$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/7490D0DE5AE111EFAD7EB82CC4F9AE02.roa File: 7490D0DE5AE111EFAD7EB82CC4F9AE02.roa (raw, json) Hash identifier: t2Ij9WmOv285Qe1IPpwSlpXmYjCDJzDV9cm4X0fPj98= Subject key identifier: C1:3C:77:C4:FB:BB:9D:BB:9B:FC:18:6C:04:F4:8B:93:29:CD:54:DE Certificate issuer: /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Certificate serial: 02 Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/7490D0DE5AE111EFAD7EB82CC4F9AE02.roa Signing time: Thu 15 Aug 2024 08:36:24 +0000 ROA not before: Thu 15 Aug 2024 08:36:24 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 26658 IP address blocks: 103.4.20.0/22 maxlen: 22 202.9.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Validity Not Before: Aug 15 08:36:24 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66bdbe08-c8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:44:df:28:b0:74:d5:62:13:a9:39:86:84: 44:6a:b5:a5:fe:33:21:c5:66:29:a7:7f:2b:45:ac: 52:da:0a:5c:1c:a6:1d:3f:8e:39:9d:32:9b:ac:b1: 57:92:e0:1c:3c:b8:92:45:73:53:74:de:7c:a4:55: cf:a3:d1:86:1c:d4:bb:d0:5a:ff:fa:08:ff:b9:05: d5:f9:92:8b:7a:ce:f2:e5:37:6e:0e:fb:2b:a3:87: 8d:9f:95:27:ec:f7:2a:b9:dd:cd:95:ca:27:8d:0f: 6f:d7:18:48:09:85:f8:b6:0f:93:02:f5:31:6f:09: f3:78:7c:be:f6:d5:a7:76:ae:bf:44:3b:28:94:c7: c3:1f:4c:9d:47:f6:36:6d:70:b3:5e:af:1d:ff:e9: c1:8d:02:e3:c1:40:38:38:9f:e1:0e:2c:94:20:54: cf:7a:18:29:77:b4:3a:08:12:77:c4:72:5b:ec:7f: f6:ff:52:51:72:22:41:c7:aa:66:a1:0f:58:0e:b8: d6:d7:97:3f:65:2e:cf:a5:c2:6d:b1:27:67:5d:57: b2:33:4d:f2:bd:8c:d2:b5:a5:33:b5:86:fd:7f:e6: 78:69:05:60:a4:10:da:46:05:25:d6:d6:14:98:cc: a7:b4:3b:ab:7a:ff:e0:e8:8f:42:5e:7b:92:33:a1: 52:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3C:77:C4:FB:BB:9D:BB:9B:FC:18:6C:04:F4:8B:93:29:CD:54:DE X509v3 Authority Key Identifier: keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/7490D0DE5AE111EFAD7EB82CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.4.20.0/22 202.9.60.0/22 Signature Algorithm: sha256WithRSAEncryption a5:09:b4:02:3b:04:b3:73:8a:7a:61:31:f2:ab:35:a2:78:04: 24:fd:8e:34:1f:88:9a:19:67:d6:13:7c:6a:b8:49:10:3e:aa: 6f:2a:b5:e1:32:9f:b5:47:73:4a:b6:b3:b0:3e:a8:1d:37:3f: e2:37:7a:c6:d3:e3:3f:a9:ad:56:20:e6:db:2e:1d:36:2e:bf: f2:c8:e3:6b:6e:f8:63:21:be:36:2e:b4:f2:ad:1d:84:98:56: 8c:7e:14:6f:77:d1:13:6e:1c:14:7a:4a:b9:9e:5f:59:07:3e: 8f:62:35:94:c9:d5:06:b1:fd:bf:d6:9f:b2:dd:57:8c:09:73: 47:a5:ac:46:43:66:d3:81:f9:9d:64:24:1e:90:4c:ed:3c:07: fe:28:8e:1c:6d:3d:f7:1f:cc:99:a0:6d:23:03:d2:d8:d3:36: 9e:f2:c6:57:b3:4b:d8:04:c5:2e:4b:18:ef:c3:c4:df:99:db: 07:55:5b:2a:e4:35:00:ee:87:47:fd:da:0b:fe:c9:e7:da:c7: 49:3e:0e:56:c7:cb:5d:5d:f7:86:a2:24:20:5a:67:f7:d0:ac: d7:e7:0e:2e:0d:61:27:39:69:ed:99:74:62:e4:3b:28:8c:42: 74:0b:83:51:d4:4c:b1:d8:9e:de:38:bf:aa:c7:38:df:b8:f3: 75:7d:64:0d -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NERFQTExMC8GA1UEBRMoMkJDQUNGNjE2NUI1ODc0MDU5MEU1OTcxODQzM0Q4MTgz RkY5NDY2RDAeFw0yNDA4MTUwODM2MjRaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmRiZTA4LWM4ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx9UTfKLB01WITqTmGhERqtaX+MyHFZimnfytFrFLaClwcph0/jjmdMpussVeS 4Bw8uJJFc1N03nykVc+j0YYc1LvQWv/6CP+5BdX5kot6zvLlN24O+yujh42flSfs 9yq53c2VyieND2/XGEgJhfi2D5MC9TFvCfN4fL721ad2rr9EOyiUx8MfTJ1H9jZt cLNerx3/6cGNAuPBQDg4n+EOLJQgVM96GCl3tDoIEnfEclvsf/b/UlFyIkHHqmah D1gOuNbXlz9lLs+lwm2xJ2ddV7IzTfK9jNK1pTO1hv1/5nhpBWCkENpGBSXW1hSY zKe0O6t6/+Doj0Jee5IzoVInAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUwTx3xPu7 nbub/BhsBPSLkynNVN4wHwYDVR0jBBgwFoAUK8rPYWW1h0BZDllxhDPYGD/5Rm0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0REVBLzNCRjVGMkUwNUFF MTExRUZBNzU2M0MyQ0M0RjlBRTAyL0s4clBZV1cxaDBCWkRsbHhoRFBZR0RfNVJt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSzhyUFlXVzFoMEJaRGxseGhEUFlHRF81Um0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NERFQS8zQkY1RjJFMDVBRTExMUVGQTc1NjNDMkNDNEY5QUUwMi83NDkwRDBERTVB RTExMUVGQUQ3RUI4MkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmcEFAMEAsoJPDANBgkqhkiG9w0BAQsFAAOCAQEApQm0AjsE s3OKemEx8qs1ongEJP2ONB+Imhln1hN8arhJED6qbyq14TKftUdzSrazsD6oHTc/ 4jd6xtPjP6mtViDm2y4dNi6/8sjja274YyG+Ni608q0dhJhWjH4Ub3fRE24cFHpK uZ5fWQc+j2I1lMnVBrH9v9afst1XjAlzR6WsRkNm04H5nWQkHpBM7TwH/iiOHG09 9x/MmaBtIwPS2NM2nvLGV7NL2ATFLksY78PE35nbB1VbKuQ1AO6HR/3aC/7J59rH ST4OVsfLXV33hqIkIFpn99Cs1+cOLg1hJzlp7Zl0YuQ7KIxCdAuDUdRMsdie3ji/ qsc437jzdX1kDQ== -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:47 2024 by rpki-client on console-fra.rpki-client.org