$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/E8053F36BC3011EA840E2A56C4F9AE02.roa File: E8053F36BC3011EA840E2A56C4F9AE02.roa (raw, json) Hash identifier: DlgGGdYqrKN5h9MW9q70lTsP/SY3jDF+HYoYux1PP0A= Subject key identifier: 1F:01:FB:70:9B:AD:2D:85:4C:C5:19:C8:93:67:08:9C:E5:92:AC:57 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 07C7 Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/E8053F36BC3011EA840E2A56C4F9AE02.roa Signing time: Thu 28 Mar 2024 09:29:42 +0000 ROA not before: Thu 28 Mar 2024 09:29:42 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 9311 IP address blocks: 103.224.56.0/24 maxlen: 24 103.224.59.0/24 maxlen: 24 202.58.30.0/24 maxlen: 24 202.58.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Mar 28 09:29:42 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=66053886-291d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:40:59:e4:f1:b9:80:df:ac:57:50:d7:d2: 58:d1:fe:0f:29:02:e4:36:8a:a9:98:00:e1:fa:66: a6:f5:0c:6a:9e:34:51:28:fb:92:16:0c:6c:2f:f0: 80:86:7c:b1:0b:1a:61:fd:6d:cb:b3:3a:2f:5c:43: d9:74:2a:e2:8a:61:70:30:c3:7a:fa:52:60:cf:89: 93:a4:f2:78:6c:c1:eb:8e:20:8f:3b:71:3a:ca:98: f8:58:6e:f0:04:34:e2:18:74:8f:c4:3b:18:89:d6: 7a:ba:01:2c:ec:0d:2c:3c:0e:19:cf:ef:f5:7e:9d: a0:1e:10:4c:b7:fc:e0:82:43:9f:d9:0f:87:07:93: 7f:86:77:ef:f7:97:5f:a5:82:0c:0b:62:97:fe:8b: 9e:d6:fc:7c:b9:73:2f:df:c9:7b:f1:05:9f:b8:e5: 52:32:fd:ed:58:19:5a:f6:7c:75:0a:95:70:a3:e9: 42:7b:96:1b:b7:50:79:28:90:06:e2:0b:ab:12:d4: dd:a7:c0:c6:87:d7:48:bb:27:f0:7e:9d:ab:bb:a5: 58:c8:09:30:78:f9:1e:85:1e:81:61:21:23:87:0a: d5:59:98:e2:02:b8:4f:61:25:de:23:27:23:bf:d8: 55:cc:a8:40:d9:3e:f1:38:dc:6b:05:5b:76:79:35: a1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:01:FB:70:9B:AD:2D:85:4C:C5:19:C8:93:67:08:9C:E5:92:AC:57 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/E8053F36BC3011EA840E2A56C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.56.0/24 103.224.59.0/24 202.58.30.0/23 Signature Algorithm: sha256WithRSAEncryption b5:b8:2c:e4:e6:31:bb:08:d0:56:de:af:15:99:c1:dd:56:14: 2e:f2:5a:b6:84:ee:4f:5c:11:aa:0c:e3:4c:e6:99:ec:99:0d: b4:0f:24:9c:b5:98:d3:50:54:fe:b4:ef:c0:53:15:00:c2:6e: 96:e2:7b:d2:c5:7a:74:79:f9:e4:b5:09:62:13:3b:aa:0c:06: 57:79:d6:5a:3e:fd:fe:db:48:76:c5:30:4f:ac:12:b9:f9:94: 04:d2:a1:4b:21:5e:d4:bb:18:81:f5:62:98:45:42:25:14:e1: 17:8a:bb:2f:d9:b4:a7:f9:da:27:be:2a:12:83:62:ab:25:02: 5b:df:5c:53:50:7b:eb:b3:da:c4:64:60:6b:26:a0:e6:03:49: bf:f6:5f:45:02:6c:c1:74:4d:4c:e2:d7:c3:9c:00:16:a8:28: f7:82:70:48:1c:18:a2:b4:4a:16:ab:53:af:9e:2c:1f:37:17: de:a6:0b:ad:2b:44:3d:05:ee:7e:ca:f1:0f:5d:f8:d5:5e:0f: 51:a1:75:74:3d:13:3f:c8:22:f0:78:4d:74:c8:b1:53:59:cf: a7:4e:d1:a5:39:ae:e5:a5:d5:8c:1f:1a:6e:6a:47:92:25:2a: dc:c5:4d:5a:5b:e7:78:64:6b:a3:f3:c4:d5:78:1a:ab:ac:ea: 66:5e:f9:3d -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjQwMzI4MDkyOTQyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjA1Mzg4Ni0yOTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv9AWeTxuYDfrFdQ19JY0f4PKQLkNoqpmADh+mam9QxqnjRRKPuSFgxsL/CA hnyxCxph/W3LszovXEPZdCriimFwMMN6+lJgz4mTpPJ4bMHrjiCPO3E6ypj4WG7w BDTiGHSPxDsYidZ6ugEs7A0sPA4Zz+/1fp2gHhBMt/zggkOf2Q+HB5N/hnfv95df pYIMC2KX/oue1vx8uXMv38l78QWfuOVSMv3tWBla9nx1CpVwo+lCe5Ybt1B5KJAG 4gurEtTdp8DGh9dIuyfwfp2ru6VYyAkwePkehR6BYSEjhwrVWZjiArhPYSXeIycj v9hVzKhA2T7xONxrBVt2eTWhAwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFB8B+3Cb rS2FTMUZyJNnCJzlkqxXMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRGREQvMjhGQjI0ODRCQzMwMTFFQUJCRTBFQzU1QzRGOUFFMDIvRTgwNTNGMzZC QzMwMTFFQTg0MEUyQTU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABn4DgDBABn4DsDBAHKOh4wDQYJKoZIhvcNAQELBQADggEB ALW4LOTmMbsI0FberxWZwd1WFC7yWraE7k9cEaoM40zmmeyZDbQPJJy1mNNQVP60 78BTFQDCbpbie9LFenR5+eS1CWITO6oMBld51lo+/f7bSHbFME+sErn5lATSoUsh XtS7GIH1YphFQiUU4ReKuy/ZtKf52ie+KhKDYqslAlvfXFNQe+uz2sRkYGsmoOYD Sb/2X0UCbMF0TUzi18OcABaoKPeCcEgcGKK0SharU6+eLB83F96mC60rRD0F7n7K 8Q9d+NVeD1GhdXQ9Ez/IIvB4TXTIsVNZz6dO0aU5ruWl1YwfGm5qR5IlKtzFTVpb 53hka6PzxNV4Gqus6mZe+T0= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org