$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa File: 0853C13CA2F011E9B721795CC4F9AE02.roa (raw, json) Hash identifier: PT85jOUkAj1X0WXEwRPCdUqy+wM3om5TOq/+D9IWTpU= Subject key identifier: B3:79:5C:95:58:BE:00:AA:E5:7C:28:EE:73:69:EA:E5:0E:2E:16:89 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0DAE Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa Signing time: Mon 26 Aug 2024 18:26:29 +0000 ROA not before: Mon 26 Aug 2024 18:26:29 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 139301 IP address blocks: 103.141.6.0/24 maxlen: 24 103.141.7.0/24 maxlen: 24 2405:8c0::/48 maxlen: 48 2405:8c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3502 (0xdae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: Aug 26 18:26:29 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ccc8d5-2ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:29:b3:1a:ed:1c:eb:51:36:0a:6a:67:17: 89:b4:21:10:52:dc:7c:0f:43:7d:d3:69:6d:4e:fb: 4d:f0:f8:08:ab:8c:31:47:94:b5:fb:88:00:8d:5e: d8:62:fa:d7:11:bf:60:b4:ed:26:32:d0:4c:b0:a5: 6e:d3:00:d9:a0:a8:34:95:03:d9:77:ec:55:6d:28: 6e:9c:2c:15:e1:4a:0d:a8:15:8c:2d:2d:7f:ff:45: 78:fa:ae:e6:1a:b8:bb:bc:aa:7d:5c:0e:6b:f6:bf: ce:5a:9c:61:85:84:24:c1:a8:8d:f3:ef:b1:eb:d0: 10:8a:07:02:d7:d3:b4:c7:80:ef:1d:dc:ef:16:25: cf:12:6a:02:cf:1a:4d:d8:12:97:d5:30:78:9b:24: 0a:26:a1:4b:0a:a6:58:59:cf:07:25:76:81:50:49: ec:cf:72:25:9f:d2:6e:2f:b5:de:c0:10:37:2b:4c: 04:8d:9b:40:88:8f:37:c8:43:21:b4:5a:7b:de:ee: c0:57:5d:d6:9c:06:bb:7f:ce:03:df:4a:00:02:25: de:91:b3:78:b1:10:6d:1e:dc:95:a0:5a:37:63:b5: 40:57:74:8b:0e:e9:84:35:f7:36:ba:1b:4a:d3:35: c0:d1:84:01:e9:23:0b:31:c2:04:6c:75:eb:64:1a: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:79:5C:95:58:BE:00:AA:E5:7C:28:EE:73:69:EA:E5:0E:2E:16:89 X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.6.0/23 IPv6: 2405:8c0::/47 Signature Algorithm: sha256WithRSAEncryption c2:35:04:3e:55:7e:ed:59:84:9a:e9:84:d5:6b:9f:49:10:60: cf:3d:ed:a0:f0:e2:01:ea:7c:10:6c:ea:62:eb:84:53:00:f4: 9d:d2:f4:5b:39:36:0f:c8:1e:2f:07:3e:bd:93:fe:70:2c:54: 6e:2f:bd:64:a0:45:a6:f7:3b:3a:5f:0c:9c:3e:e5:38:be:68: 5d:fa:01:67:20:7b:6d:19:b3:b7:7a:ec:42:e3:81:48:84:b7: 32:9c:14:3f:57:6d:80:fa:2b:98:75:a5:a9:dd:69:48:e5:93: ba:10:c0:fb:08:52:a1:29:ad:2f:dd:82:86:24:f5:b0:66:8e: 00:40:a8:2b:51:a7:fa:e0:04:e4:f3:37:22:50:1a:80:02:c3: ac:39:f9:eb:51:77:37:94:df:5a:dc:10:47:26:c4:79:7b:e3: eb:65:45:f9:1b:0e:ed:9b:c7:0c:fb:f5:30:29:85:ff:b7:07: a0:2a:8e:d7:f6:bd:83:c2:69:90:2f:35:6d:9f:72:82:7a:fd: c4:0c:4a:42:85:30:a1:d2:25:76:12:de:2e:c6:b4:e5:31:cc: 67:fd:ae:95:71:3b:26:6e:a8:7b:84:43:61:55:97:eb:c6:85: b6:41:dc:66:ef:00:b0:10:8a:7b:0a:31:c2:c1:43:08:e8:84: da:2b:1b:e1 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjQwODI2MTgyNjI5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNjYzhkNS0yZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTYpsxrtHOtRNgpqZxeJtCEQUtx8D0N902ltTvtN8PgIq4wxR5S1+4gAjV7Y YvrXEb9gtO0mMtBMsKVu0wDZoKg0lQPZd+xVbShunCwV4UoNqBWMLS1//0V4+q7m Gri7vKp9XA5r9r/OWpxhhYQkwaiN8++x69AQigcC19O0x4DvHdzvFiXPEmoCzxpN 2BKX1TB4myQKJqFLCqZYWc8HJXaBUEnsz3Iln9JuL7XewBA3K0wEjZtAiI83yEMh tFp73u7AV13WnAa7f84D30oAAiXekbN4sRBtHtyVoFo3Y7VAV3SLDumENfc2uhtK 0zXA0YQB6SMLMcIEbHXrZBpg+wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLN5XJVY vgCq5Xwo7nNp6uUOLhaJMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI4ODAvMUY1MTE4QTRBMkVGMTFFOTlENEUwQTVCQzRGOUFFMDIvMDg1M0MxM0NB MkYwMTFFOUI3MjE3OTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjQYwDwQCAAIwCQMHASQFCMAAADANBgkqhkiG9w0BAQsF AAOCAQEAwjUEPlV+7VmEmumE1WufSRBgzz3toPDiAep8EGzqYuuEUwD0ndL0Wzk2 D8geLwc+vZP+cCxUbi+9ZKBFpvc7Ol8MnD7lOL5oXfoBZyB7bRmzt3rsQuOBSIS3 MpwUP1dtgPormHWlqd1pSOWTuhDA+whSoSmtL92ChiT1sGaOAECoK1Gn+uAE5PM3 IlAagALDrDn561F3N5TfWtwQRybEeXvj62VF+RsO7ZvHDPv1MCmF/7cHoCqO1/a9 g8JpkC81bZ9ygnr9xAxKQoUwodIldhLeLsa05THMZ/2ulXE7Jm6oe4RDYVWX68aF tkHcZu8AsBCKewoxwsFDCOiE2isb4Q== -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org