$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/03D8DC4A40F011EDAD789E3AC4F9AE02.roa File: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (raw, json) Hash identifier: 6s8lbD4Sp+NOwI/OVD7FbB7Y1BhIHRwBr1ALqocyrHA= Subject key identifier: 95:49:4C:91:5A:89:22:1C:8E:15:A8:A9:3C:CE:36:72:E4:76:13:86 Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Certificate serial: DB Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/03D8DC4A40F011EDAD789E3AC4F9AE02.roa Signing time: Sat 25 Nov 2023 04:14:59 +0000 ROA not before: Sat 25 Nov 2023 04:14:59 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 150331 IP address blocks: 103.13.194.0/23 maxlen: 23 103.13.194.0/24 maxlen: 24 103.13.195.0/24 maxlen: 24 2400:af20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Validity Not Before: Nov 25 04:14:59 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=656174c3-d5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:30:7d:5b:42:e7:49:ce:89:ba:29:a4:1c:a0: 8f:d4:d4:14:99:15:fe:98:09:ae:ad:a6:fc:87:e4: 68:0a:f4:00:5e:d7:7f:b6:9c:4f:9b:8f:7c:d1:ac: b2:3c:3f:29:55:86:98:74:f1:c7:81:12:0c:cf:42: 86:01:9c:bc:ea:71:1f:fd:89:4d:45:e7:fe:b6:86: 4a:15:e5:f6:5a:cb:8d:bc:4c:27:de:f5:78:9d:60: e4:a0:3a:c8:90:6e:c2:2c:51:ff:27:a1:a6:b6:0c: 91:bc:8a:fd:70:d9:09:07:45:c2:7b:69:5b:a6:c9: ae:14:52:7e:ae:af:26:08:20:06:33:e0:34:69:7c: b8:a7:70:12:3a:e1:b3:3f:08:fe:6e:65:16:1b:6c: 2c:f5:72:34:49:7e:4b:f1:71:4a:44:46:d6:6b:38: 44:a2:a0:61:79:0c:81:be:de:02:bd:df:07:49:cb: ef:8c:35:43:ef:83:91:b0:39:20:40:b9:b8:d0:8b: 4d:f1:12:c5:00:52:c1:eb:3f:83:07:46:32:05:8f: e4:84:f3:f0:52:0f:e0:81:4f:2b:91:9c:39:2f:b9: 55:55:ac:64:2b:27:f5:fd:8e:bc:23:42:82:49:a1: 99:7a:d3:01:0a:17:39:d1:30:9a:c2:4c:dd:21:86: de:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:49:4C:91:5A:89:22:1C:8E:15:A8:A9:3C:CE:36:72:E4:76:13:86 X509v3 Authority Key Identifier: keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/03D8DC4A40F011EDAD789E3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.13.194.0/23 IPv6: 2400:af20::/32 Signature Algorithm: sha256WithRSAEncryption c6:a8:05:9f:1a:f5:6c:82:cd:5b:ef:e5:d6:b2:43:81:d6:a6: 88:5f:7a:c9:df:db:67:91:31:e3:02:84:df:04:4a:f5:70:72: 87:a8:95:17:e0:52:d3:5c:3a:32:46:9f:64:86:ad:c5:98:84: 88:d2:e3:fe:b5:ca:f3:53:2e:4c:49:2d:ac:fc:5a:7e:5c:e1: 75:08:e6:af:49:5e:01:5f:74:ee:64:8d:64:d1:4c:b7:75:8b: d7:65:73:ba:90:7b:26:bd:e5:d8:13:8c:8d:96:65:2c:11:97: a8:a5:66:bb:62:34:4d:25:47:72:5c:87:60:22:f9:70:22:83: 29:02:cc:43:24:d4:60:d3:94:9d:39:50:c6:9e:0b:89:26:99: a6:00:55:d2:3a:22:3b:98:9e:48:e0:8b:4e:9e:9c:9a:68:55: 4c:67:c6:ed:56:a7:45:fc:cb:e5:f0:9f:1a:c1:48:23:61:73: f2:0b:c5:e2:ad:3b:93:d3:45:9f:4d:bd:4f:66:06:a4:05:5c: 10:56:02:57:a2:9c:2a:9d:a0:b4:e7:b6:24:d0:6c:d5:c2:5b: 7f:56:dc:ae:be:2d:d8:eb:ae:45:9e:81:ab:7e:9d:f1:98:05: 94:f3:fc:e0:e0:c3:a6:f7:d8:de:17:b8:0a:25:a0:fe:6d:6b: 39:af:41:84 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0 NUYyNUUyMEIwHhcNMjMxMTI1MDQxNDU5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTYxNzRjMy1kNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jB9W0LnSc6JuimkHKCP1NQUmRX+mAmurab8h+RoCvQAXtd/tpxPm4980ayy PD8pVYaYdPHHgRIMz0KGAZy86nEf/YlNRef+toZKFeX2WsuNvEwn3vV4nWDkoDrI kG7CLFH/J6GmtgyRvIr9cNkJB0XCe2lbpsmuFFJ+rq8mCCAGM+A0aXy4p3ASOuGz Pwj+bmUWG2ws9XI0SX5L8XFKREbWazhEoqBheQyBvt4Cvd8HScvvjDVD74ORsDkg QLm40ItN8RLFAFLB6z+DB0YyBY/khPPwUg/ggU8rkZw5L7lVVaxkKyf1/Y68I0KC SaGZetMBChc50TCawkzdIYbeJQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJVJTJFa iSIcjhWoqTzONnLkdhOGMB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTNGNjMvNTE5QjY0QTY0MEVDMTFFREE4OEVCNTMzQzRGOUFFMDIvMDNEOERDNEE0 MEYwMTFFREFENzg5RTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnDcIwDQQCAAIwBwMFACQAryAwDQYJKoZIhvcNAQELBQAD ggEBAMaoBZ8a9WyCzVvv5dayQ4HWpohfesnf22eRMeMChN8ESvVwcoeolRfgUtNc OjJGn2SGrcWYhIjS4/61yvNTLkxJLaz8Wn5c4XUI5q9JXgFfdO5kjWTRTLd1i9dl c7qQeya95dgTjI2WZSwRl6ilZrtiNE0lR3Jch2Ai+XAigykCzEMk1GDTlJ05UMae C4kmmaYAVdI6IjuYnkjgi06enJpoVUxnxu1Wp0X8y+XwnxrBSCNhc/ILxeKtO5PT RZ9NvU9mBqQFXBBWAleinCqdoLTntiTQbNXCW39W3K6+LdjrrkWegat+nfGYBZTz /ODgw6b32N4XuAoloP5tazmvQYQ= -----END CERTIFICATE-----Generated at Thu Jun 13 06:58:25 2024 by rpki-client on console-fra.rpki-client.org