$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa File: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (raw, json) Hash identifier: kfl/Obx3h4m/hFbttNdroqHInQVOadvgrPgoBvG+n0s= Subject key identifier: C8:3E:3A:AE:5E:33:2C:3F:75:3C:B2:4C:41:FE:CC:7C:01:67:42:62 Certificate issuer: /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Certificate serial: 03C0 Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa Signing time: Sat 27 May 2023 03:10:36 +0000 ROA not before: Sat 27 May 2023 03:10:36 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 139219 IP address blocks: 103.139.176.0/23 maxlen: 23 103.139.176.0/24 maxlen: 24 103.139.177.0/24 maxlen: 24 2400:1460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 960 (0x3c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Validity Not Before: May 27 03:10:36 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647174ac-04e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:89:13:8d:78:f0:c9:76:d3:3d:ad:43:e0:ae: bd:43:90:58:9b:bf:fd:39:33:0e:c6:0c:b4:99:d0: be:d5:99:51:ca:23:54:4a:f3:31:0b:88:68:e7:31: fe:46:49:60:df:45:19:9d:ff:cf:c7:be:10:2e:b3: 0b:05:2f:a7:8a:df:e8:6b:de:70:bd:36:64:94:8a: 6d:a6:55:50:08:96:6c:89:84:34:ed:b8:0c:5c:fa: fb:bb:bf:a6:12:63:32:15:e9:49:86:73:b2:d4:23: c6:ea:5b:8c:e6:bd:c7:94:f5:0b:82:db:9f:c4:60: 1b:73:4a:cd:01:c2:99:5a:d7:d9:a7:4f:eb:79:17: a9:67:85:83:94:61:c4:76:de:fa:71:39:ab:6e:76: cd:28:6c:ad:25:0a:b5:57:93:0b:51:f0:97:53:67: 75:36:a1:47:fe:8a:14:2e:d4:6c:6c:ad:aa:23:3b: d7:df:30:5b:5d:c1:d1:08:33:d7:3d:d1:0c:5f:4c: 65:f6:f0:36:c5:11:74:bb:70:b4:2f:b6:b4:78:27: 4f:88:61:15:c9:20:10:73:81:57:f3:03:f0:5f:d7: 88:70:e6:3d:f4:c9:57:0b:24:e4:3e:76:5f:71:a4: 99:11:d7:5e:14:95:4e:47:49:89:5d:6a:ed:68:91: 69:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3E:3A:AE:5E:33:2C:3F:75:3C:B2:4C:41:FE:CC:7C:01:67:42:62 X509v3 Authority Key Identifier: keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.176.0/23 IPv6: 2400:1460::/32 Signature Algorithm: sha256WithRSAEncryption 14:26:ce:2d:50:5b:77:e3:e5:1b:90:24:6d:1c:db:dd:18:d9: 8a:53:3b:c6:3b:90:c5:8d:3e:ab:be:0b:27:a6:23:98:79:b3: 90:05:68:30:1f:ce:b4:22:69:5c:c7:1a:e0:3c:a8:3e:43:10: 89:dc:8e:48:eb:62:68:77:df:36:3a:af:32:18:bf:11:24:f5: 29:24:b8:20:3d:6d:25:cb:05:a4:8c:87:d9:4e:64:d6:f2:73: 8f:8c:b3:01:c0:bb:be:97:76:8b:1f:9e:c0:75:f5:cc:20:14: 90:ad:65:3a:37:8b:7b:e2:dd:fa:7e:68:98:28:bb:f9:6f:f4: 8d:eb:90:ab:39:02:86:06:bb:05:b3:e0:b0:f2:cf:96:22:8a: d7:57:c6:71:a0:a4:b3:d7:f2:60:25:e6:05:9d:ed:e7:ea:4f: 6f:25:27:ba:69:80:5a:19:04:9d:ff:b3:4a:6d:71:15:8f:e6: 57:be:18:df:4c:9b:e5:21:e7:58:bc:54:2c:6d:47:b9:03:ac: bc:b3:ac:c6:b9:45:d4:a6:4b:c0:d4:bc:76:93:a8:b9:e5:57: b3:27:df:63:c3:cd:48:47:b7:bb:7f:4a:c9:aa:0b:ec:6c:89: 6a:78:8b:62:0e:54:3c:3b:99:87:ca:1e:6b:3f:28:68:56:b5: d6:b0:78:a0 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDgxMTAvBgNVBAUTKDBCQTFDNTJENjI1QkIxQjlFNDQzMzgyNTBEQTNENjRE ODA2ODdBMEEwHhcNMjMwNTI3MDMxMDM2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDcxNzRhYy0wNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IkTjXjwyXbTPa1D4K69Q5BYm7/9OTMOxgy0mdC+1ZlRyiNUSvMxC4ho5zH+ Rklg30UZnf/Px74QLrMLBS+nit/oa95wvTZklIptplVQCJZsiYQ07bgMXPr7u7+m EmMyFelJhnOy1CPG6luM5r3HlPULgtufxGAbc0rNAcKZWtfZp0/reRepZ4WDlGHE dt76cTmrbnbNKGytJQq1V5MLUfCXU2d1NqFH/ooULtRsbK2qIzvX3zBbXcHRCDPX PdEMX0xl9vA2xRF0u3C0L7a0eCdPiGEVySAQc4FX8wPwX9eIcOY99MlXCyTkPnZf caSZEddeFJVOR0mJXWrtaJFpVwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMg+Oq5e Myw/dTyyTEH+zHwBZ0JiMB8GA1UdIwQYMBaAFAuhxS1iW7G55EM4JQ2j1k2AaHoK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0OC81MEVGRDg3NkY5 RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNibmtRemdsRGFQV1RZQm9l Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2SEZMV0pic2Jua1F6Z2xEYVBXVFlCb2Vnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDBFNDgvNTBFRkQ4NzZGOUQ0MTFFQjk3OTQ4MzExQzRGOUFFMDIvRDVGRkNCOTZG OUQ2MTFFQjhBOUZDRTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFni7AwDQQCAAIwBwMFACQAFGAwDQYJKoZIhvcNAQELBQAD ggEBABQmzi1QW3fj5RuQJG0c290Y2YpTO8Y7kMWNPqu+CyemI5h5s5AFaDAfzrQi aVzHGuA8qD5DEIncjkjrYmh33zY6rzIYvxEk9SkkuCA9bSXLBaSMh9lOZNbyc4+M swHAu76XdosfnsB19cwgFJCtZTo3i3vi3fp+aJgou/lv9I3rkKs5AoYGuwWz4LDy z5YiitdXxnGgpLPX8mAl5gWd7efqT28lJ7ppgFoZBJ3/s0ptcRWP5le+GN9Mm+Uh 51i8VCxtR7kDrLyzrMa5RdSmS8DUvHaTqLnlV7Mn32PDzUhHt7t/SsmqC+xsiWp4 i2IOVDw7mYfKHms/KGhWtdaweKA= -----END CERTIFICATE-----Generated at Fri May 17 02:38:38 2024 by rpki-client on console-fra.rpki-client.org