$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/2687563AFA8E11EB8B0FCD39C4F9AE02.roa File: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (raw, json) Hash identifier: uw4pwsuMVlOdst39HyvHTeiUfKLIfoUwRmRV8OdgqkI= Subject key identifier: 9A:42:AC:DC:93:B2:58:61:79:BD:21:0C:C8:15:1C:D1:28:51:99:4B Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Certificate serial: 30EF Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/2687563AFA8E11EB8B0FCD39C4F9AE02.roa Signing time: Tue 30 Apr 2024 15:52:28 +0000 ROA not before: Tue 30 Apr 2024 15:52:28 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 209242 IP address blocks: 14.142.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12527 (0x30ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Validity Not Before: Apr 30 15:52:28 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=663113bc-1801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:ec:f1:82:e1:eb:e3:21:93:ca:85:68:57: 8d:21:14:a8:fb:7e:03:96:65:50:78:3e:e9:bc:90: cb:6d:03:3d:d4:45:c1:2e:62:95:44:b4:67:31:e5: ee:b2:67:84:99:2b:2e:60:5a:e4:bb:8f:e5:73:c5: 4a:6a:79:3a:23:e2:24:c1:08:f8:99:84:af:87:03: 86:85:06:b9:a6:0e:63:7b:bd:92:15:39:6a:45:3b: f1:bd:8a:89:fd:41:8d:f4:85:5a:74:aa:6d:3e:7c: 44:fc:51:59:18:e8:04:53:24:0f:6f:16:c9:f0:cc: a6:b3:2d:0b:50:e1:d4:0b:57:ea:f7:59:1e:8d:7c: 21:d5:b7:a6:24:8f:00:57:dc:4c:50:8d:b1:8e:f5: 21:39:5b:99:7e:1f:6f:66:5d:a3:5c:50:c9:d9:2a: 43:c9:ab:61:c2:28:5e:94:be:bc:36:88:2a:99:c0: 4d:31:d8:40:1e:00:f1:ba:cf:69:24:b4:99:fe:ac: 7d:a9:51:03:fc:c0:ee:91:e2:17:90:f7:e0:2c:84: 67:47:c4:ba:f6:9e:08:6d:ad:b6:5c:bd:38:9c:68: 55:f7:64:57:44:bf:76:17:70:3a:0b:bd:75:1c:7b: 55:37:f6:68:b0:60:65:b4:f7:ac:65:98:96:da:f4: 81:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:42:AC:DC:93:B2:58:61:79:BD:21:0C:C8:15:1C:D1:28:51:99:4B X509v3 Authority Key Identifier: keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/2687563AFA8E11EB8B0FCD39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.142.97.0/24 Signature Algorithm: sha256WithRSAEncryption 70:73:99:49:44:14:e6:ba:e8:4a:d2:05:b7:3d:e9:39:01:82: 7f:83:98:0e:02:82:3e:c7:b0:db:32:5a:c5:58:4f:42:61:8f: 95:fe:48:41:37:47:86:1c:2c:f0:46:67:15:cb:55:72:0c:c1: dd:35:66:90:34:c6:90:8b:bf:3a:9b:a7:37:cc:09:9f:d4:03: 76:79:4b:8c:a9:b3:7b:e3:69:52:c7:95:5a:d4:4c:6c:0c:5b: 2a:99:42:b1:2a:19:10:4f:36:ec:af:e2:71:b1:15:fb:dc:84: a2:f5:89:c9:44:66:69:43:ab:7d:b5:74:d0:20:ba:22:1d:0e: 2b:fe:ad:cc:3f:ff:cb:97:e0:81:c9:82:b9:b3:e4:6f:7b:61: bc:ec:8e:7d:2e:aa:c3:3b:df:0d:0b:f9:cf:93:bb:70:b6:e0: 0b:5e:3b:21:33:13:0c:df:ed:d5:5d:eb:5d:de:70:8a:9d:72: e3:5f:2d:58:69:30:ae:bd:cd:a1:84:fd:eb:7d:43:fd:19:85: ba:a2:b4:ef:0a:2a:c7:59:34:b7:ca:4b:5e:4d:d7:02:af:a3: 0a:47:98:50:59:7b:68:63:7c:b6:b1:15:71:80:62:99:2a:2e: ac:69:6a:d9:ea:ae:a5:4c:c3:55:92:6f:6a:1b:af:81:1d:37: b6:20:ef:9a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICMO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3 OUJFQTZBODUwHhcNMjQwNDMwMTU1MjI4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxMTNiYy0xODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2Ds8YLh6+Mhk8qFaFeNIRSo+34DlmVQeD7pvJDLbQM91EXBLmKVRLRnMeXu smeEmSsuYFrku4/lc8VKank6I+IkwQj4mYSvhwOGhQa5pg5je72SFTlqRTvxvYqJ /UGN9IVadKptPnxE/FFZGOgEUyQPbxbJ8Mymsy0LUOHUC1fq91kejXwh1bemJI8A V9xMUI2xjvUhOVuZfh9vZl2jXFDJ2SpDyathwihelL68NogqmcBNMdhAHgDxus9p JLSZ/qx9qVED/MDukeIXkPfgLIRnR8S69p4Iba22XL04nGhV92RXRL92F3A6C711 HHtVN/ZosGBltPesZZiW2vSBTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJpCrNyT slhheb0hDMgVHNEoUZlLMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvMjY4NzU2M0FG QThFMTFFQjhCMEZDRDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAOjmEwDQYJKoZIhvcNAQELBQADggEBAHBzmUlEFOa66ErS Bbc96TkBgn+DmA4Cgj7HsNsyWsVYT0Jhj5X+SEE3R4YcLPBGZxXLVXIMwd01ZpA0 xpCLvzqbpzfMCZ/UA3Z5S4yps3vjaVLHlVrUTGwMWyqZQrEqGRBPNuyv4nGxFfvc hKL1iclEZmlDq321dNAguiIdDiv+rcw//8uX4IHJgrmz5G97Ybzsjn0uqsM73w0L +c+Tu3C24AteOyEzEwzf7dVd613ecIqdcuNfLVhpMK69zaGE/et9Q/0ZhbqitO8K KsdZNLfKS15N1wKvowpHmFBZe2hjfLaxFXGAYpkqLqxpatnqrqVMw1WSb2obr4Ed N7Yg75o= -----END CERTIFICATE-----Generated at Mon May 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org