$ rpki-client -vvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/A2DA1898656911E889701022C4F9AE02.roa File: A2DA1898656911E889701022C4F9AE02.roa (raw, json) Hash identifier: QYbquK62XWSTn4PRkMXoR4nfMTLLaW92RH4A36uEYDs= Subject key identifier: AD:B2:40:45:6A:55:93:2B:74:24:17:76:09:78:E3:E8:12:38:35:CF Certificate issuer: /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6 Certificate serial: 146D Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/A2DA1898656911E889701022C4F9AE02.roa Signing time: Sat 14 Sep 2024 18:05:20 +0000 ROA not before: Sat 14 Sep 2024 18:05:20 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 135586 IP address blocks: 203.159.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 16:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5229 (0x146d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6 Validity Not Before: Sep 14 18:05:20 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e5d05f-2756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:57:51:f8:72:1e:7e:a6:80:d0:da:3c:f1: 11:e4:2c:64:d7:06:94:f1:81:05:51:7b:8a:a2:84: a9:f6:bb:38:df:8f:8e:33:1d:2d:46:7b:c6:2d:f7: 30:e9:db:e3:bb:05:7b:73:63:2c:ae:e2:8e:03:ee: 01:f9:bd:28:1e:74:53:6b:fd:43:a7:fb:45:ec:d3: 9f:b5:5e:b3:a4:30:13:59:b0:d2:ad:fe:a1:70:6c: 8d:8a:bb:c9:ce:62:0e:ee:8c:8b:fa:fd:31:11:4c: 6d:d5:bf:aa:a5:02:59:72:1f:16:41:c8:12:5b:dd: ca:4b:b9:10:54:34:dd:f8:40:fb:ae:d0:96:ec:90: 9b:77:2e:d0:f1:76:23:c9:ed:7a:c8:01:f6:b7:02: 05:d2:31:d2:ec:3d:2f:77:e6:9d:c1:ef:2c:00:ff: f0:dc:c1:3b:a7:14:ad:14:83:6d:75:1d:7c:e9:02: 3e:ad:df:59:08:94:77:b5:e7:61:f2:28:28:54:c0: 76:14:3f:2f:65:b2:b0:7f:50:2c:32:da:99:ed:56: d6:31:fb:dc:31:f4:99:2d:39:81:ca:d2:07:93:96: 10:18:e9:46:9c:32:f4:1e:9b:ed:cd:ed:1a:46:ec: d8:07:42:ad:79:0e:b3:b2:bd:e3:6d:80:6a:92:76: 83:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B2:40:45:6A:55:93:2B:74:24:17:76:09:78:E3:E8:12:38:35:CF X509v3 Authority Key Identifier: keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/A2DA1898656911E889701022C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.159.65.0/24 Signature Algorithm: sha256WithRSAEncryption 86:98:da:1f:58:47:7d:c3:b7:35:00:0c:54:66:03:ab:04:74: 1b:44:b3:76:32:e3:d0:c0:29:9a:07:68:ce:7f:4f:65:80:b5: 90:64:ee:b2:ef:93:c0:9f:ba:e5:8e:0e:0c:8a:c8:bf:d5:cb: 03:5d:fb:4e:b8:1c:91:3f:da:1f:23:cf:8a:2e:b9:7e:e2:fa: f3:e8:2d:bf:6a:0a:da:41:d6:24:66:80:5c:c5:1c:1e:9b:f4: 4c:06:7b:0b:45:28:cf:2d:ed:0f:a7:9e:4a:fb:a1:70:fc:d3: 9c:03:fa:34:ac:31:1a:46:1d:e2:84:b7:fc:14:f1:76:ae:1e: 80:9f:d4:f1:1e:2d:c5:d5:4a:67:02:98:a9:79:82:f6:19:f8: 45:b6:d3:af:0b:55:69:b4:3c:76:be:b5:65:3f:17:47:e4:88: 29:a1:ba:f1:a3:c1:b7:a3:d9:f4:33:3e:d9:e0:bf:97:e6:7b: e5:d8:d0:17:f2:05:b6:9e:ce:e1:25:7a:23:3e:1d:5f:bf:0c: 81:99:28:c2:25:c1:b8:3c:b6:cb:40:7c:ab:ab:df:09:b9:a0: f8:ca:74:2e:84:7e:80:09:8a:9f:6a:b9:5f:0e:e5:4e:ac:9e: e9:27:d7:ec:de:88:3a:ac:fa:5c:6b:bd:e4:a8:c3:91:5d:92: f4:a1:38:bd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4NDUxMTAvBgNVBAUTKEY3RDMzRjQ1NUVEQUJFM0Q0Q0I2M0ZCOTJFNENBMDc2 MTE5QzM0QTYwHhcNMjQwOTE0MTgwNTIwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU1ZDA1Zi0yNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAze9XUfhyHn6mgNDaPPER5Cxk1waU8YEFUXuKooSp9rs434+OMx0tRnvGLfcw 6dvjuwV7c2MsruKOA+4B+b0oHnRTa/1Dp/tF7NOftV6zpDATWbDSrf6hcGyNirvJ zmIO7oyL+v0xEUxt1b+qpQJZch8WQcgSW93KS7kQVDTd+ED7rtCW7JCbdy7Q8XYj ye16yAH2twIF0jHS7D0vd+adwe8sAP/w3ME7pxStFINtdR186QI+rd9ZCJR3tedh 8igoVMB2FD8vZbKwf1AsMtqZ7VbWMfvcMfSZLTmBytIHk5YQGOlGnDL0Hpvtze0a RuzYB0KteQ6zsr3jbYBqknaDowIDAQABo4IClTCCApEwHQYDVR0OBBYEFK2yQEVq VZMrdCQXdgl44+gSODXPMB8GA1UdIwQYMBaAFPfTP0Ve2r49TLY/uS5MoHYRnDSm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg0NS9EQzcxMDBFQTVB NTUxMUU4QkUzRTBCNjhDNEY5QUUwMi85OU1fUlY3YXZqMU10ai01TGt5Z2RoR2NO S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5TV9SVjdhdmoxTXRqLTVMa3lnZGhHY05LWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA4NDUvREM3MTAwRUE1QTU1MTFFOEJFM0UwQjY4QzRGOUFFMDIvQTJEQTE4OTg2 NTY5MTFFODg5NzAxMDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLn0EwDQYJKoZIhvcNAQELBQADggEBAIaY2h9YR33DtzUA DFRmA6sEdBtEs3Yy49DAKZoHaM5/T2WAtZBk7rLvk8CfuuWODgyKyL/VywNd+064 HJE/2h8jz4ouuX7i+vPoLb9qCtpB1iRmgFzFHB6b9EwGewtFKM8t7Q+nnkr7oXD8 05wD+jSsMRpGHeKEt/wU8XauHoCf1PEeLcXVSmcCmKl5gvYZ+EW2068LVWm0PHa+ tWU/F0fkiCmhuvGjwbej2fQzPtngv5fme+XY0BfyBbaezuEleiM+HV+/DIGZKMIl wbg8tstAfKur3wm5oPjKdC6EfoAJip9quV8O5U6snukn1+zeiDqs+lxrveSow5Fd kvShOL0= -----END CERTIFICATE-----Generated at Sun Nov 24 18:36:20 2024 by rpki-client on console-fra.rpki-client.org