$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/7AD7390CD15111EE98EBEC1EC4F9AE02.roa File: 7AD7390CD15111EE98EBEC1EC4F9AE02.roa (raw, json) Hash identifier: 8SKbulCH8+CpUE8PhTmkTum8eXS2X9VumNnMZAJS/TE= Subject key identifier: 67:00:A7:BC:81:DD:7D:FF:39:26:51:14:1C:C9:CF:24:7F:74:6E:CE Certificate issuer: /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Certificate serial: 041B Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/7AD7390CD15111EE98EBEC1EC4F9AE02.roa Signing time: Thu 22 Feb 2024 07:10:56 +0000 ROA not before: Thu 22 Feb 2024 07:10:56 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 147293 IP address blocks: 103.172.183.0/24 maxlen: 24 2407:d840:3::/48 maxlen: 48 2407:d840:40::/48 maxlen: 48 2407:d840:41::/48 maxlen: 48 2407:d840:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 02:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Validity Not Before: Feb 22 07:10:56 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65d6f380-cefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:7c:8a:1b:99:9a:da:2e:9e:1e:97:2d:18: 11:85:c7:5c:14:70:a8:e9:a3:09:1e:79:1a:c0:f0: da:05:97:a9:c8:16:50:41:b1:14:8d:ec:a4:8a:80: 09:24:2f:52:4a:53:68:e6:b7:53:ed:e5:eb:ff:6f: 75:f9:03:59:70:4d:2f:01:24:c2:72:fb:3e:97:ae: dc:e3:b6:5a:51:fc:31:f2:86:70:1d:ba:d4:3e:6e: 69:fa:bb:74:e4:43:d1:36:ec:46:a6:95:fc:74:45: 0b:67:7b:3c:3a:ef:4c:3a:c6:ae:dc:63:ba:f5:77: 24:87:c5:11:cc:6e:25:05:99:15:ae:d3:19:09:bd: 26:f6:ce:eb:7e:67:bf:1e:86:66:02:77:b4:c9:25: 79:0c:69:7a:63:de:ad:f4:0f:47:d9:2b:d5:0d:cf: 43:ac:42:a6:c2:06:89:6b:c4:67:df:bd:a8:4d:94: 54:6c:16:72:b2:62:6f:e1:c9:31:5c:21:04:c1:e8: 8f:e5:b0:79:7c:ae:e3:7e:ce:ef:c1:3c:e3:26:8e: 32:81:fb:c4:aa:be:2e:85:88:74:d9:8a:ff:e0:64: e7:c5:b7:7a:55:3e:82:49:4f:51:51:c0:c7:52:97: 06:71:fa:db:df:22:db:0e:ec:9e:85:65:12:e6:e9: 9d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:00:A7:BC:81:DD:7D:FF:39:26:51:14:1C:C9:CF:24:7F:74:6E:CE X509v3 Authority Key Identifier: keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/7AD7390CD15111EE98EBEC1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.183.0/24 IPv6: 2407:d840:3::/48 2407:d840:40::-2407:d840:42:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 33:d3:7c:be:8e:ff:7c:3d:0e:e1:fd:d4:e2:70:18:69:71:c5: a7:48:40:45:d3:de:35:dc:63:cc:06:62:d4:c4:18:98:25:76: 8f:3f:ca:09:60:54:f2:52:8f:03:d5:48:0d:bf:27:24:80:ca: b4:bd:12:d4:ac:bd:f5:cd:d9:d8:ea:26:65:5b:81:4d:02:57: 08:51:0a:2d:83:79:8e:30:b4:82:11:e4:ff:4f:fc:f6:c7:56: 22:69:bb:b5:98:57:68:5d:c3:d8:6e:d8:d3:f2:04:8a:f4:8c: 7f:31:61:f2:49:ff:12:47:97:ab:e8:f6:02:a1:1a:12:2a:a5: 7d:19:dc:91:49:fa:16:50:f9:da:bf:8e:9b:d5:f5:f4:85:0f: 67:cd:65:ac:0d:fe:b5:78:12:4c:3d:6f:b5:98:a8:d8:b1:e6: 0f:17:e2:a3:37:f0:18:74:b6:a1:ab:47:57:7d:34:79:f4:2a: 45:c3:09:50:55:83:3e:c1:b5:fa:8c:59:be:8f:cb:25:0c:3e: 78:96:f3:00:f5:02:59:c5:51:de:4f:97:c3:d5:7e:4d:0d:3a: 9c:9e:55:93:ca:1e:d7:80:fa:cd:f6:8f:f5:cf:16:0c:92:8e: fd:51:bc:35:ed:6a:d9:06:61:17:02:37:83:97:75:0e:94:79: 42:83:30:41 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRUMxMTAvBgNVBAUTKDQ2OTIyQzU2NTQ0MDA0MEJEOTlBRkQ0RTMyOUVEOURF QjZGOTI1NzMwHhcNMjQwMjIyMDcxMDU2WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ2ZjM4MC1jZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhJ8ihuZmtounh6XLRgRhcdcFHCo6aMJHnkawPDaBZepyBZQQbEUjeykioAJ JC9SSlNo5rdT7eXr/291+QNZcE0vASTCcvs+l67c47ZaUfwx8oZwHbrUPm5p+rt0 5EPRNuxGppX8dEULZ3s8Ou9MOsau3GO69Xckh8URzG4lBZkVrtMZCb0m9s7rfme/ HoZmAne0ySV5DGl6Y96t9A9H2SvVDc9DrEKmwgaJa8Rn372oTZRUbBZysmJv4ckx XCEEweiP5bB5fK7jfs7vwTzjJo4ygfvEqr4uhYh02Yr/4GTnxbd6VT6CSU9RUcDH UpcGcfrb3yLbDuyehWUS5umdQQIDAQABo4ICujCCArYwHQYDVR0OBBYEFGcAp7yB 3X3/OSZRFBzJzyR/dG7OMB8GA1UdIwQYMBaAFEaSLFZUQAQL2Zr9TjKe2d62+SVz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJFQy84NDI3NTk1NjJC MDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJBdlptdjFPTXA3WjNyYjVK WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JwSXNWbFJBQkF2Wm12MU9NcDdaM3JiNUpYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUIyRUMvODQyNzU5NTYyQjA5MTFFQzg1MUI5ODBFQzRGOUFFMDIvN0FENzM5MENE MTUxMTFFRTk4RUJFQzFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E NTAzMAwEAgABMAYDBABnrLcwIwQCAAIwHQMHACQH2EAAAzASAwcGJAfYQABAAwcA JAfYQABCMA0GCSqGSIb3DQEBCwUAA4IBAQAz03y+jv98PQ7h/dTicBhpccWnSEBF 09413GPMBmLUxBiYJXaPP8oJYFTyUo8D1UgNvyckgMq0vRLUrL31zdnY6iZlW4FN AlcIUQotg3mOMLSCEeT/T/z2x1Yiabu1mFdoXcPYbtjT8gSK9Ix/MWHySf8SR5er 6PYCoRoSKqV9GdyRSfoWUPnav46b1fX0hQ9nzWWsDf61eBJMPW+1mKjYseYPF+Kj N/AYdLahq0dXfTR59CpFwwlQVYM+wbX6jFm+j8slDD54lvMA9QJZxVHeT5fD1X5N DTqcnlWTyh7XgPrN9o/1zxYMko79Ubw17WrZBmEXAjeDl3UOlHlCgzBB -----END CERTIFICATE-----Generated at Fri Jun 7 05:07:43 2024 by rpki-client on console-ams.rpki-client.org