$ rpki-client -vvf rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/E986DDEC979911ECB3B7CE39C4F9AE02.roa File: E986DDEC979911ECB3B7CE39C4F9AE02.roa (raw, json) Hash identifier: Zeiu4QtNT5MUhU37wsj+oT85M5rgvK6OPRoU5FxNjsE= Subject key identifier: 24:EA:01:55:48:8C:F1:7F:37:6F:C5:0C:EA:35:6B:CD:E0:1E:0E:CA Certificate issuer: /CN=A9152DE4/serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D Certificate serial: 031B Authority key identifier: 21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/E986DDEC979911ECB3B7CE39C4F9AE02.roa Signing time: Sun 03 Mar 2024 02:54:27 +0000 ROA not before: Sun 03 Mar 2024 02:54:27 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 149449 IP address blocks: 103.179.198.0/24 maxlen: 24 103.179.199.0/24 maxlen: 24 2400:4e20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 795 (0x31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152DE4/serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D Validity Not Before: Mar 3 02:54:27 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e3e663-8ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:86:aa:52:6a:69:d3:4c:e9:3a:0e:9a:e7:ec: 3b:ae:3f:65:43:ab:45:46:73:a1:c0:ad:8c:37:c4: c1:da:fb:70:28:f8:df:13:93:8e:5d:95:61:c4:20: 88:55:53:5f:43:5f:9a:42:2b:c0:19:f1:84:77:e2: b5:77:92:c3:b2:b7:32:15:cc:61:da:18:e3:37:14: f1:3c:6a:08:3b:6d:f2:47:54:a9:97:a1:2a:b1:94: c9:99:2c:62:32:1c:09:71:33:51:49:77:dc:9c:80: e6:54:9c:ab:07:be:ff:c6:72:61:70:86:87:0b:18: 5b:a6:af:9b:21:3f:40:b2:93:e4:56:6f:1d:f5:f4: 0d:db:54:30:cb:37:5e:04:a1:b9:99:3b:04:16:a5: 34:f1:d9:f1:6a:6a:bc:5b:4a:e0:24:10:4f:ca:c9: ac:66:f6:f2:33:b8:34:a5:1c:f1:cb:51:5e:5b:e9: e7:6e:f7:2c:f1:28:40:89:98:db:18:3f:83:a1:2d: f5:bd:63:ba:84:b6:dc:df:e0:e6:95:ba:b5:41:3b: ca:c8:9e:00:34:a2:13:af:84:b2:c3:90:27:48:97: cf:d4:89:39:68:3d:de:61:d6:0c:ec:ae:d3:06:13: df:20:4e:06:7a:61:20:44:78:4a:e4:10:c8:1c:41: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EA:01:55:48:8C:F1:7F:37:6F:C5:0C:EA:35:6B:CD:E0:1E:0E:CA X509v3 Authority Key Identifier: keyid:21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/E986DDEC979911ECB3B7CE39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.198.0/23 IPv6: 2400:4e20::/32 Signature Algorithm: sha256WithRSAEncryption 36:1f:bf:42:67:5d:6d:92:86:db:97:80:7d:52:79:bc:c5:3c: 4d:19:b6:e9:66:12:47:27:15:16:70:98:2e:d9:bc:83:0c:2c: 37:d0:9a:0d:d4:c0:bc:cc:ac:47:a3:00:e4:7f:61:62:b9:59: 76:2a:c9:b0:f0:41:f4:98:07:fa:ad:35:d4:e2:42:06:82:42: d1:b8:6a:37:28:b9:a0:0e:44:68:28:d6:9e:fa:22:85:33:d5: 2c:1e:cc:f9:78:3f:9f:af:fc:3b:cc:2b:dc:dd:3b:e5:b6:41: 2b:ff:f4:21:4a:0b:84:38:f5:1f:07:cf:1f:12:ee:10:cb:a0: 03:a2:a4:dd:32:86:a3:7b:5b:51:0d:d9:32:a9:06:e0:ba:4a: d3:b0:ef:76:33:3f:34:a3:11:bb:c0:92:69:73:a7:10:59:f7: bd:03:31:ac:aa:56:73:d6:c8:6c:27:d4:1d:75:bf:0e:a0:9d: bc:5c:e3:a5:95:25:82:00:2f:66:eb:4e:1b:a9:0f:b1:f7:ba: 89:f6:36:37:39:7b:d1:f3:e5:fb:88:63:31:3e:52:6b:da:56: 9d:32:ed:bf:21:87:4e:88:cb:a1:c5:d4:99:97:c9:8c:29:e5: 49:96:ff:41:7a:2f:f9:03:2b:fb:2c:f2:b5:5e:ea:69:17:f4: 9e:05:00:0a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJERTQxMTAvBgNVBAUTKDIxN0MzRDhCRUQwQjQwQzBGQjA4OEI1OUVFNkU2NUFF NkM2NjFGMEQwHhcNMjQwMzAzMDI1NDI3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzZTY2My04ZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYaqUmpp00zpOg6a5+w7rj9lQ6tFRnOhwK2MN8TB2vtwKPjfE5OOXZVhxCCI VVNfQ1+aQivAGfGEd+K1d5LDsrcyFcxh2hjjNxTxPGoIO23yR1Spl6EqsZTJmSxi MhwJcTNRSXfcnIDmVJyrB77/xnJhcIaHCxhbpq+bIT9AspPkVm8d9fQN21Qwyzde BKG5mTsEFqU08dnxamq8W0rgJBBPysmsZvbyM7g0pRzxy1FeW+nnbvcs8ShAiZjb GD+DoS31vWO6hLbc3+Dmlbq1QTvKyJ4ANKITr4Syw5AnSJfP1Ik5aD3eYdYM7K7T BhPfIE4GemEgRHhK5BDIHEFuvQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCTqAVVI jPF/N2/FDOo1a83gHg7KMB8GA1UdIwQYMBaAFCF8PYvtC0DA+wiLWe5uZa5sZh8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkRFNC80Q0NDQzMzMjc5 MkExMUVDQjBDNTkxNjJDNEY5QUUwMi9JWHc5aS0wTFFNRDdDSXRaN201bHJteG1I dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYdzlpLTBMUU1EN0NJdFo3bTVscm14bUh3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJERTQvNENDQ0MzMzI3OTJBMTFFQ0IwQzU5MTYyQzRGOUFFMDIvRTk4NkRERUM5 Nzk5MTFFQ0IzQjdDRTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFns8YwDQQCAAIwBwMFACQATiAwDQYJKoZIhvcNAQELBQAD ggEBADYfv0JnXW2ShtuXgH1SebzFPE0ZtulmEkcnFRZwmC7ZvIMMLDfQmg3UwLzM rEejAOR/YWK5WXYqybDwQfSYB/qtNdTiQgaCQtG4ajcouaAORGgo1p76IoUz1Swe zPl4P5+v/DvMK9zdO+W2QSv/9CFKC4Q49R8Hzx8S7hDLoAOipN0yhqN7W1EN2TKp BuC6StOw73YzPzSjEbvAkmlzpxBZ970DMayqVnPWyGwn1B11vw6gnbxc46WVJYIA L2brThupD7H3uon2Njc5e9Hz5fuIYzE+UmvaVp0y7b8hh06Iy6HF1JmXyYwp5UmW /0F6L/kDK/ss8rVe6mkX9J4FAAo= -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org