$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/9CAFFE72B58F11ECBCF10934C4F9AE02.roa File: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (raw, json) Hash identifier: m1lmrBomInv3RwGPR6n2Hax1CjT2qYjyfLp3Bhn9XcA= Subject key identifier: 6D:E7:B5:3B:91:E9:1B:2F:AE:67:68:C4:EC:9D:10:EA:DC:6B:7C:14 Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Certificate serial: 029C Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/9CAFFE72B58F11ECBCF10934C4F9AE02.roa Signing time: Thu 23 May 2024 03:37:37 +0000 ROA not before: Thu 23 May 2024 03:37:37 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 149771 IP address blocks: 103.185.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B Validity Not Before: May 23 03:37:37 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=664eba01-cca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:04:4c:b9:87:05:f6:e4:64:c4:6f:67:81:b7: 7a:c4:c3:75:8a:0e:46:5c:3b:0d:1a:f0:00:87:12: cf:44:9b:53:02:e7:7b:ee:4a:8c:16:cc:80:e5:4e: 4c:12:b7:82:c1:be:63:16:3c:a6:54:59:97:0c:82: 6e:55:f7:de:08:6e:6e:29:cd:67:53:c2:4e:86:83: bd:2c:78:f8:00:ca:97:5b:3a:ed:76:a7:56:65:38: ee:38:8a:37:b6:66:8f:f2:01:86:5c:d6:92:e0:9e: be:99:42:67:01:29:f9:c4:a5:6a:ff:24:b0:62:47: 53:0e:c1:ce:e2:99:8e:b0:bb:1a:8a:e7:87:25:55: 6c:02:ba:30:4d:28:1b:c1:bc:b3:b1:07:9e:64:45: bf:8d:4b:de:a9:a7:09:db:e6:4d:48:47:64:f6:50: b7:cc:fb:09:84:d7:b2:56:1d:cb:60:10:4e:34:20: 8f:eb:a0:11:26:1d:28:c8:8e:1d:3f:17:24:5a:2e: c8:da:3a:ff:c3:32:67:96:e5:87:5c:c2:52:54:e2: 0e:9e:53:a6:55:5a:b8:11:2b:e0:41:6b:be:5d:17: 5b:d0:7b:70:92:88:48:0a:6f:53:c1:6d:2e:3d:e2: b0:96:8d:3f:63:36:84:f2:75:cd:9a:d1:21:37:98: 66:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E7:B5:3B:91:E9:1B:2F:AE:67:68:C4:EC:9D:10:EA:DC:6B:7C:14 X509v3 Authority Key Identifier: keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/9CAFFE72B58F11ECBCF10934C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.185.231.0/24 Signature Algorithm: sha256WithRSAEncryption a1:cf:be:f1:5b:ed:af:c2:93:e9:3f:6a:25:63:8a:3e:db:ec: ab:8a:db:c5:91:15:4b:b7:ab:4b:37:f4:d8:da:1e:a7:e8:99: 96:d6:82:51:ed:ae:99:6e:20:2e:9c:b8:8b:c0:6e:8c:be:bc: 7d:ff:4b:7e:65:2e:df:6d:9f:fb:ad:79:5a:cb:22:43:98:6a: 01:70:3f:4f:d1:f3:0d:a6:e7:85:f9:a7:df:81:bc:fe:5b:66: e0:c3:b1:99:54:26:3e:60:5a:c5:bf:20:30:fd:07:4e:ba:2b: 74:0d:b1:15:74:10:d6:89:3e:ee:3c:a8:9d:87:d4:5f:a5:3d: 38:b0:5d:f4:96:ae:70:27:e8:d4:f8:de:bc:fb:02:67:95:ee: 57:58:47:5b:58:71:ea:59:fa:4d:36:f3:ee:f7:cf:5b:dc:da: 1d:42:33:e5:d7:83:95:3f:a1:cb:1a:e9:60:61:97:4b:59:54: 5b:8a:e4:79:af:ba:6d:19:37:c9:d4:0f:ed:08:ee:2f:ac:1b: 74:c8:66:76:66:f4:0f:a6:e4:ad:35:c6:d3:e1:9a:cd:a1:d8: 8e:5c:e1:84:45:82:48:d9:15:7a:d9:f2:be:48:2e:f3:60:42: 96:57:f4:95:8a:b3:65:39:4b:87:ed:01:1c:20:c1:7d:f4:3f: 1e:f1:13:66 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz QTY0QjRCOEIwHhcNMjQwNTIzMDMzNzM3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRlYmEwMS1jY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wRMuYcF9uRkxG9ngbd6xMN1ig5GXDsNGvAAhxLPRJtTAud77kqMFsyA5U5M EreCwb5jFjymVFmXDIJuVffeCG5uKc1nU8JOhoO9LHj4AMqXWzrtdqdWZTjuOIo3 tmaP8gGGXNaS4J6+mUJnASn5xKVq/ySwYkdTDsHO4pmOsLsaiueHJVVsArowTSgb wbyzsQeeZEW/jUveqacJ2+ZNSEdk9lC3zPsJhNeyVh3LYBBONCCP66ARJh0oyI4d PxckWi7I2jr/wzJnluWHXMJSVOIOnlOmVVq4ESvgQWu+XRdb0HtwkohICm9TwW0u PeKwlo0/YzaE8nXNmtEhN5hmXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG3ntTuR 6RsvrmdoxOydEOrca3wUMB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1 OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI3NUQvOURBQkYwMjJCNThDMTFFQzlBRkI4NzMxQzRGOUFFMDIvOUNBRkZFNzJC NThGMTFFQ0JDRjEwOTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnuecwDQYJKoZIhvcNAQELBQADggEBAKHPvvFb7a/Ck+k/ aiVjij7b7KuK28WRFUu3q0s39NjaHqfomZbWglHtrpluIC6cuIvAboy+vH3/S35l Lt9tn/uteVrLIkOYagFwP0/R8w2m54X5p9+BvP5bZuDDsZlUJj5gWsW/IDD9B066 K3QNsRV0ENaJPu48qJ2H1F+lPTiwXfSWrnAn6NT43rz7AmeV7ldYR1tYcepZ+k02 8+73z1vc2h1CM+XXg5U/ocsa6WBhl0tZVFuK5Hmvum0ZN8nUD+0I7i+sG3TIZnZm 9A+m5K01xtPhms2h2I5c4YRFgkjZFXrZ8r5ILvNgQpZX9JWKs2U5S4ftARwgwX30 Px7xE2Y= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:39 2024 by rpki-client on console-fra.rpki-client.org