$ rpki-client -vvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa File: 388802BC067711EDA1DEB529C4F9AE02.roa (raw, json) Hash identifier: EuoLXvibJYzVLshOhBvVYHJccoZUmB/oPyzL/sJ9KVc= Subject key identifier: 8B:E7:80:3B:93:26:CB:BD:84:08:EA:1D:0E:06:25:73:4C:48:33:DD Certificate issuer: /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F Certificate serial: 01FD Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa Signing time: Tue 13 Aug 2024 03:04:53 +0000 ROA not before: Tue 13 Aug 2024 03:04:53 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 134403 IP address blocks: 103.63.234.0/23 maxlen: 24 2001:df4:f400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F Validity Not Before: Aug 13 03:04:53 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66bacd54-f3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d1:4b:df:98:26:6b:0d:7b:6f:0d:94:ee:b3: 0d:b7:c8:02:93:46:56:67:c2:50:ad:a6:6f:4e:fb: 5b:eb:8e:a8:90:3f:9a:3b:d7:49:d9:4f:99:ec:7a: dd:e9:58:76:4e:83:13:c3:e0:85:07:f8:02:77:3a: f0:c6:31:a5:34:1f:e7:61:84:ff:0f:4c:b2:bb:94: d0:74:ea:4a:bd:a0:17:25:c2:9f:ec:65:7a:e2:37: 0f:9f:fc:07:9e:c4:77:f8:98:2c:ac:dc:89:ee:58: c2:13:30:aa:07:c4:c9:16:9c:c7:3a:df:ce:a1:f8: b0:42:42:d1:05:05:41:f6:a5:07:1d:9e:b0:34:44: 1a:99:36:4b:28:f7:fb:e4:43:be:63:04:19:16:9a: 3d:8f:35:fe:0c:f9:dc:2f:81:b8:27:9c:f8:0a:36: 2f:87:bf:85:a5:20:58:25:1f:66:ac:9b:a8:63:7b: 13:19:03:93:2f:14:fb:90:7c:ce:10:3b:66:e6:b4: 3b:46:83:4d:a0:b5:90:02:57:bb:6f:d1:17:7f:1f: db:28:cd:52:9f:6e:a2:fb:3a:e8:b7:69:4d:cc:3f: db:67:77:80:03:80:df:09:08:41:82:36:42:1e:ac: d2:2a:97:f0:3f:2c:5b:7f:03:15:6b:58:d5:04:c3: a5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E7:80:3B:93:26:CB:BD:84:08:EA:1D:0E:06:25:73:4C:48:33:DD X509v3 Authority Key Identifier: keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.63.234.0/23 IPv6: 2001:df4:f400::/48 Signature Algorithm: sha256WithRSAEncryption 41:1d:07:6a:08:76:66:f8:d1:ac:9a:25:d8:10:6a:65:e7:2c: f1:89:12:5d:46:71:9f:83:43:8b:7c:04:a9:79:b7:23:6c:0d: be:28:bd:43:5f:c0:3b:9a:52:33:fc:7d:31:e4:54:f8:7e:7c: 38:df:2a:86:78:5e:a4:13:a3:6c:ce:89:99:3c:c5:26:13:05: 8b:ed:63:c4:69:6f:b3:e7:5c:b4:f2:91:19:e4:f0:a8:4e:0d: f0:34:3c:6b:90:ab:d0:dc:04:30:5c:f5:89:b5:90:35:ad:03: 7a:8a:8c:1b:4e:52:c1:cc:f2:35:e2:56:12:c4:9b:17:83:b8: b5:0b:0e:17:39:f7:1f:6f:03:15:73:36:19:6c:f1:f0:4f:7c: 73:08:b0:e4:0e:f0:1c:cf:c3:4b:f7:39:f8:0d:2b:9c:b6:78: 63:ed:bc:7b:c6:74:45:a7:3d:9c:3f:3a:78:37:f6:c1:46:51: 20:a1:03:17:e7:1f:b3:ab:96:60:88:c1:c6:87:1b:0c:5e:68: 11:68:da:72:9d:f2:60:c5:de:97:3c:1f:a2:1a:96:24:1f:72: 4c:ac:4b:96:e3:f3:0b:39:3f:1d:c2:9e:9e:be:a5:16:3c:ef: f6:2c:0e:1a:f9:5e:64:8c:65:57:1f:8c:9f:db:02:90:2d:18: 75:52:61:01 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0RTkxMTAvBgNVBAUTKDVENEExRkNGNTMwMUMwMjc1OUM4NEVFQTU1OTE1RTI1 QzE3MUE3M0YwHhcNMjQwODEzMDMwNDUzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJhY2Q1NC1mM2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49FL35gmaw17bw2U7rMNt8gCk0ZWZ8JQraZvTvtb646okD+aO9dJ2U+Z7Hrd 6Vh2ToMTw+CFB/gCdzrwxjGlNB/nYYT/D0yyu5TQdOpKvaAXJcKf7GV64jcPn/wH nsR3+JgsrNyJ7ljCEzCqB8TJFpzHOt/OofiwQkLRBQVB9qUHHZ6wNEQamTZLKPf7 5EO+YwQZFpo9jzX+DPncL4G4J5z4CjYvh7+FpSBYJR9mrJuoY3sTGQOTLxT7kHzO EDtm5rQ7RoNNoLWQAle7b9EXfx/bKM1Sn26i+zrot2lNzD/bZ3eAA4DfCQhBgjZC HqzSKpfwPyxbfwMVa1jVBMOlkwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIvngDuT Jsu9hAjqHQ4GJXNMSDPdMB8GA1UdIwQYMBaAFF1KH89TAcAnWchO6lWRXiXBcac/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTRFOS9DNUQ1RTRDQTA2 NzQxMUVEQjFEMjlBMjhDNEY5QUUwMi9YVW9mejFNQndDZFp5RTdxVlpGZUpjRnhw ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVb2Z6MU1Cd0NkWnlFN3FWWkZlSmNGeHB6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTk0RTkvQzVENUU0Q0EwNjc0MTFFREIxRDI5QTI4QzRGOUFFMDIvMzg4ODAyQkMw Njc3MTFFREExREVCNTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnP+owDwQCAAIwCQMHACABDfT0ADANBgkqhkiG9w0BAQsF AAOCAQEAQR0Hagh2ZvjRrJol2BBqZecs8YkSXUZxn4NDi3wEqXm3I2wNvii9Q1/A O5pSM/x9MeRU+H58ON8qhnhepBOjbM6JmTzFJhMFi+1jxGlvs+dctPKRGeTwqE4N 8DQ8a5Cr0NwEMFz1ibWQNa0DeoqMG05SwczyNeJWEsSbF4O4tQsOFzn3H28DFXM2 GWzx8E98cwiw5A7wHM/DS/c5+A0rnLZ4Y+28e8Z0Rac9nD86eDf2wUZRIKEDF+cf s6uWYIjBxocbDF5oEWjacp3yYMXelzwfohqWJB9yTKxLluPzCzk/HcKenr6lFjzv 9iwOGvleZIxlVx+Mn9sCkC0YdVJhAQ== -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org