:9e:a7:b0:b8:33:93:c5:65:2a:79:3c: d9:5c:1e:8e:21:c0:1d:03:7c:b7:f4:6f:37:ce:b3: c7:95:8c:ae:14:17:3c:72:00:9d:c5:91:67:6a:b1: 2e:cd:e9:dc:5e:26:89:cd:06:46:1f:c4:f5:3e:a0: b7:f2:c7:f5:52:7e:60:66:d5:dc:3d:5d:74:1a:55: c3:44:49:17:0b:ad:6e:ef:c3:09:c6:d6:b9:c5:78: b9:df:c4:c8:68:30:ab:3f:5d:39:0e:ef:da:42:d3: 7e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AC:DA:23:03:E4:9E:64:D6:CB:FD:BE:4F:2E:40:D5:58:73:2D:B6 X509v3 Authority Key Identifier: keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/73A482FC9A8C11EAB72EA56DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.176.191.0/24 Signature Algorithm: sha256WithRSAEncryption 30:f8:d1:b6:fd:09:4a:ad:6e:f6:62:aa:43:d7:fc:b1:b3:43: 7f:d5:ab:e5:5a:c6:c5:69:2f:35:47:3f:06:53:6e:2e:c8:76: 7b:ef:65:90:b5:dc:03:c3:1d:80:e1:08:da:c0:68:b1:ce:c1: 1d:a9:6e:61:3e:9b:d4:ba:f4:1a:c8:8a:c0:74:2e:90:1c:e1: 4e:75:80:9b:16:4d:35:ed:d1:f6:ba:bf:60:31:ce:ca:5c:34: 84:a6:9f:d1:6a:c9:53:60:a3:d7:b1:25:bf:88:7c:c6:c2:45: 68:ed:2e:7e:55:d0:59:f4:3c:14:2a:db:e0:47:fc:31:3e:f1: b5:fd:56:8a:1f:16:2d:4f:7b:b6:5e:d0:9a:42:ed:01:07:ea: e8:0b:72:2c:50:4b:be:32:a8:ba:e7:7a:bf:7a:67:2f:31:85: f0:7e:6a:fb:19:33:1a:3a:1c:a9:28:44:5f:e9:fe:d8:81:48: ca:01:e3:26:e9:1d:70:dd:d2:4c:d1:1e:d2:6f:2a:f1:71:09: 6d:a6:e9:2c:98:97:a1:1b:c3:05:38:a6:8b:da:86:6e:57:f8: ef:43:87:cf:e4:e7:54:26:38:e7:ef:ae:7f:81:a8:97:de:00: 7a:51:76:ea:a4:3b:0f:da:51:93:ab:d7:8e:cb:58:10:23:50: 83:a1:96:f0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNEExMTAvBgNVBAUTKDZCNzMyREYwODg0QUFENjZBNUQ1QTFFRkU5QTYwRENE RTNCOUJFNTUwHhcNMjQwMTI2MjExOTE1WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI0MjFkMy0wOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtamq1VvvC4v5qKYBYz4oU63BFCLGsSe+lOqZBuMe2AerGXTweaAfcQuW1Dlk 895uXNow7+dquOiWTcXxG0m+jaU26Pz2bS5HeZO+NTxs1mMZANvUf5dCmQoSO5f1 c0zgmGNGHWd728qbwRj2RDCts0brkrPtqqxTLPAlqGs+INfQmdIxoQsheP2RRh5D IQMKnX6gor3lcD3znqewuDOTxWUqeTzZXB6OIcAdA3y39G83zrPHlYyuFBc8cgCd xZFnarEuzencXiaJzQZGH8T1PqC38sf1Un5gZtXcPV10GlXDREkXC61u78MJxta5 xXi538TIaDCrP105Du/aQtN+tQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNCs2iMD 5J5k1sv9vk8uQNVYcy22MB8GA1UdIwQYMBaAFGtzLfCISq1mpdWh7+mmDc3jub5V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE0QS8xQkE0QTZGMjlB ODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JXYWwxYUh2NmFZTnplTzV2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EzTXQ4SWhLcldhbDFhSHY2YVlOemVPNXZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0RBNEEvMUJBNEE2RjI5QTg5MTFFQThFQzU0MjY0QzRGOUFFMDIvNzNBNDgyRkM5 QThDMTFFQUI3MkVBNTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLsL8wDQYJKoZIhvcNAQELBQADggEBADD40bb9CUqtbvZi qkPX/LGzQ3/Vq+VaxsVpLzVHPwZTbi7IdnvvZZC13APDHYDhCNrAaLHOwR2pbmE+ m9S69BrIisB0LpAc4U51gJsWTTXt0fa6v2AxzspcNISmn9FqyVNgo9exJb+IfMbC RWjtLn5V0Fn0PBQq2+BH/DE+8bX9VoofFi1Pe7Ze0JpC7QEH6ugLcixQS74yqLrn er96Zy8xhfB+avsZMxo6HKkoRF/p/tiBSMoB4ybpHXDd0kzRHtJvKvFxCW2m6SyY l6EbwwU4povahm5X+O9Dh8/k51QmOOfvrn+BqJfeAHpRduqkOw/aUZOr147LWBAj UIOhlvA= -----END CERTIFICATE-----Generated at Fri May 31 22:56:56 2024 by rpki-client on console-fra.rpki-client.org