$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/968DFDCE973311EDBFD0B43CC4F9AE02.roa File: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (raw, json) Hash identifier: VC28Lal4CEsa3kS58iTnk8qShznnipA6wDZ5+/CZmEQ= Subject key identifier: 23:7B:4E:36:6B:69:2F:B3:01:C1:26:B8:76:A5:BC:22:26:D9:CF:94 Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Certificate serial: 24D4 Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/968DFDCE973311EDBFD0B43CC4F9AE02.roa Signing time: Tue 12 Mar 2024 18:26:47 +0000 ROA not before: Tue 12 Mar 2024 18:26:47 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 65533 IP address blocks: 103.138.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9428 (0x24d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Validity Not Before: Mar 12 18:26:47 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65f09e66-3fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:32:5d:2a:68:0a:04:44:34:6a:67:56:10: 08:14:63:e2:4b:d9:b2:81:a3:a3:36:4a:f3:ce:45: 6e:82:20:1b:1f:fb:28:61:c0:f4:23:65:dc:28:e9: 9f:c1:aa:14:b4:fd:99:46:0f:56:c3:35:93:87:42: 51:fd:4b:41:a8:54:b6:57:2d:29:e3:85:dd:77:ca: 18:aa:23:7f:42:be:a6:d8:01:39:c8:13:63:77:de: fc:47:d0:4b:14:b9:6d:6b:f8:83:a4:bd:70:0a:2c: 5d:07:3b:17:66:8c:94:18:1e:e3:59:d6:37:cd:2a: 61:7c:1b:d8:76:0e:b5:88:41:c7:ac:9a:6f:d1:54: 82:ca:f4:fb:55:cd:8c:12:14:45:e9:2e:e4:fe:84: 87:2e:08:c5:00:0d:77:cf:73:4f:0e:0a:7d:3b:f5: 0e:8e:7b:32:c4:7f:21:16:d7:f6:7f:d2:0e:d6:be: eb:df:48:11:b3:08:69:a1:51:9a:f8:29:91:73:12: 92:49:41:c9:ba:db:4d:fc:44:d5:4c:f1:1d:aa:87: bd:4b:43:21:00:44:7d:16:e3:ac:7f:7a:05:80:67: f4:7a:c1:11:c7:58:f8:16:83:dd:02:f5:30:b1:c9: 33:f4:ad:0c:a8:c3:fe:19:1a:4a:a5:c4:9b:8b:b5: eb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7B:4E:36:6B:69:2F:B3:01:C1:26:B8:76:A5:BC:22:26:D9:CF:94 X509v3 Authority Key Identifier: keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/968DFDCE973311EDBFD0B43CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.210.0/24 Signature Algorithm: sha256WithRSAEncryption b7:b6:db:7b:a9:b7:a8:e9:55:5b:37:53:c9:73:c4:8e:79:9c: 44:62:c8:07:75:ad:ef:55:72:2f:41:57:df:5a:c5:2c:0e:cf: 0c:83:31:e9:b1:13:60:4a:a6:07:7b:22:75:b0:1e:0f:d8:b1: a3:6f:1e:60:dc:4e:e2:84:99:0c:5a:88:d4:f8:41:2f:75:42: 65:77:86:df:80:82:e9:73:5b:7b:1d:c4:6e:4a:3c:24:e2:a1: 8f:5f:f4:47:7a:ae:84:d3:43:84:db:11:be:b4:e3:ee:f5:07: 0b:1e:37:ea:a7:84:36:31:a6:fa:af:10:63:d7:40:10:c5:cf: 40:c4:97:21:5b:a8:0b:9e:b0:a9:ee:8f:92:5f:43:2f:55:e1: 5c:a4:b2:f2:e8:ef:23:27:74:30:c5:77:8a:48:d1:9c:0f:3b: 96:81:64:e6:eb:f5:85:0a:dd:73:e7:89:05:19:58:18:cc:ec: 8f:84:35:e8:b2:2b:02:74:88:dd:39:72:6e:70:f3:99:38:fc: 8c:ea:e3:21:b5:52:0a:a7:21:c8:29:38:36:5d:3d:ef:45:d9: 5f:e3:b0:8d:b5:e4:44:b9:e2:c6:c4:88:28:04:7f:c2:3d:19: 53:3c:6c:e1:24:ff:2c:19:9d:37:8a:cb:c1:5e:b1:2f:59:9b: 0c:dd:e0:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw RDNEOEE2RDAwHhcNMjQwMzEyMTgyNjQ3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYwOWU2Ni0zZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJYyXSpoCgRENGpnVhAIFGPiS9mygaOjNkrzzkVugiAbH/soYcD0I2XcKOmf waoUtP2ZRg9WwzWTh0JR/UtBqFS2Vy0p44Xdd8oYqiN/Qr6m2AE5yBNjd978R9BL FLlta/iDpL1wCixdBzsXZoyUGB7jWdY3zSphfBvYdg61iEHHrJpv0VSCyvT7Vc2M EhRF6S7k/oSHLgjFAA13z3NPDgp9O/UOjnsyxH8hFtf2f9IO1r7r30gRswhpoVGa +CmRcxKSSUHJuttN/ETVTPEdqoe9S0MhAER9FuOsf3oFgGf0esERx1j4FoPdAvUw sckz9K0MqMP+GRpKpcSbi7XryQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCN7TjZr aS+zAcEmuHalvCIm2c+UMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvOTY4REZEQ0U5 NzMzMTFFREJGRDBCNDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnitIwDQYJKoZIhvcNAQELBQADggEBALe223upt6jpVVs3 U8lzxI55nERiyAd1re9Vci9BV99axSwOzwyDMemxE2BKpgd7InWwHg/YsaNvHmDc TuKEmQxaiNT4QS91QmV3ht+AgulzW3sdxG5KPCTioY9f9Ed6roTTQ4TbEb604+71 BwseN+qnhDYxpvqvEGPXQBDFz0DElyFbqAuesKnuj5JfQy9V4VyksvLo7yMndDDF d4pI0ZwPO5aBZObr9YUK3XPniQUZWBjM7I+ENeiyKwJ0iN05cm5w85k4/Izq4yG1 UgqnIcgpODZdPe9F2V/jsI215ES54sbEiCgEf8I9GVM8bOEk/ywZnTeKy8FesS9Z mwzd4M8= -----END CERTIFICATE-----Generated at Thu May 16 20:25:40 2024 by rpki-client on console-ams.rpki-client.org