$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/31E51BB65FD311EC9AA5DA4EC4F9AE02.roa File: 31E51BB65FD311EC9AA5DA4EC4F9AE02.roa (raw, json) Hash identifier: bAaCSc9TYM7K2UkBDoNWyjDrI2lpV2TgVDZgy3NjGCg= Subject key identifier: 43:73:03:6B:DA:32:BC:2B:1D:83:09:7F:B0:16:95:80:65:82:64:45 Certificate issuer: /CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69 Certificate serial: 03BA Authority key identifier: 62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/31E51BB65FD311EC9AA5DA4EC4F9AE02.roa Signing time: Sat 21 Sep 2024 00:44:01 +0000 ROA not before: Sat 21 Sep 2024 00:44:01 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 58697 IP address blocks: 103.15.238.0/23 maxlen: 23 103.242.50.0/24 maxlen: 24 103.242.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 954 (0x3ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69 Validity Not Before: Sep 21 00:44:01 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66ee16d0-22a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:47:4d:72:20:6f:89:90:20:8a:44:bd:67: 6d:18:92:dd:17:cc:aa:76:4b:84:1a:89:e6:8f:b7: 03:a7:95:07:62:df:a3:75:73:c8:df:e0:65:84:b9: f1:36:4e:65:41:4d:c6:65:23:de:cd:d0:30:87:bc: f4:ea:0b:f9:f7:e4:5d:f2:1d:e4:db:27:9c:10:01: a2:98:fa:64:0e:1f:30:f0:49:16:09:88:83:64:ce: 7b:a4:c4:62:72:31:db:03:01:b6:51:4f:0b:f3:e3: 45:bf:2e:f1:7c:03:22:26:73:1b:2e:21:03:4f:61: 37:24:57:5b:a2:46:b0:ec:c7:9c:5a:93:67:35:ec: 5c:31:89:a3:c2:fb:f4:f6:d9:af:6b:60:ac:7b:57: b9:57:df:88:66:90:dd:d7:c2:cc:a5:9f:62:c4:6d: dc:61:8e:55:46:1d:69:c7:a4:ad:86:05:00:5d:89: cd:01:94:ea:c9:76:eb:f0:e0:e5:68:78:3c:84:67: 9f:2d:8d:aa:15:56:38:92:f7:61:60:2b:5f:a4:89: 64:a2:3f:ba:23:4a:e7:a0:94:08:f4:dd:30:fd:08: ae:09:d1:37:60:6c:15:c7:ec:2f:d0:7f:89:41:50: 5d:29:07:24:2c:9e:be:a0:42:56:64:fa:20:20:0a: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:73:03:6B:DA:32:BC:2B:1D:83:09:7F:B0:16:95:80:65:82:64:45 X509v3 Authority Key Identifier: keyid:62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/31E51BB65FD311EC9AA5DA4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.238.0/23 103.242.50.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:d9:3d:5a:fd:e9:bf:30:d9:5b:46:4d:fd:0c:5c:fa:4d:d5: d0:69:68:f7:35:16:7d:03:ae:35:ac:72:e0:a2:bf:01:10:6a: c3:be:9a:ec:17:0c:05:bd:23:47:f1:17:f0:af:c5:0b:39:b2: b1:30:3a:c4:0e:6c:68:b6:e1:6c:3a:12:2f:07:d1:bf:dc:dc: d3:10:46:ba:a6:5a:43:47:0e:9f:0b:2a:2d:2d:09:93:49:8c: e2:c0:ad:82:37:0e:9d:cb:7a:94:8b:61:c8:be:62:ec:15:26: 7f:f8:08:08:53:81:62:90:83:56:07:a6:b3:82:c2:0a:c1:91: 41:11:38:29:5c:65:d7:64:66:37:57:67:45:93:00:22:39:c3: 0d:7b:84:20:a8:ff:bb:a5:6a:5b:5b:ae:e1:fb:21:0f:2c:00: 6f:ed:56:b9:58:d2:80:85:d7:5d:e9:0e:db:0f:b1:9b:0a:fa: 45:44:0f:da:cb:2a:4e:1b:03:97:6d:95:d5:46:71:c8:e4:3a: 6a:90:e3:6c:71:d1:59:96:41:a1:55:ab:22:a5:1e:c5:5c:95: 31:f5:15:0c:29:74:34:88:dc:60:7d:80:7f:ea:34:e9:da:ea: 1a:3b:17:0b:86:94:2c:ef:c6:80:c1:b5:fc:28:c5:6a:27:d8: 16:03:ea:60 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhENjIxMTAvBgNVBAUTKDYyMUI4MUMxMDlFNUFBNzhEODI5RjMwQTU3REEzNTMz MDgyNTRGNjkwHhcNMjQwOTIxMDA0NDAxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVlMTZkMC0yMmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0apHTXIgb4mQIIpEvWdtGJLdF8yqdkuEGonmj7cDp5UHYt+jdXPI3+BlhLnx Nk5lQU3GZSPezdAwh7z06gv59+Rd8h3k2yecEAGimPpkDh8w8EkWCYiDZM57pMRi cjHbAwG2UU8L8+NFvy7xfAMiJnMbLiEDT2E3JFdbokaw7MecWpNnNexcMYmjwvv0 9tmva2Cse1e5V9+IZpDd18LMpZ9ixG3cYY5VRh1px6SthgUAXYnNAZTqyXbr8ODl aHg8hGefLY2qFVY4kvdhYCtfpIlkoj+6I0rnoJQI9N0w/QiuCdE3YGwVx+wv0H+J QVBdKQckLJ6+oEJWZPogIAqFAwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFENzA2va MrwrHYMJf7AWlYBlgmRFMB8GA1UdIwQYMBaAFGIbgcEJ5ap42CnzClfaNTMIJU9p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEQ2Mi9CQ0I0MEE1ODVG Q0YxMUVDOENGMUUwN0JDNEY5QUUwMi9ZaHVCd1FubHFuallLZk1LVjlvMU13Z2xU MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lodUJ3UW5scW5qWUtmTUtWOW8xTXdnbFQyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzhENjIvQkNCNDBBNTg1RkNGMTFFQzhDRjFFMDdCQzRGOUFFMDIvMzFFNTFCQjY1 RkQzMTFFQzlBQTVEQTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnD+4DBAFn8jIwDQYJKoZIhvcNAQELBQADggEBAFvZPVr9 6b8w2VtGTf0MXPpN1dBpaPc1Fn0DrjWscuCivwEQasO+muwXDAW9I0fxF/CvxQs5 srEwOsQObGi24Ww6Ei8H0b/c3NMQRrqmWkNHDp8LKi0tCZNJjOLArYI3Dp3LepSL Yci+YuwVJn/4CAhTgWKQg1YHprOCwgrBkUEROClcZddkZjdXZ0WTACI5ww17hCCo /7ulaltbruH7IQ8sAG/tVrlY0oCF113pDtsPsZsK+kVED9rLKk4bA5dtldVGccjk OmqQ42xx0VmWQaFVqyKlHsVclTH1FQwpdDSI3GB9gH/qNOna6ho7FwuGlCzvxoDB tfwoxWon2BYD6mA= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org