$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/31E51BB65FD311EC9AA5DA4EC4F9AE02.roa File: 31E51BB65FD311EC9AA5DA4EC4F9AE02.roa (raw, json) Hash identifier: l+4YXlafyERRz3jwdmudxnN7uZRqNAlC4AoM2V8Pjf0= Subject key identifier: B4:39:9E:94:D8:86:17:FA:39:1B:9A:0E:4E:47:7B:2D:1D:E1:3A:21 Certificate issuer: /CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69 Certificate serial: 0302 Authority key identifier: 62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/31E51BB65FD311EC9AA5DA4EC4F9AE02.roa Signing time: Fri 29 Sep 2023 01:43:48 +0000 ROA not before: Fri 29 Sep 2023 01:43:48 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 58697 IP address blocks: 103.15.238.0/23 maxlen: 23 103.242.50.0/24 maxlen: 24 103.242.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 770 (0x302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69 Validity Not Before: Sep 29 01:43:48 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65162bd3-c606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:06:bd:e8:fe:46:3b:aa:64:63:ef:02:b6:ac: d1:6c:c6:5d:ba:76:89:dc:a0:bd:cc:6f:3a:d2:cd: f6:7c:0e:02:bc:cb:e3:ae:e0:af:16:db:53:f9:f2: 56:63:4d:b3:25:e4:44:0e:bb:a2:ea:a8:73:ef:7f: 7a:c2:e3:69:0d:f2:d9:54:23:a4:db:e1:a8:f2:e7: 0d:ae:de:07:ea:9e:55:ab:c9:10:a3:83:5d:44:40: 8b:d9:1b:22:ff:e8:e6:c9:17:75:4e:24:b3:d7:41: be:4b:36:11:46:06:d1:5c:c2:38:8c:b5:43:ec:e0: 02:78:78:26:a7:88:bb:e6:4b:66:b4:d5:94:28:8d: 5e:bc:35:c9:74:27:1e:7d:83:7c:16:9b:96:66:f5: 2e:f9:c0:3b:0d:be:07:65:09:65:9f:5b:59:d8:b3: 84:e2:9a:9a:c6:e2:c7:e3:95:87:7b:8f:40:e3:0b: d7:ee:5b:17:da:83:11:9e:01:da:27:ac:fc:f8:a0: db:fd:a7:39:e0:b8:d0:11:15:53:bd:d7:a0:a7:e4: 7c:dd:17:ac:bd:ed:7a:52:fc:0c:48:64:30:c8:32: 3d:23:70:30:0c:64:fb:eb:f6:a6:66:5f:11:3d:a6: cb:87:87:2f:00:c0:62:24:b9:3d:e3:d0:9b:b6:20: 4d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:39:9E:94:D8:86:17:FA:39:1B:9A:0E:4E:47:7B:2D:1D:E1:3A:21 X509v3 Authority Key Identifier: keyid:62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/31E51BB65FD311EC9AA5DA4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.238.0/23 103.242.50.0/23 Signature Algorithm: sha256WithRSAEncryption 23:05:f0:46:a4:b0:f4:c4:af:22:10:d5:6d:0a:40:16:a8:52: 0f:07:55:75:46:0c:9a:bb:ec:8d:83:26:34:3a:d3:12:b5:50: c5:01:2b:e6:13:fa:5e:21:a2:ef:f2:1c:84:7e:ba:f7:1b:27: 60:33:7d:29:3e:d2:e3:38:a4:58:75:6c:2a:43:66:1c:09:59: 59:21:40:be:e4:2f:04:1f:a9:d8:98:72:3f:f5:3c:a4:df:12: f1:f3:5e:cf:c9:db:ad:18:4e:24:0e:dd:e5:d7:3c:a5:da:78: 4b:ef:b6:d1:07:a5:22:ed:f2:51:48:e3:36:df:3d:5b:90:df: dd:5a:76:36:9e:b3:88:17:c1:65:50:3a:e3:2b:d3:1a:cb:d9: 3f:28:e0:4b:8e:67:65:26:b0:bf:e6:03:1e:82:3e:4d:b9:69: 1f:10:1f:9f:d1:6f:9d:64:78:1a:51:2c:84:d5:43:ef:c2:2e: 01:ed:45:2d:d8:3a:f1:42:ea:0e:5a:29:9b:c8:6b:3a:af:37: 6a:2c:27:51:13:5f:f5:ba:f5:2e:62:15:12:44:29:93:9f:e3: 68:8e:f2:8d:ed:08:d3:70:28:0e:d3:19:d4:f1:9a:b2:41:23: 79:f8:18:3c:55:f9:a3:c4:b3:b3:62:8b:38:4f:90:b9:24:e6: cf:9a:d8:51 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhENjIxMTAvBgNVBAUTKDYyMUI4MUMxMDlFNUFBNzhEODI5RjMwQTU3REEzNTMz MDgyNTRGNjkwHhcNMjMwOTI5MDE0MzQ4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE2MmJkMy1jNjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ga96P5GO6pkY+8CtqzRbMZdunaJ3KC9zG860s32fA4CvMvjruCvFttT+fJW Y02zJeREDrui6qhz7396wuNpDfLZVCOk2+Go8ucNrt4H6p5Vq8kQo4NdRECL2Rsi /+jmyRd1TiSz10G+SzYRRgbRXMI4jLVD7OACeHgmp4i75ktmtNWUKI1evDXJdCce fYN8FpuWZvUu+cA7Db4HZQlln1tZ2LOE4pqaxuLH45WHe49A4wvX7lsX2oMRngHa J6z8+KDb/ac54LjQERVTvdegp+R83Resve16UvwMSGQwyDI9I3AwDGT76/amZl8R PabLh4cvAMBiJLk949CbtiBNfwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLQ5npTY hhf6ORuaDk5Hey0d4TohMB8GA1UdIwQYMBaAFGIbgcEJ5ap42CnzClfaNTMIJU9p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEQ2Mi9CQ0I0MEE1ODVG Q0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFuallLZk1LVjlvMU13Z2xU MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lodUJ3UW5scW5qWUtmTUtWOW8xTXdnbFQyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzhENjIvQkNCNDBBNTg1RkNGMTFFQzhDRjFFMDdCQzRGOUFFMDIvMzFFNTFCQjY1 RkQzMTFFQzlBQTVEQTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnD+4DBAFn8jIwDQYJKoZIhvcNAQELBQADggEBACMF8Eak sPTEryIQ1W0KQBaoUg8HVXVGDJq77I2DJjQ60xK1UMUBK+YT+l4hou/yHIR+uvcb J2AzfSk+0uM4pFh1bCpDZhwJWVkhQL7kLwQfqdiYcj/1PKTfEvHzXs/J260YTiQO 3eXXPKXaeEvvttEHpSLt8lFI4zbfPVuQ391adjaes4gXwWVQOuMr0xrL2T8o4EuO Z2UmsL/mAx6CPk25aR8QH5/Rb51keBpRLITVQ+/CLgHtRS3YOvFC6g5aKZvIazqv N2osJ1ETX/W69S5iFRJEKZOf42iO8o3tCNNwKA7TGdTxmrJBI3n4GDxV+aPEs7Ni izhPkLkk5s+a2FE= -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:00 2024 by rpki-client on console-fra.rpki-client.org