$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/63B80D12552011E9BA55007FC4F9AE02.roa File: 63B80D12552011E9BA55007FC4F9AE02.roa (raw, json) Hash identifier: fTPZgUpfkCrRNcsWrVhyFlyMxo5DlfFLB/9BRl5cziM= Subject key identifier: 61:AC:6E:CD:CE:A3:48:DC:DB:F2:EB:7D:AF:28:E2:5D:0E:7C:E8:23 Certificate issuer: /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91 Certificate serial: 0F23 Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/63B80D12552011E9BA55007FC4F9AE02.roa Signing time: Wed 10 Jul 2024 18:15:34 +0000 ROA not before: Wed 10 Jul 2024 18:15:34 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 132236 IP address blocks: 103.8.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3875 (0xf23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91 Validity Not Before: Jul 10 18:15:34 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=668ecfc6-f232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:eb:d7:5b:ff:4d:a0:69:82:4c:28:8a:c4: c0:3b:03:84:b0:d2:f2:29:00:ef:e8:be:66:30:43: b9:10:22:13:6a:23:96:1f:f9:d3:5f:dd:36:94:a6: ba:eb:4a:da:bc:6c:be:87:9b:73:c9:b1:14:fc:b9: ff:b4:28:8c:08:d4:ef:6f:1d:2d:10:8e:1d:85:34: 0e:ff:82:8d:86:68:fe:5e:bf:ca:02:36:03:73:15: 4c:7e:37:ed:31:00:e4:19:f6:52:a6:94:80:dc:a2: e1:26:0b:db:cf:57:9e:98:97:3d:46:b6:18:b4:3f: 13:6e:fc:98:a2:f1:df:d5:88:88:31:65:f9:33:3a: 26:23:a8:0e:da:dc:5b:09:2e:6a:14:d5:65:69:dd: 1c:86:95:93:65:66:35:b5:fb:94:27:02:ac:36:54: 10:0f:4e:3b:49:7d:23:53:b1:48:68:eb:d7:93:fe: cb:83:00:14:99:98:1d:3b:ac:19:49:c4:ea:3c:b6: 99:81:11:92:53:6c:d4:73:9c:7c:c9:f7:34:6a:13: 8d:73:7a:45:9e:ce:d3:f4:f4:a2:f5:16:3c:eb:a5: b7:0e:23:aa:7f:0f:6d:6d:be:f0:3a:cb:90:e0:cc: 6a:55:45:8c:0b:5a:11:b3:3d:47:c4:d6:68:41:11: 0e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AC:6E:CD:CE:A3:48:DC:DB:F2:EB:7D:AF:28:E2:5D:0E:7C:E8:23 X509v3 Authority Key Identifier: keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/63B80D12552011E9BA55007FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.8.30.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:3d:4a:25:00:f7:b7:ad:0e:29:0b:75:fb:54:bf:48:8b:ea: db:92:f6:d5:6f:05:55:07:5a:9c:77:61:a6:0e:1c:a8:d7:29: b2:29:91:20:8f:d2:d7:ff:c7:c3:ce:a6:cc:6c:cc:db:f0:08: ac:69:ef:53:86:42:18:fb:61:e2:fc:36:4b:08:f6:e4:29:6c: 26:80:d0:6b:ff:b2:c9:17:e1:d4:b8:93:2d:66:a9:f5:14:cb: 46:bf:3e:3c:67:7c:1a:37:73:87:b3:50:67:78:61:e2:72:c6: 81:40:0d:7e:9d:28:1f:14:ce:de:d1:e7:3d:da:16:77:f2:7b: 3f:fb:47:6e:41:cf:83:d0:12:ad:ce:ad:4e:76:01:bb:3f:65: c2:37:67:2f:dc:03:b1:59:99:83:15:ce:9c:4c:29:d1:20:eb: 55:e8:b7:ca:f2:4f:22:c4:e8:4b:d8:22:dc:aa:61:cd:cd:36: d1:a3:0a:bd:0e:6f:c6:1d:28:6a:c0:90:f4:17:c0:88:2e:ec: 77:2c:2a:09:44:da:43:e8:5f:d9:4b:cc:22:b3:06:f1:d8:61: 0d:63:fd:3b:3c:7e:64:7e:41:8b:fb:82:7c:77:9a:e3:73:ab: 7b:ae:ba:d3:7b:91:85:10:5e:43:97:96:4d:8e:76:8e:16:4d: 74:d2:fe:8b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNBMjAxMTAvBgNVBAUTKDUyRTE2QTlCODlBRUM4MkEwQ0YwODVDRjVBRTdEQzNF QjA4RjBDOTEwHhcNMjQwNzEwMTgxNTM0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjhlY2ZjNi1mMjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxebr11v/TaBpgkwoisTAOwOEsNLyKQDv6L5mMEO5ECITaiOWH/nTX902lKa6 60ravGy+h5tzybEU/Ln/tCiMCNTvbx0tEI4dhTQO/4KNhmj+Xr/KAjYDcxVMfjft MQDkGfZSppSA3KLhJgvbz1eemJc9RrYYtD8TbvyYovHf1YiIMWX5MzomI6gO2txb CS5qFNVlad0chpWTZWY1tfuUJwKsNlQQD047SX0jU7FIaOvXk/7LgwAUmZgdO6wZ ScTqPLaZgRGSU2zUc5x8yfc0ahONc3pFns7T9PSi9RY866W3DiOqfw9tbb7wOsuQ 4MxqVUWMC1oRsz1HxNZoQREO6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGGsbs3O o0jc2/Lrfa8o4l0OfOgjMB8GA1UdIwQYMBaAFFLhapuJrsgqDPCFz1rn3D6wjwyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0EyMC8yMjY2QUUyMjU1 MUIxMUU5OEJBMEMwNzNDNEY5QUUwMi9VdUZxbTRtdXlDb004SVhQV3VmY1ByQ1BE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V1RnFtNG11eUNvTThJWFBXdWZjUHJDUERKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUNBMjAvMjI2NkFFMjI1NTFCMTFFOThCQTBDMDczQzRGOUFFMDIvNjNCODBEMTI1 NTIwMTFFOUJBNTUwMDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnCB4wDQYJKoZIhvcNAQELBQADggEBAD09SiUA97etDikL dftUv0iL6tuS9tVvBVUHWpx3YaYOHKjXKbIpkSCP0tf/x8POpsxszNvwCKxp71OG Qhj7YeL8NksI9uQpbCaA0Gv/sskX4dS4ky1mqfUUy0a/PjxnfBo3c4ezUGd4YeJy xoFADX6dKB8Uzt7R5z3aFnfyez/7R25Bz4PQEq3OrU52Abs/ZcI3Zy/cA7FZmYMV zpxMKdEg61Xot8ryTyLE6EvYItyqYc3NNtGjCr0Ob8YdKGrAkPQXwIgu7HcsKglE 2kPoX9lLzCKzBvHYYQ1j/Ts8fmR+QYv7gnx3muNzq3uuutN7kYUQXkOXlk2Odo4W TXTS/os= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org