$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa File: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (raw, json) Hash identifier: 1dZ/PYF2y/rA4g03VyVZaVZy6CLwb/t5eX6QNNHBKU4= Subject key identifier: 93:41:0E:3F:DD:8C:AD:44:AA:5E:EE:BA:91:37:69:D9:F1:76:63:EE Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 258D Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa Signing time: Fri 28 Jun 2024 16:33:50 +0000 ROA not before: Fri 28 Jun 2024 16:33:50 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 45938 IP address blocks: 103.234.104.0/24 maxlen: 24 2404:e801:101f::/48 maxlen: 48 2404:e801:201f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9613 (0x258d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jun 28 16:33:50 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667ee5ed-8d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:3a:e2:f3:11:d9:f6:7e:b9:a0:00:43:a1: 10:e9:f7:6b:a6:d6:f4:8a:96:a5:fa:18:3d:6a:06: 51:55:72:85:4a:29:bf:84:8d:75:0b:e0:5f:8e:18: a2:e0:8f:5e:ff:40:22:96:f5:5c:12:4c:89:ac:fe: 3a:a3:3f:c1:64:3e:11:48:1b:53:72:60:e0:c8:ef: 16:f7:e5:22:2c:d2:1c:6f:99:21:c9:cb:36:8a:72: a8:e4:0f:df:33:07:bb:cc:00:2b:97:7f:58:fc:01: 54:e6:ac:46:b8:03:aa:88:d5:53:b8:39:2d:7c:cc: ed:d4:77:75:1f:cc:d5:75:87:58:fc:4c:fd:4b:cc: 8c:76:43:98:df:53:e8:44:c1:65:cf:75:fd:05:c9: 23:6e:55:3f:a0:ae:9c:48:d4:6a:79:ba:15:2e:9e: a3:85:f2:3d:3f:e7:d2:aa:ab:64:36:73:ad:76:23: cb:c9:0d:dc:d0:98:1d:c8:09:0d:51:83:74:7f:80: fc:c3:48:d5:cf:9c:d8:be:55:ea:ee:89:01:a8:12: 45:dd:86:23:29:60:97:24:80:bf:ea:9d:a7:4d:84: e7:7c:2f:38:ad:56:7e:93:46:e7:ba:75:77:b6:b5: ac:4c:f0:07:dc:82:c2:12:f5:33:c0:0a:96:27:ab: 7f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:41:0E:3F:DD:8C:AD:44:AA:5E:EE:BA:91:37:69:D9:F1:76:63:EE X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.234.104.0/24 IPv6: 2404:e801:101f::/48 2404:e801:201f::/48 Signature Algorithm: sha256WithRSAEncryption 57:68:79:ff:e1:4a:76:ef:30:ff:bc:75:b5:37:e7:07:f8:6a: bf:2a:93:80:ad:6a:f2:51:d1:88:d4:05:ac:60:33:72:23:7d: 33:45:8f:55:6e:7e:14:f8:99:1d:cc:56:a7:2c:24:25:1e:c8: c4:32:23:52:06:ef:1b:d0:c6:9a:66:8c:e9:06:06:4e:2f:90: e2:d3:b3:f4:a2:8a:86:f1:17:e5:a9:14:0b:e0:93:df:64:88: 47:16:f3:61:4b:5b:c4:85:b9:53:af:02:3f:57:f8:8e:23:87: 25:f3:eb:12:0c:39:68:b6:b7:0e:35:11:f7:f3:a7:e3:eb:03: 04:aa:2a:6a:e7:39:6a:93:b6:be:21:1a:eb:9c:f6:a8:0b:7e: cc:c0:11:1c:e4:3a:46:ca:97:fa:45:9f:60:be:30:4c:9f:85: 4b:78:72:9b:28:d9:e0:5e:ac:43:d2:71:22:86:a0:d9:20:6d: 0c:73:dc:aa:72:39:95:21:4f:6d:a9:cc:b0:9e:fa:9e:4d:fe: 95:f1:66:89:c3:b0:68:ac:bd:f1:a3:89:2f:e7:50:51:7a:8b: 76:6c:1e:e1:4d:7e:89:2b:ec:a6:c6:eb:ef:21:40:bc:7e:fc: 2b:bd:2f:9f:c8:1c:92:3e:b7:12:38:36:75:dc:12:db:a0:b7: 41:12:44:00 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICJY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjQwNjI4MTYzMzUwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdlZTVlZC04ZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzc64vMR2fZ+uaAAQ6EQ6fdrptb0ipal+hg9agZRVXKFSim/hI11C+Bfjhii 4I9e/0AilvVcEkyJrP46oz/BZD4RSBtTcmDgyO8W9+UiLNIcb5khycs2inKo5A/f Mwe7zAArl39Y/AFU5qxGuAOqiNVTuDktfMzt1Hd1H8zVdYdY/Ez9S8yMdkOY31Po RMFlz3X9BckjblU/oK6cSNRqeboVLp6jhfI9P+fSqqtkNnOtdiPLyQ3c0JgdyAkN UYN0f4D8w0jVz5zYvlXq7okBqBJF3YYjKWCXJIC/6p2nTYTnfC84rVZ+k0bnunV3 trWsTPAH3ILCEvUzwAqWJ6t//wIDAQABo4ICrzCCAqswHQYDVR0OBBYEFJNBDj/d jK1Eql7uupE3adnxdmPuMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvNUNDQUM3Rjg1 MjhDMTFFQ0I2MTAxQjEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBABn6mgwGAQCAAIwEgMHACQE6AEQHwMHACQE6AEgHzANBgkq hkiG9w0BAQsFAAOCAQEAV2h5/+FKdu8w/7x1tTfnB/hqvyqTgK1q8lHRiNQFrGAz ciN9M0WPVW5+FPiZHcxWpywkJR7IxDIjUgbvG9DGmmaM6QYGTi+Q4tOz9KKKhvEX 5akUC+CT32SIRxbzYUtbxIW5U68CP1f4jiOHJfPrEgw5aLa3DjUR9/On4+sDBKoq auc5apO2viEa65z2qAt+zMARHOQ6RsqX+kWfYL4wTJ+FS3hymyjZ4F6sQ9JxIoag 2SBtDHPcqnI5lSFPbanMsJ76nk3+lfFmicOwaKy98aOJL+dQUXqLdmwe4U1+iSvs psbr7yFAvH78K70vn8gckj63Ejg2ddwS26C3QRJEAA== -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:47 2024 by rpki-client on console-fra.rpki-client.org