$ rpki-client -vvf rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/AC53A55C7B3611EBB7C5F122C4F9AE02.roa File: AC53A55C7B3611EBB7C5F122C4F9AE02.roa (raw, json) Hash identifier: jT1Bl9P9Xz1bQ+LsPnCT+WT252pdmyLzXpTANcQlkCI= Subject key identifier: 71:4E:F1:D2:95:2E:C4:A8:33:29:45:23:DF:DE:B9:23:93:87:89:47 Certificate issuer: /CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Certificate serial: 0633 Authority key identifier: C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/AC53A55C7B3611EBB7C5F122C4F9AE02.roa Signing time: Fri 26 Jan 2024 23:21:43 +0000 ROA not before: Fri 26 Jan 2024 23:21:43 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 141474 IP address blocks: 103.159.218.0/23 maxlen: 23 103.159.218.0/24 maxlen: 24 103.159.219.0/24 maxlen: 24 120.89.64.0/22 maxlen: 22 120.89.64.0/24 maxlen: 24 120.89.65.0/24 maxlen: 24 120.89.66.0/24 maxlen: 24 120.89.67.0/24 maxlen: 24 2407:1a40::/32 maxlen: 32 2407:1a40::/48 maxlen: 48 2407:1a40:6::/48 maxlen: 48 2407:1a40:7::/48 maxlen: 48 2407:1a40:8::/48 maxlen: 48 2407:1a40:9::/48 maxlen: 48 2407:1a40:a::/48 maxlen: 48 2407:1a40:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 23:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1587 (0x633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Validity Not Before: Jan 26 23:21:43 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b43e87-2439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:83:32:6b:89:ad:be:06:9e:f4:cd:15:f1: 71:d0:0d:5b:a5:02:db:d5:fc:f4:0e:46:b9:d8:c9: ca:dc:c7:ed:f0:71:6a:57:6b:80:4b:0e:ab:34:0b: 0b:40:dc:8c:20:43:b6:10:ad:ca:35:97:56:2e:6e: 1d:e4:de:57:9e:48:c7:d6:85:5c:7b:48:8b:c2:b8: 36:76:e6:b4:31:c4:a8:b8:90:ba:8a:87:9b:7b:a9: 1b:2f:3d:b7:9c:43:56:52:af:9d:d2:f9:0d:51:f1: 3b:61:c9:80:79:5b:17:d3:27:c9:a5:45:14:d0:69: 8e:15:08:08:9e:80:d1:31:32:56:4c:92:82:c9:8c: 1c:ac:eb:cb:5e:5e:bc:0b:03:e9:54:8a:7a:32:4b: ce:be:ee:be:00:8b:d8:fd:71:53:80:74:a8:66:85: fe:c5:ab:94:70:d9:4e:16:04:a7:c4:00:7c:fe:c4: 91:72:fe:23:19:e2:58:76:9e:2e:f3:a5:c1:68:02: f7:d3:99:6f:12:10:57:80:ae:3c:96:77:f3:6c:a7: 0d:81:9a:d4:10:a3:db:c2:7e:ae:eb:75:18:eb:e9: 94:b7:ec:ff:c6:dc:65:91:23:77:8d:f6:d5:e6:e2: e2:5a:c9:25:83:26:a6:2e:de:d2:38:f0:fe:24:80: f1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4E:F1:D2:95:2E:C4:A8:33:29:45:23:DF:DE:B9:23:93:87:89:47 X509v3 Authority Key Identifier: keyid:C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/AC53A55C7B3611EBB7C5F122C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.218.0/23 120.89.64.0/22 IPv6: 2407:1a40::/32 Signature Algorithm: sha256WithRSAEncryption 8d:24:3b:8f:d3:f0:27:48:4f:fd:3e:62:6b:59:c2:4b:c0:7c: 63:f5:78:37:bc:99:17:47:1d:48:bf:e8:72:4e:25:3e:72:e8: 4c:1a:a5:29:0a:2c:3c:9c:6d:41:76:1f:9f:25:df:04:d3:33: 31:c9:3f:1d:33:57:da:36:39:4d:29:b8:f7:12:68:6e:d8:a4: c2:78:f3:df:b7:ac:05:d3:b3:51:b8:73:6b:b3:b3:4f:87:2c: 3a:33:ef:42:9c:24:e5:d3:c0:a8:d4:f1:01:41:57:01:82:e1: 13:3d:23:04:34:70:a2:f9:aa:de:da:55:bb:04:f1:d6:19:e0: 58:31:b2:78:18:05:75:9f:a8:60:23:f2:e8:a4:40:be:de:c6: 3d:71:59:f1:cb:79:eb:e5:03:4a:06:cf:84:e2:8c:49:87:2c: b4:de:62:2e:2b:36:af:4a:b4:5e:a5:d2:4a:f7:68:a9:e8:48: 06:a6:93:65:10:e0:7d:21:a0:c4:04:78:30:b8:59:9f:c3:2f: 7d:1b:8d:3b:f2:c7:a9:0c:fb:86:cc:6d:29:aa:7b:63:11:34: 59:36:a2:b6:54:81:05:ca:36:a2:28:39:78:12:bf:ef:43:69: 0c:74:63:b1:59:7d:ae:12:39:c2:3d:4b:bb:55:b8:f4:e7:9f: 98:15:8e:d9 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBREYxMTAvBgNVBAUTKEM3MEJGNzlFODhFMzExOUFFOTZCQjc2MUEyOTNCQjUx QTQ4NjE3M0MwHhcNMjQwMTI2MjMyMTQzWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI0M2U4Ny0yNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs2DMmuJrb4GnvTNFfFx0A1bpQLb1fz0Dka52MnK3Mft8HFqV2uASw6rNAsL QNyMIEO2EK3KNZdWLm4d5N5XnkjH1oVce0iLwrg2dua0McSouJC6ioebe6kbLz23 nENWUq+d0vkNUfE7YcmAeVsX0yfJpUUU0GmOFQgInoDRMTJWTJKCyYwcrOvLXl68 CwPpVIp6MkvOvu6+AIvY/XFTgHSoZoX+xauUcNlOFgSnxAB8/sSRcv4jGeJYdp4u 86XBaAL305lvEhBXgK48lnfzbKcNgZrUEKPbwn6u63UY6+mUt+z/xtxlkSN3jfbV 5uLiWsklgyamLt7SOPD+JIDxuwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHFO8dKV LsSoMylFI9/euSOTh4lHMB8GA1UdIwQYMBaAFMcL956I4xGa6Wu3YaKTu1Gkhhc8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFERi9CODVGMEU4QzNB Q0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVacnBhN2Rob3BPN1VhU0dG encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3djNub2pqRVpycGE3ZGhvcE83VWFTR0Z6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBBREYvQjg1RjBFOEMzQUNCMTFFQkEyMjVBRDE3QzRGOUFFMDIvQUM1M0E1NUM3 QjM2MTFFQkI3QzVGMTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnn9oDBAJ4WUAwDQQCAAIwBwMFACQHGkAwDQYJKoZIhvcN AQELBQADggEBAI0kO4/T8CdIT/0+YmtZwkvAfGP1eDe8mRdHHUi/6HJOJT5y6Ewa pSkKLDycbUF2H58l3wTTMzHJPx0zV9o2OU0puPcSaG7YpMJ489+3rAXTs1G4c2uz s0+HLDoz70KcJOXTwKjU8QFBVwGC4RM9IwQ0cKL5qt7aVbsE8dYZ4FgxsngYBXWf qGAj8uikQL7exj1xWfHLeevlA0oGz4TijEmHLLTeYi4rNq9KtF6l0kr3aKnoSAam k2UQ4H0hoMQEeDC4WZ/DL30bjTvyx6kM+4bMbSmqe2MRNFk2orZUgQXKNqIoOXgS v+9DaQx0Y7FZfa4SOcI9S7tVuPTnn5gVjtk= -----END CERTIFICATE-----Generated at Fri May 17 00:24:21 2024 by rpki-client on console-fra.rpki-client.org