$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/838096CA3BD311EE84056461C4F9AE02.roa File: 838096CA3BD311EE84056461C4F9AE02.roa (raw, json) Hash identifier: xuVId9Hm47KrucZMsjSwL2x1LKezRg2UYb4YAMdWzpQ= Subject key identifier: C6:DF:BB:D2:00:1C:E3:A9:D3:7A:07:7F:D9:E7:61:E7:32:67:A9:5B Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 34 Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/838096CA3BD311EE84056461C4F9AE02.roa Signing time: Thu 19 Oct 2023 05:58:37 +0000 ROA not before: Thu 19 Oct 2023 05:58:37 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 134688 IP address blocks: 103.126.80.0/24 maxlen: 24 103.243.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 06:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Oct 19 05:58:37 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6530c58d-b0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8d:c1:cf:6c:ee:ad:61:8e:00:87:82:2b:fe: d0:15:8e:b8:ee:6a:0f:fc:14:f0:16:d5:c6:d4:5d: 59:d9:43:8f:ab:7c:62:da:eb:3e:77:26:34:20:9f: 9a:46:04:72:65:0a:ca:2d:1f:3a:9a:f2:c1:e4:6d: 5b:91:9c:d4:74:ba:dd:91:55:69:9b:6e:95:aa:f0: 28:da:0a:ce:cf:8b:2c:fc:52:53:da:d2:cc:d9:f0: a8:0b:9c:74:76:b8:ef:ca:58:d5:44:5b:f6:d0:22: 00:bb:e0:12:08:50:e5:b4:f8:30:8f:6b:0d:a5:ee: 31:01:c2:83:98:50:00:96:58:6a:df:c7:d9:7f:87: dc:a1:52:89:18:97:af:b2:36:79:2b:28:25:80:93: 93:13:ce:8c:e0:40:f9:3f:79:02:4f:27:65:f0:5c: 43:f5:70:71:75:41:ec:dd:94:f2:db:28:ec:76:27: 3a:5b:78:fa:21:35:8f:4d:f4:94:22:05:fe:79:60: bf:cb:3c:3b:2e:0f:26:82:d0:23:22:ce:f3:9f:bf: 51:a4:48:56:08:e3:b0:c9:e7:c9:87:c5:d1:bf:e5: d5:11:e5:db:3a:4b:80:5b:a0:7f:cf:77:ab:4f:24: 2e:4e:82:03:3c:39:a5:f0:30:7a:d5:57:ee:a0:d2: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DF:BB:D2:00:1C:E3:A9:D3:7A:07:7F:D9:E7:61:E7:32:67:A9:5B X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/838096CA3BD311EE84056461C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.80.0/24 103.243.17.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:f7:50:9e:3f:02:5c:c2:b3:49:f3:92:b4:f5:5d:a1:29:d1: b5:52:0b:72:51:9c:ea:d6:c8:d4:ba:66:cd:35:b4:76:c0:83: 1a:e3:a0:46:5c:69:3f:91:7f:cb:49:6c:99:79:dd:18:5b:77: 21:1c:29:68:82:f5:25:71:de:16:53:b7:a5:8e:75:0b:bf:28: 54:2b:45:2b:e1:b1:91:de:50:06:10:da:70:14:43:0a:13:5e: ef:4d:75:95:b6:5c:cd:ec:3d:58:a8:92:0f:4c:d6:c4:2f:8d: 78:67:04:30:01:fd:8b:9b:c6:82:08:70:6b:00:2f:68:59:5c: af:27:92:20:2d:dd:02:1b:c9:7c:7d:d0:1f:b4:e8:3d:62:bc: 72:1e:b3:4d:9c:66:1a:3b:0f:8b:b9:83:ce:2f:30:49:b6:39: d0:58:66:93:ec:3e:6f:14:1f:69:46:0f:b7:de:e2:ee:2e:a8: 03:8d:dd:c5:20:b3:5a:f6:71:e0:62:51:43:59:75:82:58:96: 1e:f6:5b:62:ae:ba:10:d0:c6:e3:bf:d5:39:80:fb:49:cb:d0: d2:c7:2d:7c:8f:15:93:0d:80:28:ba:dc:01:e6:a1:62:68:84: 18:dd:dd:ac:29:46:1d:fa:0e:e0:3d:99:08:4d:07:c4:7e:e4: 7d:64:4b:f3 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REREMTExMC8GA1UEBRMoMjE2QUQxRDc1QTkzRTAzN0FFOTRGNkM5MTg5NkQyRDU4 MkQ4RkY1NDAeFw0yMzEwMTkwNTU4MzdaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MzBjNThkLWIwZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvjcHPbO6tYY4Ah4Ir/tAVjrjuag/8FPAW1cbUXVnZQ4+rfGLa6z53JjQgn5pG BHJlCsotHzqa8sHkbVuRnNR0ut2RVWmbbpWq8CjaCs7Piyz8UlPa0szZ8KgLnHR2 uO/KWNVEW/bQIgC74BIIUOW0+DCPaw2l7jEBwoOYUACWWGrfx9l/h9yhUokYl6+y NnkrKCWAk5MTzozgQPk/eQJPJ2XwXEP1cHF1QezdlPLbKOx2JzpbePohNY9N9JQi Bf55YL/LPDsuDyaC0CMizvOfv1GkSFYI47DJ58mHxdG/5dUR5ds6S4BboH/Pd6tP JC5OggM8OaXwMHrVV+6g0uPxAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUxt+70gAc 46nTegd/2edh5zJnqVswHwYDVR0jBBgwFoAUIWrR11qT4DeulPbJGJbS1YLY/1Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEREQxLzY4QzFENDk2M0JE MDExRUU4QkFDMzUxQUM0RjlBRTAyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8x US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVdyUjExcVQ0RGV1bFBiSkdKYlMxWUxZXzFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi84MzgwOTZDQTNC RDMxMUVFODQwNTY0NjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAGd+UAMEAGfzETANBgkqhkiG9w0BAQsFAAOCAQEAHfdQnj8C XMKzSfOStPVdoSnRtVILclGc6tbI1LpmzTW0dsCDGuOgRlxpP5F/y0lsmXndGFt3 IRwpaIL1JXHeFlO3pY51C78oVCtFK+Gxkd5QBhDacBRDChNe7011lbZczew9WKiS D0zWxC+NeGcEMAH9i5vGgghwawAvaFlcryeSIC3dAhvJfH3QH7ToPWK8ch6zTZxm GjsPi7mDzi8wSbY50Fhmk+w+bxQfaUYPt97i7i6oA43dxSCzWvZx4GJRQ1l1gliW HvZbYq66ENDG47/VOYD7ScvQ0sctfI8Vkw2AKLrcAeahYmiEGN3drClGHfoO4D2Z CE0HxH7kfWRL8w== -----END CERTIFICATE-----Generated at Thu Jun 13 07:43:07 2024 by rpki-client on console-fra.rpki-client.org