$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/55F7C16CABDE11EEA9B44639C4F9AE02.roa File: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (raw, json) Hash identifier: YYeRnwFaSoqXD/Tyyn3gdTiOsY7m0KcWw605LOpvHwg= Subject key identifier: 56:B5:71:9C:7B:85:D3:1E:74:89:18:CF:6F:72:49:90:89:65:8D:DA Certificate issuer: /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB Certificate serial: 02 Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/55F7C16CABDE11EEA9B44639C4F9AE02.roa Signing time: Fri 05 Jan 2024 15:23:11 +0000 ROA not before: Fri 05 Jan 2024 15:23:11 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 151982 IP address blocks: 103.250.102.0/24 maxlen: 24 2001:df3:1140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB Validity Not Before: Jan 5 15:23:11 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65981edf-36ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:02:4a:6e:83:af:0c:63:9b:ee:e0:66:5f:d9: 59:49:55:6a:78:99:82:e8:a9:59:f2:18:25:c0:da: 10:82:d5:b3:d1:a9:9b:89:4f:1d:8d:30:00:a9:43: 57:15:a1:3b:17:35:8a:1c:cb:0e:79:c1:d1:27:a8: 00:b4:f1:08:16:a6:c1:fd:82:f2:2c:85:bb:fa:8c: 78:68:f7:90:bb:0f:fb:59:22:7f:3d:9b:b5:b4:bb: 43:83:65:74:54:de:40:ef:b3:5b:19:67:21:fa:06: 18:06:49:da:d5:f0:a2:38:19:66:3c:3f:6f:22:85: 04:de:9a:ff:ba:3b:09:20:96:59:a3:e2:3a:f6:80: 42:87:a6:b5:f9:46:1f:61:d6:f9:21:33:19:d6:04: 08:1c:21:f4:ba:59:ad:d6:e9:64:ee:50:99:a5:3f: 50:38:2d:14:95:ce:55:88:17:fc:2f:31:42:23:65: 65:eb:fa:2c:be:56:24:4c:c2:37:e8:ad:3c:46:0d: d5:ae:d1:8f:cd:36:d5:f4:e8:a8:a9:e7:c3:80:db: b3:44:59:05:2c:14:8d:ae:27:da:cd:62:8f:4c:26: 42:db:24:43:be:2c:92:50:d7:65:5e:50:05:e4:b6: 29:c7:6d:d8:20:b1:92:40:1c:8f:71:db:52:42:19: 10:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B5:71:9C:7B:85:D3:1E:74:89:18:CF:6F:72:49:90:89:65:8D:DA X509v3 Authority Key Identifier: keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/55F7C16CABDE11EEA9B44639C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.250.102.0/24 IPv6: 2001:df3:1140::/48 Signature Algorithm: sha256WithRSAEncryption 50:16:de:fc:1a:38:25:05:6c:e3:75:e3:53:52:5a:a1:5e:b3: f9:1f:f9:80:61:ce:60:f6:f8:78:42:d5:43:ee:9b:a2:fb:6a: 35:87:e0:d1:b6:8d:f1:ee:1c:3a:f5:e9:c3:ce:a0:4e:3c:16: da:93:61:8f:5f:2d:04:a3:74:fb:7a:36:0a:fa:4d:3c:89:7d: 97:e7:2d:f8:d1:28:97:89:82:7a:45:37:b7:1f:79:c4:bf:56: d9:a3:be:75:f3:85:fc:04:2e:fd:8b:48:d2:ba:c7:92:a5:7f: 96:60:3f:af:ea:8e:69:90:88:0f:79:e4:dc:18:4c:3c:3e:68: 4d:94:8e:79:cc:d5:15:94:71:06:26:bf:ea:fd:73:1f:1e:ff: d1:5d:9f:5d:e7:1f:f0:3d:59:4b:bb:5e:bc:c3:70:cb:1a:fb: b3:1f:9b:ed:0a:2e:b2:71:12:06:9f:54:62:7b:4d:ff:aa:a1: 37:9f:b5:0d:46:67:ac:af:a3:a9:7e:85:25:b7:0f:16:bd:02: de:fa:df:93:e0:f2:69:da:a7:93:f2:2e:e8:07:35:09:85:3d: e9:79:fc:fe:70:a9:a6:56:07:3b:c8:35:35:7f:c9:7c:ef:db: db:5f:3d:60:d4:89:72:cc:82:29:ae:64:a4:b0:2f:b4:be:83: a8:1e:96:e1 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjA4OTExMC8GA1UEBRMoNTQ4QzNDMDBCRTI5MEMxNjczREI2Njk5OTg1MjBENzIz Nzg0NDVDQjAeFw0yNDAxMDUxNTIzMTFaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1OTgxZWRmLTM2YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeAkpug68MY5vu4GZf2VlJVWp4mYLoqVnyGCXA2hCC1bPRqZuJTx2NMACpQ1cV oTsXNYocyw55wdEnqAC08QgWpsH9gvIshbv6jHho95C7D/tZIn89m7W0u0ODZXRU 3kDvs1sZZyH6BhgGSdrV8KI4GWY8P28ihQTemv+6Owkgllmj4jr2gEKHprX5Rh9h 1vkhMxnWBAgcIfS6Wa3W6WTuUJmlP1A4LRSVzlWIF/wvMUIjZWXr+iy+ViRMwjfo rTxGDdWu0Y/NNtX06Kip58OA27NEWQUsFI2uJ9rNYo9MJkLbJEO+LJJQ12VeUAXk tinHbdggsZJAHI9x21JCGRCLAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUVrVxnHuF 0x50iRjPb3JJkIlljdowHwYDVR0jBBgwFoAUVIw8AL4pDBZz22aZmFINcjeERcsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCMDg5LzBGODk2QUZBQUJE RTExRUU5RUYwREYzOEM0RjlBRTAyL1ZJdzhBTDRwREJaejIyYVptRklOY2plRVJj cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkl3OEFMNHBEQlp6MjJhWm1GSU5jamVFUmNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA4OS8wRjg5NkFGQUFCREUxMUVFOUVGMERGMzhDNEY5QUUwMi81NUY3QzE2Q0FC REUxMUVFQTlCNDQ2MzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAGf6ZjAPBAIAAjAJAwcAIAEN8xFAMA0GCSqGSIb3DQEBCwUA A4IBAQBQFt78GjglBWzjdeNTUlqhXrP5H/mAYc5g9vh4QtVD7pui+2o1h+DRto3x 7hw69enDzqBOPBbak2GPXy0Eo3T7ejYK+k08iX2X5y340SiXiYJ6RTe3H3nEv1bZ o75184X8BC79i0jSuseSpX+WYD+v6o5pkIgPeeTcGEw8PmhNlI55zNUVlHEGJr/q /XMfHv/RXZ9d5x/wPVlLu168w3DLGvuzH5vtCi6ycRIGn1Rie03/qqE3n7UNRmes r6OpfoUltw8WvQLe+t+T4PJp2qeT8i7oBzUJhT3pefz+cKmmVgc7yDU1f8l879vb Xz1g1IlyzIIprmSksC+0voOoHpbh -----END CERTIFICATE-----Generated at Fri Jun 7 09:40:17 2024 by rpki-client on console-ams.rpki-client.org