$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/585745526BC111EEA163E774C4F9AE02.roa File: 585745526BC111EEA163E774C4F9AE02.roa (raw, json) Hash identifier: SgiPpSzjVYRUuSbfrex/g+dkVgdfWShv5j9Fj2CdmAA= Subject key identifier: 74:A3:CB:0E:1C:5C:C1:1C:6D:E2:F2:6F:53:BD:CE:70:EB:70:35:F1 Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Certificate serial: 7D Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/585745526BC111EEA163E774C4F9AE02.roa Signing time: Wed 03 Apr 2024 07:39:11 +0000 ROA not before: Wed 03 Apr 2024 07:39:11 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 139580 IP address blocks: 103.6.212.0/24 maxlen: 24 103.6.213.0/24 maxlen: 24 103.16.180.0/24 maxlen: 24 103.16.181.0/24 maxlen: 24 2403:4f00::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Validity Not Before: Apr 3 07:39:11 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=660d079f-77dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b0:c6:27:cc:d2:30:e3:c1:d4:d5:8a:8a:d7: ea:55:ae:f1:5f:41:33:28:ab:45:70:ff:81:eb:93: 63:c0:f4:1f:88:7f:ae:09:bd:e7:58:96:0e:b9:ab: d4:4c:67:b9:97:e3:5a:b7:02:f6:34:07:86:31:b1: 6c:fd:63:b5:5e:e3:06:32:12:ce:a0:21:54:3f:52: ad:ee:8d:74:c9:c8:4c:28:72:8d:15:fd:51:70:99: 71:3c:38:e5:18:bc:1d:72:b6:b9:0b:eb:87:7d:f0: 92:d2:6d:84:f7:57:59:87:f0:b7:40:55:ed:27:4c: 9b:1d:22:3b:57:db:d8:db:2e:5f:4b:a0:79:d0:1b: ef:03:ea:2d:9b:63:1c:4f:ed:a1:b6:c2:a9:ee:73: 45:e7:88:35:c7:fd:d0:5b:47:f8:f5:6d:c4:f7:74: 43:a9:53:08:d8:a6:3c:e7:8b:88:5f:c5:33:b8:2f: c8:cb:18:66:23:ff:83:c0:3d:24:b4:77:82:99:01: 84:f1:7e:5f:97:43:65:a4:a4:57:39:cb:88:91:45: 24:e9:ba:b3:6e:66:c1:95:c1:d3:3f:48:1f:37:92: ef:f6:45:ec:cc:08:22:a8:0c:e4:92:3f:48:78:20: a3:30:00:e2:2b:21:8a:ca:33:fa:fc:fe:04:6e:f4: e6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A3:CB:0E:1C:5C:C1:1C:6D:E2:F2:6F:53:BD:CE:70:EB:70:35:F1 X509v3 Authority Key Identifier: keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/585745526BC111EEA163E774C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.6.212.0/23 103.16.180.0/23 IPv6: 2403:4f00::/36 Signature Algorithm: sha256WithRSAEncryption 8c:64:8d:1c:3d:5d:08:0b:56:1f:50:31:87:3f:a9:d5:d9:ac: 19:63:b9:60:36:11:05:e3:32:8f:08:8d:65:e9:12:37:17:58: 10:0a:49:10:d5:8a:5a:f2:ea:fb:84:da:c4:f6:7a:49:95:4b: 0f:25:c1:cc:98:14:19:c7:ee:bb:47:c8:56:b1:a1:69:48:41: ef:a0:65:0d:8c:d7:ed:89:58:62:48:aa:39:a9:53:83:13:93: d6:cf:11:85:54:98:4b:b7:fc:cf:5b:56:53:d9:4c:f9:83:d6: 93:57:72:ca:dd:7d:20:68:50:79:37:63:15:fe:9d:ab:f5:e3: 8f:90:ec:a1:e7:18:9e:db:8c:25:33:9f:cb:0e:e3:e8:94:96: fc:19:38:56:da:83:ba:6d:75:4e:96:af:81:9e:99:ad:4d:db: 6b:89:9f:05:4f:c2:18:93:c0:97:94:1b:04:82:3f:7e:2f:cb: 63:c6:94:be:95:45:8f:43:2c:33:fd:d6:e4:63:f6:2d:37:3e: f8:8d:6d:89:b3:9a:3d:2a:0c:a8:1f:ea:59:2b:90:66:7c:8f: 47:5d:80:90:53:92:bb:e7:c9:19:03:42:ca:2d:22:35:05:24: bb:f2:fc:a3:4c:c2:aa:92:44:c0:88:72:5d:8b:90:84:f5:46: c3:bd:3c:26 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTYyMzExMC8GA1UEBRMoREE3MzY5QjQ5NzIyQkExMzlCN0I2MEYzOUM4OEI0OUJE QkIzNUYzRDAeFw0yNDA0MDMwNzM5MTFaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MGQwNzlmLTc3ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfsMYnzNIw48HU1YqK1+pVrvFfQTMoq0Vw/4Hrk2PA9B+If64JvedYlg65q9RM Z7mX41q3AvY0B4YxsWz9Y7Ve4wYyEs6gIVQ/Uq3ujXTJyEwoco0V/VFwmXE8OOUY vB1ytrkL64d98JLSbYT3V1mH8LdAVe0nTJsdIjtX29jbLl9LoHnQG+8D6i2bYxxP 7aG2wqnuc0XniDXH/dBbR/j1bcT3dEOpUwjYpjzni4hfxTO4L8jLGGYj/4PAPSS0 d4KZAYTxfl+XQ2WkpFc5y4iRRSTpurNuZsGVwdM/SB83ku/2RezMCCKoDOSSP0h4 IKMwAOIrIYrKM/r8/gRu9ObxAgMBAAGjggKrMIICpzAdBgNVHQ4EFgQUdKPLDhxc wRxt4vJvU73OcOtwNfEwHwYDVR0jBBgwFoAU2nNptJciuhObe2DznIi0m9uzXz0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNjIzL0EyNUQ0ODlFNTA0 NzExRUVCNjc3MzY1REM0RjlBRTAyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMm5OcHRKY2l1aE9iZTJEem5JaTBtOXV6WHowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi81ODU3NDU1MjZC QzExMUVFQTE2M0U3NzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA1BggrBgEFBQcBBwEB/wQm MCQwEgQCAAEwDAMEAWcG1AMEAWcQtDAOBAIAAjAIAwYEJANPAAAwDQYJKoZIhvcN AQELBQADggEBAIxkjRw9XQgLVh9QMYc/qdXZrBljuWA2EQXjMo8IjWXpEjcXWBAK SRDVilry6vuE2sT2ekmVSw8lwcyYFBnH7rtHyFaxoWlIQe+gZQ2M1+2JWGJIqjmp U4MTk9bPEYVUmEu3/M9bVlPZTPmD1pNXcsrdfSBoUHk3YxX+nav144+Q7KHnGJ7b jCUzn8sO4+iUlvwZOFbag7ptdU6Wr4Gema1N22uJnwVPwhiTwJeUGwSCP34vy2PG lL6VRY9DLDP91uRj9i03PviNbYmzmj0qDKgf6lkrkGZ8j0ddgJBTkrvnyRkDQsot IjUFJLvy/KNMwqqSRMCIcl2LkIT1RsO9PCY= -----END CERTIFICATE-----Generated at Sun May 19 08:25:02 2024 by rpki-client on console-ams.rpki-client.org