$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/DD53E3B8F0B511E98108C962C4F9AE02.roa File: DD53E3B8F0B511E98108C962C4F9AE02.roa (raw, json) Hash identifier: +d8JTMdE/OZF41ywsfLWbdDiFe60dYPx5jzZe3nPzII= Subject key identifier: 70:D1:20:F7:A5:AD:E0:05:F3:66:7D:73:8E:BD:66:7E:52:7F:7F:5B Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Certificate serial: 0C25 Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/DD53E3B8F0B511E98108C962C4F9AE02.roa Signing time: Mon 02 Sep 2024 18:56:56 +0000 ROA not before: Mon 02 Sep 2024 18:56:56 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139650 IP address blocks: 103.143.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3109 (0xc25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Validity Not Before: Sep 2 18:56:56 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d60a78-3864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:56:e7:fc:e7:0f:6f:f6:40:bf:3e:12:cd:c4: d7:2f:0d:b4:3b:00:2a:ac:c2:ce:df:16:b9:d5:f5: f1:55:fb:7f:3c:33:eb:24:f8:11:3f:9d:fd:cc:80: 39:45:3d:eb:70:38:78:26:06:1a:00:e3:0e:6c:c4: 73:f4:90:54:84:d8:99:3d:9a:86:49:c0:e2:d4:63: 55:b9:b7:22:42:26:d0:a8:77:49:09:cc:7a:67:b8: d9:ce:1f:a4:79:7b:f8:7d:97:f9:d6:a4:05:8c:42: b5:eb:73:5a:1e:4b:a7:3e:57:04:a1:91:c9:0b:ca: 16:1d:39:03:b7:cf:60:96:93:42:a2:67:7e:49:ce: 8b:13:bf:30:ca:7d:b8:22:1d:d8:bc:c1:d2:4a:42: 69:83:d0:18:30:16:f2:04:dd:10:4a:5d:92:40:ac: 77:30:d8:84:62:7e:81:76:f9:56:f0:a0:63:85:0b: 49:5a:f4:fb:a4:97:8d:c9:ad:d1:4d:04:2b:d7:0a: 15:4b:a7:91:b9:76:e8:f9:7d:97:ff:ec:9b:f0:7b: 5f:3e:dd:f6:ce:3e:7b:68:9b:f2:a6:b3:64:83:ec: 9a:ab:8e:6b:f7:61:88:66:81:1c:ea:18:4b:a1:f5: c8:5a:d4:51:2c:c5:3f:bc:14:2d:9d:7f:af:df:eb: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D1:20:F7:A5:AD:E0:05:F3:66:7D:73:8E:BD:66:7E:52:7F:7F:5B X509v3 Authority Key Identifier: keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/DD53E3B8F0B511E98108C962C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.40.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:6f:4c:fe:4a:05:7a:af:4f:49:8d:c8:48:9e:a2:2f:4a:b4: e1:87:f3:0a:12:46:e8:7e:dc:5e:28:74:92:19:03:92:4d:18: 5d:f9:c6:f5:30:ac:ea:db:45:88:e1:6f:19:b3:86:e9:eb:bd: 67:1d:31:d3:7e:20:ff:c6:1d:78:27:54:f6:b2:aa:ed:36:af: d7:ca:e9:ab:d3:f0:bb:01:25:80:78:10:ab:2e:7f:01:20:dc: b3:fc:e0:4b:dc:04:0d:62:0d:50:75:44:90:57:63:2a:02:61: f5:f5:2f:b0:1f:2e:8b:c6:47:77:b4:f4:28:fe:bb:b8:a9:4b: 35:6f:e4:d6:a6:f2:43:14:13:f7:dc:a2:84:4e:4e:90:56:57: 97:7d:ff:cc:dc:02:09:04:41:bf:6e:20:15:b8:81:9d:e6:f0: e3:f3:02:dc:71:b0:55:66:d8:e6:62:df:07:fe:80:06:5a:52: 5c:08:be:d7:23:02:89:e8:f2:eb:1e:eb:48:d6:84:6f:40:27: f2:d5:98:ba:b1:15:5c:5a:da:52:4e:3e:c5:24:8d:1e:c1:1c: dd:44:75:0f:81:e5:27:5f:1d:98:a2:11:c7:ce:31:b7:13:fa: 52:13:0d:a6:4a:01:df:f6:b1:5e:8f:56:a8:5d:74:eb:97:77: 71:41:7e:91 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5NzQxMTAvBgNVBAUTKENENEI3NjE2RTlDMjU0MkZFMTA1RDRGMTRFQUUzMjE2 NThENDRCM0IwHhcNMjQwOTAyMTg1NjU2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2MGE3OC0zODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lbn/OcPb/ZAvz4SzcTXLw20OwAqrMLO3xa51fXxVft/PDPrJPgRP539zIA5 RT3rcDh4JgYaAOMObMRz9JBUhNiZPZqGScDi1GNVubciQibQqHdJCcx6Z7jZzh+k eXv4fZf51qQFjEK163NaHkunPlcEoZHJC8oWHTkDt89glpNComd+Sc6LE78wyn24 Ih3YvMHSSkJpg9AYMBbyBN0QSl2SQKx3MNiEYn6BdvlW8KBjhQtJWvT7pJeNya3R TQQr1woVS6eRuXbo+X2X/+yb8HtfPt32zj57aJvyprNkg+yaq45r92GIZoEc6hhL ofXIWtRRLMU/vBQtnX+v3+vj1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHDRIPel reAF82Z9c469Zn5Sf39bMB8GA1UdIwQYMBaAFM1LdhbpwlQv4QXU8U6uMhZY1Es7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk3NC8yRTZCNjlFRUYw QjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZDX2hCZFR4VHE0eUZsalVT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVdDJGdW5DVkNfaEJkVHhUcTR5RmxqVVN6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDE5NzQvMkU2QjY5RUVGMEI0MTFFOUJDQzZGRTVEQzRGOUFFMDIvREQ1M0UzQjhG MEI1MTFFOTgxMDhDOTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjygwDQYJKoZIhvcNAQELBQADggEBADtvTP5KBXqvT0mN yEieoi9KtOGH8woSRuh+3F4odJIZA5JNGF35xvUwrOrbRYjhbxmzhunrvWcdMdN+ IP/GHXgnVPayqu02r9fK6avT8LsBJYB4EKsufwEg3LP84EvcBA1iDVB1RJBXYyoC YfX1L7AfLovGR3e09Cj+u7ipSzVv5Nam8kMUE/fcooROTpBWV5d9/8zcAgkEQb9u IBW4gZ3m8OPzAtxxsFVm2OZi3wf+gAZaUlwIvtcjAono8use60jWhG9AJ/LVmLqx FVxa2lJOPsUkjR7BHN1EdQ+B5SdfHZiiEcfOMbcT+lITDaZKAd/2sV6PVqhddOuX d3FBfpE= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org