$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/C8D6C4CAD1EF11EAA9944238C4F9AE02.roa File: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (raw, json) Hash identifier: X+4Hk4a7KWZB8hLpQ9G/KTOvp7uPa3IIE7DPvOb1X8A= Subject key identifier: 86:AA:78:03:DC:0B:08:04:33:46:C7:5B:E7:5A:26:6E:70:98:F3:0A Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Certificate serial: 24CB Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/C8D6C4CAD1EF11EAA9944238C4F9AE02.roa Signing time: Tue 12 Mar 2024 18:26:38 +0000 ROA not before: Tue 12 Mar 2024 18:26:38 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 139038 IP address blocks: 103.138.210.0/24 maxlen: 24 103.138.210.254/32 maxlen: 32 2001:df0:5580::/48 maxlen: 48 2001:df0:5580::/54 maxlen: 54 2001:df0:5580:800::/54 maxlen: 54 2001:df0:5580:1000::/52 maxlen: 52 2001:df0:5580:1000::/54 maxlen: 54 2001:df0:5580:2000::/52 maxlen: 52 2001:df0:5580:3000::/52 maxlen: 52 2001:df0:5580:7000::/52 maxlen: 52 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9419 (0x24cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Validity Not Before: Mar 12 18:26:38 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65f09e5e-62b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e8:11:f1:bf:b6:86:a1:27:81:e1:14:b0:9d: a3:91:c6:a7:cd:b0:aa:df:9e:98:f7:06:4b:44:49: 73:7c:30:fe:c9:8f:05:73:c0:49:55:e9:93:68:0b: 66:7f:7d:2b:9a:15:75:10:60:32:1d:29:68:e5:a5: b6:b6:fa:c6:9a:bd:ca:62:0d:be:c5:71:4e:49:b0: e1:a8:d6:15:98:71:b4:65:bc:bc:53:8b:a7:d6:01: fa:8f:bd:46:68:1a:86:27:92:b0:28:ce:18:01:76: 37:eb:df:f6:ea:10:00:3d:9e:40:b9:f8:65:85:2a: f9:7d:ea:f6:f0:a9:4f:f4:55:7c:41:6e:67:11:fe: 5a:58:59:7f:00:93:2a:5e:60:a9:a9:dd:c8:78:f1: 64:dc:01:a7:17:53:2c:ff:0a:76:c4:19:76:ea:2a: 4a:f6:14:82:c8:b4:8b:37:8f:92:3a:59:99:80:51: f2:2c:6c:ef:8c:5f:55:ee:89:19:62:f2:55:e0:0d: 38:96:13:0a:f8:c1:53:2a:93:22:f1:a3:17:44:c8: a3:05:3f:87:97:20:5a:93:a0:fe:8f:c8:00:93:fd: ee:02:a0:da:da:bd:38:a6:28:65:ef:ec:3f:f8:16: 04:c4:2c:e0:24:5c:2d:16:66:d7:16:8c:9f:34:ab: 18:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AA:78:03:DC:0B:08:04:33:46:C7:5B:E7:5A:26:6E:70:98:F3:0A X509v3 Authority Key Identifier: keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/C8D6C4CAD1EF11EAA9944238C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.210.0/24 IPv6: 2001:df0:5580::/48 Signature Algorithm: sha256WithRSAEncryption 90:a4:67:1d:d6:cf:65:0a:f9:27:4d:7c:25:81:e0:f2:fa:43: 24:82:2f:e7:c1:69:48:1d:f9:88:e3:34:10:92:76:28:6c:a9: b5:16:dd:9e:1b:83:d1:21:f1:03:0b:f7:0e:0c:21:e8:bf:b5: 55:8e:39:de:d7:c9:7d:52:3d:e6:65:69:30:0e:2b:5c:62:7b: 87:63:00:b1:90:bd:bc:49:e7:c9:2d:c7:75:3d:a0:db:a2:ba: 2a:6e:e1:d3:50:08:fa:47:c4:a7:c7:26:06:e7:25:ff:59:2d: 9e:2b:75:c1:8d:f8:a4:82:4e:6f:ab:6c:af:43:c2:b2:97:45: 61:af:3b:ca:fd:2c:29:07:c3:d9:9d:d1:3c:5b:a7:0e:4b:41: 1f:d4:78:1e:7a:c2:8c:18:b3:99:82:5e:50:16:fa:42:a1:67: 44:81:2d:af:b0:4e:e5:0f:ac:02:8e:99:2a:b6:31:49:76:87: 08:ab:80:88:a0:29:cb:4c:0f:da:22:4a:90:d5:38:91:92:c8: 27:34:03:92:30:60:bd:4c:57:d7:b7:75:0a:ab:bd:bf:c8:1a: 3a:f1:21:62:86:37:61:0d:2c:86:29:e8:8b:6a:4f:de:36:51: 77:54:b1:e3:4a:e2:46:5e:04:fd:27:18:62:2b:42:6d:49:6a: 4a:ec:64:cd -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICJMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw RDNEOEE2RDAwHhcNMjQwMzEyMTgyNjM4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYwOWU1ZS02MmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwugR8b+2hqEngeEUsJ2jkcanzbCq356Y9wZLRElzfDD+yY8Fc8BJVemTaAtm f30rmhV1EGAyHSlo5aW2tvrGmr3KYg2+xXFOSbDhqNYVmHG0Zby8U4un1gH6j71G aBqGJ5KwKM4YAXY369/26hAAPZ5AufhlhSr5fer28KlP9FV8QW5nEf5aWFl/AJMq XmCpqd3IePFk3AGnF1Ms/wp2xBl26ipK9hSCyLSLN4+SOlmZgFHyLGzvjF9V7okZ YvJV4A04lhMK+MFTKpMi8aMXRMijBT+HlyBak6D+j8gAk/3uAqDa2r04pihl7+w/ +BYExCzgJFwtFmbXFoyfNKsYIQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIaqeAPc CwgEM0bHW+daJm5wmPMKMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvQzhENkM0Q0FE MUVGMTFFQUE5OTQ0MjM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnitIwDwQCAAIwCQMHACABDfBVgDANBgkqhkiG9w0BAQsF AAOCAQEAkKRnHdbPZQr5J018JYHg8vpDJIIv58FpSB35iOM0EJJ2KGyptRbdnhuD 0SHxAwv3Dgwh6L+1VY453tfJfVI95mVpMA4rXGJ7h2MAsZC9vEnnyS3HdT2g26K6 Km7h01AI+kfEp8cmBucl/1ktnit1wY34pIJOb6tsr0PCspdFYa87yv0sKQfD2Z3R PFunDktBH9R4HnrCjBizmYJeUBb6QqFnRIEtr7BO5Q+sAo6ZKrYxSXaHCKuAiKAp y0wP2iJKkNU4kZLIJzQDkjBgvUxX17d1Cqu9v8gaOvEhYoY3YQ0shinoi2pP3jZR d1Sx40riRl4E/ScYYitCbUlqSuxkzQ== -----END CERTIFICATE-----Generated at Thu May 16 19:10:54 2024 by rpki-client on console-fra.rpki-client.org