$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/719728B803EF11EAB301F66FC4F9AE02.roa File: 719728B803EF11EAB301F66FC4F9AE02.roa (raw, json) Hash identifier: QQchtcaBfC+kz2+McpDy2OREMEhK1dzWE54pdghGR84= Subject key identifier: 0F:EC:D7:65:C3:CF:14:47:F8:13:9B:11:6C:5C:79:9A:25:99:02:7B Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Certificate serial: 0B32 Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/719728B803EF11EAB301F66FC4F9AE02.roa Signing time: Thu 16 Nov 2023 19:16:50 +0000 ROA not before: Thu 16 Nov 2023 19:16:50 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 139716 IP address blocks: 103.143.254.0/23 maxlen: 23 103.143.254.0/24 maxlen: 24 103.143.255.0/24 maxlen: 24 2001:df7:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Validity Not Before: Nov 16 19:16:50 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65566aa2-8d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f6:97:72:d2:ad:3c:a8:57:a0:a4:ca:84:83: 9e:1f:90:d7:a0:b4:82:1d:4b:e9:09:89:b7:07:ba: 47:e7:88:94:39:42:d3:4b:d9:8f:36:f7:03:82:5c: d0:9d:74:1f:bb:13:9b:07:3f:db:b6:7c:6d:6f:85: 03:8b:6c:80:f2:30:aa:46:0b:7e:a9:4b:fb:61:b8: db:2a:c3:ef:c0:72:56:20:85:11:3b:d8:86:fc:97: 77:66:a2:4e:a1:09:c6:f5:6d:eb:97:6b:38:8f:40: 5f:23:2e:ee:e5:0b:30:39:44:fc:f9:3f:12:b2:c0: f1:55:60:a2:59:dd:2c:e6:38:e8:4c:d6:a3:7c:d9: bd:19:69:3b:40:c6:d8:cb:57:f7:3c:78:42:ef:85: e5:77:01:e9:54:9f:aa:96:b8:af:d3:af:a3:d8:34: a6:3d:a7:6a:ab:48:cb:67:af:32:ec:2d:cd:1d:8d: f3:73:eb:e8:37:d3:a2:36:de:9a:61:84:5f:f2:88: 68:95:37:24:c5:e6:6e:a1:09:d1:9d:2c:64:22:6e: 42:41:bc:7a:18:92:c4:2b:40:a4:b8:53:0c:3e:67: 01:e2:07:cd:ee:f1:31:82:37:1e:88:c8:48:e0:3e: ac:8a:11:bf:29:c3:2b:2b:ec:90:43:e3:22:a3:dc: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EC:D7:65:C3:CF:14:47:F8:13:9B:11:6C:5C:79:9A:25:99:02:7B X509v3 Authority Key Identifier: keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/719728B803EF11EAB301F66FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.254.0/23 IPv6: 2001:df7:b080::/48 Signature Algorithm: sha256WithRSAEncryption 10:da:4d:34:9e:e8:cc:98:83:2c:e4:74:cc:0a:30:fe:b8:3b: 56:a4:5e:77:00:cf:ac:6e:61:fd:3d:9f:75:e9:7c:f8:9a:b2: 22:b8:20:84:8f:1c:4b:6e:8b:24:8a:8d:6c:5b:c0:1b:c8:37: 01:5d:f1:1a:94:73:c0:96:15:40:da:79:0b:a5:d5:2b:85:e8: 3b:bd:15:8e:fb:22:ad:11:8e:36:99:23:be:a7:9a:9d:f4:cb: 48:8a:02:60:69:87:dc:f7:09:80:19:61:81:bb:95:02:bd:46: ec:bf:8b:49:a4:c6:e0:23:c4:63:11:fc:44:00:93:dd:47:1b: 2d:ff:f9:95:5c:28:87:bd:c6:01:f9:3a:34:f2:8f:a4:a7:92: 33:32:0b:1a:7b:ac:a1:24:de:bd:b6:e7:27:db:26:48:fb:01: 6f:b8:9a:2f:bb:ce:19:49:a3:70:66:a5:75:7a:e6:bb:66:10: b4:b0:e6:31:e8:36:22:ac:d2:22:ac:34:35:be:dc:62:1e:48: bb:5c:c2:18:f1:1c:a4:9d:a2:94:6a:db:05:d1:ef:b0:3a:1a: 33:73:e7:c8:9f:d3:4c:0f:98:38:c5:65:fb:95:29:73:31:66: 66:cb:45:62:49:05:29:37:dc:ea:53:7d:66:ed:ba:1a:05:26: 6e:69:31:93 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG ODlENjlDQzAwHhcNMjMxMTE2MTkxNjUwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTU2NmFhMi04ZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovaXctKtPKhXoKTKhIOeH5DXoLSCHUvpCYm3B7pH54iUOULTS9mPNvcDglzQ nXQfuxObBz/btnxtb4UDi2yA8jCqRgt+qUv7YbjbKsPvwHJWIIURO9iG/Jd3ZqJO oQnG9W3rl2s4j0BfIy7u5QswOUT8+T8SssDxVWCiWd0s5jjoTNajfNm9GWk7QMbY y1f3PHhC74XldwHpVJ+qlriv06+j2DSmPadqq0jLZ68y7C3NHY3zc+voN9OiNt6a YYRf8oholTckxeZuoQnRnSxkIm5CQbx6GJLEK0CkuFMMPmcB4gfN7vExgjceiMhI 4D6sihG/KcMrK+yQQ+Mio9yRWwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFA/s12XD zxRH+BObEWxceZolmQJ7MB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NURBNUEvNDRFNzcwQjIwM0VFMTFFQUJDQTFBMTZFQzRGOUFFMDIvNzE5NzI4Qjgw M0VGMTFFQUIzMDFGNjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnj/4wDwQCAAIwCQMHACABDfewgDANBgkqhkiG9w0BAQsF AAOCAQEAENpNNJ7ozJiDLOR0zAow/rg7VqRedwDPrG5h/T2fdel8+JqyIrgghI8c S26LJIqNbFvAG8g3AV3xGpRzwJYVQNp5C6XVK4XoO70VjvsirRGONpkjvqeanfTL SIoCYGmH3PcJgBlhgbuVAr1G7L+LSaTG4CPEYxH8RACT3UcbLf/5lVwoh73GAfk6 NPKPpKeSMzILGnusoSTevbbnJ9smSPsBb7iaL7vOGUmjcGaldXrmu2YQtLDmMeg2 IqzSIqw0Nb7cYh5Iu1zCGPEcpJ2ilGrbBdHvsDoaM3PnyJ/TTA+YOMVl+5UpczFm ZstFYkkFKTfc6lN9Zu26GgUmbmkxkw== -----END CERTIFICATE-----Generated at Wed May 8 21:03:57 2024 by rpki-client on console-fra.rpki-client.org