$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/D3EE2024F42211EA8FE7AE53C4F9AE02.roa File: D3EE2024F42211EA8FE7AE53C4F9AE02.roa (raw, json) Hash identifier: lRCubr7EYku0VIB1rDtAT6Aai84rlwXyTT83KuJ/9/Y= Subject key identifier: 8A:BC:FB:22:5E:C7:C0:44:5C:C9:B3:43:B0:72:40:47:5B:8B:78:B3 Certificate issuer: /CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Certificate serial: 06FC Authority key identifier: EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/D3EE2024F42211EA8FE7AE53C4F9AE02.roa Signing time: Tue 02 Apr 2024 23:01:45 +0000 ROA not before: Tue 02 Apr 2024 23:01:45 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 135299 IP address blocks: 103.112.146.0/24 maxlen: 24 103.211.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Validity Not Before: Apr 2 23:01:45 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660c8e59-7a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:c7:6f:dc:77:9a:a2:ac:d1:77:f7:40:03: 12:f8:7d:66:78:e1:c7:e7:0f:eb:2d:a3:97:cb:aa: 45:d9:3a:55:33:f5:d5:97:2e:88:d1:05:f9:8b:45: e3:42:9f:45:e6:2c:e2:24:1c:59:d7:f2:2f:a5:44: c3:4e:9d:53:ab:69:32:82:1f:e1:4f:77:c4:2c:53: 34:72:0c:88:01:6c:7a:d7:4e:3e:26:af:df:05:b7: bd:aa:95:0a:ee:c6:e0:c6:a5:e7:aa:f6:13:3f:47: 64:54:59:41:f0:5d:74:40:36:b3:36:72:f0:63:bb: d5:4a:c6:ce:10:d4:ef:fa:99:b4:ae:37:86:78:e2: b6:c4:9d:4c:19:c2:0b:cf:5b:2a:93:25:85:ab:53: 32:ad:11:74:bb:53:2a:1d:f3:4a:97:e2:42:1f:6a: 5e:33:66:9e:45:b1:6d:60:ff:7f:1c:80:8c:5d:8f: af:15:30:3f:3b:a1:26:41:8b:41:77:e4:e6:dd:87: 5d:ea:1b:b2:e0:f9:e7:1f:7d:86:29:23:b9:79:04: d1:74:a0:ac:a4:41:a7:b2:81:7c:c9:d5:80:d2:8e: 63:96:b0:59:f3:e7:f2:77:50:01:71:71:92:99:62: b0:fc:6e:d8:b4:86:99:31:0c:bf:d3:ed:a1:6f:b4: 88:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BC:FB:22:5E:C7:C0:44:5C:C9:B3:43:B0:72:40:47:5B:8B:78:B3 X509v3 Authority Key Identifier: keyid:EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/D3EE2024F42211EA8FE7AE53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.146.0/24 103.211.197.0/24 Signature Algorithm: sha256WithRSAEncryption 29:45:86:c1:9c:c7:30:74:91:a1:4a:3a:73:20:8f:74:95:4d: d6:11:ce:aa:f2:20:5f:df:bd:c0:93:3e:79:d9:42:d6:b4:a5: cb:1a:51:3e:76:09:64:4b:cb:76:1a:18:fb:2e:5f:8d:64:6e: f9:41:3a:e2:da:6a:0c:c0:f7:fb:28:a8:cd:62:a8:4a:ff:54: 0c:80:0e:42:78:a3:bc:05:84:22:8a:e5:a8:c7:9c:49:8e:36: ce:c3:d7:28:97:13:92:95:ad:43:09:50:23:e2:d2:ff:8c:bb: 36:48:ce:85:8f:3c:4c:27:d8:1c:ef:80:1e:51:94:c6:73:76: cb:56:ae:22:de:65:4b:b8:e2:d4:f1:7f:18:90:bf:c1:e6:0d: 11:4c:fb:92:b0:d3:e1:01:07:31:7a:90:be:14:ac:29:c3:1a: 8b:07:d9:72:55:5e:38:2d:d5:21:c1:a0:af:64:cd:2b:10:0d: 35:66:b5:aa:0e:20:2b:35:6d:8a:6e:87:7c:46:07:3c:26:e0: 09:78:4e:d4:26:28:53:8b:2d:9d:c2:02:2e:2c:18:6a:92:56: 40:1f:e6:f9:92:eb:a7:70:74:00:f8:30:5a:65:ca:24:95:9a: 05:ec:af:38:56:7a:07:df:24:45:2b:64:e9:25:db:e8:19:e6: 3b:cc:b1:9a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZEOEIxMTAvBgNVBAUTKEVGMUE5NkQxMTJERTE2MjJCMTFDOEM3RTk0QUVCMDQw RURENkFCMDAwHhcNMjQwNDAyMjMwMTQ1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjOGU1OS03YTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq13Hb9x3mqKs0Xf3QAMS+H1meOHH5w/rLaOXy6pF2TpVM/XVly6I0QX5i0Xj Qp9F5iziJBxZ1/IvpUTDTp1Tq2kygh/hT3fELFM0cgyIAWx6104+Jq/fBbe9qpUK 7sbgxqXnqvYTP0dkVFlB8F10QDazNnLwY7vVSsbOENTv+pm0rjeGeOK2xJ1MGcIL z1sqkyWFq1MyrRF0u1MqHfNKl+JCH2peM2aeRbFtYP9/HICMXY+vFTA/O6EmQYtB d+Tm3Ydd6huy4PnnH32GKSO5eQTRdKCspEGnsoF8ydWA0o5jlrBZ8+fyd1ABcXGS mWKw/G7YtIaZMQy/0+2hb7SI9wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIq8+yJe x8BEXMmzQ7ByQEdbi3izMB8GA1UdIwQYMBaAFO8altES3hYisRyMfpSusEDt1qsA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ4Qi9EMDBBQTg1Q0Y0 MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZpS3hISXgtbEs2d1FPM1dx d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd4cVcwUkxlRmlLeEhJeC1sSzZ3UU8zV3F3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZEOEIvRDAwQUE4NUNGNDIxMTFFQTkyMUVGQjUyQzRGOUFFMDIvRDNFRTIwMjRG NDIyMTFFQThGRTdBRTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABncJIDBABn08UwDQYJKoZIhvcNAQELBQADggEBAClFhsGc xzB0kaFKOnMgj3SVTdYRzqryIF/fvcCTPnnZQta0pcsaUT52CWRLy3YaGPsuX41k bvlBOuLaagzA9/soqM1iqEr/VAyADkJ4o7wFhCKK5ajHnEmONs7D1yiXE5KVrUMJ UCPi0v+MuzZIzoWPPEwn2BzvgB5RlMZzdstWriLeZUu44tTxfxiQv8HmDRFM+5Kw 0+EBBzF6kL4UrCnDGosH2XJVXjgt1SHBoK9kzSsQDTVmtaoOICs1bYpuh3xGBzwm 4Al4TtQmKFOLLZ3CAi4sGGqSVkAf5vmS66dwdAD4MFplyiSVmgXsrzhWegffJEUr ZOkl2+gZ5jvMsZo= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org