$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/5C8929C8839011EAB5B82263C4F9AE02.roa File: 5C8929C8839011EAB5B82263C4F9AE02.roa (raw, json) Hash identifier: atQ52lsTxZasOxqKolWrRots3HMHTfhpCYR06cscie8= Subject key identifier: 69:B2:F7:00:EC:DF:F1:E1:5A:AC:7E:D7:BA:B0:8F:C1:C2:A7:70:14 Certificate issuer: /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Certificate serial: 08CE Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/5C8929C8839011EAB5B82263C4F9AE02.roa Signing time: Thu 22 Feb 2024 21:19:03 +0000 ROA not before: Thu 22 Feb 2024 21:19:03 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 18106 IP address blocks: 103.208.176.0/22 maxlen: 22 103.208.176.0/24 maxlen: 24 103.208.177.0/24 maxlen: 24 103.208.178.0/24 maxlen: 24 103.208.179.0/24 maxlen: 24 137.59.184.0/22 maxlen: 22 137.59.184.0/24 maxlen: 24 137.59.185.0/24 maxlen: 24 137.59.186.0/24 maxlen: 24 137.59.187.0/24 maxlen: 24 2404:4280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2254 (0x8ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Validity Not Before: Feb 22 21:19:03 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d7ba46-0684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:95:13:4f:13:c6:d7:f9:29:26:15:13:a2: 0f:7a:f4:10:8b:54:de:2f:ca:7e:ad:68:ba:f2:09: 97:5d:4c:ea:a8:ac:95:88:3b:62:98:bb:e4:a6:0a: 4e:b3:c9:bb:44:10:d1:9b:b9:95:d3:f6:fd:99:47: 9d:e7:0b:56:ef:dc:bd:a6:2c:1c:4e:4f:0b:80:e3: cb:d6:b2:ff:65:cb:66:e1:f6:16:be:f5:b0:b3:c6: 5b:f7:28:2e:7e:77:f9:8a:c8:10:38:22:c7:2c:e4: ee:82:13:67:bc:2d:c6:9f:eb:c9:0c:10:e0:13:54: b1:ce:7a:29:57:46:6c:94:3c:98:b7:57:3b:92:60: 42:34:2a:28:34:18:78:e7:84:70:24:9d:41:56:9d: 79:1e:87:7f:78:b7:5e:1f:96:98:b6:84:4b:6a:4e: bc:00:3b:1f:2a:2f:8f:bd:a4:54:40:2f:e9:ab:5e: 98:9c:1b:28:d4:01:b6:5e:5a:33:e3:a4:5b:27:cb: 4c:38:74:db:67:aa:0a:b2:3f:86:e3:9e:40:29:26: 3d:b2:cb:9c:84:a3:32:64:30:34:f0:08:1f:d4:bb: 7b:8a:33:77:1d:36:b9:23:19:db:f4:a2:f2:21:66: 8e:02:f7:08:f7:38:6f:58:48:a7:ea:6b:f5:b2:44: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B2:F7:00:EC:DF:F1:E1:5A:AC:7E:D7:BA:B0:8F:C1:C2:A7:70:14 X509v3 Authority Key Identifier: keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/5C8929C8839011EAB5B82263C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.208.176.0/22 137.59.184.0/22 IPv6: 2404:4280::/32 Signature Algorithm: sha256WithRSAEncryption 37:e6:41:18:99:b3:33:89:c5:b5:da:85:27:48:26:62:8f:c6: 94:a6:e0:3e:cc:a1:30:0d:c9:68:da:78:53:6e:7e:bf:d4:90: 0d:cf:6f:79:f1:a2:98:ac:47:ee:df:97:6d:a1:12:49:ac:62: 9d:1f:68:da:f0:69:59:98:43:67:90:fa:99:9d:a8:93:12:8f: c8:79:f7:f7:7c:48:fc:8e:87:4d:c7:35:bc:96:7d:63:a8:ea: 66:5a:12:25:80:03:7f:dc:49:39:89:82:5a:f8:3e:41:03:f2: b6:a0:a4:42:64:51:6d:67:6e:ae:dd:9b:57:b2:87:ff:f5:9a: 92:0f:c2:27:0a:5c:34:fa:1f:ba:05:fe:81:26:d5:18:75:3d: 43:14:65:1e:4f:f7:57:63:c8:f5:e1:1b:09:68:9d:1a:44:57: bd:75:52:8f:87:22:40:0a:ca:ec:d1:2d:5d:c7:11:23:06:60: 2a:33:0d:09:8e:ce:8a:42:83:f1:ee:e4:0d:ec:cb:70:dd:a4: 42:13:36:53:a2:e7:36:7f:45:f1:f8:42:b3:6f:74:d9:92:dd: 5a:c7:66:16:2a:dd:1c:e3:9f:64:60:a1:f6:3b:e5:05:bf:d2: 3d:93:64:da:95:3f:48:03:d2:74:20:19:af:89:68:e1:85:93: e0:f4:22:6b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0ODgxMTAvBgNVBAUTKDYwNzZDNTEzOUQ0Q0NGREVCQ0E0NEExNEJEQjczMTY4 ODhGQTYzNDQwHhcNMjQwMjIyMjExOTAzWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ3YmE0Ni0wNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJmVE08Txtf5KSYVE6IPevQQi1TeL8p+rWi68gmXXUzqqKyViDtimLvkpgpO s8m7RBDRm7mV0/b9mUed5wtW79y9piwcTk8LgOPL1rL/Zctm4fYWvvWws8Zb9ygu fnf5isgQOCLHLOTughNnvC3Gn+vJDBDgE1SxznopV0ZslDyYt1c7kmBCNCooNBh4 54RwJJ1BVp15Hod/eLdeH5aYtoRLak68ADsfKi+PvaRUQC/pq16YnBso1AG2Xloz 46RbJ8tMOHTbZ6oKsj+G455AKSY9ssuchKMyZDA08Agf1Lt7ijN3HTa5Ixnb9KLy IWaOAvcI9zhvWEin6mv1skRftwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGmy9wDs 3/HhWqx+17qwj8HCp3AUMB8GA1UdIwQYMBaAFGB2xROdTM/evKRKFL23MWiI+mNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ4OC81RDI2ODM0QTgz OEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5NjhwRW9VdmJjeGFJajZZ MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYkZFNTFNejk2OHBFb1V2YmN4YUlqNlkwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDg0ODgvNUQyNjgzNEE4MzhGMTFFQUI3MDMxODYyQzRGOUFFMDIvNUM4OTI5Qzg4 MzkwMTFFQUI1QjgyMjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn0LADBAKJO7gwDQQCAAIwBwMFACQEQoAwDQYJKoZIhvcN AQELBQADggEBADfmQRiZszOJxbXahSdIJmKPxpSm4D7MoTANyWjaeFNufr/UkA3P b3nxopisR+7fl22hEkmsYp0faNrwaVmYQ2eQ+pmdqJMSj8h59/d8SPyOh03HNbyW fWOo6mZaEiWAA3/cSTmJglr4PkED8ragpEJkUW1nbq7dm1eyh//1mpIPwicKXDT6 H7oF/oEm1Rh1PUMUZR5P91djyPXhGwlonRpEV711Uo+HIkAKyuzRLV3HESMGYCoz DQmOzopCg/Hu5A3sy3DdpEITNlOi5zZ/RfH4QrNvdNmS3VrHZhYq3Rzjn2RgofY7 5QW/0j2TZNqVP0gD0nQgGa+JaOGFk+D0Ims= -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:47 2024 by rpki-client on console-ams.rpki-client.org