$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/6A4E9778632F11EE8F22BC2EC4F9AE02.roa File: 6A4E9778632F11EE8F22BC2EC4F9AE02.roa (raw, json) Hash identifier: NsD+CZ8Q2Hz+TNwYGCOmuh7fT5EjVgfD5YZkwpCjQIQ= Subject key identifier: 95:DF:0F:FE:23:81:B2:1C:F4:A5:FD:7C:D6:AA:F7:35:AF:E9:1A:B3 Certificate issuer: /CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A Certificate serial: 049C Authority key identifier: 9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/6A4E9778632F11EE8F22BC2EC4F9AE02.roa Signing time: Thu 05 Oct 2023 03:29:40 +0000 ROA not before: Thu 05 Oct 2023 03:29:40 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 139628 IP address blocks: 103.152.194.0/24 maxlen: 24 103.152.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A Validity Not Before: Oct 5 03:29:40 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=651e2da3-4e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:92:3d:0d:29:b1:5d:6b:d3:4e:2c:b4:6b: 7b:16:83:f7:7e:22:d6:42:80:24:ed:0f:8c:24:8f: 48:65:50:f5:ad:1e:89:8c:4b:ee:03:6a:03:9c:6a: 82:68:fd:f5:fb:2f:f5:39:0b:9f:e8:a0:e4:a3:f1: 30:7b:9b:57:3e:fd:93:48:54:4d:f4:e3:59:fd:3e: 2a:6b:5a:82:45:03:84:71:9c:b9:b7:87:10:b1:bb: 19:b5:81:50:e2:d8:e6:fd:f3:69:71:be:58:4c:c9: 60:eb:94:af:73:8b:82:42:a1:63:2b:56:ea:8c:2d: 5f:83:32:c8:9e:22:c0:2a:52:6e:60:77:7b:7a:5e: e6:17:5b:b6:3b:f1:ab:87:fb:7e:93:22:3c:28:da: cf:9c:5a:95:8c:61:19:5a:56:44:ef:8b:2c:0c:08: 61:7e:96:74:e6:81:d2:10:a1:a1:43:eb:21:ea:05: 80:9a:51:15:64:14:86:2a:41:cb:69:88:90:60:d6: 9a:dc:4d:d2:e8:9a:95:7b:48:e2:e8:78:d7:0a:9e: fe:4c:f0:ec:31:cb:6b:40:5b:45:06:04:7e:6c:87: de:00:ca:64:04:00:e3:1f:a6:f2:29:d4:e7:a4:03: 03:99:2c:df:c7:9c:54:53:95:a1:7b:64:04:e5:72: 89:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DF:0F:FE:23:81:B2:1C:F4:A5:FD:7C:D6:AA:F7:35:AF:E9:1A:B3 X509v3 Authority Key Identifier: keyid:9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/6A4E9778632F11EE8F22BC2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.194.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:5a:50:09:2d:d3:4e:98:b0:7f:df:7e:7b:2f:00:17:96:22: 26:d8:46:9f:e7:a2:4d:3a:99:5b:66:c5:9c:da:de:ac:c0:cc: 0d:44:8d:ac:bc:68:59:f8:ec:2c:ee:15:03:31:fe:f6:db:20: 8b:db:cc:23:44:de:e6:95:7a:82:14:ad:9b:5b:ed:cd:56:10: 4d:8b:21:c5:af:da:37:42:e5:d7:0f:6c:ef:89:32:31:15:7a: b7:9d:ed:24:bb:a0:ea:60:71:fa:3c:44:d5:0b:28:35:4c:f8: d8:f6:67:78:e5:81:d3:20:53:7f:b5:5a:9c:f9:f6:33:31:56: 45:2a:ab:02:9e:4c:94:ae:05:ff:c3:9a:10:22:57:68:16:dd: 09:49:f6:bf:52:bb:0f:e1:cf:6c:72:62:ea:9b:10:ea:03:9b: b6:bb:9d:8c:e3:9a:1a:f1:49:23:9d:e6:23:47:63:a4:a2:da: 28:65:ca:99:34:e8:d2:8c:51:29:3c:5a:32:b5:f6:e5:c6:ad: 36:35:d6:c8:90:ee:a6:a7:aa:2b:38:1a:60:55:8c:96:ea:62: 63:3d:76:7e:dd:f9:7c:0b:84:2d:b4:0a:c9:e2:94:51:9f:f6: 2e:7f:f3:f5:53:6d:3d:64:1f:25:fe:be:1c:fe:f0:06:0b:73: 9c:16:47:4c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGOUExMTAvBgNVBAUTKDlGN0RFRDdEMDVCODFERTY2QzczNUJCODU0N0U3NjA0 OEM5QzNGNUEwHhcNMjMxMDA1MDMyOTQwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFlMmRhMy00ZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1SSPQ0psV1r004stGt7FoP3fiLWQoAk7Q+MJI9IZVD1rR6JjEvuA2oDnGqC aP31+y/1OQuf6KDko/Ewe5tXPv2TSFRN9ONZ/T4qa1qCRQOEcZy5t4cQsbsZtYFQ 4tjm/fNpcb5YTMlg65Svc4uCQqFjK1bqjC1fgzLIniLAKlJuYHd7el7mF1u2O/Gr h/t+kyI8KNrPnFqVjGEZWlZE74ssDAhhfpZ05oHSEKGhQ+sh6gWAmlEVZBSGKkHL aYiQYNaa3E3S6JqVe0ji6HjXCp7+TPDsMctrQFtFBgR+bIfeAMpkBADjH6byKdTn pAMDmSzfx5xUU5Whe2QE5XKJNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJXfD/4j gbIc9KX9fNaq9zWv6RqzMB8GA1UdIwQYMBaAFJ997X0FuB3mbHNbuFR+dgSMnD9a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY5QS9DMEVBNTc5OEJF NDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFXNEhlWnNjMXU0Vkg1MkJJeWNQ MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24zM3RmUVc0SGVac2MxdTRWSDUyQkl5Y1Axby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhGOUEvQzBFQTU3OThCRTQ1MTFFQkIwQzVEMDg0QzRGOUFFMDIvNkE0RTk3Nzg2 MzJGMTFFRThGMjJCQzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmMIwDQYJKoZIhvcNAQELBQADggEBAF5aUAkt006YsH/f fnsvABeWIibYRp/nok06mVtmxZza3qzAzA1Ejay8aFn47CzuFQMx/vbbIIvbzCNE 3uaVeoIUrZtb7c1WEE2LIcWv2jdC5dcPbO+JMjEVered7SS7oOpgcfo8RNULKDVM +Nj2Z3jlgdMgU3+1Wpz59jMxVkUqqwKeTJSuBf/DmhAiV2gW3QlJ9r9Suw/hz2xy YuqbEOoDm7a7nYzjmhrxSSOd5iNHY6Si2ihlypk06NKMUSk8WjK19uXGrTY11siQ 7qanqis4GmBVjJbqYmM9dn7d+XwLhC20CsnilFGf9i5/8/VTbT1kHyX+vhz+8AYL c5wWR0w= -----END CERTIFICATE-----Generated at Fri May 17 02:01:41 2024 by rpki-client on console-ams.rpki-client.org