$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/86ED5A7A710311EB9B9D9170C4F9AE02.roa File: 86ED5A7A710311EB9B9D9170C4F9AE02.roa (raw, json) Hash identifier: l4ciLi7yzRbOAd7fcbbP47R9kpQc6aXXxStT/XEIw1c= Subject key identifier: 3A:76:E7:96:C7:F3:1A:AF:27:A5:32:5F:0D:19:D9:43:D0:9D:A7:BA Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0A7F Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/86ED5A7A710311EB9B9D9170C4F9AE02.roa Signing time: Sun 14 May 2023 22:15:31 +0000 ROA not before: Sun 14 May 2023 22:15:31 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 38136 IP address blocks: 103.150.214.0/23 maxlen: 24 2406:840:d000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 14 22:15:31 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64615d83-8d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bd:d5:a4:33:0f:75:50:f0:b9:e3:b6:8a:15: 07:2d:1c:1a:2d:25:71:d9:bd:d3:84:c8:bd:78:96: ff:02:b2:d0:d5:fe:45:d3:77:4a:00:76:90:3d:54: d2:71:b9:ed:dd:d4:0d:ad:fa:71:e4:cf:7d:af:71: de:3e:aa:14:4a:b9:77:95:83:0f:08:b0:f6:49:e0: 92:80:71:69:c0:32:ff:ff:b8:9b:ba:e3:ce:6f:ef: c8:2c:b7:27:51:68:9c:d7:81:c7:74:e1:ee:02:3f: dd:45:19:70:01:cf:af:f3:7d:e5:c6:69:76:af:cd: 6d:6e:ae:80:7d:eb:66:fc:9f:1a:47:2e:d2:c8:43: 39:45:11:09:21:0b:ec:b7:75:72:66:0c:63:b3:41: fd:71:1a:28:d9:f2:04:06:7f:d9:22:8d:21:56:23: af:05:cd:37:8b:25:10:3a:f4:93:b3:8a:43:0a:db: ec:1b:5c:3c:80:7f:f0:e2:89:7b:1f:39:4f:c1:30: 40:eb:d5:0a:e8:8f:4d:da:84:ab:22:ad:8f:98:ba: 2d:b4:2f:05:fe:5c:97:4d:f3:ad:88:02:71:91:aa: 59:bd:65:69:c5:86:d2:d1:c8:f0:4b:76:36:1b:22: 02:11:34:53:bd:32:bb:8f:30:50:1b:a9:53:71:91: 17:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:76:E7:96:C7:F3:1A:AF:27:A5:32:5F:0D:19:D9:43:D0:9D:A7:BA X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/86ED5A7A710311EB9B9D9170C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.214.0/23 IPv6: 2406:840:d000::/36 Signature Algorithm: sha256WithRSAEncryption 1f:07:34:9d:e0:ee:4b:97:b4:af:26:56:87:f7:26:56:fd:34: 2e:63:e9:1a:b8:eb:18:de:7b:ac:03:7c:a5:44:4d:55:dc:cc: 1c:f2:8e:fd:73:04:f0:f0:7f:73:90:53:64:8c:3e:1e:09:32: 21:63:53:44:1a:19:93:e2:fc:98:2c:a2:ca:01:59:48:e2:af: 51:b5:49:8e:7d:fb:06:d9:90:e8:22:2f:b9:56:5f:e2:bf:7f: 21:82:d0:7c:94:36:88:9d:99:d5:90:0d:ac:df:1c:9f:27:cc: a0:96:4f:a0:26:77:0c:1b:f2:93:01:99:ab:26:7b:7b:fe:0e: 50:b8:9d:18:e8:ef:ed:a5:c4:e1:df:90:42:f1:78:9c:0e:48: 64:db:31:ff:9c:74:8b:e9:6d:5d:cb:fe:38:c4:24:c2:49:4b: 43:29:cf:6f:c6:ca:b6:90:80:02:40:57:96:b7:5b:4a:43:5d: 00:e9:e3:d2:d1:3d:e8:e3:4c:57:97:63:45:50:5c:b3:48:05: 12:61:b2:3b:83:40:76:6a:72:17:cd:b8:bf:e0:2c:b6:6f:a4: 4b:f6:63:a6:e3:32:58:d0:02:54:0a:4a:e1:81:89:fe:c6:df: 0b:e0:cd:07:41:9b:e4:c8:0a:38:26:58:06:e0:cd:f5:f5:68: b9:ab:e0:03 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwNTE0MjIxNTMxWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYxNWQ4My04ZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1b3VpDMPdVDwueO2ihUHLRwaLSVx2b3ThMi9eJb/ArLQ1f5F03dKAHaQPVTS cbnt3dQNrfpx5M99r3HePqoUSrl3lYMPCLD2SeCSgHFpwDL//7ibuuPOb+/ILLcn UWic14HHdOHuAj/dRRlwAc+v833lxml2r81tbq6Afetm/J8aRy7SyEM5RREJIQvs t3VyZgxjs0H9cRoo2fIEBn/ZIo0hViOvBc03iyUQOvSTs4pDCtvsG1w8gH/w4ol7 HzlPwTBA69UK6I9N2oSrIq2PmLottC8F/lyXTfOtiAJxkapZvWVpxYbS0cjwS3Y2 GyICETRTvTK7jzBQG6lTcZEXOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDp255bH 8xqvJ6UyXw0Z2UPQnae6MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvODZFRDVBN0E3 MTAzMTFFQjlCOUQ5MTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAFnltYwDgQCAAIwCAMGBCQGCEDQMA0GCSqGSIb3DQEBCwUA A4IBAQAfBzSd4O5Ll7SvJlaH9yZW/TQuY+kauOsY3nusA3ylRE1V3Mwc8o79cwTw 8H9zkFNkjD4eCTIhY1NEGhmT4vyYLKLKAVlI4q9RtUmOffsG2ZDoIi+5Vl/iv38h gtB8lDaInZnVkA2s3xyfJ8yglk+gJncMG/KTAZmrJnt7/g5QuJ0Y6O/tpcTh35BC 8XicDkhk2zH/nHSL6W1dy/44xCTCSUtDKc9vxsq2kIACQFeWt1tKQ10A6ePS0T3o 40xXl2NFUFyzSAUSYbI7g0B2anIXzbi/4Cy2b6RL9mOm4zJY0AJUCkrhgYn+xt8L 4M0HQZvkyAo4JlgG4M319Wi5q+AD -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org