$ rpki-client -vvf rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/552D155464A711ED99D40117C4F9AE02.roa File: 552D155464A711ED99D40117C4F9AE02.roa (raw, json) Hash identifier: 16TLUwSLMSyzKZumyo49XwLkPl/9EVbZHY98zsWdQ6E= Subject key identifier: 3C:41:C8:3D:D1:BC:71:6A:B0:45:38:E0:96:C5:97:89:5A:7C:03:E9 Certificate issuer: /CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F Certificate serial: 63 Authority key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/552D155464A711ED99D40117C4F9AE02.roa Signing time: Tue 23 May 2023 07:39:20 +0000 ROA not before: Tue 23 May 2023 07:39:20 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 137816 IP address blocks: 103.114.192.0/22 maxlen: 24 2402:d1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F Validity Not Before: May 23 07:39:20 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=646c6da7-ea6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:1a:d9:15:c5:c1:6e:e3:59:25:29:98:70: 34:12:00:22:fe:19:cc:b2:6f:30:8b:0b:35:da:85: 36:b8:b1:7d:70:cb:de:cd:09:1f:45:f5:f7:5b:8f: fb:77:49:49:c9:9a:4c:77:fa:ae:32:21:72:b5:7d: 3c:bc:7b:5e:2e:fe:8d:72:5d:ad:66:a5:19:ec:b9: 60:89:b6:a2:11:b8:a9:30:07:f5:dc:b2:23:3b:90: 8d:bd:47:6b:fd:71:c9:90:3e:dd:7d:99:3f:e1:cb: 3a:19:5e:22:8f:54:27:41:8e:ab:62:6f:04:36:98: 45:e9:6b:dc:b0:5a:f4:c9:15:14:48:4d:ca:57:18: 46:72:de:fc:b6:0c:b3:84:6e:06:fe:c7:6a:c7:ff: b5:ed:a2:b4:1b:dc:08:93:4a:5e:b5:ec:e8:75:49: b3:4b:a2:e5:4b:a3:c3:e0:d5:78:d4:72:97:2e:11: 58:b6:5e:bc:ac:db:8b:a9:28:a1:35:38:68:f1:37: 97:33:46:6b:ae:13:86:f0:9a:37:ad:97:82:42:b9: 7c:10:6f:52:2c:bd:a9:14:39:a7:bc:19:89:20:fa: 08:4b:b3:2e:b2:a6:1c:9e:9f:6a:02:9b:83:77:29: 33:8e:89:28:9a:0e:be:7a:82:05:5d:2d:a3:51:da: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:41:C8:3D:D1:BC:71:6A:B0:45:38:E0:96:C5:97:89:5A:7C:03:E9 X509v3 Authority Key Identifier: keyid:2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/552D155464A711ED99D40117C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.192.0/22 IPv6: 2402:d1c0::/32 Signature Algorithm: sha256WithRSAEncryption 80:04:f2:a8:26:c8:8c:cc:5b:12:73:58:b4:6c:f6:f5:03:02: 48:ef:8e:82:29:85:43:2d:1f:16:f5:ed:ce:8f:d2:9a:56:7a: 1c:54:71:48:cd:7e:2c:48:d9:e0:ec:f6:e7:a2:3a:7e:57:a5: 59:bb:07:4d:8c:6c:8d:64:ec:16:8d:20:6a:45:b6:03:d0:35: c6:55:c1:9f:4b:61:4a:67:49:db:80:8f:a1:f3:ca:23:db:0a: 3a:e7:46:10:68:e2:db:ad:41:ed:05:d2:e9:23:51:97:cb:5d: cf:b7:9b:9d:7b:68:79:63:01:69:67:0f:61:67:18:62:91:bb: 00:58:43:95:a7:a6:23:98:6c:2e:d4:be:73:ff:04:65:1f:2f: a9:8e:82:13:bb:9d:d1:61:a2:d2:3d:12:a2:09:63:2b:02:ea: 9c:38:a0:57:53:a7:2c:80:6b:a4:af:1c:a9:77:60:6f:24:b9: 69:8b:80:e3:cf:24:09:e9:25:ad:40:9c:72:f6:5e:b5:0a:df: 34:8b:6b:46:34:c9:f2:88:7d:1a:ca:c3:17:b7:17:6f:f6:77: c7:b8:e5:ec:c0:da:ea:46:a3:dc:1b:53:48:0e:2d:e5:af:8b: cc:69:82:8a:f9:90:26:39:02:b1:ce:01:f6:7d:07:47:be:5c: f0:5b:ee:27 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0Q3NTExMC8GA1UEBRMoMkRCQzQ2NURBNjgxQjVCMzExODk3QUI2QzQ2OEMyNTQ3 MDZFNUQyRjAeFw0yMzA1MjMwNzM5MjBaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY0NmM2ZGE3LWVhNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHLBrZFcXBbuNZJSmYcDQSACL+GcyybzCLCzXahTa4sX1wy97NCR9F9fdbj/t3 SUnJmkx3+q4yIXK1fTy8e14u/o1yXa1mpRnsuWCJtqIRuKkwB/XcsiM7kI29R2v9 ccmQPt19mT/hyzoZXiKPVCdBjqtibwQ2mEXpa9ywWvTJFRRITcpXGEZy3vy2DLOE bgb+x2rH/7XtorQb3AiTSl617Oh1SbNLouVLo8Pg1XjUcpcuEVi2Xrys24upKKE1 OGjxN5czRmuuE4bwmjetl4JCuXwQb1IsvakUOae8GYkg+ghLsy6yphyen2oCm4N3 KTOOiSiaDr56ggVdLaNR2kzHAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUPEHIPdG8 cWqwRTjglsWXiVp8A+kwHwYDVR0jBBgwFoAULbxGXaaBtbMRiXq2xGjCVHBuXS8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRDc1LzUyREU0QzRBNjRB MzExRUQ4MjIwMjQxMkM0RjlBRTAyL0xieEdYYWFCdGJNUmlYcTJ4R2pDVkhCdVhT OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTGJ4R1hhYUJ0Yk1SaVhxMnhHakNWSEJ1WFM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Q3NS81MkRFNEM0QTY0QTMxMUVEODIyMDI0MTJDNEY5QUUwMi81NTJEMTU1NDY0 QTcxMUVEOTlENDAxMTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAmdywDANBAIAAjAHAwUAJALRwDANBgkqhkiG9w0BAQsFAAOC AQEAgATyqCbIjMxbEnNYtGz29QMCSO+OgimFQy0fFvXtzo/SmlZ6HFRxSM1+LEjZ 4Oz256I6flelWbsHTYxsjWTsFo0gakW2A9A1xlXBn0thSmdJ24CPofPKI9sKOudG EGji261B7QXS6SNRl8tdz7ebnXtoeWMBaWcPYWcYYpG7AFhDlaemI5hsLtS+c/8E ZR8vqY6CE7ud0WGi0j0SogljKwLqnDigV1OnLIBrpK8cqXdgbyS5aYuA488kCekl rUCccvZetQrfNItrRjTJ8oh9GsrDF7cXb/Z3x7jl7MDa6kaj3BtTSA4t5a+LzGmC ivmQJjkCsc4B9n0HR75c8FvuJw== -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:16 2024 by rpki-client on console-ams.rpki-client.org