$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/215FAD42B98611E9A053044FC4F9AE02.roa File: 215FAD42B98611E9A053044FC4F9AE02.roa (raw, json) Hash identifier: wTGd2ek5BWcBcdfNOE0XeJ+PA7L13PzSNAsYg6mQ1+U= Subject key identifier: 67:E2:36:E0:B8:C0:F1:99:C6:6D:FA:AD:72:9A:13:A8:34:D9:A7:EB Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Certificate serial: 0CBE Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/215FAD42B98611E9A053044FC4F9AE02.roa Signing time: Thu 31 Aug 2023 18:26:15 +0000 ROA not before: Thu 31 Aug 2023 18:26:14 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 139293 IP address blocks: 103.140.238.0/24 maxlen: 24 103.140.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Validity Not Before: Aug 31 18:26:14 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64f0db46-a6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:0f:75:e9:6d:59:b9:7a:06:ef:eb:c1:a0: f2:22:14:a4:71:3d:83:c2:e8:9d:47:0e:96:8f:15: 1f:ab:7f:85:f7:38:d9:2d:cb:3a:7f:dc:47:53:34: 2e:74:80:f5:72:b2:9f:73:89:d0:e2:c2:e8:aa:5d: 5f:07:e6:fd:3c:67:bf:c3:6d:a2:92:78:4c:e3:49: 22:cd:ad:31:4f:a8:1f:39:42:74:13:86:87:e3:5a: 69:9f:35:e7:e2:0f:45:c4:83:6d:c4:a3:34:fb:fd: 48:65:8a:98:f0:f4:96:b5:2c:0e:78:0c:68:1c:74: 4d:08:4a:d3:ec:95:8c:01:72:72:60:51:c5:40:9d: af:3c:4c:bf:5c:8b:5a:e6:03:96:c7:5a:15:b9:8c: 72:9c:2c:99:87:76:2e:46:28:4d:df:6a:c3:61:df: 32:ce:96:9c:aa:78:cb:3c:e2:3a:fe:2f:42:13:83: 2d:b7:bd:77:aa:3c:63:ca:b8:6f:f3:58:fe:98:fa: 0b:9c:76:59:8c:8b:57:57:0d:ec:2f:c7:59:82:09: 8e:99:fe:37:bf:5c:b0:1e:b7:8a:e8:75:c3:5c:15: eb:71:b5:b9:2c:f2:75:25:79:68:c0:34:de:32:89: c2:69:54:97:b8:08:7f:0b:dc:7e:96:76:06:64:09: 0a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E2:36:E0:B8:C0:F1:99:C6:6D:FA:AD:72:9A:13:A8:34:D9:A7:EB X509v3 Authority Key Identifier: keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/215FAD42B98611E9A053044FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.238.0/23 Signature Algorithm: sha256WithRSAEncryption bb:98:56:aa:47:a9:91:0d:ac:6a:ec:00:15:e5:64:c8:0f:e1: af:d7:28:80:df:83:bb:fa:71:9f:7c:0c:66:26:64:ae:80:b6: 42:c3:10:1c:a8:72:57:ca:50:de:83:c4:8b:e9:80:a4:b6:af: b8:04:80:85:8e:62:13:95:b1:52:78:fd:52:61:18:88:71:cc: 65:35:8c:4a:94:17:c9:e0:74:e6:a9:fe:80:b4:15:1c:01:0d: 8e:a7:0c:8c:1d:53:e7:d3:79:8d:de:f5:b6:78:df:0a:47:27: f3:33:8b:95:b3:7f:a9:4e:12:c7:2d:b2:88:ce:5d:9c:62:92: ac:80:2d:fb:74:d3:77:65:8e:d2:b1:2f:2c:3b:5d:bb:66:83: c9:13:4c:0b:7e:40:cd:07:51:e8:d4:9d:93:fc:d8:54:f5:96: 77:0a:54:7b:bb:9f:a9:be:29:55:64:ee:0b:10:5f:38:8f:51: fe:19:3d:89:63:4f:54:2b:30:c1:bd:3e:98:39:5c:75:56:cd: d3:4f:28:60:9c:9f:52:97:9d:a2:c5:22:16:6b:90:5b:8e:51: 0f:b3:e6:23:ed:bd:fe:06:15:51:14:eb:38:ec:31:ee:8a:0c: 3b:e6:a1:95:f6:1f:b6:63:a1:fa:3b:86:1e:11:a0:2f:15:f4: 16:99:4a:3a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxOEUxMTAvBgNVBAUTKERERjhBNEM5QkVDMDEwNEUxNkNDRTMyMUE5NjVBOTJD NjYxNDQ1MzAwHhcNMjMwODMxMTgyNjE0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGYwZGI0Ni1hNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnMPdeltWbl6Bu/rwaDyIhSkcT2DwuidRw6WjxUfq3+F9zjZLcs6f9xHUzQu dID1crKfc4nQ4sLoql1fB+b9PGe/w22iknhM40kiza0xT6gfOUJ0E4aH41ppnzXn 4g9FxINtxKM0+/1IZYqY8PSWtSwOeAxoHHRNCErT7JWMAXJyYFHFQJ2vPEy/XIta 5gOWx1oVuYxynCyZh3YuRihN32rDYd8yzpacqnjLPOI6/i9CE4Mtt713qjxjyrhv 81j+mPoLnHZZjItXVw3sL8dZggmOmf43v1ywHreK6HXDXBXrcbW5LPJ1JXlowDTe MonCaVSXuAh/C9x+lnYGZAkKowIDAQABo4IClTCCApEwHQYDVR0OBBYEFGfiNuC4 wPGZxm36rXKaE6g02afrMB8GA1UdIwQYMBaAFN34pMm+wBBOFszjIallqSxmFEUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE4RS9BNzk2RTkwQUFF MDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVFNFd6T01ocVdXcExHWVVS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaWt5YjdBRUU0V3pPTWhxV1dwTEdZVVJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTUxOEUvQTc5NkU5MEFBRTAyMTFFOUIzN0Q4OTY3QzRGOUFFMDIvMjE1RkFENDJC OTg2MTFFOUEwNTMwNDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjO4wDQYJKoZIhvcNAQELBQADggEBALuYVqpHqZENrGrs ABXlZMgP4a/XKIDfg7v6cZ98DGYmZK6AtkLDEByoclfKUN6DxIvpgKS2r7gEgIWO YhOVsVJ4/VJhGIhxzGU1jEqUF8ngdOap/oC0FRwBDY6nDIwdU+fTeY3e9bZ43wpH J/Mzi5Wzf6lOEsctsojOXZxikqyALft003dljtKxLyw7Xbtmg8kTTAt+QM0HUejU nZP82FT1lncKVHu7n6m+KVVk7gsQXziPUf4ZPYljT1QrMMG9Ppg5XHVWzdNPKGCc n1KXnaLFIhZrkFuOUQ+z5iPtvf4GFVEU6zjsMe6KDDvmoZX2H7Zjofo7hh4RoC8V 9BaZSjo= -----END CERTIFICATE-----Generated at Fri May 10 20:05:25 2024 by rpki-client on console-fra.rpki-client.org