$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/089C5B7C09D811EB86545F0CC4F9AE02.roa File: 089C5B7C09D811EB86545F0CC4F9AE02.roa (raw, json) Hash identifier: nXYMzrT+BGsjLVnKnm/9Hrcie34T4/seNrDQaPQvkHs= Subject key identifier: 2E:1C:C2:6D:55:43:8A:E3:FA:01:3A:09:8A:47:D4:AB:BE:2B:F0:0F Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Certificate serial: 0611 Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/089C5B7C09D811EB86545F0CC4F9AE02.roa Signing time: Mon 01 May 2023 00:20:37 +0000 ROA not before: Mon 01 May 2023 00:20:37 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 55720 IP address blocks: 45.116.176.0/24 maxlen: 24 45.116.177.0/24 maxlen: 24 45.116.178.0/24 maxlen: 24 45.116.179.0/24 maxlen: 24 103.228.52.0/24 maxlen: 24 103.228.53.0/24 maxlen: 24 103.228.54.0/24 maxlen: 24 103.228.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 22:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1553 (0x611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6 Validity Not Before: May 1 00:20:37 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=644f05d5-a325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:77:93:22:5f:bf:e8:69:ec:ff:3c:60:bb: dc:90:a6:1d:a4:22:d8:b5:b9:c1:dd:4f:a3:a4:83: c8:90:ac:73:f1:5f:45:13:76:1d:df:45:65:76:11: 00:e0:9a:76:3b:1f:64:23:16:c7:7b:24:b8:d8:d9: 7d:1d:61:00:df:9f:db:fb:36:71:aa:d2:e5:20:dc: 3f:b1:36:d5:ff:dc:01:d6:76:6d:80:af:0c:61:cb: 40:2d:e7:60:24:6b:3c:69:a4:85:fd:db:93:e4:ca: 5b:33:1a:d9:4c:9a:3d:f4:56:60:56:79:eb:03:43: f7:dd:1c:d0:94:bb:88:ec:f4:75:39:7c:02:fb:50: 0d:6c:c4:c9:76:bb:09:38:22:e4:a1:8f:17:52:3b: 3e:d2:f4:57:7e:f5:94:4f:ab:89:e7:77:28:98:02: 11:64:6f:a5:3d:f4:bc:b0:19:a3:f0:0b:ed:86:9e: 08:2b:3c:44:1a:2f:5d:59:c1:60:25:1a:8c:e4:71: 28:c6:2d:69:8a:5f:53:6c:f0:a1:7c:27:75:1f:ec: 30:d7:af:94:48:b9:a1:dc:9a:1d:49:59:f1:fd:12: 46:a4:47:a7:c6:e1:74:39:75:4d:8b:05:1a:36:cb: 5b:4c:58:6c:b7:4e:f6:90:e5:5a:13:2f:f7:56:59: e0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1C:C2:6D:55:43:8A:E3:FA:01:3A:09:8A:47:D4:AB:BE:2B:F0:0F X509v3 Authority Key Identifier: keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/089C5B7C09D811EB86545F0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.116.176.0/22 103.228.52.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:81:82:6e:83:57:a1:28:5c:9e:df:4d:27:32:ff:7d:9e:56: 3a:31:a3:8b:3a:77:f0:7f:ff:27:4a:23:b3:3c:8d:f5:3e:1f: 66:11:a3:1e:b9:84:c4:66:d0:b0:ba:eb:dd:98:6f:e6:07:9d: 3c:8b:cc:ae:2a:01:70:ed:21:b4:4b:8f:f8:4c:56:d0:14:bd: 90:aa:27:3f:e3:a3:02:07:05:ad:a2:1b:ef:58:93:31:75:5a: b4:65:69:0f:0f:ca:ed:91:00:10:f7:11:c1:19:8b:69:29:3c: 56:21:01:3e:be:25:05:7d:18:03:8a:22:7f:dc:61:15:b0:d7: 7b:bb:91:20:c7:81:ac:dc:d4:63:96:cb:ff:94:15:9e:85:d9: 5f:6e:bf:40:bb:77:e2:de:22:69:76:64:75:50:20:6c:8c:20: 31:0f:80:34:5d:f3:2e:04:6e:d3:4f:b0:b1:3f:a5:ad:56:fc: 6b:dd:39:f9:f1:41:fc:21:99:fa:ce:6c:0b:a8:73:44:08:35: cf:e9:8c:64:3c:a5:81:2f:49:5b:1f:45:e4:24:b6:c8:87:ef: 02:64:3d:3c:85:4d:e9:35:89:75:72:62:d0:45:09:83:ec:c7: c1:18:46:b4:ca:0b:d4:21:4b:30:80:f0:1d:b1:86:1c:42:4d: 12:e3:da:32 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCNzYxMTAvBgNVBAUTKENBMTVDNTkwOEQwNzJERDgyMTcxNEVDNjdFMTE3NUUz QUE5MTEyRTYwHhcNMjMwNTAxMDAyMDM3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDRmMDVkNS1hMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZZ3kyJfv+hp7P88YLvckKYdpCLYtbnB3U+jpIPIkKxz8V9FE3Yd30VldhEA 4Jp2Ox9kIxbHeyS42Nl9HWEA35/b+zZxqtLlINw/sTbV/9wB1nZtgK8MYctALedg JGs8aaSF/duT5MpbMxrZTJo99FZgVnnrA0P33RzQlLuI7PR1OXwC+1ANbMTJdrsJ OCLkoY8XUjs+0vRXfvWUT6uJ53comAIRZG+lPfS8sBmj8Avthp4IKzxEGi9dWcFg JRqM5HEoxi1pil9TbPChfCd1H+ww16+USLmh3JodSVnx/RJGpEenxuF0OXVNiwUa NstbTFhst072kOVaEy/3VlngdwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFC4cwm1V Q4rj+gE6CYpH1Ku+K/APMB8GA1UdIwQYMBaAFMoVxZCNBy3YIXFOxn4RdeOqkRLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3Ni82Q0EzMzY5QzA5 RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExkZ2hjVTdHZmhGMTQ2cVJF dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3loWEZrSTBITGRnaGNVN0dmaEYxNDZxUkV1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZCNzYvNkNBMzM2OUMwOUQ2MTFFQkIzQzNDNjg1QzRGOUFFMDIvMDg5QzVCN0Mw OUQ4MTFFQjg2NTQ1RjBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItdLADBAJn5DQwDQYJKoZIhvcNAQELBQADggEBADqBgm6D V6EoXJ7fTScy/32eVjoxo4s6d/B//ydKI7M8jfU+H2YRox65hMRm0LC6692Yb+YH nTyLzK4qAXDtIbRLj/hMVtAUvZCqJz/jowIHBa2iG+9YkzF1WrRlaQ8Pyu2RABD3 EcEZi2kpPFYhAT6+JQV9GAOKIn/cYRWw13u7kSDHgazc1GOWy/+UFZ6F2V9uv0C7 d+LeIml2ZHVQIGyMIDEPgDRd8y4EbtNPsLE/pa1W/GvdOfnxQfwhmfrObAuoc0QI Nc/pjGQ8pYEvSVsfReQktsiH7wJkPTyFTek1iXVyYtBFCYPsx8EYRrTKC9QhSzCA 8B2xhhxCTRLj2jI= -----END CERTIFICATE-----Generated at Fri Apr 19 00:06:05 2024 by rpki-client on console-ams.rpki-client.org