$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/670087C4EEF011ED9C693D31C4F9AE02.roa File: 670087C4EEF011ED9C693D31C4F9AE02.roa (raw, json) Hash identifier: YOFyOlTHwQt80VE+lXNOUMnksRbADb71CcqhR7ykXMw= Subject key identifier: 46:F8:40:C7:BB:34:B1:00:ED:6D:2D:BE:99:0A:0E:3F:88:86:49:53 Certificate issuer: /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Certificate serial: C5 Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/670087C4EEF011ED9C693D31C4F9AE02.roa Signing time: Thu 07 Dec 2023 04:55:23 +0000 ROA not before: Thu 07 Dec 2023 04:55:23 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 9483 IP address blocks: 202.50.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Validity Not Before: Dec 7 04:55:23 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6571503b-54b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f1:7e:f5:64:c6:cc:33:f6:f7:37:1e:66:d4: 12:32:01:9a:18:48:0e:40:aa:a2:10:99:d7:17:d9: c6:77:aa:4e:d2:ac:ea:ae:25:0f:df:ee:69:36:09: b1:0d:24:a3:53:28:b5:d3:63:86:3a:73:2d:69:b5: f3:cd:19:3a:b5:82:c4:12:a9:09:44:ea:01:3e:ed: c5:a7:d4:81:2d:d7:49:b9:47:6a:d0:34:04:e7:9b: 72:b7:2f:4a:8a:fc:ea:fc:59:e9:3d:25:b3:bb:65: 3e:02:a2:6e:4c:cc:b8:60:d9:fb:b6:5d:44:ac:c1: 58:5b:b6:e1:ab:f7:05:98:bc:39:7f:40:aa:82:73: 4b:e0:c7:83:be:5b:7d:73:5b:6a:fc:af:e9:88:38: 0b:2e:4a:f5:b7:96:e0:22:97:00:df:a1:4a:e9:4d: 93:50:18:63:9e:fd:b3:90:1b:6f:b0:76:03:2a:15: b3:84:5e:3a:76:21:11:c5:17:fa:93:8b:85:64:37: fd:28:6e:ad:d7:d7:57:23:9c:15:bd:46:4a:25:bd: 91:fe:14:56:12:79:17:97:1f:e8:bd:87:78:74:b0: 3c:bc:99:d6:bb:6f:d8:89:46:7b:6a:8e:84:86:23: bd:38:4e:57:da:db:f8:3f:ca:5e:7f:8c:42:90:07: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F8:40:C7:BB:34:B1:00:ED:6D:2D:BE:99:0A:0E:3F:88:86:49:53 X509v3 Authority Key Identifier: keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/670087C4EEF011ED9C693D31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.50.109.0/24 Signature Algorithm: sha256WithRSAEncryption 26:6f:21:14:e1:9f:00:45:2b:6d:fa:43:a3:00:89:ed:ad:63: 60:25:47:d9:54:0e:4b:3b:70:ce:dd:8c:e8:f6:ee:d2:8e:37: f8:a2:3b:9f:1b:8d:ec:ed:c1:f3:cd:1a:a9:84:9d:23:ae:63: 31:86:28:e3:01:93:74:e4:ee:1e:5b:96:20:56:7e:af:f9:3e: 23:c7:1b:f9:79:19:98:d9:9c:b6:a8:33:6c:c2:91:91:9c:3f: cb:36:6a:b0:d7:d0:1e:da:56:55:88:e2:1d:21:cc:95:94:f6: 52:fa:38:75:6c:26:9a:55:15:e8:67:30:32:5a:be:ae:5a:d2: bb:0a:1d:19:ef:b2:e7:4a:f1:2e:d5:3f:31:67:8b:b2:1a:9f: d8:68:fd:3a:bc:f5:2e:af:3d:6a:1d:cf:c7:5e:bd:b4:01:7d: 7b:7a:2b:d4:b7:ec:e3:07:a8:3c:8c:90:c0:c4:aa:29:99:42: 84:18:a2:8b:a7:8b:17:d2:d3:03:59:ad:10:3a:9a:f5:e2:a3: a8:83:0d:c8:92:f5:f7:a1:2b:b0:d9:6c:dd:e1:2f:19:60:cf: 75:a9:b9:6d:6e:ef:39:10:99:32:ca:11:0b:c3:a7:55:90:82: f8:72:5a:80:09:ad:59:f6:15:2e:b5:9d:3c:fd:0c:65:6c:4d: 87:c6:72:81 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNFMkYxMTAvBgNVBAUTKEIxMEI0RjQzNDNGQUFFMkIyQzREM0RENjYwNjRCRTky NkVDNzRDOUYwHhcNMjMxMjA3MDQ1NTIzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTcxNTAzYi01NGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPF+9WTGzDP29zceZtQSMgGaGEgOQKqiEJnXF9nGd6pO0qzqriUP3+5pNgmx DSSjUyi102OGOnMtabXzzRk6tYLEEqkJROoBPu3Fp9SBLddJuUdq0DQE55tyty9K ivzq/FnpPSWzu2U+AqJuTMy4YNn7tl1ErMFYW7bhq/cFmLw5f0CqgnNL4MeDvlt9 c1tq/K/piDgLLkr1t5bgIpcA36FK6U2TUBhjnv2zkBtvsHYDKhWzhF46diERxRf6 k4uFZDf9KG6t19dXI5wVvUZKJb2R/hRWEnkXlx/ovYd4dLA8vJnWu2/YiUZ7ao6E hiO9OE5X2tv4P8pef4xCkAfhEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEb4QMe7 NLEA7W0tvpkKDj+IhklTMB8GA1UdIwQYMBaAFLELT0ND+q4rLE091mBkvpJux0yf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0UyRi8wQkRFQTUyODcw RTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJpc3NUVDNXWUdTLWttN0hU SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRdFBRMFA2cmlzc1RUM1dZR1Mta203SFRKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUNFMkYvMEJERUE1Mjg3MEUzMTFFREI1NzcwNDNGQzRGOUFFMDIvNjcwMDg3QzRF RUYwMTFFRDlDNjkzRDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKMm0wDQYJKoZIhvcNAQELBQADggEBACZvIRThnwBFK236 Q6MAie2tY2AlR9lUDks7cM7djOj27tKON/iiO58bjeztwfPNGqmEnSOuYzGGKOMB k3Tk7h5bliBWfq/5PiPHG/l5GZjZnLaoM2zCkZGcP8s2arDX0B7aVlWI4h0hzJWU 9lL6OHVsJppVFehnMDJavq5a0rsKHRnvsudK8S7VPzFni7Ian9ho/Tq89S6vPWod z8devbQBfXt6K9S37OMHqDyMkMDEqimZQoQYoounixfS0wNZrRA6mvXio6iDDciS 9fehK7DZbN3hLxlgz3WpuW1u7zkQmTLKEQvDp1WQgvhyWoAJrVn2FS61nTz9DGVs TYfGcoE= -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org