$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/2F7EAF12932411EB97630343C4F9AE02.roa File: 2F7EAF12932411EB97630343C4F9AE02.roa (raw, json) Hash identifier: DZWN379WdZAGgjUIKeRmsTPQYkgp6FWwNWzozBI1Xlw= Subject key identifier: D5:A6:C9:66:41:53:D3:20:D8:59:5E:7F:AA:3A:97:75:D0:ED:CD:24 Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Certificate serial: 085A Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/2F7EAF12932411EB97630343C4F9AE02.roa Signing time: Wed 10 May 2023 22:33:56 +0000 ROA not before: Wed 10 May 2023 22:33:56 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 58713 IP address blocks: 43.240.120.0/23 maxlen: 23 43.240.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2138 (0x85a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Validity Not Before: May 10 22:33:56 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=645c1bd4-cb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:da:61:ca:42:45:fe:aa:c0:77:5a:bc:7e: 39:29:82:69:69:12:43:e4:89:5b:08:71:5a:68:1b: f3:df:97:89:fe:a7:d4:97:a1:f7:4a:3c:c7:e9:3b: b7:55:0f:d7:7a:9e:68:e0:d9:6a:58:d7:d0:d2:fd: bc:c3:ce:84:e9:69:d0:19:85:a8:40:61:fe:c4:64: 1e:36:bc:1c:7f:7c:52:a8:e5:49:60:e4:42:90:c9: bc:1d:74:ce:2f:40:a6:7e:51:fe:30:90:5f:81:84: 25:15:72:a8:38:24:0f:26:f2:43:cd:11:86:53:86: 2b:e3:1d:7e:de:81:21:68:b6:7b:fd:53:0c:36:e2: 22:3b:a3:11:a8:b7:11:a7:0e:bb:a9:42:8a:98:4f: 5a:eb:88:fd:3f:b2:29:94:d7:0c:a0:ef:35:53:d5: c9:fc:03:58:3e:24:27:af:3b:14:4c:12:a0:9b:09: fe:92:6a:d6:da:f0:b4:ee:4b:5b:54:c6:d2:18:43: b1:bc:7d:88:46:dd:69:d6:c9:ac:ca:77:e7:ac:fe: ce:cb:70:6b:86:11:43:9a:b1:b4:0d:8c:a9:fe:08: a6:ac:13:ff:b5:51:d0:98:54:fd:56:05:82:87:22: 09:33:33:10:ea:d3:75:3f:47:c4:dc:58:84:08:7d: 9c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A6:C9:66:41:53:D3:20:D8:59:5E:7F:AA:3A:97:75:D0:ED:CD:24 X509v3 Authority Key Identifier: keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/2F7EAF12932411EB97630343C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.240.120.0/22 Signature Algorithm: sha256WithRSAEncryption a7:f2:ef:81:97:db:bb:be:d3:f0:56:3a:4b:04:a0:0d:f0:59: c3:f6:6f:8e:b4:dc:b9:9f:b1:12:8a:c6:83:15:a6:e1:a2:b6: a7:66:ca:cf:2f:1e:cc:03:18:8e:5e:de:9a:8a:09:83:03:80: 63:1d:f6:c0:83:cc:03:58:84:10:52:97:1c:6d:ec:5a:08:4d: 81:a4:75:62:9b:7b:e9:c9:d0:53:2a:9d:30:f3:42:4c:35:92: a7:c8:65:9a:f7:2a:95:35:e7:5f:c0:06:83:8c:ec:cb:b0:40: 6d:6c:c3:3e:14:4e:55:8d:65:df:12:8a:60:24:cf:58:71:26: d7:fa:1d:15:77:c4:e6:2c:60:86:ae:4c:5d:28:92:1d:ee:19: 51:cb:85:77:dc:96:5e:bf:7f:09:4f:12:b7:f6:8b:ab:08:28: 98:99:1f:68:1e:9e:9d:55:ea:52:10:13:37:ee:e8:06:5b:60: ee:86:b4:7d:1b:6f:81:22:1b:82:13:2b:ef:bb:1f:cc:9b:a7: 6b:b0:18:f3:87:53:a3:42:1a:cc:16:83:a2:a7:a4:b9:90:bc: a7:cf:96:f0:77:c5:f9:43:ba:22:82:a5:32:b2:e1:61:2d:43: 00:7d:ff:2c:c8:20:69:6c:b7:b7:ae:52:6a:cb:db:8b:40:06: 40:87:8d:48 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NEYxMTAvBgNVBAUTKEVDNzA1QjJBRDZGQjEzRkQ2RkM0MjE0Qjk3NzI3MDQx MTNFNjY4RDcwHhcNMjMwNTEwMjIzMzU2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDVjMWJkNC1jYjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoonaYcpCRf6qwHdavH45KYJpaRJD5IlbCHFaaBvz35eJ/qfUl6H3SjzH6Tu3 VQ/Xep5o4NlqWNfQ0v28w86E6WnQGYWoQGH+xGQeNrwcf3xSqOVJYORCkMm8HXTO L0CmflH+MJBfgYQlFXKoOCQPJvJDzRGGU4Yr4x1+3oEhaLZ7/VMMNuIiO6MRqLcR pw67qUKKmE9a64j9P7IplNcMoO81U9XJ/ANYPiQnrzsUTBKgmwn+kmrW2vC07ktb VMbSGEOxvH2IRt1p1smsynfnrP7Oy3BrhhFDmrG0DYyp/gimrBP/tVHQmFT9VgWC hyIJMzMQ6tN1P0fE3FiECH2csQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNWmyWZB U9Mg2Flef6o6l3XQ7c0kMB8GA1UdIwQYMBaAFOxwWyrW+xP9b8QhS5dycEET5mjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY0Ri9GMTE1QjY3MjdE RUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0VfMXZ4Q0ZMbDNKd1FSUG1h TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIQmJLdGI3RV8xdnhDRkxsM0p3UVJQbWFOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ2NEYvRjExNUI2NzI3REVEMTFFQTlBNUNDQzRCQzRGOUFFMDIvMkY3RUFGMTI5 MzI0MTFFQjk3NjMwMzQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr8HgwDQYJKoZIhvcNAQELBQADggEBAKfy74GX27u+0/BW OksEoA3wWcP2b4603LmfsRKKxoMVpuGitqdmys8vHswDGI5e3pqKCYMDgGMd9sCD zANYhBBSlxxt7FoITYGkdWKbe+nJ0FMqnTDzQkw1kqfIZZr3KpU151/ABoOM7Muw QG1swz4UTlWNZd8SimAkz1hxJtf6HRV3xOYsYIauTF0okh3uGVHLhXfcll6/fwlP Erf2i6sIKJiZH2genp1V6lIQEzfu6AZbYO6GtH0bb4EiG4ITK++7H8ybp2uwGPOH U6NCGswWg6KnpLmQvKfPlvB3xflDuiKCpTKy4WEtQwB9/yzIIGlst7euUmrL24tA BkCHjUg= -----END CERTIFICATE-----Generated at Mon May 6 22:40:56 2024 by rpki-client on console-ams.rpki-client.org