$ rpki-client -vvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/AE26CE12180911EB962CB216C4F9AE02.roa File: AE26CE12180911EB962CB216C4F9AE02.roa (raw, json) Hash identifier: IhePS3j385LdYR7mqTCypnNrI1A+ZbVNzeveI3VyTNg= Subject key identifier: 11:33:C8:BD:E1:FA:2D:CC:4B:EA:81:7C:9D:74:08:01:E6:0E:B1:E5 Certificate issuer: /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9 Certificate serial: 0669 Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/AE26CE12180911EB962CB216C4F9AE02.roa Signing time: Thu 16 Nov 2023 23:00:46 +0000 ROA not before: Thu 16 Nov 2023 23:00:46 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 141371 IP address blocks: 103.157.198.0/24 maxlen: 24 103.157.199.0/24 maxlen: 24 2001:df5:2a80::/48 maxlen: 48 2001:df5:2a81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9 Validity Not Before: Nov 16 23:00:46 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65569f1e-b5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:37:55:80:b2:52:05:10:3c:b2:83:b6:47:bd: c8:f8:e5:57:24:23:90:e4:2b:8c:97:d6:e1:34:80: d9:54:79:68:be:f7:ca:85:4b:5b:2f:c6:63:03:9d: db:09:66:eb:84:aa:b5:a5:77:2f:2c:f1:00:19:bf: 03:0b:17:55:29:5b:52:2b:85:5b:27:c4:31:a5:03: c6:3a:07:ab:a7:5c:1a:25:df:5a:5a:42:b8:ed:6e: 48:e4:a7:85:f6:0f:a7:76:d9:a5:24:18:96:67:20: 48:e4:19:1e:68:0a:e0:79:ff:cd:8a:4a:d7:08:8f: 62:13:f7:e1:ec:66:e6:f5:df:f3:e7:eb:ea:6d:66: c6:96:98:0a:83:3b:ff:d9:36:90:6f:22:fa:28:3d: ec:1f:01:cd:05:b8:20:c8:37:99:05:86:5a:b7:f7: fb:bf:57:2b:ce:91:3d:44:9b:5a:f5:d1:77:18:4a: c2:54:93:ab:0b:49:91:12:f7:36:0b:af:5a:3a:55: 71:ad:3a:d0:f2:36:ce:60:c1:01:fc:2a:74:e1:b0: 62:b8:87:f8:a6:6a:3e:a0:6a:30:1f:d3:8f:86:9e: 2c:ec:11:46:d8:9b:d0:47:39:90:7c:f5:6d:a5:9d: ce:ee:fe:86:84:0f:e5:13:a7:59:15:8e:66:65:32: 50:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:33:C8:BD:E1:FA:2D:CC:4B:EA:81:7C:9D:74:08:01:E6:0E:B1:E5 X509v3 Authority Key Identifier: keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/AE26CE12180911EB962CB216C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.198.0/23 IPv6: 2001:df5:2a80::/47 Signature Algorithm: sha256WithRSAEncryption 29:bf:f4:f4:cc:08:07:a4:f3:2c:b0:e1:ed:61:13:76:8a:82: 0d:8d:78:91:aa:53:5e:b3:de:a3:93:64:cf:d9:70:fb:a9:cb: 2c:3e:17:f1:9a:b6:79:1d:f0:26:f2:b8:a3:2b:fb:a3:23:6d: b3:56:8a:13:19:83:e0:b1:e5:cc:21:f3:cb:0a:1f:1c:d7:62: 38:8e:f1:06:fc:93:56:65:1c:a7:98:4b:7d:14:03:c3:e4:e5: 74:1f:5f:a6:4d:0b:3a:02:82:ff:ba:49:57:72:67:a0:d4:a6: 78:2c:4b:9a:c0:1f:96:d2:04:9e:c9:4a:42:7a:f6:64:7c:b4: dc:25:d8:79:5e:0d:5d:c1:e4:f9:a5:13:e6:7c:e5:bb:16:0d: cc:4c:46:0f:9c:93:84:ea:17:da:f4:6b:7c:97:0c:50:49:02: 95:c3:ef:9a:1b:12:ff:ee:6f:31:34:31:cb:28:91:cd:51:26: da:66:79:b6:a8:ff:f1:98:2d:98:a6:3a:6b:f4:2d:64:66:ce: b3:c0:bf:48:f9:b9:86:d6:7b:90:df:64:af:e5:64:04:6a:7b: 78:12:10:94:78:f7:48:bf:07:4e:80:67:61:30:40:85:ac:88: c7:c1:6d:b6:f3:40:9c:cc:28:37:60:96:7c:25:11:24:ac:de: 27:db:73:54 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNGN0YxMTAvBgNVBAUTKDk5Q0RDMEVBQkUxODA0MTI2MTE5QTFENTFBOThDQzg3 MTkxM0YzQTkwHhcNMjMxMTE2MjMwMDQ2WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTU2OWYxZS1iNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDdVgLJSBRA8soO2R73I+OVXJCOQ5CuMl9bhNIDZVHlovvfKhUtbL8ZjA53b CWbrhKq1pXcvLPEAGb8DCxdVKVtSK4VbJ8QxpQPGOgerp1waJd9aWkK47W5I5KeF 9g+ndtmlJBiWZyBI5BkeaArgef/NikrXCI9iE/fh7Gbm9d/z5+vqbWbGlpgKgzv/ 2TaQbyL6KD3sHwHNBbggyDeZBYZat/f7v1crzpE9RJta9dF3GErCVJOrC0mREvc2 C69aOlVxrTrQ8jbOYMEB/Cp04bBiuIf4pmo+oGowH9OPhp4s7BFG2JvQRzmQfPVt pZ3O7v6GhA/lE6dZFY5mZTJQhwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBEzyL3h +i3MS+qBfJ10CAHmDrHlMB8GA1UdIwQYMBaAFJnNwOq+GAQSYRmh1RqYzIcZE/Op MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0Y3Ri9FMzdFNUIzMjE1 MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0WUJCSmhHYUhWR3BqTWh4a1Q4 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21jM0E2cjRZQkJKaEdhSFZHcGpNaHhrVDg2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODNGN0YvRTM3RTVCMzIxNTBFMTFFQjhDRUI5NTQzQzRGOUFFMDIvQUUyNkNFMTIx ODA5MTFFQjk2MkNCMjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnncYwDwQCAAIwCQMHASABDfUqgDANBgkqhkiG9w0BAQsF AAOCAQEAKb/09MwIB6TzLLDh7WETdoqCDY14kapTXrPeo5Nkz9lw+6nLLD4X8Zq2 eR3wJvK4oyv7oyNts1aKExmD4LHlzCHzywofHNdiOI7xBvyTVmUcp5hLfRQDw+Tl dB9fpk0LOgKC/7pJV3JnoNSmeCxLmsAfltIEnslKQnr2ZHy03CXYeV4NXcHk+aUT 5nzluxYNzExGD5yThOoX2vRrfJcMUEkClcPvmhsS/+5vMTQxyyiRzVEm2mZ5tqj/ 8ZgtmKY6a/QtZGbOs8C/SPm5htZ7kN9kr+VkBGp7eBIQlHj3SL8HToBnYTBAhayI x8FttvNAnMwoN2CWfCURJKzeJ9tzVA== -----END CERTIFICATE-----Generated at Tue May 7 00:53:20 2024 by rpki-client on console-ams.rpki-client.org