$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/E1AF45B0232211EB8E8FB50AC4F9AE02.roa File: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (raw, json) Hash identifier: +NCb52PYVUsErKg5MPulMzGZXygaFiUI/Ze8fWrVTbQ= Subject key identifier: C5:03:85:89:15:53:F7:57:45:AD:27:56:9C:8C:8E:99:39:C5:8A:C8 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0B2D Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/E1AF45B0232211EB8E8FB50AC4F9AE02.roa Signing time: Sat 20 Jan 2024 19:27:29 +0000 ROA not before: Sat 20 Jan 2024 19:27:29 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 137969 IP address blocks: 103.145.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2861 (0xb2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Jan 20 19:27:29 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65ac1ea1-3b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:3e:2e:f2:4c:62:20:ad:ac:2a:56:d5:ec: 35:dd:d7:a2:47:f4:7e:c1:f2:f8:58:19:6c:3e:eb: 1a:59:e9:b9:6e:87:8d:8e:e2:3f:2d:7f:35:41:50: 34:bf:66:01:0b:78:bc:be:f9:28:b7:c0:4a:a4:0f: f1:a9:e8:5f:d5:f0:69:4c:50:7a:82:20:1b:ae:d1: b3:8b:63:92:01:56:96:b8:f6:77:14:ce:0f:de:be: 82:91:97:d6:c7:de:f2:c1:c2:18:39:b2:80:2c:1e: 79:4b:6f:ed:9f:7b:eb:3d:74:8c:fe:5a:77:42:5d: f7:1a:04:d0:01:56:43:4f:5a:13:10:af:39:dd:3a: 97:b0:ee:c1:46:72:4b:cb:8e:04:78:6a:3b:1c:af: 46:9d:4f:82:9e:a5:1a:07:6e:22:43:44:d4:76:9c: 20:bc:d3:78:f3:ed:ea:dd:51:31:70:42:5f:da:a1: 86:af:1b:27:d0:40:21:7f:1d:9d:ab:5d:e7:76:7e: 76:b0:ed:5d:9f:4b:c8:fd:79:ae:5f:b8:a1:48:bd: 8f:fc:c6:71:62:24:28:ce:da:0f:6f:04:44:c2:65: 34:a3:65:00:4f:0d:db:19:18:a8:97:fb:a0:d8:d3: aa:0b:9f:bf:d4:9b:34:1e:31:e3:d0:5b:77:66:a3: 61:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:03:85:89:15:53:F7:57:45:AD:27:56:9C:8C:8E:99:39:C5:8A:C8 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/E1AF45B0232211EB8E8FB50AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.38.0/23 Signature Algorithm: sha256WithRSAEncryption 46:71:c1:73:6e:10:ad:ee:35:91:38:c9:72:7b:0f:d1:d6:5e: 24:eb:92:83:59:6f:ef:f8:96:54:a6:6f:da:e1:12:5e:6f:b7: 4a:4a:09:76:b8:65:2b:47:42:0a:a7:7f:e7:b1:96:47:df:57: 62:f6:22:aa:7f:35:f0:1b:04:bd:30:0a:92:70:41:e4:c2:e4: a7:50:c5:c5:79:c1:9c:25:62:f3:2b:18:8b:ec:a9:39:3b:7f: b9:27:06:9c:7f:9a:0d:95:eb:1c:bf:7d:ae:35:17:a7:18:f9: ab:d0:45:1a:aa:18:c0:c1:de:df:90:99:9e:94:c5:0e:8e:e1: d0:1d:ac:76:c1:70:41:34:7e:ce:fa:f7:13:b5:92:a3:e3:2d: 57:8c:e5:33:35:78:8a:85:25:2b:05:4e:39:86:e3:5f:60:51: 99:74:5e:54:a4:7b:d2:c8:f9:32:3d:9c:7e:e4:fa:0c:bb:4d: b6:3b:d6:0a:cc:df:c9:a9:e5:f2:b0:5b:e7:51:85:48:56:a8: b8:03:bc:b1:33:a5:96:42:72:a4:88:42:d8:89:f3:8d:21:51: e0:eb:22:ef:9f:6e:51:b3:6d:bf:f2:26:ee:8a:52:f0:39:65: 25:55:d0:46:4c:4b:a9:fe:8a:13:b4:bb:5d:60:12:20:23:86: d4:27:cc:e5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjQwMTIwMTkyNzI5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWFjMWVhMS0zYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAo+LvJMYiCtrCpW1ew13deiR/R+wfL4WBlsPusaWem5boeNjuI/LX81QVA0 v2YBC3i8vvkot8BKpA/xqehf1fBpTFB6giAbrtGzi2OSAVaWuPZ3FM4P3r6CkZfW x97ywcIYObKALB55S2/tn3vrPXSM/lp3Ql33GgTQAVZDT1oTEK853TqXsO7BRnJL y44EeGo7HK9GnU+CnqUaB24iQ0TUdpwgvNN48+3q3VExcEJf2qGGrxsn0EAhfx2d q13ndn52sO1dn0vI/XmuX7ihSL2P/MZxYiQoztoPbwREwmU0o2UATw3bGRiol/ug 2NOqC5+/1Js0HjHj0Ft3ZqNh7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMUDhYkV U/dXRa0nVpyMjpk5xYrIMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJGREEvNjgxMjdFMjAwRjRCMTFFQUFEQTM3OTc3QzRGOUFFMDIvRTFBRjQ1QjAy MzIyMTFFQjhFOEZCNTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnkSYwDQYJKoZIhvcNAQELBQADggEBAEZxwXNuEK3uNZE4 yXJ7D9HWXiTrkoNZb+/4llSmb9rhEl5vt0pKCXa4ZStHQgqnf+exlkffV2L2Iqp/ NfAbBL0wCpJwQeTC5KdQxcV5wZwlYvMrGIvsqTk7f7knBpx/mg2V6xy/fa41F6cY +avQRRqqGMDB3t+QmZ6UxQ6O4dAdrHbBcEE0fs769xO1kqPjLVeM5TM1eIqFJSsF TjmG419gUZl0XlSke9LI+TI9nH7k+gy7TbY71grM38mp5fKwW+dRhUhWqLgDvLEz pZZCcqSIQtiJ840hUeDrIu+fblGzbb/yJu6KUvA5ZSVV0EZMS6n+ihO0u11gEiAj htQnzOU= -----END CERTIFICATE-----Generated at Wed Apr 24 21:18:14 2024 by rpki-client on console-ams.rpki-client.org