$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/ECCC589A09FE11EFBEBB616CC4F9AE02.roa File: ECCC589A09FE11EFBEBB616CC4F9AE02.roa (raw, json) Hash identifier: NLpKCaNzwymqX+JUy4oTmpLmRdKhH96APzizVGdYs+o= Subject key identifier: CE:01:18:F0:E0:DE:FE:BC:25:59:06:18:8D:B1:80:7A:7B:D1:9F:BB Certificate issuer: /CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC Certificate serial: 0312 Authority key identifier: 4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/ECCC589A09FE11EFBEBB616CC4F9AE02.roa Signing time: Sat 04 May 2024 10:13:17 +0000 ROA not before: Sat 04 May 2024 10:13:17 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 149492 IP address blocks: 103.181.46.0/23 maxlen: 23 103.181.47.0/24 maxlen: 24 2001:df0:67c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 786 (0x312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC Validity Not Before: May 4 10:13:17 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=66360a3d-c861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:d9:58:51:e1:f6:c1:c0:07:95:9d:30:5f: 41:b6:2f:6e:5d:28:c4:0c:fb:23:9a:fd:3d:36:c1: 2a:ab:79:ab:98:fd:cb:b0:24:4f:0a:32:c8:28:e2: 4d:97:b5:23:11:aa:6f:5e:bd:3d:f5:4b:37:b5:86: fb:bf:dd:35:f4:65:67:18:c7:12:21:37:16:ae:47: ca:d1:6f:20:ea:26:07:a4:28:58:f6:b4:59:dd:89: 22:a7:b7:6d:bf:1c:ab:35:24:02:2a:26:e0:ef:36: fc:f5:89:8f:32:95:2f:62:ea:ba:e5:70:0b:d7:a8: d7:a2:1c:7b:58:83:89:97:37:ab:2e:c8:6a:38:99: 92:e9:09:18:5a:7d:c2:9e:3b:81:12:1f:de:8d:fc: 6b:ac:56:5c:31:80:c8:f8:d0:49:b8:57:e1:9e:72: 73:76:13:a2:17:aa:03:8a:8a:2d:19:d1:d8:04:12: 14:33:5f:0f:81:c7:12:81:bb:45:fa:d8:4c:cb:ab: 37:a7:ec:31:4d:67:e6:b4:18:8c:5b:6b:18:83:c5: 3f:ae:15:b5:eb:45:2d:0b:b3:8c:24:e1:ca:98:d0: b0:f1:22:09:a0:20:94:c3:56:20:e9:21:fe:4d:3b: 37:0d:60:b8:e1:eb:f6:13:0e:da:17:5e:7d:c5:a4: 53:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:01:18:F0:E0:DE:FE:BC:25:59:06:18:8D:B1:80:7A:7B:D1:9F:BB X509v3 Authority Key Identifier: keyid:4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/ECCC589A09FE11EFBEBB616CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.46.0/23 IPv6: 2001:df0:67c0::/48 Signature Algorithm: sha256WithRSAEncryption 39:0e:7c:d6:dd:8a:cd:aa:9b:f6:4e:67:85:0d:59:be:8a:53: 52:64:54:1d:64:fd:7d:0c:05:b3:62:33:d3:6d:49:fc:4c:5e: 5d:06:fa:ea:5e:c1:51:57:5a:54:2f:f1:25:73:48:a0:67:4a: b3:98:85:5c:2a:fa:99:7d:8b:b1:94:e2:ab:b2:ee:fa:75:70: d0:39:72:fe:dd:4f:71:10:d8:5e:6a:15:72:68:ef:80:f0:c3: e4:58:00:9a:ab:e0:2c:3a:18:a3:d5:e1:98:7f:46:47:a8:69: ec:0a:1b:ab:74:5c:a1:74:04:55:85:f7:11:da:f6:9b:9d:4c: b2:8f:c9:6d:fb:1d:99:14:6b:3e:21:59:8a:cd:da:e5:85:c0: 06:fc:4b:c7:72:c3:81:1e:78:9c:ae:ab:52:61:3a:d4:3b:6d: b9:a2:88:0a:6e:b8:db:58:e9:93:69:39:fc:2f:66:14:8d:a0: 7e:d4:9c:2b:5c:48:29:44:0b:a6:10:9d:19:e0:32:70:5a:1a: 57:b7:94:71:0e:7f:ae:95:5e:cf:ab:d5:4f:27:e9:28:44:80: f9:b8:00:13:77:56:79:2f:71:fb:c4:4a:e7:49:2e:7c:f6:f4: b1:e9:be:6c:33:fa:33:1d:fc:87:7d:2c:ab:61:b4:70:6c:3e: 32:60:45:3e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwQUYxMTAvBgNVBAUTKDRBODVDRjEzODg3MkQzRTQ0RjkwRDdCNkYzMDI4RjBC NTA2NzM0Q0MwHhcNMjQwNTA0MTAxMzE3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM2MGEzZC1jODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYXZWFHh9sHAB5WdMF9Bti9uXSjEDPsjmv09NsEqq3mrmP3LsCRPCjLIKOJN l7UjEapvXr099Us3tYb7v9019GVnGMcSITcWrkfK0W8g6iYHpChY9rRZ3Ykip7dt vxyrNSQCKibg7zb89YmPMpUvYuq65XAL16jXohx7WIOJlzerLshqOJmS6QkYWn3C njuBEh/ejfxrrFZcMYDI+NBJuFfhnnJzdhOiF6oDiootGdHYBBIUM18PgccSgbtF +thMy6s3p+wxTWfmtBiMW2sYg8U/rhW160UtC7OMJOHKmNCw8SIJoCCUw1Yg6SH+ TTs3DWC44ev2Ew7aF159xaRTXwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFM4BGPDg 3v68JVkGGI2xgHp70Z+7MB8GA1UdIwQYMBaAFEqFzxOIctPkT5DXtvMCjwtQZzTM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBBRi8xRTMzOUIzNjg4 REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9Tb1hQRTRoeTAtUlBrTmUyOHdLUEMxQm5O TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvWFBFNGh5MC1SUGtOZTI4d0tQQzFCbk5Ndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEQwQUYvMUUzMzlCMzY4OERFMTFFQzhBOEIxNjI4QzRGOUFFMDIvRUNDQzU4OUEw OUZFMTFFRkJFQkI2MTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntS4wDwQCAAIwCQMHACABDfBnwDANBgkqhkiG9w0BAQsF AAOCAQEAOQ581t2Kzaqb9k5nhQ1ZvopTUmRUHWT9fQwFs2Iz021J/ExeXQb66l7B UVdaVC/xJXNIoGdKs5iFXCr6mX2LsZTiq7Lu+nVw0Dly/t1PcRDYXmoVcmjvgPDD 5FgAmqvgLDoYo9XhmH9GR6hp7Aobq3RcoXQEVYX3Edr2m51Mso/JbfsdmRRrPiFZ is3a5YXABvxLx3LDgR54nK6rUmE61DttuaKICm6421jpk2k5/C9mFI2gftScK1xI KUQLphCdGeAycFoaV7eUcQ5/rpVez6vVTyfpKESA+bgAE3dWeS9x+8RK50kufPb0 sem+bDP6Mx38h30sq2G0cGw+MmBFPg== -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org