$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2664BB64A4FE11ECBAF38E5BC4F9AE02.roa File: 2664BB64A4FE11ECBAF38E5BC4F9AE02.roa (raw, json) Hash identifier: WtvHLioOua13NedTDEDhjTg7jZv4hTNvKfvjQxw49NA= Subject key identifier: 40:32:F1:A1:34:BB:11:4C:89:B2:7F:EC:35:35:31:FB:F6:4A:07:8F Certificate issuer: /CN=A9170F5D/serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9 Certificate serial: 0301 Authority key identifier: 15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2664BB64A4FE11ECBAF38E5BC4F9AE02.roa Signing time: Fri 05 Apr 2024 03:35:35 +0000 ROA not before: Fri 05 Apr 2024 03:35:35 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 136969 IP address blocks: 103.178.120.0/24 maxlen: 24 103.178.121.0/24 maxlen: 24 2001:df0:39c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 769 (0x301) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F5D/serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9 Validity Not Before: Apr 5 03:35:35 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=660f7187-63c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:16:5f:74:50:b6:52:b6:5f:27:ea:25:38: 20:30:fc:13:e1:1d:bd:88:7e:e0:25:0a:c2:16:59: a1:c6:57:f0:8b:c8:62:c0:1e:62:18:54:d7:0e:aa: cb:5e:42:b5:19:0f:2f:5f:96:36:c4:9c:40:50:7a: 4a:db:ff:8b:43:4d:08:de:78:e4:48:21:e9:47:9f: 4a:ed:e0:b5:2a:7b:b6:86:f7:7e:5e:1d:ec:d3:dc: 7c:27:c2:08:6b:01:8f:47:9b:bf:46:f2:31:07:2e: f6:0e:f6:46:3f:bc:ae:c4:0c:15:5f:d3:35:2e:97: 78:ef:ff:57:c0:30:c3:41:44:b5:4f:67:53:16:7b: 13:e5:3c:75:64:ba:82:5d:6c:8d:39:23:83:44:f2: 60:75:6d:57:6c:8e:36:f6:58:69:83:c9:a6:ab:f1: 4a:3c:4e:5e:44:b5:f4:1a:57:2b:f9:e6:9d:35:2d: e7:5c:08:62:b0:e0:fd:ff:e5:41:04:99:14:18:e3: 40:4d:ea:2c:2f:cc:63:3a:6d:c8:7b:7a:d9:e7:c0: e6:c9:2e:42:d6:1b:0d:64:16:49:d5:a8:2f:0b:6d: 9f:f9:70:a1:d9:2c:dc:4c:f4:be:5f:51:f6:55:e6: 83:d5:d7:0d:43:ca:73:64:d5:65:b2:17:3c:bd:3a: 7a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:32:F1:A1:34:BB:11:4C:89:B2:7F:EC:35:35:31:FB:F6:4A:07:8F X509v3 Authority Key Identifier: keyid:15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2664BB64A4FE11ECBAF38E5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.178.120.0/23 IPv6: 2001:df0:39c0::/48 Signature Algorithm: sha256WithRSAEncryption ec:35:76:dd:9a:d1:29:dc:fe:3a:ef:74:b1:d4:49:a3:fc:8d: 3a:e2:ed:d4:e2:8b:ff:5a:7e:6f:65:dd:8f:d4:61:b5:02:4f: 9f:42:7e:7b:e2:9f:98:21:c2:5b:0d:ec:46:1e:27:cc:b6:dc: 1a:2c:31:65:4d:d3:4f:3c:49:8a:b4:15:18:aa:e2:9e:90:fd: e7:55:93:55:b0:4f:e3:46:5e:ff:fd:fe:0d:e5:51:63:13:29: 4a:a0:74:91:93:be:b2:fa:c6:58:2b:4c:a4:3d:6f:6a:f1:bf: 7c:a4:bf:a8:ec:a7:a9:15:9f:c8:60:41:f5:15:43:18:8c:4c: 9d:18:21:82:89:d7:7c:fc:6d:0d:da:d6:60:f7:86:cd:93:3c: ee:49:42:6b:3d:d9:b8:0d:35:86:ce:d6:a0:cd:01:93:07:7a: bb:4b:24:9f:07:40:ce:6e:dc:a1:85:a4:03:a5:27:53:ce:4c: ca:85:c7:db:32:c4:99:61:58:2a:85:d8:03:dc:a7:44:97:88: be:ef:0c:2d:9e:53:f8:56:fe:f9:00:6c:2a:62:bc:7e:6a:9f: 0b:f0:ec:44:13:a7:9c:b0:72:09:e1:ad:ac:f1:c9:82:71:69: 31:bb:33:51:10:17:57:0c:d8:34:19:c2:8d:e7:05:d2:b0:b9: 0a:c7:9b:46 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBGNUQxMTAvBgNVBAUTKDE1RUNCRUI4NUI2OTNGMTI1OEE5MDM2NjdBRjAyQzYy N0Y2OUFEQzkwHhcNMjQwNDA1MDMzNTM1WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjBmNzE4Ny02M2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwsWX3RQtlK2XyfqJTggMPwT4R29iH7gJQrCFlmhxlfwi8hiwB5iGFTXDqrL XkK1GQ8vX5Y2xJxAUHpK2/+LQ00I3njkSCHpR59K7eC1Knu2hvd+Xh3s09x8J8II awGPR5u/RvIxBy72DvZGP7yuxAwVX9M1Lpd47/9XwDDDQUS1T2dTFnsT5Tx1ZLqC XWyNOSODRPJgdW1XbI429lhpg8mmq/FKPE5eRLX0Glcr+eadNS3nXAhisOD9/+VB BJkUGONATeosL8xjOm3Ie3rZ58DmyS5C1hsNZBZJ1agvC22f+XCh2SzcTPS+X1H2 VeaD1dcNQ8pzZNVlshc8vTp6kwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEAy8aE0 uxFMibJ/7DU1Mfv2SgePMB8GA1UdIwQYMBaAFBXsvrhbaT8SWKkDZnrwLGJ/aa3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEY1RC85RDU0QzE3Qzg4 QkQxMUVDOTFCODY5NDlDNEY5QUUwMi9GZXktdUZ0cFB4SllxUU5tZXZBc1luOXBy Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZleS11RnRwUHhKWXFRTm1ldkFzWW45cHJjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBGNUQvOUQ1NEMxN0M4OEJEMTFFQzkxQjg2OTQ5QzRGOUFFMDIvMjY2NEJCNjRB NEZFMTFFQ0JBRjM4RTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsngwDwQCAAIwCQMHACABDfA5wDANBgkqhkiG9w0BAQsF AAOCAQEA7DV23ZrRKdz+Ou90sdRJo/yNOuLt1OKL/1p+b2Xdj9RhtQJPn0J+e+Kf mCHCWw3sRh4nzLbcGiwxZU3TTzxJirQVGKrinpD951WTVbBP40Ze//3+DeVRYxMp SqB0kZO+svrGWCtMpD1vavG/fKS/qOynqRWfyGBB9RVDGIxMnRghgonXfPxtDdrW YPeGzZM87klCaz3ZuA01hs7WoM0Bkwd6u0sknwdAzm7coYWkA6UnU85MyoXH2zLE mWFYKoXYA9ynRJeIvu8MLZ5T+Fb++QBsKmK8fmqfC/DsRBOnnLByCeGtrPHJgnFp MbszURAXVwzYNBnCjecF0rC5CsebRg== -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:19 2024 by rpki-client on console-ams.rpki-client.org