$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/623792B69DD411EF81BA4A6DC4F9AE02.roa File: 623792B69DD411EF81BA4A6DC4F9AE02.roa (raw, json) Hash identifier: okcTRFg2T+M7C+61GQYtQyB1uqaPUSo3GqnQijdWAMU= Subject key identifier: 3E:AF:A0:9D:37:68:3A:C6:81:2C:78:6F:05:FA:39:0F:B5:3E:B3:9F Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0B68 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/623792B69DD411EF81BA4A6DC4F9AE02.roa Signing time: Fri 08 Nov 2024 13:21:38 +0000 ROA not before: Fri 08 Nov 2024 13:21:38 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 205220 IP address blocks: 14.192.140.0/24 maxlen: 24 14.192.141.0/24 maxlen: 24 14.192.154.0/24 maxlen: 24 14.192.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2920 (0xb68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Nov 8 13:21:38 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=672e1062-c33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:11:47:70:19:f7:1b:e1:30:7d:1e:27:36:93: b7:76:f6:5e:78:51:92:8f:ef:9a:59:2a:85:a1:a2: 23:47:0a:6a:a4:28:ae:53:91:87:46:c2:71:ae:ad: 4a:1f:18:fb:e4:42:95:44:ab:2f:83:e0:60:20:da: e7:38:36:35:2f:68:0f:69:60:3f:33:b3:3e:a1:f7: 2a:55:fc:5d:e7:a9:6f:70:c6:68:48:4b:c8:02:c8: b9:83:9a:c4:48:aa:d4:45:14:af:c6:65:e5:c8:ae: f6:ba:a8:69:90:20:ef:60:e1:c7:1c:22:a9:74:59: 5d:d3:b9:65:f2:bb:0e:f8:1b:f4:e5:f9:1b:de:29: e4:cd:89:50:b1:10:66:bd:36:d9:c1:8a:93:ea:4d: aa:34:11:1e:a3:8b:05:56:a3:70:38:5d:5b:02:76: bf:41:9f:2b:e5:35:98:33:db:c6:2b:32:cd:a8:78: ef:77:bb:44:32:a1:5c:39:49:7d:54:0b:27:84:f4: 17:b1:37:f4:ae:6b:8c:c6:0a:e9:86:17:ea:61:9e: 44:c7:98:0f:ab:54:7e:f8:df:92:42:4b:99:48:83: d9:ac:42:09:45:26:fb:dd:a3:1b:29:88:c6:fb:8d: f1:c8:57:d8:16:6d:41:25:df:ac:00:19:37:38:3a: c7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AF:A0:9D:37:68:3A:C6:81:2C:78:6F:05:FA:39:0F:B5:3E:B3:9F X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/623792B69DD411EF81BA4A6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.140.0/23 14.192.154.0/23 Signature Algorithm: sha256WithRSAEncryption 21:f4:90:2d:c9:eb:80:1b:70:f0:f0:14:68:50:02:1a:c5:27: 30:3f:55:3f:89:45:41:88:02:38:f1:af:40:60:4f:23:ee:37: f7:04:4f:4d:9e:57:30:35:16:bc:0b:4a:ba:f7:a6:22:9f:36: dd:0e:ee:36:09:e7:31:d8:db:94:78:68:59:75:fa:e2:d1:f6: 68:ed:a8:26:aa:06:84:35:84:e8:b8:9b:4e:8a:0d:f4:98:fc: dc:f8:e3:70:9a:b4:a9:f5:13:58:5a:66:f2:5f:65:34:99:e5: 86:8d:4a:19:31:fb:49:74:c6:d8:d9:89:20:1b:bc:a1:de:21: c1:df:40:a0:b7:48:69:62:f0:57:4d:be:c5:c7:43:9e:11:8d: cf:41:b4:17:6d:c6:b0:90:02:ae:0f:f6:5b:90:ae:b0:e7:0a: dc:a7:13:df:ec:7a:d8:8f:a2:90:a2:73:95:73:cf:fb:d2:21: 2c:44:f3:e3:06:0f:16:cd:94:d4:b0:a0:f6:69:f1:0d:c4:a8: 19:38:f4:e5:e6:bc:59:ff:a9:42:92:bb:d4:91:84:b8:bd:98: fe:a6:2c:70:29:eb:2b:57:fb:da:e9:b4:c0:a7:7f:e7:0a:00: db:9a:18:a9:18:a3:27:8f:03:17:8a:80:08:c5:27:31:6e:b5: ac:60:3f:cf -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICC2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjQxMTA4MTMyMTM4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJlMTA2Mi1jMzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BFHcBn3G+EwfR4nNpO3dvZeeFGSj++aWSqFoaIjRwpqpCiuU5GHRsJxrq1K Hxj75EKVRKsvg+BgINrnODY1L2gPaWA/M7M+ofcqVfxd56lvcMZoSEvIAsi5g5rE SKrURRSvxmXlyK72uqhpkCDvYOHHHCKpdFld07ll8rsO+Bv05fkb3inkzYlQsRBm vTbZwYqT6k2qNBEeo4sFVqNwOF1bAna/QZ8r5TWYM9vGKzLNqHjvd7tEMqFcOUl9 VAsnhPQXsTf0rmuMxgrphhfqYZ5Ex5gPq1R++N+SQkuZSIPZrEIJRSb73aMbKYjG +43xyFfYFm1BJd+sABk3ODrHrQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFD6voJ03 aDrGgSx4bwX6OQ+1PrOfMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvNjIzNzkyQjY5 REQ0MTFFRjgxQkE0QTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEOwIwDBAEOwJowDQYJKoZIhvcNAQELBQADggEBACH0kC3J 64AbcPDwFGhQAhrFJzA/VT+JRUGIAjjxr0BgTyPuN/cET02eVzA1FrwLSrr3piKf Nt0O7jYJ5zHY25R4aFl1+uLR9mjtqCaqBoQ1hOi4m06KDfSY/Nz443CatKn1E1ha ZvJfZTSZ5YaNShkx+0l0xtjZiSAbvKHeIcHfQKC3SGli8FdNvsXHQ54Rjc9BtBdt xrCQAq4P9luQrrDnCtynE9/setiPopCic5Vzz/vSISxE8+MGDxbNlNSwoPZp8Q3E qBk49OXmvFn/qUKSu9SRhLi9mP6mLHAp6ytX+9rptMCnf+cKANuaGKkYoyePAxeK gAjFJzFutaxgP88= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org