$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/CBB9F6766CE211EEA9499734C4F9AE02.roa File: CBB9F6766CE211EEA9499734C4F9AE02.roa (raw, json) Hash identifier: +s3RfgfZleOkFSX6tECNHJYojBeQ3ve3IeKnyvn0+N8= Subject key identifier: 42:48:30:EE:36:95:78:9E:6A:D7:63:1B:9B:CA:04:F0:C1:F0:94:41 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 04AA Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/CBB9F6766CE211EEA9499734C4F9AE02.roa Signing time: Sat 13 Jul 2024 01:43:06 +0000 ROA not before: Sat 13 Jul 2024 01:43:06 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 137845 IP address blocks: 103.115.168.0/22 maxlen: 22 103.115.168.0/24 maxlen: 24 103.115.169.0/24 maxlen: 24 2403:1840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1194 (0x4aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Jul 13 01:43:06 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6691dba9-c2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:35:19:db:cb:31:65:5f:ff:75:a1:80:8e: 22:02:ea:12:fc:d0:12:24:d1:a7:82:84:3d:f1:19: 05:ad:56:7e:21:c0:d2:d5:1f:71:af:a4:0b:48:32: 81:25:5e:0a:73:77:75:77:8a:86:3a:cb:e4:b7:1f: d5:3a:a2:d6:55:1a:a1:75:0e:27:26:c8:d8:e3:fe: 38:41:10:8a:2a:29:ea:d1:5e:3a:5d:7b:28:8e:2f: 18:77:fb:f1:9e:92:b9:fc:ce:94:a4:74:75:27:50: 26:c2:7d:bd:90:2c:5f:ad:79:c0:e2:b5:fe:42:cd: 7f:e2:f9:a0:ca:d6:d0:5e:8e:9f:95:21:3a:02:9e: ec:02:ff:1d:b4:a3:4f:f0:ff:8f:8e:1c:5f:0a:b6: 03:7d:e8:c2:4d:ac:25:b5:4b:28:42:13:71:1a:fc: d0:ee:44:14:70:92:b8:cc:78:99:90:f6:2a:3e:81: e1:1f:35:77:30:2a:91:5e:e5:a4:1d:56:70:72:a0: 1e:05:82:b7:44:11:00:65:ab:22:d3:d8:d6:d4:71: 64:1d:26:a5:07:51:f9:2f:8f:e7:d9:7d:ee:9f:40: 64:8d:84:90:1b:f3:58:07:78:f2:56:48:4a:af:e9: bf:0f:87:60:03:bb:c9:ae:2e:a1:d3:84:40:1a:d1: 15:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:48:30:EE:36:95:78:9E:6A:D7:63:1B:9B:CA:04:F0:C1:F0:94:41 X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/CBB9F6766CE211EEA9499734C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.168.0/22 IPv6: 2403:1840::/32 Signature Algorithm: sha256WithRSAEncryption 93:ca:0e:34:a9:06:2c:62:1b:4e:0b:66:5d:b7:cf:6e:69:a6: 16:32:f3:9b:97:80:7e:51:cc:d4:33:84:73:d1:19:a6:48:fd: 24:f2:42:5f:20:2b:7d:ad:2c:3b:41:e6:1e:e2:33:b5:b2:39: d1:87:30:47:3b:38:f0:80:48:4b:8f:70:10:4a:8e:c5:55:be: 0e:68:8d:39:3b:0c:9c:db:ad:0a:13:24:64:54:93:22:75:da: 5e:98:cc:f1:6b:38:5a:bd:c3:81:d7:1f:36:17:7f:45:df:17: 6d:1f:3d:b3:7c:3e:28:89:ec:2d:e4:51:8c:6d:dc:f5:c3:d6: 5c:da:38:3a:93:95:48:f4:b3:68:ea:02:9f:56:2d:8b:1a:43: 14:51:61:63:e1:88:77:4f:4d:29:1e:cf:d3:c6:65:d8:ef:86: 91:d6:b1:07:ab:24:c1:a0:7a:06:b0:0f:4f:6e:b2:4b:1c:d6: 6d:98:0f:6c:b6:b5:c0:90:2a:3f:3e:3e:c7:c2:ef:57:23:20: ec:1b:5d:53:b3:3d:25:0b:ea:09:38:48:8e:62:63:97:19:ce: 21:58:a4:ff:64:3e:77:56:b5:8b:69:49:db:8a:cb:09:a2:60: 48:c6:5f:76:88:8c:a8:94:67:da:28:82:a5:fc:00:d3:08:52: 4d:07:a2:58 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjQwNzEzMDE0MzA2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjkxZGJhOS1jMmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyB81GdvLMWVf/3WhgI4iAuoS/NASJNGngoQ98RkFrVZ+IcDS1R9xr6QLSDKB JV4Kc3d1d4qGOsvktx/VOqLWVRqhdQ4nJsjY4/44QRCKKinq0V46XXsoji8Yd/vx npK5/M6UpHR1J1Amwn29kCxfrXnA4rX+Qs1/4vmgytbQXo6flSE6Ap7sAv8dtKNP 8P+PjhxfCrYDfejCTawltUsoQhNxGvzQ7kQUcJK4zHiZkPYqPoHhHzV3MCqRXuWk HVZwcqAeBYK3RBEAZasi09jW1HFkHSalB1H5L4/n2X3un0BkjYSQG/NYB3jyVkhK r+m/D4dgA7vJri6h04RAGtEV8QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEJIMO42 lXieatdjG5vKBPDB8JRBMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxNTEvMTJBQ0Q2QkFGNERDMTFFQjhGN0RCOTQ5QzRGOUFFMDIvQ0JCOUY2NzY2 Q0UyMTFFRUE5NDk5NzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnc6gwDQQCAAIwBwMFACQDGEAwDQYJKoZIhvcNAQELBQAD ggEBAJPKDjSpBixiG04LZl23z25pphYy85uXgH5RzNQzhHPRGaZI/STyQl8gK32t LDtB5h7iM7WyOdGHMEc7OPCASEuPcBBKjsVVvg5ojTk7DJzbrQoTJGRUkyJ12l6Y zPFrOFq9w4HXHzYXf0XfF20fPbN8PiiJ7C3kUYxt3PXD1lzaODqTlUj0s2jqAp9W LYsaQxRRYWPhiHdPTSkez9PGZdjvhpHWsQerJMGgegawD09usksc1m2YD2y2tcCQ Kj8+PsfC71cjIOwbXVOzPSUL6gk4SI5iY5cZziFYpP9kPndWtYtpSduKywmiYEjG X3aIjKiUZ9oogqX8ANMIUk0Holg= -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:01 2024 by rpki-client on console-ams.rpki-client.org