$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/88F3C02C045611EFB93F1F33C4F9AE02.roa File: 88F3C02C045611EFB93F1F33C4F9AE02.roa (raw, json) Hash identifier: cZx0qXYBX+AYL013+FqThkX1+Tb5yDxAcWdH8ZbjfkA= Subject key identifier: B3:A9:33:16:5C:3A:1B:9A:16:6F:6C:D2:C3:E4:1A:A8:BC:AB:6A:85 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 0297 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/88F3C02C045611EFB93F1F33C4F9AE02.roa Signing time: Wed 29 May 2024 04:09:32 +0000 ROA not before: Wed 29 May 2024 04:09:32 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 142271 IP address blocks: 103.186.138.0/23 maxlen: 23 103.186.138.0/24 maxlen: 24 103.186.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: May 29 04:09:32 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6656aa7b-ea89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:fa:12:e5:02:a9:da:48:b5:bf:40:e2:05: 77:d9:8d:3c:02:87:6a:15:8e:ec:6c:93:2b:f3:39: 93:a5:40:1c:0b:ad:39:a0:1a:00:3f:df:d7:1f:fd: a2:98:35:19:e3:cc:fd:63:71:f2:ed:d8:43:c9:e9: eb:af:b2:26:18:e7:ff:dc:3b:1b:5f:66:3c:bc:8a: b1:cc:89:2f:f3:42:c7:60:c0:e3:81:6f:8f:cd:b8: 29:6b:08:fd:f2:d3:3c:eb:c0:9c:7f:64:8b:cb:e8: 29:13:6c:f7:0a:57:f7:89:3a:3f:0f:99:12:7f:c9: 32:39:be:92:30:38:31:95:11:53:91:11:14:a4:ba: dd:8d:c0:2d:7a:ab:9c:51:a0:1f:53:b9:2b:a6:06: 5a:a0:41:48:43:01:cb:7b:19:25:2e:dd:2c:08:4e: e0:6b:18:39:ab:95:fb:bf:c9:06:ed:c3:ad:ef:5c: 84:04:63:7f:58:59:49:58:8a:92:7f:60:1a:e5:6d: b9:d4:10:42:5b:b9:fa:84:8c:5a:5c:df:11:88:a1: 43:90:df:60:57:24:d5:90:29:da:5d:0c:56:f4:35: 67:3d:e3:a3:b3:e7:9a:0f:fb:9c:2a:08:b4:ed:be: 94:5e:2b:09:bc:59:b1:14:87:b9:50:70:68:d6:58: 42:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A9:33:16:5C:3A:1B:9A:16:6F:6C:D2:C3:E4:1A:A8:BC:AB:6A:85 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/88F3C02C045611EFB93F1F33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.138.0/23 Signature Algorithm: sha256WithRSAEncryption 06:6e:b9:c6:d0:c7:ad:6b:7d:de:54:59:30:d0:8e:c5:81:2c: 3a:fa:2a:ff:e1:68:e9:82:66:fa:bb:e3:b3:ee:66:2f:ca:5c: 63:7a:a0:45:9e:04:99:92:e9:10:16:65:84:36:47:e1:bf:42: 5a:9f:c7:53:cc:6e:be:3b:8a:c1:2f:e6:76:af:d6:12:10:81: 61:78:26:09:f4:c2:2f:74:7e:13:c0:4d:d2:36:fb:49:93:b4: 50:41:e8:6a:89:6b:a4:7a:ae:88:ea:3a:43:4f:f8:ca:a1:ca: bd:bc:f1:ed:5c:3e:95:6f:97:5f:3d:ca:15:07:7d:d2:15:85: 8e:1b:03:f2:01:72:5e:50:fd:03:5b:23:56:0b:e0:92:d3:0a: 1a:9f:cc:7e:c3:fa:70:31:f4:2b:e3:68:57:6d:cd:e5:df:b4: e7:da:b6:c1:63:05:2b:49:70:db:4b:d6:56:6d:07:39:36:9d: 53:7a:db:1b:e5:8d:bb:b0:2a:1b:eb:34:0f:a3:4e:28:59:64: 32:d3:65:84:c6:95:da:92:bd:cf:5d:1d:7c:90:91:b7:c8:b5: 03:30:4b:66:8a:a4:2d:18:bd:b3:90:ba:ec:fa:8f:74:cd:15: 11:5e:0d:77:81:3b:d5:8c:b0:fa:7e:8a:ed:77:a3:72:e5:19: e3:73:aa:95 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjQwNTI5MDQwOTMyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU2YWE3Yi1lYTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJ76EuUCqdpItb9A4gV32Y08AodqFY7sbJMr8zmTpUAcC605oBoAP9/XH/2i mDUZ48z9Y3Hy7dhDyenrr7ImGOf/3DsbX2Y8vIqxzIkv80LHYMDjgW+Pzbgpawj9 8tM868Ccf2SLy+gpE2z3Clf3iTo/D5kSf8kyOb6SMDgxlRFTkREUpLrdjcAtequc UaAfU7krpgZaoEFIQwHLexklLt0sCE7gaxg5q5X7v8kG7cOt71yEBGN/WFlJWIqS f2Aa5W251BBCW7n6hIxaXN8RiKFDkN9gVyTVkCnaXQxW9DVnPeOjs+eaD/ucKgi0 7b6UXisJvFmxFIe5UHBo1lhCQwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLOpMxZc OhuaFm9s0sPkGqi8q2qFMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFCRDcvNUY0OUFBNjhCRUM0MTFFQzg3OENDMTY2QzRGOUFFMDIvODhGM0MwMkMw NDU2MTFFRkI5M0YxRjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnuoowDQYJKoZIhvcNAQELBQADggEBAAZuucbQx61rfd5U WTDQjsWBLDr6Kv/haOmCZvq747PuZi/KXGN6oEWeBJmS6RAWZYQ2R+G/Qlqfx1PM br47isEv5nav1hIQgWF4Jgn0wi90fhPATdI2+0mTtFBB6GqJa6R6rojqOkNP+Mqh yr288e1cPpVvl189yhUHfdIVhY4bA/IBcl5Q/QNbI1YL4JLTChqfzH7D+nAx9Cvj aFdtzeXftOfatsFjBStJcNtL1lZtBzk2nVN62xvljbuwKhvrNA+jTihZZDLTZYTG ldqSvc9dHXyQkbfItQMwS2aKpC0YvbOQuuz6j3TNFRFeDXeBO9WMsPp+iu13o3Ll GeNzqpU= -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:42 2024 by rpki-client on console-fra.rpki-client.org