$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/430E7F9CACBC11EBB0651B63C4F9AE02.roa File: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (raw, json) Hash identifier: 9ctznKJoMOUNcTnvk2g+oe1adILJNeuJJ1mcQo/4tUI= Subject key identifier: D2:AB:41:E7:AC:3E:C9:95:55:6E:76:B0:03:93:9C:43:8D:E3:DB:07 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 068F Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/430E7F9CACBC11EBB0651B63C4F9AE02.roa Signing time: Wed 20 Sep 2023 22:00:03 +0000 ROA not before: Wed 20 Sep 2023 22:00:03 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 135386 IP address blocks: 103.153.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 22:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Sep 20 22:00:03 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=650b6b63-303f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:a9:61:45:81:d4:c4:39:a5:9c:61:b6:cd: 03:d9:60:4f:35:d7:01:81:42:96:99:b5:46:67:d3: 5a:de:32:f6:4e:ab:15:b1:54:d8:62:bd:49:86:78: b9:f1:70:74:6e:cc:5b:fc:84:ae:61:60:7b:5c:69: 76:21:9c:49:32:a2:81:57:45:98:40:89:91:a8:f2: d7:aa:18:24:d9:c9:4b:1a:16:50:0d:13:f4:50:c3: 6b:39:f3:5e:55:ce:4c:5e:fe:59:7d:cc:d6:40:fc: ad:c1:f2:d8:b4:db:67:dc:dc:18:5d:16:6c:ed:03: 15:82:2a:ff:56:b9:62:60:e0:c3:c5:70:57:dd:fa: 8b:e0:58:79:27:0d:89:b1:e2:db:a4:65:33:2f:39: ea:ae:b9:f4:e6:c2:8a:be:8e:e6:b0:26:19:31:93: 48:76:27:84:65:74:e7:69:17:e5:52:f3:53:36:c5: 2f:42:39:ec:2e:fe:1f:71:e1:ba:27:8e:45:1f:71: 10:66:27:7b:4b:ba:c5:f3:e3:fa:60:c2:2a:e0:b0: a0:3e:7d:62:94:21:47:fa:67:80:ee:93:84:36:55: 0d:ad:6b:ac:44:5a:af:fd:85:af:0a:fc:f1:b6:16: fb:8e:ed:44:eb:75:98:50:1d:f7:69:29:cb:71:12: fb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AB:41:E7:AC:3E:C9:95:55:6E:76:B0:03:93:9C:43:8D:E3:DB:07 X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/430E7F9CACBC11EBB0651B63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.138.0/23 Signature Algorithm: sha256WithRSAEncryption 14:82:ac:54:00:d4:9b:43:39:7d:0b:5a:ae:8e:82:2f:71:c4: 66:90:b1:b6:8a:22:b1:af:d4:ce:0c:58:26:32:c8:36:a8:6e: b3:9f:40:44:80:8c:44:21:72:b3:b1:81:37:59:a3:ea:7f:99: f7:f3:c9:92:fc:0f:64:48:5c:cb:a5:2a:ed:8c:bd:f8:bc:07: 63:0d:fe:de:0e:9c:28:a3:ec:b8:17:51:c8:ad:16:5f:a1:a1: 98:e9:66:53:f1:87:07:4f:04:3b:a3:4f:8d:73:c1:c6:25:58: ab:c1:33:91:28:b8:da:bc:26:44:22:0e:76:55:f6:83:4f:58: 97:a1:9f:0b:98:1b:0e:b6:5a:f4:e2:f4:7b:6b:83:66:b6:d5: d0:2e:fa:dd:d6:60:79:80:01:62:a3:58:a9:ff:02:0c:ba:39: 60:57:e5:69:e6:f3:e6:c6:e1:3b:67:e0:24:ce:52:7e:5d:11: e0:74:e9:4c:0b:0c:e4:57:62:d6:15:f3:b4:d2:e3:7c:19:40: 6c:e1:fb:d2:1c:0b:6e:3c:f8:09:4d:b8:67:33:68:d3:f1:1f: 81:30:1d:16:7b:bb:d1:97:e6:c4:92:b1:f7:67:c6:3f:55:8a: ed:ca:10:30:2d:f1:ad:10:67:09:f9:1a:c5:55:25:4d:b5:ec: c8:1d:ce:97 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjMwOTIwMjIwMDAzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBiNmI2My0zMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmoapYUWB1MQ5pZxhts0D2WBPNdcBgUKWmbVGZ9Na3jL2TqsVsVTYYr1Jhni5 8XB0bsxb/ISuYWB7XGl2IZxJMqKBV0WYQImRqPLXqhgk2clLGhZQDRP0UMNrOfNe Vc5MXv5ZfczWQPytwfLYtNtn3NwYXRZs7QMVgir/VrliYODDxXBX3fqL4Fh5Jw2J seLbpGUzLznqrrn05sKKvo7msCYZMZNIdieEZXTnaRflUvNTNsUvQjnsLv4fceG6 J45FH3EQZid7S7rF8+P6YMIq4LCgPn1ilCFH+meA7pOENlUNrWusRFqv/YWvCvzx thb7ju1E63WYUB33aSnLcRL7JQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNKrQees PsmVVW52sAOTnEON49sHMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQwNzIvM0E0MTg5MzZGQkU2MTFFQUIzNTM2NjBDQzRGOUFFMDIvNDMwRTdGOUNB Q0JDMTFFQkIwNjUxQjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmYowDQYJKoZIhvcNAQELBQADggEBABSCrFQA1JtDOX0L Wq6Ogi9xxGaQsbaKIrGv1M4MWCYyyDaobrOfQESAjEQhcrOxgTdZo+p/mffzyZL8 D2RIXMulKu2Mvfi8B2MN/t4OnCij7LgXUcitFl+hoZjpZlPxhwdPBDujT41zwcYl WKvBM5EouNq8JkQiDnZV9oNPWJehnwuYGw62WvTi9Htrg2a21dAu+t3WYHmAAWKj WKn/Agy6OWBX5Wnm8+bG4Ttn4CTOUn5dEeB06UwLDORXYtYV87TS43wZQGzh+9Ic C248+AlNuGczaNPxH4EwHRZ7u9GX5sSSsfdnxj9Viu3KEDAt8a0QZwn5GsVVJU21 7Mgdzpc= -----END CERTIFICATE-----Generated at Wed Apr 17 00:11:23 2024 by rpki-client on console-fra.rpki-client.org