$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/BD22841E9E4911E9A136D25AC4F9AE02.roa File: BD22841E9E4911E9A136D25AC4F9AE02.roa (raw, json) Hash identifier: CD3KMyXKPVQJ5ERiU0fhGp4XONa4jeSt2SNuNzmurV8= Subject key identifier: 77:E3:66:B7:FF:2C:32:0A:16:74:98:BB:37:B9:82:61:EE:81:05:93 Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Certificate serial: 0DA9 Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/BD22841E9E4911E9A136D25AC4F9AE02.roa Signing time: Wed 26 Jun 2024 18:29:14 +0000 ROA not before: Wed 26 Jun 2024 18:29:14 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 58947 IP address blocks: 103.26.138.0/23 maxlen: 23 103.26.138.0/24 maxlen: 24 103.26.139.0/24 maxlen: 24 103.132.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3497 (0xda9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Validity Not Before: Jun 26 18:29:14 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=667c5dfa-1983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:5c:23:44:fd:aa:e2:16:cb:b4:29:6b:e0: 72:72:cf:f9:cf:e3:ad:72:27:f1:80:63:81:7e:03: 4b:09:cb:68:0b:c9:5b:ba:00:d5:bf:30:57:8f:2a: 31:07:cb:c5:a5:5c:49:2c:af:85:ec:95:17:4e:30: 1f:7a:54:a0:c7:9c:9b:6c:53:d3:dd:48:c1:6f:bb: 4d:ad:49:83:b6:4a:3c:0a:54:be:dc:90:78:78:9f: 47:04:fa:73:df:c5:79:fa:09:5f:0f:6f:fa:e8:be: 99:ed:5e:b5:bb:25:e3:76:46:be:49:90:ce:8a:28: 91:61:26:6c:d5:bc:65:e1:6d:d7:a7:96:88:19:80: a2:bb:b5:f8:98:0e:f1:2b:fc:3f:a1:b7:34:d5:a5: 26:03:37:80:9a:39:89:f3:66:49:31:6f:7f:6d:f6: 77:aa:f2:c0:49:a2:94:40:0b:56:58:bc:de:fb:91: 9f:8a:80:41:28:89:74:1d:7d:71:a6:8b:3b:23:c8: f6:28:66:4a:35:2c:c0:65:ce:02:f0:14:1d:f5:63: a2:89:ff:36:63:e2:10:f4:a2:ce:f3:c2:44:1a:66: dc:5f:81:89:72:4e:67:67:c8:65:41:12:fe:0e:d3: a8:2a:e2:1a:09:59:eb:45:b3:95:da:cb:25:d1:97: e9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E3:66:B7:FF:2C:32:0A:16:74:98:BB:37:B9:82:61:EE:81:05:93 X509v3 Authority Key Identifier: keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/BD22841E9E4911E9A136D25AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.26.138.0/23 103.132.153.0/24 Signature Algorithm: sha256WithRSAEncryption 57:5a:77:f4:14:a0:e7:7f:49:0f:ad:dc:a8:e2:fe:f6:14:fd: bb:0d:ee:82:9e:6c:df:a0:e7:de:20:32:dd:80:60:7a:26:e1: ed:17:29:1f:2f:69:6e:6a:19:c6:a9:12:cb:84:25:5a:ae:37: d9:ad:62:6c:5a:9b:29:c0:97:e8:da:84:7d:ae:8d:01:20:61: 65:96:16:55:a0:55:53:85:73:56:54:d6:3c:b6:ae:07:43:5c: 4a:b6:3a:9f:ec:f1:e3:7c:a4:df:18:38:2a:7d:19:eb:5d:bd: ea:5b:a9:34:34:1e:8a:88:33:b9:86:bb:b8:a0:b6:32:f9:67: cc:b0:aa:bc:ac:f1:76:03:aa:50:7e:cd:09:17:fa:a9:01:f8: 76:c8:c9:cd:c2:44:96:dc:85:a2:c7:24:ed:5a:3b:16:23:6d: 44:7a:24:6e:ef:35:3a:c5:ad:23:fb:c0:4e:cc:f9:41:40:dd: 2d:03:0e:29:55:30:4d:75:7d:b6:7f:33:df:cb:e3:4e:09:67: 3a:ee:60:6d:f4:bf:db:dc:60:c7:b1:1e:a0:98:2b:5c:43:c4: 04:a2:f0:7b:2e:7d:2a:e5:4a:1e:94:9e:54:29:60:c7:68:23: ac:75:ae:8d:05:21:9c:d4:9d:0d:96:08:2a:45:96:5a:bc:79: 21:1f:95:ca -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3 QjFDRTI3NjIwHhcNMjQwNjI2MTgyOTE0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdjNWRmYS0xOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOpcI0T9quIWy7Qpa+Bycs/5z+OtcifxgGOBfgNLCctoC8lbugDVvzBXjyox B8vFpVxJLK+F7JUXTjAfelSgx5ybbFPT3UjBb7tNrUmDtko8ClS+3JB4eJ9HBPpz 38V5+glfD2/66L6Z7V61uyXjdka+SZDOiiiRYSZs1bxl4W3Xp5aIGYCiu7X4mA7x K/w/obc01aUmAzeAmjmJ82ZJMW9/bfZ3qvLASaKUQAtWWLze+5GfioBBKIl0HX1x pos7I8j2KGZKNSzAZc4C8BQd9WOiif82Y+IQ9KLO88JEGmbcX4GJck5nZ8hlQRL+ DtOoKuIaCVnrRbOV2ssl0ZfpPQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHfjZrf/ LDIKFnSYuze5gmHugQWTMB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExNDkvMjRCQjI0Q0U5RTQ5MTFFOTlGOEJDQzU5QzRGOUFFMDIvQkQyMjg0MUU5 RTQ5MTFFOUExMzZEMjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnGooDBABnhJkwDQYJKoZIhvcNAQELBQADggEBAFdad/QU oOd/SQ+t3Kji/vYU/bsN7oKebN+g594gMt2AYHom4e0XKR8vaW5qGcapEsuEJVqu N9mtYmxamynAl+jahH2ujQEgYWWWFlWgVVOFc1ZU1jy2rgdDXEq2Op/s8eN8pN8Y OCp9GetdvepbqTQ0HoqIM7mGu7igtjL5Z8ywqrys8XYDqlB+zQkX+qkB+HbIyc3C RJbchaLHJO1aOxYjbUR6JG7vNTrFrSP7wE7M+UFA3S0DDilVME11fbZ/M9/L404J ZzruYG30v9vcYMexHqCYK1xDxASi8HsufSrlSh6UnlQpYMdoI6x1ro0FIZzUnQ2W CCpFllq8eSEflco= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org