$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/9D594A509FFB11EF9E614409C4F9AE02.roa File: 9D594A509FFB11EF9E614409C4F9AE02.roa (raw, json) Hash identifier: fpSWb3+1/or+BPPYOQwZNVSa0gpgbLnYUKAHGw/tdCA= Subject key identifier: DE:8E:E6:D4:9F:CB:A2:CF:B6:95:D5:54:ED:1E:3C:08:9D:4B:06:BF Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 0780 Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/9D594A509FFB11EF9E614409C4F9AE02.roa Signing time: Mon 11 Nov 2024 08:18:53 +0000 ROA not before: Mon 11 Nov 2024 08:18:53 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 135017 IP address blocks: 103.253.108.0/24 maxlen: 24 103.253.109.0/24 maxlen: 24 103.253.110.0/24 maxlen: 24 103.253.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 21:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1920 (0x780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Nov 11 08:18:53 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6731bded-350a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:00:f6:e3:a5:79:5a:1a:92:dd:3a:7c:01:0a: fb:5c:ba:49:c5:82:f3:7d:aa:a9:77:1d:a2:7e:e6: 72:64:cc:ec:86:06:58:a7:e4:71:7c:a3:55:fa:4a: 79:5f:ff:a3:d0:08:58:bc:cd:7a:43:1b:d0:7e:90: 51:5c:33:43:82:0d:e4:70:20:df:56:0c:ab:e6:bf: d7:14:ef:24:74:78:b3:d4:49:3d:74:04:06:57:ec: 73:bb:88:ac:75:30:1a:9f:a2:25:07:c8:1e:0b:80: ec:b1:3d:46:89:71:35:28:4b:ff:29:62:42:7c:88: 9d:fd:fb:82:4b:b9:8a:0a:2a:4e:e0:db:91:e2:a6: a4:55:b0:8e:a7:66:6f:bc:e2:f5:bc:ab:ec:7c:f3: e9:ad:e2:b0:c9:24:3c:ec:a1:44:5f:7e:ca:2c:94: 30:65:4b:b9:78:ea:4c:44:d7:f0:35:7a:8c:ef:e5: 41:e8:d8:48:6f:5b:bb:25:a2:73:b4:a9:53:f1:d5: 07:f4:ae:31:0e:fa:82:f9:4a:66:9c:c9:ee:28:05: 8e:64:57:57:96:c9:74:86:3d:37:da:82:bf:a1:d4: f5:bd:f6:f5:71:a6:3e:26:48:c4:48:b9:b6:4b:6e: 3c:e4:fa:c7:ad:e7:3d:22:b4:a5:48:d8:e9:ad:48: d3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8E:E6:D4:9F:CB:A2:CF:B6:95:D5:54:ED:1E:3C:08:9D:4B:06:BF X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/9D594A509FFB11EF9E614409C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.253.108.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:b4:bd:b7:17:b5:03:60:91:85:ed:9f:c9:1f:a5:5c:ab:7d: 2e:78:5e:c7:b7:50:2c:cb:4e:61:5d:54:c9:00:75:e1:07:53: 4c:10:b6:26:a2:ed:8f:f3:89:4b:7a:ba:d4:cc:50:13:1f:ce: 53:a7:0c:8a:98:c4:c6:4d:07:11:7e:ab:a1:d4:05:47:c4:fc: 85:a5:84:77:fa:33:9c:23:7a:34:f2:2a:40:97:00:94:7e:8c: 6a:e6:03:a3:75:0c:c9:74:b4:3e:97:d5:1c:64:80:0d:34:d8: c8:08:9b:95:da:d8:fc:79:e1:ff:4a:c3:05:c0:7f:d3:06:ee: b4:03:1f:37:ab:5f:23:6e:cf:e8:5c:9c:0e:e8:ba:a8:20:5d: 84:ec:18:f7:c5:80:72:58:7e:01:c2:bb:20:1c:ca:16:64:b8: 72:da:e6:04:eb:b5:bf:6c:92:c4:e5:52:1e:f7:81:c0:bb:71: 90:f9:6c:59:62:97:b5:68:c7:be:80:0c:36:4d:bb:bd:06:f8: 12:d3:e5:62:01:57:9b:08:37:3a:ee:4a:c7:f4:fa:65:48:b9: fa:87:97:35:81:cf:0b:dc:70:39:55:ca:89:ec:09:7a:7c:84: dd:6b:73:4e:0d:17:71:fa:32:72:0a:2f:86:cf:23:6e:12:c5: 0e:6f:42:53 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjQxMTExMDgxODUzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMxYmRlZC0zNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gD246V5WhqS3Tp8AQr7XLpJxYLzfaqpdx2ifuZyZMzshgZYp+RxfKNV+kp5 X/+j0AhYvM16QxvQfpBRXDNDgg3kcCDfVgyr5r/XFO8kdHiz1Ek9dAQGV+xzu4is dTAan6IlB8geC4DssT1GiXE1KEv/KWJCfIid/fuCS7mKCipO4NuR4qakVbCOp2Zv vOL1vKvsfPPpreKwySQ87KFEX37KLJQwZUu5eOpMRNfwNXqM7+VB6NhIb1u7JaJz tKlT8dUH9K4xDvqC+UpmnMnuKAWOZFdXlsl0hj032oK/odT1vfb1caY+JkjESLm2 S2485PrHrec9IrSlSNjprUjT4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFN6O5tSf y6LPtpXVVO0ePAidSwa/MB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvOUQ1OTRBNTA5 RkZCMTFFRjlFNjE0NDA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn/WwwDQYJKoZIhvcNAQELBQADggEBAGq0vbcXtQNgkYXt n8kfpVyrfS54Xse3UCzLTmFdVMkAdeEHU0wQtiai7Y/ziUt6utTMUBMfzlOnDIqY xMZNBxF+q6HUBUfE/IWlhHf6M5wjejTyKkCXAJR+jGrmA6N1DMl0tD6X1RxkgA00 2MgIm5Xa2Px54f9KwwXAf9MG7rQDHzerXyNuz+hcnA7ouqggXYTsGPfFgHJYfgHC uyAcyhZkuHLa5gTrtb9sksTlUh73gcC7cZD5bFlil7Vox76ADDZNu70G+BLT5WIB V5sINzruSsf0+mVIufqHlzWBzwvccDlVyonsCXp8hN1rc04NF3H6MnIKL4bPI24S xQ5vQlM= -----END CERTIFICATE-----Generated at Tue Nov 26 22:44:26 2024 by rpki-client on console-fra.rpki-client.org