$ rpki-client -vvf rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa File: 0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa (raw, json) Hash identifier: Hp6K1tI8/RrDTW95E3dlGX3/hbhtzZBhD6rGFjZDwK8= Subject key identifier: D6:A2:3F:1D:4D:A2:C3:3E:EB:6C:FA:95:ED:9B:4B:11:AD:00:77:47 Certificate issuer: /CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Certificate serial: 09C7 Authority key identifier: 60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa Signing time: Tue 22 Oct 2024 19:59:26 +0000 ROA not before: Tue 22 Oct 2024 19:59:26 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 139680 IP address blocks: 103.143.150.0/23 maxlen: 24 2405:5640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2503 (0x9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Validity Not Before: Oct 22 19:59:26 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6718041e-538d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:91:18:ff:58:38:71:7c:e6:1d:eb:ba:35: 1a:5c:14:e8:7e:ac:6f:03:95:21:03:d6:8b:57:02: 0f:f2:37:ef:06:f5:98:09:38:63:99:db:b5:98:78: 8f:0c:6b:1b:e1:6d:23:36:b1:fc:f3:bc:ea:8e:c6: 23:f2:67:39:b6:6a:85:b3:21:6d:5f:cf:70:4b:a7: 4e:a0:01:df:be:63:c7:f7:72:60:32:52:13:2a:de: 34:e1:28:57:3b:5f:27:60:c6:51:26:14:7d:32:76: 8f:85:ea:95:4b:11:60:c5:96:d1:cb:aa:ec:45:f2: fa:d6:24:7b:f5:01:c7:42:29:dc:bd:a7:b8:cc:76: b0:7a:fb:c4:20:64:83:71:76:ce:d2:78:02:9b:db: 7f:6c:63:ae:de:30:16:e1:47:cb:fa:f9:1e:e6:a2: ef:08:9e:5b:9b:fa:80:ab:27:c2:06:ec:11:7b:92: 15:11:5b:84:61:19:c8:d3:3b:fc:fd:7d:c6:60:89: 6a:a8:4e:85:c0:a9:1e:c5:09:c0:4d:ef:2c:6e:08: 99:e9:c2:25:da:9f:06:5c:d8:90:64:1b:73:af:ee: f1:e4:cb:5b:3f:3a:8b:f3:27:14:8d:9d:e2:e2:9a: bf:89:c3:b5:fb:98:5c:f9:7f:13:46:57:07:08:35: 58:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A2:3F:1D:4D:A2:C3:3E:EB:6C:FA:95:ED:9B:4B:11:AD:00:77:47 X509v3 Authority Key Identifier: keyid:60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.150.0/23 IPv6: 2405:5640::/32 Signature Algorithm: sha256WithRSAEncryption 2a:14:bf:8c:18:9c:26:18:ac:33:f0:a0:dc:37:4c:38:16:51: 23:11:c7:87:c6:d4:a6:63:c0:d0:cc:c5:d0:b4:61:18:52:48: 09:9e:6f:8b:de:d7:80:b8:3f:59:9f:40:1a:f4:4a:54:b0:f1: 09:be:01:5f:6a:df:0c:70:79:e8:9e:f7:75:e1:bb:c8:75:ad: 7a:c0:7a:ea:d4:45:53:32:fe:0d:69:70:c9:18:8b:2d:f8:09: ac:c5:20:4d:dc:e1:94:0c:1a:27:c9:4d:04:c2:b1:c0:1c:f7: a6:a2:84:68:ad:80:c3:b1:30:d2:fe:11:de:a8:0d:f6:45:bc: 2e:18:d4:68:41:fa:7b:33:75:d7:6f:01:ef:12:f5:bc:6b:e2: 09:74:8a:e2:12:74:55:e5:c3:a1:31:92:30:ce:4b:b7:c1:25: 39:4c:3f:b1:06:19:12:03:2f:b3:96:7b:cd:d1:ed:45:a2:d9: 8a:eb:2a:1b:84:21:d7:40:21:9b:22:64:6c:c7:8a:5e:8c:3e: d4:f8:c9:eb:ed:13:d5:3b:d3:ad:46:47:43:6d:9a:21:72:43: b0:11:b3:ea:c8:04:cb:a2:89:14:43:3d:bc:f7:56:69:23:f0: b7:e7:42:b0:9d:9a:88:63:db:43:20:9a:51:ef:88:05:0a:e9: 25:83:a2:06 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4MzkxMTAvBgNVBAUTKDYwQUIzQ0ZGQUI4OEE1MTM0MkI4MTZGMDU5MDE5RjA3 M0U5NTAwQUEwHhcNMjQxMDIyMTk1OTI2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE4MDQxZS01MzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAup+RGP9YOHF85h3rujUaXBTofqxvA5UhA9aLVwIP8jfvBvWYCThjmdu1mHiP DGsb4W0jNrH887zqjsYj8mc5tmqFsyFtX89wS6dOoAHfvmPH93JgMlITKt404ShX O18nYMZRJhR9MnaPheqVSxFgxZbRy6rsRfL61iR79QHHQincvae4zHawevvEIGSD cXbO0ngCm9t/bGOu3jAW4UfL+vke5qLvCJ5bm/qAqyfCBuwRe5IVEVuEYRnI0zv8 /X3GYIlqqE6FwKkexQnATe8sbgiZ6cIl2p8GXNiQZBtzr+7x5MtbPzqL8ycUjZ3i 4pq/icO1+5hc+X8TRlcHCDVYOwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNaiPx1N osM+62z6le2bSxGtAHdHMB8GA1UdIwQYMBaAFGCrPP+riKUTQrgW8FkBnwc+lQCq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTgzOS9DMEUwM0NGNDZD MkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBSTkN1QmJ3V1FHZkJ6NlZB S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lLczhfNnVJcFJOQ3VCYndXUUdmQno2VkFLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0E4MzkvQzBFMDNDRjQ2QzJGMTFFQThDRUM5NDZFQzRGOUFFMDIvMERDQjFCREM2 QzMxMTFFQThGNEU5QjcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnj5YwDQQCAAIwBwMFACQFVkAwDQYJKoZIhvcNAQELBQAD ggEBACoUv4wYnCYYrDPwoNw3TDgWUSMRx4fG1KZjwNDMxdC0YRhSSAmeb4ve14C4 P1mfQBr0SlSw8Qm+AV9q3wxweeie93Xhu8h1rXrAeurURVMy/g1pcMkYiy34CazF IE3c4ZQMGifJTQTCscAc96aihGitgMOxMNL+Ed6oDfZFvC4Y1GhB+nszdddvAe8S 9bxr4gl0iuISdFXlw6ExkjDOS7fBJTlMP7EGGRIDL7OWe83R7UWi2YrrKhuEIddA IZsiZGzHil6MPtT4yevtE9U7061GR0NtmiFyQ7ARs+rIBMuiiRRDPbz3Vmkj8Lfn QrCdmohj20MgmlHviAUK6SWDogY= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org