$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/DECE1662A87D11EE882D7B6EC4F9AE02.roa File: DECE1662A87D11EE882D7B6EC4F9AE02.roa (raw, json) Hash identifier: Lonvm/OZLKDxplecUeCYCiHwkdpqzMiL+zaeBSIideY= Subject key identifier: 23:27:1C:49:58:9C:31:38:11:2C:C3:00:73:CA:BA:C9:C3:CD:27:7D Certificate issuer: /CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23 Certificate serial: 06 Authority key identifier: FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/DECE1662A87D11EE882D7B6EC4F9AE02.roa Signing time: Mon 01 Jan 2024 08:25:27 +0000 ROA not before: Mon 01 Jan 2024 08:25:27 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 133070 IP address blocks: 115.187.18.0/23 maxlen: 23 115.187.18.0/24 maxlen: 24 115.187.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23 Validity Not Before: Jan 1 08:25:27 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=659276f7-7cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8d:d0:39:61:57:94:f8:63:9e:5e:ee:03:eb: fc:b1:6d:9a:f9:7b:77:5f:c7:ca:a0:e7:f1:84:20: 1c:9b:66:c1:24:73:3d:22:7b:f9:23:d0:03:aa:ed: 96:78:40:55:1e:b9:60:1c:20:2b:cd:19:2a:b8:0b: ba:1c:c7:4d:de:6a:42:4e:45:75:13:cc:f6:14:13: 35:84:fa:a9:39:be:89:e6:31:95:fb:18:33:4c:0a: 8f:2a:36:cd:c8:58:89:34:d8:2b:42:d8:b6:81:0c: d3:05:25:a3:a1:2e:5f:e7:1e:db:de:a7:98:cd:9b: b6:7b:11:82:57:19:10:63:63:02:48:d2:7b:83:a0: af:c2:13:a9:ea:8d:a6:ef:38:47:27:ef:82:ee:17: 4d:4f:4d:8b:f7:76:02:67:fb:57:71:69:33:96:e9: c0:dd:ca:bd:81:3c:3d:31:2e:2a:c9:a1:18:f9:d5: ed:1f:ca:5a:6b:e7:d2:0e:ae:25:b1:35:c8:b8:d3: a4:83:ad:05:49:ff:ba:53:07:c3:6e:24:07:3a:cb: eb:2f:13:3f:94:97:f4:b9:56:80:03:d6:e9:7e:02: 5d:72:d6:1d:77:03:72:e2:eb:d0:68:eb:67:31:22: e9:19:9b:dc:14:bd:26:9d:16:ec:9f:14:eb:a9:6d: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:27:1C:49:58:9C:31:38:11:2C:C3:00:73:CA:BA:C9:C3:CD:27:7D X509v3 Authority Key Identifier: keyid:FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/DECE1662A87D11EE882D7B6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.187.18.0/23 Signature Algorithm: sha256WithRSAEncryption 50:4c:b1:47:f3:ff:fd:0f:2c:7d:8a:35:9a:30:c2:46:b4:15: 7e:48:6e:12:ec:f9:a0:70:f4:18:65:10:fa:dd:6f:89:e5:22: f5:b2:b0:0a:41:5a:e8:f4:f6:31:40:c0:f3:71:07:cb:8f:54: 8b:5d:02:34:20:77:d1:13:d6:15:b4:74:ba:d4:15:28:e0:d9: d1:d8:e8:f1:93:9d:36:b0:84:3a:5a:56:a1:82:75:e9:aa:25: 8e:3b:38:9b:30:bd:ee:5d:ab:f7:98:c7:4e:16:b0:30:23:86: 07:93:ad:d5:7c:30:2d:2a:ea:63:9d:e3:67:0c:93:c4:35:d6: 5b:ed:97:9d:76:38:3c:80:f6:3d:26:56:fe:fe:48:51:68:1c: c8:9b:78:5d:7a:49:38:ae:e8:a8:d8:10:77:e1:a3:28:97:88: 87:a0:ff:2a:f1:38:bf:07:3f:2d:c0:f0:ec:ed:13:73:4c:26: b4:7c:a8:74:f8:2e:f0:0b:4a:86:c4:e5:32:97:72:92:e7:16: ff:12:00:5a:66:43:dd:1e:db:75:1c:e7:82:f0:c5:dd:6e:ac: 5b:e3:de:f8:b3:81:f8:2c:22:a7:72:f7:8a:16:11:eb:80:6b: 95:04:64:62:61:ee:aa:0d:81:59:60:2d:8c:d6:91:5b:de:d1: 20:c4:e8:d1 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkI4NjExMC8GA1UEBRMoRkREOTFERDMwRTlCMUZFQTNCQjdFMTJBRUY3NjIxNjYy ODEyOUIyMzAeFw0yNDAxMDEwODI1MjdaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1OTI3NmY3LTdjYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRjdA5YVeU+GOeXu4D6/yxbZr5e3dfx8qg5/GEIBybZsEkcz0ie/kj0AOq7ZZ4 QFUeuWAcICvNGSq4C7ocx03eakJORXUTzPYUEzWE+qk5vonmMZX7GDNMCo8qNs3I WIk02CtC2LaBDNMFJaOhLl/nHtvep5jNm7Z7EYJXGRBjYwJI0nuDoK/CE6nqjabv OEcn74LuF01PTYv3dgJn+1dxaTOW6cDdyr2BPD0xLirJoRj51e0fylpr59IOriWx Nci406SDrQVJ/7pTB8NuJAc6y+svEz+Ul/S5VoAD1ul+Al1y1h13A3Li69Bo62cx IukZm9wUvSadFuyfFOupbfH5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUIyccSVic MTgRLMMAc8q6ycPNJ30wHwYDVR0jBBgwFoAU/dkd0w6bH+o7t+Eq73YhZigSmyMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQjg2Lzg2RTk3N0NBQTg3 RDExRUU5RkE1NUE2REM0RjlBRTAyL19ka2QwdzZiSC1vN3QtRXE3M1loWmlnU215 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2RrZDB3NmJILW83dC1FcTczWWhaaWdTbXlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkI4Ni84NkU5NzdDQUE4N0QxMUVFOUZBNTVBNkRDNEY5QUUwMi9ERUNFMTY2MkE4 N0QxMUVFODgyRDdCNkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAXO7EjANBgkqhkiG9w0BAQsFAAOCAQEAUEyxR/P//Q8sfYo1 mjDCRrQVfkhuEuz5oHD0GGUQ+t1vieUi9bKwCkFa6PT2MUDA83EHy49Ui10CNCB3 0RPWFbR0utQVKODZ0djo8ZOdNrCEOlpWoYJ16aoljjs4mzC97l2r95jHThawMCOG B5Ot1XwwLSrqY53jZwyTxDXWW+2XnXY4PID2PSZW/v5IUWgcyJt4XXpJOK7oqNgQ d+GjKJeIh6D/KvE4vwc/LcDw7O0Tc0wmtHyodPgu8AtKhsTlMpdykucW/xIAWmZD 3R7bdRzngvDF3W6sW+Pe+LOB+Cwip3L3ihYR64BrlQRkYmHuqg2BWWAtjNaRW97R IMTo0Q== -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:29 2024 by rpki-client on console-fra.rpki-client.org