$ rpki-client -vvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/24F33D7877AF11EB8E972C66C4F9AE02.roa File: 24F33D7877AF11EB8E972C66C4F9AE02.roa (raw, json) Hash identifier: HMNtwiOI8Fji50xPFx+fLZfX2Rn76Q7skuHMKU1WYfk= Subject key identifier: 7E:4A:02:82:DF:F2:FD:0A:D3:D4:60:CB:DB:A0:64:0A:82:EC:5C:02 Certificate issuer: /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Certificate serial: 0529 Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/24F33D7877AF11EB8E972C66C4F9AE02.roa Signing time: Wed 12 Jul 2023 23:20:13 +0000 ROA not before: Wed 12 Jul 2023 23:20:13 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 140912 IP address blocks: 103.153.88.0/23 maxlen: 23 103.153.88.0/24 maxlen: 24 103.153.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 21:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1321 (0x529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Validity Not Before: Jul 12 23:20:13 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64af352d-c163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:35:1e:19:1f:52:ad:fc:8b:ba:76:c0:e7:ef: 62:c1:27:de:36:bd:e9:a2:78:0d:b3:0e:ce:bf:9a: ae:5f:e3:54:2b:20:6c:6a:51:17:0f:34:05:55:74: 0e:69:bb:06:99:ea:95:b3:a0:35:d0:29:91:c8:92: fa:a9:1d:6a:c1:ca:ca:2f:30:b8:01:dd:7b:d9:87: f9:29:4d:89:01:d8:ae:f1:20:9f:5c:8a:b2:df:8f: a6:20:a6:98:a8:ee:27:94:4a:7b:b9:d9:6d:9c:6b: b2:3f:25:cf:0b:0c:11:42:a4:f7:52:f9:81:98:0b: 3d:02:d0:c1:ad:6a:0c:8f:6b:a5:82:fa:85:12:c2: 68:6e:cd:3e:09:9f:11:d5:58:a0:f8:92:52:4e:3d: 15:95:cd:ca:23:d9:26:88:e8:a8:80:f9:70:56:93: c1:7b:75:f0:71:35:a6:bb:ff:f6:45:a1:89:b2:dc: e4:40:cf:c2:41:b2:0d:9b:43:d7:75:aa:58:69:fe: 16:f0:74:26:bb:68:8a:3c:8d:c1:b7:ca:f3:69:52: 48:55:e4:e3:59:9c:e1:5e:c3:12:18:c0:71:ee:99: 2a:fb:fa:a2:68:c4:e6:76:0a:f6:af:cf:aa:d0:79: 2b:89:65:14:68:6c:3c:dc:c6:45:d5:46:f4:d5:c2: 63:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4A:02:82:DF:F2:FD:0A:D3:D4:60:CB:DB:A0:64:0A:82:EC:5C:02 X509v3 Authority Key Identifier: keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/24F33D7877AF11EB8E972C66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.88.0/23 Signature Algorithm: sha256WithRSAEncryption 10:20:73:e5:73:e2:4e:40:34:70:0f:38:d5:2f:c2:31:0b:7d: 2f:c2:9b:88:e0:cf:1e:e1:8a:93:3d:43:eb:80:9e:02:c6:b6: ab:c6:8f:30:a4:f9:d0:86:13:d4:4c:80:39:87:13:0b:93:4d: 6e:fa:96:f9:aa:54:b7:42:55:f2:9c:98:e2:42:7c:3a:ae:47: d6:4b:58:c7:35:7b:25:87:39:82:15:3d:ee:c4:aa:4c:b0:f9: e5:88:ba:9e:f7:a2:35:f0:e2:81:11:73:75:11:55:2b:16:8a: e9:fa:74:76:25:d9:11:ac:04:84:ac:c6:c9:37:4f:a1:0b:0f: f3:5f:c2:00:e4:50:7b:81:4c:1a:60:9f:b9:f8:09:ff:d9:f6: e1:a1:6f:ae:59:e1:e5:f6:f3:77:7a:ee:85:42:6b:9d:3c:1f: 1e:f0:75:98:c6:9f:08:11:90:64:be:c2:9d:9e:c2:1b:a7:6b: 34:aa:a2:5e:fb:57:48:5f:a2:fe:05:54:59:f6:87:f7:43:b3: e3:ad:2c:63:4a:37:5a:8e:ce:98:cd:dd:ba:95:69:d4:e3:3b: 29:0a:74:2c:02:18:ff:04:a8:ce:34:51:6f:ee:dc:39:00:4f: 85:00:aa:ba:b1:2b:01:8a:cd:91:17:62:8a:97:2a:2e:41:d6: 35:09:0b:ec -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyMkYxMTAvBgNVBAUTKDIxNEIyRkNGNDJCQjJCOTg5MDU4NDVENzMzRDk0NUQ5 NUMyRENBMTIwHhcNMjMwNzEyMjMyMDEzWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGFmMzUyZC1jMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TUeGR9SrfyLunbA5+9iwSfeNr3pongNsw7Ov5quX+NUKyBsalEXDzQFVXQO absGmeqVs6A10CmRyJL6qR1qwcrKLzC4Ad172Yf5KU2JAdiu8SCfXIqy34+mIKaY qO4nlEp7udltnGuyPyXPCwwRQqT3UvmBmAs9AtDBrWoMj2ulgvqFEsJobs0+CZ8R 1Vig+JJSTj0Vlc3KI9kmiOiogPlwVpPBe3XwcTWmu//2RaGJstzkQM/CQbINm0PX dapYaf4W8HQmu2iKPI3Bt8rzaVJIVeTjWZzhXsMSGMBx7pkq+/qiaMTmdgr2r8+q 0HkriWUUaGw83MZF1Ub01cJjzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFH5KAoLf 8v0K09Rgy9ugZAqC7FwCMB8GA1UdIwQYMBaAFCFLL89CuyuYkFhF1zPZRdlcLcoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDIyRi83QzY0NDQyNjc3 NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1aVFXRVhYTTlsRjJWd3R5 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVc3Z6MEs3SzVpUVdFWFhNOWxGMlZ3dHloSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDAyMkYvN0M2NDQ0MjY3NzY0MTFFQkIxQzRGNTQ1QzRGOUFFMDIvMjRGMzNENzg3 N0FGMTFFQjhFOTcyQzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmVgwDQYJKoZIhvcNAQELBQADggEBABAgc+Vz4k5ANHAP ONUvwjELfS/Cm4jgzx7hipM9Q+uAngLGtqvGjzCk+dCGE9RMgDmHEwuTTW76lvmq VLdCVfKcmOJCfDquR9ZLWMc1eyWHOYIVPe7Eqkyw+eWIup73ojXw4oERc3URVSsW iun6dHYl2RGsBISsxsk3T6ELD/NfwgDkUHuBTBpgn7n4Cf/Z9uGhb65Z4eX283d6 7oVCa508Hx7wdZjGnwgRkGS+wp2ewhunazSqol77V0hfov4FVFn2h/dDs+OtLGNK N1qOzpjN3bqVadTjOykKdCwCGP8EqM40UW/u3DkAT4UAqrqxKwGKzZEXYoqXKi5B 1jUJC+w= -----END CERTIFICATE-----Generated at Mon May 13 00:55:44 2024 by rpki-client on console-fra.rpki-client.org