$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/D193920E709411E99F95933EC4F9AE02.roa File: D193920E709411E99F95933EC4F9AE02.roa (raw, json) Hash identifier: 0Os8j4kYKwSeqmj5yGoBBZfTw2aGD2KOY509iiv178E= Subject key identifier: D9:80:F1:3E:D3:B2:04:38:EE:ED:5C:3B:AD:B8:83:CD:B8:75:4D:2E Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 0EC3 Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/D193920E709411E99F95933EC4F9AE02.roa Signing time: Sat 14 Sep 2024 08:33:47 +0000 ROA not before: Sat 14 Sep 2024 08:33:47 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 139008 IP address blocks: 103.138.144.0/23 maxlen: 23 103.138.144.0/24 maxlen: 24 103.138.145.0/24 maxlen: 24 2001:df0:3f80::/48 maxlen: 48 2406:2c0::/32 maxlen: 32 2406:2c0:1100::/40 maxlen: 40 2406:2c0:1101::/48 maxlen: 48 2406:2c0:1102::/48 maxlen: 48 2406:2c0:110b::/48 maxlen: 48 2406:2c0:1132::/48 maxlen: 48 2406:2c0:7100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Oct 2024 17:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3779 (0xec3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Validity Not Before: Sep 14 08:33:47 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66e54a6a-2c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:15:1b:a9:77:b0:f9:3b:0f:0e:7c:46:d9: f1:0d:c7:c2:05:8f:aa:51:50:a3:b4:ff:c6:7a:6d: 28:8e:8f:f0:99:54:80:aa:99:88:99:b6:b8:bc:86: 19:c1:c0:29:05:6e:d4:60:9d:ef:84:11:9e:e5:d3: 45:f9:bd:82:db:ec:0f:b6:64:dd:b6:43:8f:27:08: 4f:29:ec:ea:5d:fc:42:eb:5e:70:bd:ac:96:b7:b4: 06:e6:dd:ea:e7:d1:67:f4:d3:a1:a1:6e:98:11:0b: c2:fa:a2:d6:d7:30:98:db:ef:1b:87:b3:1c:a3:6d: 0b:9a:9c:98:85:a6:62:42:99:52:ad:a1:cc:9b:92: 66:d1:d7:94:cf:a3:5b:f8:1a:de:5d:49:a4:b1:8c: 50:d1:9b:26:20:01:06:78:d1:de:0d:38:9a:ad:6e: 63:fa:4e:8f:dd:4f:65:ee:c2:25:d1:79:41:b1:04: d2:7d:7a:b1:4b:00:65:c0:fd:6e:8a:d0:fa:01:78: c4:1d:b6:92:2e:66:ff:09:ca:32:5e:15:62:50:b5: 24:06:ba:83:b9:8e:3d:07:3f:9c:5e:df:f5:ec:de: cc:df:5d:a3:5c:3b:8f:ba:2d:43:50:8a:de:37:23: d7:f8:e8:9b:43:0e:a1:92:e1:ac:8b:ba:90:8a:a1: 8e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:80:F1:3E:D3:B2:04:38:EE:ED:5C:3B:AD:B8:83:CD:B8:75:4D:2E X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/D193920E709411E99F95933EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.144.0/23 IPv6: 2001:df0:3f80::/48 2406:2c0::/32 Signature Algorithm: sha256WithRSAEncryption 68:b0:4e:82:97:a0:d5:b1:4b:01:2d:2d:5b:25:13:64:19:b5: b4:d4:d7:b9:17:92:31:59:30:6b:c2:80:cb:f4:24:53:50:70: 90:31:2c:85:09:9a:d7:0f:87:07:50:b9:51:47:a4:62:6d:0b: 51:7e:4b:28:ac:e9:59:5f:cb:51:df:5a:2d:13:d2:a0:dc:fd: 79:f9:da:ed:2d:da:96:1e:f7:ba:bd:8c:16:5b:fe:77:7e:2b: 8e:75:8f:fa:ff:65:f1:e0:0e:ea:03:56:72:75:eb:16:1d:e3: de:cc:67:13:3f:a6:22:14:aa:38:50:1a:55:88:6f:03:88:ef: 07:af:18:55:3b:56:b9:d7:be:40:22:80:38:04:8a:f7:93:e8: ca:d3:99:39:b9:2d:d0:a4:57:e0:24:ef:bf:9e:ee:8d:b8:42: 9a:91:5f:a6:42:5b:d0:8c:84:7c:2b:90:40:46:85:fe:b1:aa: 18:ec:11:94:69:cf:3d:e8:bb:30:b4:71:74:2c:35:af:97:94: 93:c0:74:b1:cd:ad:55:fa:56:74:5f:df:57:70:1c:05:9a:0a: 64:22:de:3c:9f:c6:0f:a2:d3:93:ce:fc:1a:db:6c:74:05:74: 16:43:4d:aa:f0:9c:05:af:eb:bf:8d:1b:41:5e:d0:25:3e:2a: 76:2c:dd:65 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICDsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjQwOTE0MDgzMzQ3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU1NGE2YS0yYzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvEVG6l3sPk7Dw58RtnxDcfCBY+qUVCjtP/Gem0ojo/wmVSAqpmImba4vIYZ wcApBW7UYJ3vhBGe5dNF+b2C2+wPtmTdtkOPJwhPKezqXfxC615wvayWt7QG5t3q 59Fn9NOhoW6YEQvC+qLW1zCY2+8bh7Mco20LmpyYhaZiQplSraHMm5Jm0deUz6Nb +BreXUmksYxQ0ZsmIAEGeNHeDTiarW5j+k6P3U9l7sIl0XlBsQTSfXqxSwBlwP1u itD6AXjEHbaSLmb/CcoyXhViULUkBrqDuY49Bz+cXt/17N7M312jXDuPui1DUIre NyPX+OibQw6hkuGsi7qQiqGOYwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNmA8T7T sgQ47u1cO624g824dU0uMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlCREYvRTcwRTBBOTg3MDkzMTFFOTgwQkQ3QzNEQzRGOUFFMDIvRDE5MzkyMEU3 MDk0MTFFOTlGOTU5MzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBAFnipAwFgQCAAIwEAMHACABDfA/gAMFACQGAsAwDQYJKoZI hvcNAQELBQADggEBAGiwToKXoNWxSwEtLVslE2QZtbTU17kXkjFZMGvCgMv0JFNQ cJAxLIUJmtcPhwdQuVFHpGJtC1F+Syis6Vlfy1HfWi0T0qDc/Xn52u0t2pYe97q9 jBZb/nd+K451j/r/ZfHgDuoDVnJ16xYd497MZxM/piIUqjhQGlWIbwOI7wevGFU7 VrnXvkAigDgEiveT6MrTmTm5LdCkV+Ak77+e7o24QpqRX6ZCW9CMhHwrkEBGhf6x qhjsEZRpzz3ouzC0cXQsNa+XlJPAdLHNrVX6VnRf31dwHAWaCmQi3jyfxg+i05PO /BrbbHQFdBZDTarwnAWv67+NG0Fe0CU+KnYs3WU= -----END CERTIFICATE-----Generated at Thu Sep 26 18:52:45 2024 by rpki-client on console-fra.rpki-client.org