$ rpki-client -vvf rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/DDCD4C168EC611EBAB7F3476C4F9AE02.roa File: DDCD4C168EC611EBAB7F3476C4F9AE02.roa (raw, json) Hash identifier: XgqjCFFv8OvHgcyHmr4FpMdTjHkJB/4NbQ4b1FrOS50= Subject key identifier: 0C:76:35:68:C2:C4:F6:12:5D:2C:5D:BE:65:A8:CA:BF:DF:22:A1:23 Certificate issuer: /CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0 Certificate serial: 0540 Authority key identifier: 69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/DDCD4C168EC611EBAB7F3476C4F9AE02.roa Signing time: Fri 29 Dec 2023 00:02:37 +0000 ROA not before: Fri 29 Dec 2023 00:02:37 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 138476 IP address blocks: 103.126.184.0/23 maxlen: 23 103.126.184.0/24 maxlen: 24 103.126.185.0/24 maxlen: 24 2001:df6:6780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1344 (0x540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0 Validity Not Before: Dec 29 00:02:37 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=658e0c9d-054e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7f:4e:8b:b0:16:47:7c:0e:df:b2:84:04:89: 04:7e:3e:26:ce:19:30:d1:03:2f:f1:aa:42:5a:bb: e4:78:1b:22:0c:8b:36:d5:7d:ca:0a:31:c6:1a:91: 95:a5:75:d1:01:0c:7a:13:ec:18:32:96:1d:41:db: 8e:a2:3f:f1:df:3e:ab:8c:b2:cc:e6:f4:0a:68:e1: 03:b5:51:cc:54:5b:77:e6:23:38:b7:96:49:d5:2f: 9c:ea:8b:06:a4:22:0e:d8:97:22:f2:cc:71:10:3e: de:1c:35:27:5a:ff:5e:69:52:ff:8f:2a:20:9c:1e: 4b:31:3d:20:24:8b:7b:6b:e6:8d:6c:27:3a:c8:28: 34:db:22:eb:08:e2:9c:6f:d2:ff:6e:6e:08:9d:9e: 37:93:85:d7:d0:59:59:ca:56:95:aa:5c:08:22:93: 6d:c6:29:11:35:4f:78:49:cd:a7:1c:29:57:ec:da: ef:24:f4:b5:f3:d0:a9:1c:c5:85:37:bb:e7:8d:29: 85:d0:3d:0d:9e:92:6d:7d:51:68:9b:84:8f:03:bd: 3c:7a:6f:7b:e9:25:c4:2e:74:88:2f:77:cc:e6:e0: d4:1a:bb:c1:b3:e6:a3:c3:ef:3b:38:1d:27:c8:27: 52:bc:2f:79:e5:09:fa:58:96:27:d7:3e:6e:78:07: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:76:35:68:C2:C4:F6:12:5D:2C:5D:BE:65:A8:CA:BF:DF:22:A1:23 X509v3 Authority Key Identifier: keyid:69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/DDCD4C168EC611EBAB7F3476C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.184.0/23 IPv6: 2001:df6:6780::/48 Signature Algorithm: sha256WithRSAEncryption 89:bb:16:57:e6:28:91:73:5b:b9:2b:1f:b0:06:1a:60:44:74: 32:93:da:b9:b1:f3:1b:16:f7:75:a1:63:80:18:59:61:91:46: 2b:be:69:eb:9f:57:8c:6e:70:a0:27:8f:d4:39:2a:22:51:8a: e0:e6:6a:68:6c:dc:29:50:2b:b2:0e:31:c0:7b:b1:db:5d:4c: 86:a0:a0:63:c9:0b:1a:f3:5c:c2:34:41:f6:7c:02:0f:3d:f0: 26:9f:eb:53:77:8a:cf:14:f4:34:90:68:9f:c9:ed:76:d0:97: b1:ac:17:04:28:94:2d:5d:69:98:bb:e2:35:18:f7:35:15:f8: 76:77:1c:29:d1:c9:b1:aa:d9:b0:30:66:ea:fc:19:4d:b1:da: 94:6e:61:58:88:1d:4b:4f:13:96:c5:95:b0:6b:65:7f:a0:4b: cb:2b:ff:34:27:2e:46:ef:d8:7e:ec:0a:39:36:43:3b:03:0f: 3f:4d:b2:cc:11:08:bd:ad:55:16:4d:30:e4:95:02:5f:d9:48: ba:5d:f0:e0:20:81:81:27:57:60:dc:24:b5:3b:fd:b3:c4:e6: 63:7b:c5:8d:11:5f:fc:3e:98:bc:57:7f:c8:59:cc:79:be:b0: e3:ee:7d:38:fb:0f:b5:ae:40:7e:5c:c0:27:1a:ce:2f:3d:f3: e2:83:19:94 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMxQTYxMTAvBgNVBAUTKDY5NjYxQTlGMDYzNTU3Q0UyQjU0MzdCMDE4ODkzRDdE OUZEREJFRDAwHhcNMjMxMjI5MDAwMjM3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NThlMGM5ZC0wNTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0H9Oi7AWR3wO37KEBIkEfj4mzhkw0QMv8apCWrvkeBsiDIs21X3KCjHGGpGV pXXRAQx6E+wYMpYdQduOoj/x3z6rjLLM5vQKaOEDtVHMVFt35iM4t5ZJ1S+c6osG pCIO2Jci8sxxED7eHDUnWv9eaVL/jyognB5LMT0gJIt7a+aNbCc6yCg02yLrCOKc b9L/bm4InZ43k4XX0FlZylaVqlwIIpNtxikRNU94Sc2nHClX7NrvJPS189CpHMWF N7vnjSmF0D0NnpJtfVFom4SPA708em976SXELnSIL3fM5uDUGrvBs+ajw+87OB0n yCdSvC955Qn6WJYn1z5ueAcl6wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAx2NWjC xPYSXSxdvmWoyr/fIqEjMB8GA1UdIwQYMBaAFGlmGp8GNVfOK1Q3sBiJPX2f3b7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzFBNi80NEQ4OTBDQThF QzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4NHJWRGV3R0lrOWZaX2R2 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXWWFud1kxVjg0clZEZXdHSWs5ZlpfZHZ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDMxQTYvNDREODkwQ0E4RUM1MTFFQjk3QjEyMDc0QzRGOUFFMDIvRERDRDRDMTY4 RUM2MTFFQkFCN0YzNDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnfrgwDwQCAAIwCQMHACABDfZngDANBgkqhkiG9w0BAQsF AAOCAQEAibsWV+YokXNbuSsfsAYaYER0MpPaubHzGxb3daFjgBhZYZFGK75p659X jG5woCeP1DkqIlGK4OZqaGzcKVArsg4xwHux211MhqCgY8kLGvNcwjRB9nwCDz3w Jp/rU3eKzxT0NJBon8ntdtCXsawXBCiULV1pmLviNRj3NRX4dnccKdHJsarZsDBm 6vwZTbHalG5hWIgdS08TlsWVsGtlf6BLyyv/NCcuRu/YfuwKOTZDOwMPP02yzBEI va1VFk0w5JUCX9lIul3w4CCBgSdXYNwktTv9s8TmY3vFjRFf/D6YvFd/yFnMeb6w 4+59OPsPta5AflzAJxrOLz3z4oMZlA== -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:24 2024 by rpki-client on console-fra.rpki-client.org