$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa File: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (raw, json) Hash identifier: nNolV6pGC+51y0HfDWOeN167s3LmxvmNsiZckSYAvXg= Subject key identifier: 9C:1A:F0:8A:EF:25:08:25:B8:C3:B1:B2:E9:82:6A:65:D6:A2:51:BB Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: D9 Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa Signing time: Sun 03 Dec 2023 04:35:20 +0000 ROA not before: Sun 03 Dec 2023 04:35:20 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 134372 IP address blocks: 103.103.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 04:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: Dec 3 04:35:20 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656c0588-25fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:17:30:39:4b:84:9d:d7:82:63:8b:76:96:d1: 7f:93:cd:01:c9:ed:cc:b6:8b:f3:83:43:63:89:a0: 77:95:51:fd:11:37:cf:05:54:e7:40:be:bc:18:dd: 99:f7:84:75:7a:b2:68:d6:4f:38:64:74:c7:09:a1: 82:68:a8:ad:c8:08:3b:76:d4:e3:74:a7:be:33:71: da:93:01:85:2d:a1:bc:d3:43:5b:15:05:90:f2:9b: 07:1a:b0:65:84:d8:88:61:42:8f:f0:29:32:8f:f7: 92:60:a1:27:c8:14:cf:8b:76:e8:97:12:6a:1d:a4: 62:ba:a2:d4:73:cf:b5:e4:74:27:fb:6d:e5:3f:f3: ab:14:92:a2:44:a8:7d:63:b3:92:f3:c2:ca:04:39: 70:2d:a3:2c:10:9d:20:53:42:42:7e:dc:56:29:16: 5b:4a:ff:88:f5:2c:25:59:db:63:24:34:04:71:03: ca:a3:ea:64:3c:88:fe:45:46:fa:8d:41:72:00:24: ff:14:0b:45:ed:77:6a:03:8c:a0:14:e8:07:41:91: 63:e0:85:71:77:80:54:3b:da:e3:2c:63:9e:22:7c: 50:8d:23:c4:75:f7:18:05:66:5b:e1:cc:2c:f7:72: 26:e9:d8:65:8d:0f:52:c9:d1:91:bd:d5:4c:08:40: f4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1A:F0:8A:EF:25:08:25:B8:C3:B1:B2:E9:82:6A:65:D6:A2:51:BB X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.96.0/23 Signature Algorithm: sha256WithRSAEncryption 51:9c:98:35:0b:b2:be:1e:6e:b6:c0:90:89:4f:4a:c9:81:44: dd:eb:41:f0:81:28:b9:ca:bf:59:26:55:6f:bd:fc:17:73:ce: f3:65:3f:29:db:8a:3c:40:2c:cd:ec:9c:a9:25:db:0f:44:0c: 6e:30:64:91:c9:da:f1:d6:90:59:a1:91:49:de:35:72:ac:e2: 42:5c:f6:07:ca:3c:30:f0:25:db:8e:6f:1b:5c:2e:32:df:93: 60:7b:45:f6:99:9f:ba:4b:14:db:13:f4:f5:90:8b:db:bf:dc: dd:25:e7:36:ac:7f:b4:41:74:d7:af:04:5f:fc:fc:b6:f9:3b: cd:1b:6c:87:75:db:cc:a6:95:cf:7b:67:2a:ea:1d:96:f5:50: 8c:e2:f3:7d:97:c3:b3:12:4d:f9:66:eb:f3:1a:74:49:0e:de: 26:92:3c:82:ab:fc:24:44:d5:02:04:c2:5d:43:f5:2b:14:3a: 3c:2b:cf:b7:a7:bf:ae:1d:6d:76:61:b4:a6:73:27:2d:3d:f5: 3e:f7:8e:aa:83:95:35:78:e0:97:1e:28:d4:e6:64:e1:b9:30: c5:a6:84:95:b1:68:51:b8:10:99:e9:03:99:dc:16:34:6b:7b: 1a:40:39:8a:d2:43:9d:e0:0e:6c:cc:62:53:cb:53:57:3b:fe: 18:db:3b:d1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjMxMjAzMDQzNTIwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZjMDU4OC0yNWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xcwOUuEndeCY4t2ltF/k80Bye3Mtovzg0NjiaB3lVH9ETfPBVTnQL68GN2Z 94R1erJo1k84ZHTHCaGCaKityAg7dtTjdKe+M3HakwGFLaG800NbFQWQ8psHGrBl hNiIYUKP8Ckyj/eSYKEnyBTPi3bolxJqHaRiuqLUc8+15HQn+23lP/OrFJKiRKh9 Y7OS88LKBDlwLaMsEJ0gU0JCftxWKRZbSv+I9SwlWdtjJDQEcQPKo+pkPIj+RUb6 jUFyACT/FAtF7XdqA4ygFOgHQZFj4IVxd4BUO9rjLGOeInxQjSPEdfcYBWZb4cws 93Im6dhljQ9SydGRvdVMCED0SQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJwa8Irv JQgluMOxsumCamXWolG7MB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJFMzgvNkRBMkQ5QjI1NDFCMTFFREJFQkE0QTUwQzRGOUFFMDIvNTlERDA1REE1 NDFFMTFFREIzMjRDRTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnZ2AwDQYJKoZIhvcNAQELBQADggEBAFGcmDULsr4ebrbA kIlPSsmBRN3rQfCBKLnKv1kmVW+9/BdzzvNlPynbijxALM3snKkl2w9EDG4wZJHJ 2vHWkFmhkUneNXKs4kJc9gfKPDDwJduObxtcLjLfk2B7RfaZn7pLFNsT9PWQi9u/ 3N0l5zasf7RBdNevBF/8/Lb5O80bbId128ymlc97ZyrqHZb1UIzi832Xw7MSTflm 6/MadEkO3iaSPIKr/CRE1QIEwl1D9SsUOjwrz7env64dbXZhtKZzJy099T73jqqD lTV44JceKNTmZOG5MMWmhJWxaFG4EJnpA5ncFjRrexpAOYrSQ53gDmzMYlPLU1c7 /hjbO9E= -----END CERTIFICATE-----Generated at Wed May 15 05:59:53 2024 by rpki-client on console-fra.rpki-client.org