$ rpki-client -vvf rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa File: 8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa (raw, json) Hash identifier: t6zPiOXrYpQBTTfoOaOWofrWUQ0zj6TBf6ZlrFtkWA4= Subject key identifier: 36:AD:0F:AF:C0:00:53:00:A9:3E:FA:2B:5D:A0:AA:D7:63:D4:BB:D3 Certificate issuer: /CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7 Certificate serial: 01D0 Authority key identifier: 65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa Signing time: Thu 17 Aug 2023 03:03:18 +0000 ROA not before: Thu 17 Aug 2023 03:03:18 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 135391 IP address blocks: 103.97.80.0/23 maxlen: 24 103.97.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 03:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7 Validity Not Before: Aug 17 03:03:18 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64dd8df6-ee59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:d1:ea:a3:cc:8d:99:a9:cd:29:c7:67:f0: 47:01:ae:60:22:ee:c9:c4:8c:30:cc:39:ef:c8:4a: 62:e8:4c:ef:f8:12:91:46:32:7f:3d:15:66:9f:68: c7:9a:fc:2e:20:ba:86:74:4a:1d:1e:9a:6c:fe:28: 4d:07:3a:a8:6b:7f:37:d8:22:51:63:4b:96:29:b8: 44:10:0d:12:f0:58:10:68:fb:35:a1:1a:8c:52:0a: 81:fb:12:99:15:35:0b:9d:a4:d0:d9:a3:06:87:34: 94:f5:f3:69:63:b2:16:6f:3c:1b:cb:40:2a:9b:8b: 26:7a:3d:a6:92:da:44:4b:62:e2:05:b8:4e:25:55: 85:9d:6e:49:a6:f1:84:67:67:1c:af:e5:99:b8:31: fa:a9:95:c1:b8:5c:d8:05:6b:4a:8a:b9:23:d0:ed: 1d:11:40:0c:f0:8f:4d:e5:44:82:47:6c:c1:59:98: 66:71:3e:8e:1c:a2:b2:47:91:80:b1:ff:d1:61:3c: 38:9e:2d:f1:76:2f:7c:ba:74:64:a1:3b:48:f3:37: 95:0f:29:2e:f9:b6:25:33:1b:db:76:be:be:a7:82: a1:79:32:9f:1c:81:32:3d:28:f5:e4:9a:66:d4:e4: a5:cc:79:f4:b9:89:6a:be:e6:9c:ee:4f:44:16:87: 05:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AD:0F:AF:C0:00:53:00:A9:3E:FA:2B:5D:A0:AA:D7:63:D4:BB:D3 X509v3 Authority Key Identifier: keyid:65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.80.0/23 103.97.83.0/24 Signature Algorithm: sha256WithRSAEncryption 32:5c:51:57:2c:0c:00:13:30:24:b3:5f:d7:5f:bf:c3:cf:73: ae:56:89:45:b4:e6:cf:79:a0:59:64:9f:d7:45:ec:0e:f1:a7: 35:69:23:2a:c4:93:c3:8f:56:f3:b7:ac:60:8c:8a:35:74:af: dd:df:14:83:59:bf:dd:71:3d:0b:fc:30:2b:02:4b:a8:0f:21: a6:3e:d0:cd:84:3c:8d:65:23:f1:1a:6d:eb:91:e0:85:69:5b: 59:21:6f:b3:fe:2b:62:4d:78:66:ae:97:06:fc:12:41:6a:5b: b4:0e:63:84:39:00:dc:82:0d:48:1c:be:31:1b:a5:6b:24:f5: be:f4:61:7f:90:61:29:8f:78:3c:21:06:05:43:f2:df:16:0e: df:e0:2b:83:ad:b5:21:54:7f:83:d2:f6:77:02:ca:7f:57:87: dc:f4:26:df:d5:6c:d0:91:8b:e9:57:07:39:06:de:0a:cc:6b: e6:f8:8e:35:50:7c:02:95:63:81:e9:e2:34:2d:9e:aa:2b:75: 6d:2c:5a:c5:a7:1d:ed:2b:88:9a:e6:5a:22:35:e7:7d:67:b6: f2:97:5d:ed:7d:da:c6:1e:51:d5:24:6b:8b:60:6e:63:39:5b: 73:15:1d:8d:64:e0:26:9c:e1:76:72:2f:be:5c:6d:a8:e9:10: b8:f8:95:0a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5MUQxMTAvBgNVBAUTKDY1NUI2NTYyNDYzNkM4MDAzNDE1MzczMzUzNUI0QUE4 QjNBMDAxQjcwHhcNMjMwODE3MDMwMzE4WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRkOGRmNi1lZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0jR6qPMjZmpzSnHZ/BHAa5gIu7JxIwwzDnvyEpi6Ezv+BKRRjJ/PRVmn2jH mvwuILqGdEodHpps/ihNBzqoa3832CJRY0uWKbhEEA0S8FgQaPs1oRqMUgqB+xKZ FTULnaTQ2aMGhzSU9fNpY7IWbzwby0Aqm4smej2mktpES2LiBbhOJVWFnW5JpvGE Z2ccr+WZuDH6qZXBuFzYBWtKirkj0O0dEUAM8I9N5USCR2zBWZhmcT6OHKKyR5GA sf/RYTw4ni3xdi98unRkoTtI8zeVDyku+bYlMxvbdr6+p4KheTKfHIEyPSj15Jpm 1OSlzHn0uYlqvuac7k9EFocFMwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDatD6/A AFMAqT76K12gqtdj1LvTMB8GA1UdIwQYMBaAFGVbZWJGNsgANBU3M1NbSqizoAG3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzkxRC9DNkI2MTJCMkNE MDIxMUVDODZFMjc1NkZDNEY5QUUwMi9aVnRsWWtZMnlBQTBGVGN6VTF0S3FMT2dB YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWdGxZa1kyeUFBMEZUY3pVMXRLcUxPZ0FiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzc5MUQvQzZCNjEyQjJDRDAyMTFFQzg2RTI3NTZGQzRGOUFFMDIvOEREMUEzQjhD RDA2MTFFQzlENTIwQzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnYVADBABnYVMwDQYJKoZIhvcNAQELBQADggEBADJcUVcs DAATMCSzX9dfv8PPc65WiUW05s95oFlkn9dF7A7xpzVpIyrEk8OPVvO3rGCMijV0 r93fFINZv91xPQv8MCsCS6gPIaY+0M2EPI1lI/EabeuR4IVpW1khb7P+K2JNeGau lwb8EkFqW7QOY4Q5ANyCDUgcvjEbpWsk9b70YX+QYSmPeDwhBgVD8t8WDt/gK4Ot tSFUf4PS9ncCyn9Xh9z0Jt/VbNCRi+lXBzkG3grMa+b4jjVQfAKVY4Hp4jQtnqor dW0sWsWnHe0riJrmWiI1531ntvKXXe192sYeUdUka4tgbmM5W3MVHY1k4Cac4XZy L75cbajpELj4lQo= -----END CERTIFICATE-----Generated at Thu Apr 25 05:44:25 2024 by rpki-client on console-fra.rpki-client.org