$ rpki-client -vvf rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/9C9389D4970311E9B7D3DE5AC4F9AE02.roa File: 9C9389D4970311E9B7D3DE5AC4F9AE02.roa (raw, json) Hash identifier: wpaP/UJ1okKESnCBZ5S0aOpOY1jJLBjoc5z2xXs4h+o= Subject key identifier: 89:FD:EB:50:4E:F7:5D:73:2D:97:AB:6E:A9:81:CC:AB:E5:46:30:48 Certificate issuer: /CN=A917E04F/serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857 Certificate serial: 0D78 Authority key identifier: 75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/9C9389D4970311E9B7D3DE5AC4F9AE02.roa Signing time: Fri 12 Jan 2024 18:25:57 +0000 ROA not before: Fri 12 Jan 2024 18:25:57 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 139050 IP address blocks: 203.14.165.0/24 maxlen: 24 203.14.165.0/25 maxlen: 25 203.14.165.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3448 (0xd78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E04F/serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857 Validity Not Before: Jan 12 18:25:57 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65a18434-a2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:eb:e8:2d:ca:0a:10:f5:91:d1:ed:26:52: aa:30:e5:dd:42:cf:11:87:75:56:56:c4:96:af:b3: 34:2f:3e:f2:ab:76:0d:6d:93:85:39:64:fc:a8:ea: e0:e9:10:a1:ae:c2:d4:3d:78:52:81:f9:36:6d:b2: ea:81:12:a3:99:49:47:9b:ee:13:6c:ea:f9:89:49: bb:c4:20:8f:ac:dc:4b:4d:7c:62:54:98:65:a4:df: f7:f3:bd:d0:73:57:7e:5f:4b:1a:ac:6a:bc:e9:8c: 35:1d:1f:3a:4d:ea:a3:64:14:ba:d8:de:bb:c6:6c: cc:53:6d:af:5e:46:bd:db:05:26:a1:4a:d1:2d:f5: 6e:c4:81:0e:d6:fd:6c:3c:4e:c8:9e:d6:20:8b:7c: e3:d7:8d:93:0d:af:3f:ba:04:a2:73:f9:5a:1d:53: c0:e8:e0:b4:6a:99:a5:a1:2b:7b:41:8b:6d:21:95: 1a:63:a5:10:a4:07:38:7a:0d:3b:8c:8c:be:b5:04: f4:33:15:85:1c:69:b5:68:f7:14:d3:7f:6c:c0:43: e9:41:16:ed:9a:a7:ba:f4:61:cd:2a:84:8d:87:80: c4:27:e8:89:ea:1d:c0:e8:09:54:65:6d:fc:c0:51: d9:00:66:e5:fc:dd:a5:7c:67:13:85:c5:c3:80:a8: 66:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FD:EB:50:4E:F7:5D:73:2D:97:AB:6E:A9:81:CC:AB:E5:46:30:48 X509v3 Authority Key Identifier: keyid:75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/9C9389D4970311E9B7D3DE5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.14.165.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:a7:27:b3:41:5c:23:b9:a3:c9:50:1b:2a:9f:0b:ae:66:2f: 24:d4:0f:dd:98:ba:5a:78:84:38:d1:73:ba:2e:d7:1b:23:9a: 1e:63:58:f9:f5:1b:14:f5:92:ed:70:61:ac:9e:14:d3:e3:76: 9f:c3:40:38:b4:5a:6b:bb:81:79:bf:87:22:a8:a8:96:5a:be: 59:61:39:db:da:b5:7e:5d:26:94:a9:f6:c5:10:f2:f7:52:06: 27:06:2d:91:28:92:16:6e:00:b3:40:6f:37:bf:fe:0f:92:c4: 94:81:70:36:91:bb:04:df:00:e8:93:de:11:0e:b9:ce:06:27: 18:e7:1a:44:39:3f:d0:7f:b7:f5:02:0a:35:f2:1d:65:68:ad: f6:ac:fa:94:13:0e:f9:61:a9:55:ad:7b:44:e9:79:f9:75:23: 7d:6a:ec:d1:a9:2b:80:98:a8:ff:87:33:f4:6d:d1:aa:d4:12: ee:1c:ec:93:01:fa:fe:8d:f7:81:8c:20:00:bd:eb:0f:ff:03: 1f:32:31:d3:78:37:f0:e1:6b:20:e9:3f:7a:f8:02:37:39:99: 65:fb:2b:ce:c6:88:48:0f:9f:0e:12:5f:cc:df:d8:4d:92:8c: c8:e6:bc:0f:40:e5:8d:da:5f:9c:11:cd:f6:05:d1:b4:5d:90: 7f:11:fc:2b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwNEYxMTAvBgNVBAUTKDc1RERDRDBDRDQ2MjU4QUMxOTFBQzM5MEEyQzkyNUQ4 QzAzNUE4NTcwHhcNMjQwMTEyMTgyNTU3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWExODQzNC1hMmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA/r6C3KChD1kdHtJlKqMOXdQs8Rh3VWVsSWr7M0Lz7yq3YNbZOFOWT8qOrg 6RChrsLUPXhSgfk2bbLqgRKjmUlHm+4TbOr5iUm7xCCPrNxLTXxiVJhlpN/3873Q c1d+X0sarGq86Yw1HR86TeqjZBS62N67xmzMU22vXka92wUmoUrRLfVuxIEO1v1s PE7IntYgi3zj142TDa8/ugSic/laHVPA6OC0apmloSt7QYttIZUaY6UQpAc4eg07 jIy+tQT0MxWFHGm1aPcU039swEPpQRbtmqe69GHNKoSNh4DEJ+iJ6h3A6AlUZW38 wFHZAGbl/N2lfGcThcXDgKhmaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIn961BO 911zLZerbqmBzKvlRjBIMB8GA1UdIwQYMBaAFHXdzQzUYlisGRrDkKLJJdjANahX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTA0Ri80MTg1MzdGNDk3 MDMxMUU5QjRCN0IyNUFDNEY5QUUwMi9kZDNORE5SaVdLd1pHc09Rb3NrbDJNQTFx RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkM05ETlJpV0t3WkdzT1Fvc2tsMk1BMXFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UwNEYvNDE4NTM3RjQ5NzAzMTFFOUI0QjdCMjVBQzRGOUFFMDIvOUM5Mzg5RDQ5 NzAzMTFFOUI3RDNERTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLDqUwDQYJKoZIhvcNAQELBQADggEBAG+nJ7NBXCO5o8lQ GyqfC65mLyTUD92Yulp4hDjRc7ou1xsjmh5jWPn1GxT1ku1wYayeFNPjdp/DQDi0 Wmu7gXm/hyKoqJZavllhOdvatX5dJpSp9sUQ8vdSBicGLZEokhZuALNAbze//g+S xJSBcDaRuwTfAOiT3hEOuc4GJxjnGkQ5P9B/t/UCCjXyHWVorfas+pQTDvlhqVWt e0Tpefl1I31q7NGpK4CYqP+HM/Rt0arUEu4c7JMB+v6N94GMIAC96w//Ax8yMdN4 N/DhayDpP3r4Ajc5mWX7K87GiEgPnw4SX8zf2E2SjMjmvA9A5Y3aX5wRzfYF0bRd kH8R/Cs= -----END CERTIFICATE-----Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org