$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa File: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (raw, json) Hash identifier: shD1tJt4HPy3jOKupomkCVdCCSH27mhNKEdGk9N1jYE= Subject key identifier: 76:5C:30:85:40:48:30:B0:F5:2B:FD:0D:ED:E6:1B:72:2C:9D:A3:28 Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Certificate serial: 0627 Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa Signing time: Thu 13 Apr 2023 00:00:56 +0000 ROA not before: Thu 13 Apr 2023 00:00:56 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138945 IP address blocks: 103.137.128.0/24 maxlen: 24 103.140.198.0/24 maxlen: 24 2001:df0:1f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Validity Not Before: Apr 13 00:00:56 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64374638-f8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fa:83:c6:20:73:cc:72:13:43:3a:17:b7:9f: 18:85:b6:6b:42:57:6b:c2:d4:cb:1f:74:95:3d:ae: a8:25:0f:73:0d:e7:c2:5b:28:3e:55:d6:4d:00:ca: 41:14:d4:5e:1f:d5:e0:a0:aa:af:69:49:a6:ff:02: ac:39:c7:59:72:06:17:b9:67:8e:c0:48:95:8d:71: 8a:9f:63:fa:be:a0:26:9d:b9:fc:c2:27:b6:8d:c7: e0:df:21:28:71:11:62:c0:46:04:ef:4a:48:fc:d3: 8b:0e:d4:21:0f:7e:cc:74:be:17:80:59:d9:3e:ad: 32:2c:7a:c1:ba:ae:7c:7b:b6:f0:db:cc:cd:99:5b: a6:7c:8d:e1:66:1b:f0:71:43:31:2b:bd:6b:3d:b5: ba:c5:e6:e0:2e:ee:5a:e5:c6:29:69:fa:43:23:df: 16:0a:0e:c0:f9:8f:d2:a8:e5:fb:dc:4b:76:f2:9a: f7:a9:d9:5d:40:9c:ce:ac:9b:59:bc:34:90:58:d4: 0d:84:69:a6:32:d2:00:a6:54:d8:6c:ce:9c:e3:3d: f6:54:d6:e1:5f:a1:41:fa:c0:4b:13:04:b6:fc:74: e2:98:e3:0e:ba:40:63:e0:ca:d4:ca:14:4e:4d:74: e9:8f:28:1e:b9:d3:75:6f:a6:a2:5e:a1:12:64:cd: 32:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5C:30:85:40:48:30:B0:F5:2B:FD:0D:ED:E6:1B:72:2C:9D:A3:28 X509v3 Authority Key Identifier: keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.128.0/24 103.140.198.0/24 IPv6: 2001:df0:1f80::/48 Signature Algorithm: sha256WithRSAEncryption 67:ea:c4:c1:c3:d5:b5:6a:26:10:c6:91:3a:9e:53:83:20:f6: bd:42:34:6c:4f:fc:51:64:07:f6:d1:0f:12:0b:4b:ab:ff:ba: 15:8e:6c:3b:b1:48:62:1f:90:a0:8a:8a:b4:ec:c8:46:c5:42: 09:62:e1:2f:3c:22:89:3e:0e:46:c6:91:6a:96:fb:35:de:47: cc:48:d2:0f:89:bd:a0:e1:92:f9:9d:80:e5:ec:9a:3c:ba:e1: 22:2d:6e:52:35:b5:36:91:19:3e:73:a3:7a:b2:e2:d5:b4:18: 5e:81:3d:f4:24:e9:62:5f:bc:d5:53:ad:04:c2:fc:89:09:12: c2:f7:fa:00:f7:bc:11:11:22:51:d5:e7:22:10:ab:c7:ca:c0: a2:f2:8d:21:f5:98:4b:3a:41:0b:e6:d5:c4:f8:87:ba:6d:c4: 84:2f:07:27:6a:5c:fd:08:40:7b:72:80:03:2b:e1:0d:1f:76: dd:ad:57:2a:0a:3b:45:82:9c:9e:67:6b:cb:c5:a4:8b:7d:23: b7:54:77:6d:b2:c6:f6:59:5c:bb:8d:cc:eb:58:91:30:31:01: 34:3e:0d:83:32:50:9a:58:18:b7:4e:50:e2:b1:2a:ea:09:ea: a4:c0:5f:69:5b:97:df:24:d4:c8:d9:9f:7f:98:6f:6c:e7:38: 2f:03:51:1a -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxNEUxMTAvBgNVBAUTKDNDQ0Q1RjI4QTg3OUVGQkRCRDNFNTVGNEMyQkNGMjhE NkNERDVBRUUwHhcNMjMwNDEzMDAwMDU2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDM3NDYzOC1mOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fqDxiBzzHITQzoXt58YhbZrQldrwtTLH3SVPa6oJQ9zDefCWyg+VdZNAMpB FNReH9XgoKqvaUmm/wKsOcdZcgYXuWeOwEiVjXGKn2P6vqAmnbn8wie2jcfg3yEo cRFiwEYE70pI/NOLDtQhD37MdL4XgFnZPq0yLHrBuq58e7bw28zNmVumfI3hZhvw cUMxK71rPbW6xebgLu5a5cYpafpDI98WCg7A+Y/SqOX73Et28pr3qdldQJzOrJtZ vDSQWNQNhGmmMtIAplTYbM6c4z32VNbhX6FB+sBLEwS2/HTimOMOukBj4MrUyhRO TXTpjygeudN1b6aiXqESZM0yzwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFHZcMIVA SDCw9Sv9De3mG3IsnaMoMB8GA1UdIwQYMBaAFDzNXyioee+9vT5V9MK88o1s3Vru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE0RS84N0Y2ODQ4Q0ZG ODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3MjlQbFgwd3J6eWpXemRX dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNMWZLS2g1NzcyOVBsWDB3cnp5ald6ZFd1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEIxNEUvODdGNjg0OENGRjg0MTFFQUIyQTFDNzVCQzRGOUFFMDIvNDdGMURFMzRG Rjg2MTFFQTlEQ0Y4RDVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABniYADBABnjMYwDwQCAAIwCQMHACABDfAfgDANBgkqhkiG 9w0BAQsFAAOCAQEAZ+rEwcPVtWomEMaROp5TgyD2vUI0bE/8UWQH9tEPEgtLq/+6 FY5sO7FIYh+QoIqKtOzIRsVCCWLhLzwiiT4ORsaRapb7Nd5HzEjSD4m9oOGS+Z2A 5eyaPLrhIi1uUjW1NpEZPnOjerLi1bQYXoE99CTpYl+81VOtBML8iQkSwvf6APe8 EREiUdXnIhCrx8rAovKNIfWYSzpBC+bVxPiHum3EhC8HJ2pc/QhAe3KAAyvhDR92 3a1XKgo7RYKcnmdry8Wki30jt1R3bbLG9llcu43M61iRMDEBND4NgzJQmlgYt05Q 4rEq6gnqpMBfaVuX3yTUyNmff5hvbOc4LwNRGg== -----END CERTIFICATE-----Generated at Sun May 19 00:30:14 2024 by rpki-client on console-ams.rpki-client.org