$ rpki-client -vvf rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/F6750B60168D11EC89C9CB5DC4F9AE02.roa File: F6750B60168D11EC89C9CB5DC4F9AE02.roa (raw, json) Hash identifier: l4t676C4vecu5rLc7rgaIRSUaMfSKmg5WMwQZnfD8tg= Subject key identifier: 02:FB:1D:BC:72:F5:5F:75:7C:B8:40:CD:1E:F3:DB:82:32:30:B3:DC Certificate issuer: /CN=A9180174/serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51 Certificate serial: 03DE Authority key identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/F6750B60168D11EC89C9CB5DC4F9AE02.roa Signing time: Sun 03 Dec 2023 01:33:09 +0000 ROA not before: Sun 03 Dec 2023 01:33:09 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 133434 IP address blocks: 103.172.108.0/24 maxlen: 24 103.198.106.0/24 maxlen: 24 2407:d0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 990 (0x3de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180174/serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51 Validity Not Before: Dec 3 01:33:09 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656bdad5-651e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:76:1b:d6:87:89:43:12:b1:5f:b9:2a:ba:41: cc:05:9a:0c:bc:fe:42:28:0e:bf:73:b3:3e:3f:ba: e0:18:48:68:0f:13:2c:8e:c8:27:34:7d:d4:10:46: 19:e3:cd:60:72:86:29:90:de:34:ad:c5:b4:b3:ea: 03:f6:61:2e:4a:06:3f:11:14:92:c9:e6:ee:0b:a4: 4a:7b:c5:8f:12:25:5b:9e:f7:be:ca:19:63:1a:05: 45:64:5a:9e:76:7c:0c:f5:40:bf:64:d1:6d:ca:ea: 78:1a:69:09:46:12:c5:16:5e:fe:f3:51:7d:c0:b3: a8:b7:e7:03:4f:c7:24:f7:a8:c1:97:34:d8:42:b4: 00:8b:b5:35:2f:dc:ff:13:68:dd:00:31:3d:1d:89: e2:c4:1b:de:20:61:a0:0f:e9:c3:52:54:6d:c0:d5: 1f:79:41:13:90:d4:ac:ed:9e:5c:cd:b4:14:32:f0: 9b:38:60:8c:c2:63:5c:c3:c6:08:5c:71:35:44:45: 93:b0:56:e5:ac:d2:c4:dd:21:a4:29:b3:d8:56:e8: 75:30:9a:18:69:aa:c4:06:6b:a0:8e:cd:c1:77:66: 2e:47:a7:62:34:5e:33:5f:93:df:c1:af:1d:62:e3: c0:f7:57:8e:bf:bd:2e:bc:92:2a:64:0a:4a:7c:29: 2d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FB:1D:BC:72:F5:5F:75:7C:B8:40:CD:1E:F3:DB:82:32:30:B3:DC X509v3 Authority Key Identifier: keyid:28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/F6750B60168D11EC89C9CB5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.108.0/24 103.198.106.0/24 IPv6: 2407:d0c0::/32 Signature Algorithm: sha256WithRSAEncryption 09:bb:b8:c2:1f:13:4a:55:b9:67:42:76:e9:e3:d3:59:3f:61: 98:6f:73:55:b4:30:c4:bd:6b:6e:ae:c7:7f:d8:cb:6c:da:c1: 85:47:0f:ce:85:77:ea:26:0f:8e:14:e5:42:95:d9:71:4b:13: 22:f0:34:d6:f2:bf:ff:df:85:06:4f:98:8a:d5:64:c6:10:7f: b1:5f:c8:7b:cb:2e:f5:71:84:4c:96:b9:c2:62:db:f4:5c:fc: 47:5c:9f:d2:32:4d:e8:ef:b4:72:e7:e1:e9:24:a9:9e:40:da: 68:17:cc:ee:d1:ea:f0:1e:91:ca:0c:3a:e2:d9:2d:cd:c9:9b: 7a:1a:f7:e3:88:d6:39:ed:9d:39:51:c0:3c:53:3c:b0:9f:60: f9:4d:6d:ac:79:3b:b4:91:40:ef:7d:7c:b1:6c:17:57:f9:48: 35:b0:9b:25:a2:47:a3:9c:99:9d:15:ef:b2:88:46:df:e6:eb: e1:2c:a4:02:6c:91:15:44:68:5f:17:cc:10:94:ac:fa:8b:18: 21:13:97:b8:5e:db:53:a8:c1:97:ff:5c:01:ba:36:93:65:52: c1:0c:aa:a3:04:e6:98:df:3b:4c:64:6c:2e:8d:cf:89:bd:94: 57:f2:82:eb:cd:57:15:0f:91:48:61:d0:af:2d:ab:6f:ba:f5: 89:46:1c:39 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNzQxMTAvBgNVBAUTKDI4REQ3MjU3M0M1QkFEQTI4OEI4MzJCMzk4MUZGNEM5 OEIyRjhDNTEwHhcNMjMxMjAzMDEzMzA5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiZGFkNS02NTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nYb1oeJQxKxX7kqukHMBZoMvP5CKA6/c7M+P7rgGEhoDxMsjsgnNH3UEEYZ 481gcoYpkN40rcW0s+oD9mEuSgY/ERSSyebuC6RKe8WPEiVbnve+yhljGgVFZFqe dnwM9UC/ZNFtyup4GmkJRhLFFl7+81F9wLOot+cDT8ck96jBlzTYQrQAi7U1L9z/ E2jdADE9HYnixBveIGGgD+nDUlRtwNUfeUETkNSs7Z5czbQUMvCbOGCMwmNcw8YI XHE1REWTsFblrNLE3SGkKbPYVuh1MJoYaarEBmugjs3Bd2YuR6diNF4zX5Pfwa8d YuPA91eOv70uvJIqZApKfCkt9QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAL7Hbxy 9V91fLhAzR7z24IyMLPcMB8GA1UdIwQYMBaAFCjdclc8W62iiLgys5gf9MmLL4xR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE3NC83OUQ2NjYyQTE2 ODkxMUVDODE2MjU4MENDNEY5QUUwMi9LTjF5Vnp4YnJhS0l1REt6bUJfMHlZc3Zq RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tOMXlWenhicmFLSXVES3ptQl8weVlzdmpGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAxNzQvNzlENjY2MkExNjg5MTFFQzgxNjI1ODBDQzRGOUFFMDIvRjY3NTBCNjAx NjhEMTFFQzg5QzlDQjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnrGwDBABnxmowDQQCAAIwBwMFACQH0MAwDQYJKoZIhvcN AQELBQADggEBAAm7uMIfE0pVuWdCdunj01k/YZhvc1W0MMS9a26ux3/Yy2zawYVH D86Fd+omD44U5UKV2XFLEyLwNNbyv//fhQZPmIrVZMYQf7FfyHvLLvVxhEyWucJi 2/Rc/Edcn9IyTejvtHLn4ekkqZ5A2mgXzO7R6vAekcoMOuLZLc3Jm3oa9+OI1jnt nTlRwDxTPLCfYPlNbax5O7SRQO99fLFsF1f5SDWwmyWiR6OcmZ0V77KIRt/m6+Es pAJskRVEaF8XzBCUrPqLGCETl7he21OowZf/XAG6NpNlUsEMqqME5pjfO0xkbC6N z4m9lFfyguvNVxUPkUhh0K8tq2+69YlGHDk= -----END CERTIFICATE-----Generated at Fri May 17 02:38:39 2024 by rpki-client on console-fra.rpki-client.org