$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/9A745DF6BDC611EE9C87EF29C4F9AE02.roa File: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (raw, json) Hash identifier: u8kIsJVIp78SEEepgF6rWdlvVZL0QiUXSZNCFyMREy4= Subject key identifier: 2C:47:1F:7E:EA:4C:7B:2B:1A:48:18:BC:AF:BF:07:CE:48:AD:72:2C Certificate issuer: /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Certificate serial: B5 Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/9A745DF6BDC611EE9C87EF29C4F9AE02.roa Signing time: Sun 28 Jan 2024 10:18:39 +0000 ROA not before: Sun 28 Jan 2024 10:18:39 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 137218 IP address blocks: 103.56.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Validity Not Before: Jan 28 10:18:39 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b629ff-1b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:44:aa:8b:d7:7e:0b:fa:51:6d:d1:7c:c4: e9:6a:45:1d:50:92:a5:9f:cf:2e:1a:21:e0:e0:9e: 71:9e:10:a4:3d:09:76:1e:fb:04:b7:80:b6:db:ad: 01:fb:87:84:09:8a:ef:4f:3c:6e:3d:a5:46:5e:40: 3c:a3:01:0e:cf:35:82:3d:6e:ed:23:eb:12:e7:17: 72:ed:3c:79:dc:e7:6c:35:2b:72:ec:c6:4a:db:c8: 82:93:58:43:50:4d:81:0c:d9:ba:7f:15:ae:4d:c2: 47:54:18:99:4d:14:4d:ed:93:0e:a2:ae:ff:94:7e: c1:96:af:a2:3e:ee:d5:15:c2:27:04:ce:cd:d2:2c: 68:33:72:56:ed:d3:a6:92:92:a8:d9:8c:e7:ee:45: b0:6d:ea:23:fd:ac:66:72:6e:57:13:8a:85:ef:3f: 1d:31:14:57:57:53:3a:92:07:d1:76:ab:1b:38:5d: e2:83:0c:1d:48:09:eb:aa:6b:04:e1:bd:c9:0e:e1: c7:d4:11:8c:29:14:1b:3f:a5:28:2c:e7:9c:91:7b: dc:f1:be:c9:f0:dc:f8:86:d9:bd:36:0f:45:e7:9a: d9:30:72:77:6f:d7:13:f8:23:89:a3:95:9a:8a:10: 82:88:a9:ab:dd:12:80:71:97:4b:bc:be:1a:de:df: 6b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:47:1F:7E:EA:4C:7B:2B:1A:48:18:BC:AF:BF:07:CE:48:AD:72:2C X509v3 Authority Key Identifier: keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/9A745DF6BDC611EE9C87EF29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.56.2.0/24 Signature Algorithm: sha256WithRSAEncryption d1:08:bc:9c:96:85:52:b6:cb:04:ae:bd:e5:ad:94:b0:31:da: 03:f8:9c:20:14:54:31:f8:06:8a:fa:64:a6:a0:26:84:83:88: 3f:31:ea:d7:e6:b7:3b:bc:a0:7a:67:50:33:3f:4a:9e:43:14: b2:d3:28:1c:64:42:f5:8f:18:04:9d:50:fb:47:a4:6e:f1:b5: df:d3:d0:88:d4:2b:41:46:8b:05:b5:88:3c:2d:4e:cd:92:15: ac:30:3c:c6:ff:14:f2:ca:e8:a2:90:a5:07:3c:88:74:ba:d1: b9:83:72:90:74:69:ef:c5:56:2e:f6:6a:6b:cc:fa:e6:58:2b: 8d:6f:eb:4c:54:1a:9a:e3:92:3a:78:27:0e:e5:35:0b:d5:38: f8:9d:a7:f1:3f:8b:06:6c:2f:33:75:07:a8:6b:0a:cd:b0:5c: 10:d7:02:26:40:b6:1a:9f:94:1f:01:23:52:2d:41:cd:fb:44: 32:c7:f1:c3:f9:92:73:79:3e:da:df:77:c1:6c:3a:90:b7:6e: 15:3a:56:b6:06:85:00:97:c6:d6:75:1b:27:66:64:3b:59:c7: b0:8b:ac:41:1a:84:51:b9:a7:0b:5f:c5:f2:73:9f:59:2f:b4: 0c:d0:00:41:69:af:57:e0:75:c9:49:b0:01:84:76:e8:ff:e0: e5:e7:4b:9d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNzkxMTAvBgNVBAUTKEQzQkIwQUZGMTk1OUUwMjkyNkM3Mzc1NDhBN0NCRTQx MERCOTA5NkIwHhcNMjQwMTI4MTAxODM5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI2MjlmZi0xYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroFEqovXfgv6UW3RfMTpakUdUJKln88uGiHg4J5xnhCkPQl2HvsEt4C2260B +4eECYrvTzxuPaVGXkA8owEOzzWCPW7tI+sS5xdy7Tx53OdsNSty7MZK28iCk1hD UE2BDNm6fxWuTcJHVBiZTRRN7ZMOoq7/lH7Blq+iPu7VFcInBM7N0ixoM3JW7dOm kpKo2Yzn7kWwbeoj/axmcm5XE4qF7z8dMRRXV1M6kgfRdqsbOF3igwwdSAnrqmsE 4b3JDuHH1BGMKRQbP6UoLOeckXvc8b7J8Nz4htm9Ng9F55rZMHJ3b9cT+COJo5Wa ihCCiKmr3RKAcZdLvL4a3t9rQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCxHH37q THsrGkgYvK+/B85IrXIsMB8GA1UdIwQYMBaAFNO7Cv8ZWeApJsc3VIp8vkENuQlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE3OS8xQjVDMUY0MEIw RjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRDa214emRVaW55LVFRMjVD V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3c0tfeGxaNENrbXh6ZFVpbnktUVEyNUNXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTVBNzkvMUI1QzFGNDBCMEYyMTFFRDhEQ0JFQjgyQzRGOUFFMDIvOUE3NDVERjZC REM2MTFFRTlDODdFRjI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnOAIwDQYJKoZIhvcNAQELBQADggEBANEIvJyWhVK2ywSu veWtlLAx2gP4nCAUVDH4Bor6ZKagJoSDiD8x6tfmtzu8oHpnUDM/Sp5DFLLTKBxk QvWPGASdUPtHpG7xtd/T0IjUK0FGiwW1iDwtTs2SFawwPMb/FPLK6KKQpQc8iHS6 0bmDcpB0ae/FVi72amvM+uZYK41v60xUGprjkjp4Jw7lNQvVOPidp/E/iwZsLzN1 B6hrCs2wXBDXAiZAthqflB8BI1ItQc37RDLH8cP5knN5Ptrfd8FsOpC3bhU6VrYG hQCXxtZ1GydmZDtZx7CLrEEahFG5pwtfxfJzn1kvtAzQAEFpr1fgdclJsAGEduj/ 4OXnS50= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org