$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa File: B53FD334575411ECAA094876C4F9AE02.roa (raw, json) Hash identifier: oanMttE6009GDQ6qQt6v6MM5T8Qu68NDOKcsPOxNFcQ= Subject key identifier: 9D:D5:92:B4:51:4A:D8:85:B5:7A:16:B4:C0:13:E9:BE:83:48:A4:53 Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Certificate serial: 2543 Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa Signing time: Fri 16 Aug 2024 18:16:08 +0000 ROA not before: Fri 16 Aug 2024 18:16:08 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 65535 IP address blocks: 103.138.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9539 (0x2543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Validity Not Before: Aug 16 18:16:08 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66bf9767-0e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1d:7a:d7:4b:39:6e:b8:a7:fe:b2:87:a6:a6: 26:6c:77:d6:f1:43:bc:43:ae:01:d3:43:40:4e:48: 79:a6:b4:4e:9e:56:8b:ba:53:0d:11:8c:9f:0c:05: 85:9e:ba:0a:ff:d5:1e:e3:03:1e:2f:01:57:1a:96: 3f:b5:3c:2b:cb:62:39:43:a6:82:c1:22:5e:6c:55: 08:ee:d3:4d:c9:5b:f2:d9:23:e9:6e:e1:70:da:13: 18:03:4c:b3:27:71:6d:5a:47:4b:b9:4b:70:33:25: 5e:af:cc:19:f9:16:7c:90:98:ef:cb:f5:d9:b6:4b: 96:54:d8:5a:d5:7b:cb:8f:c4:f6:3c:ca:00:ab:c6: 7b:78:59:ad:ff:38:0c:7a:1c:03:eb:c2:18:13:a3: 92:89:5f:9f:31:dd:92:45:05:4f:ce:1a:c5:70:e2: 91:8a:74:54:5b:ea:f8:07:57:ac:6e:b1:9e:7c:7d: 3d:46:37:56:f0:f6:f6:44:dc:6f:b0:30:6e:cd:ee: 34:fb:18:7d:58:32:32:75:10:89:7e:fa:0a:b7:96: 6a:1a:58:e1:2b:c6:1f:a9:a4:89:d8:91:fd:cb:da: 16:72:b7:cf:fd:c5:8f:de:01:5e:f3:ed:ea:a8:29: f6:a8:4e:c1:f4:dc:1c:9b:29:66:91:72:3d:df:fc: 45:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D5:92:B4:51:4A:D8:85:B5:7A:16:B4:C0:13:E9:BE:83:48:A4:53 X509v3 Authority Key Identifier: keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.210.0/24 Signature Algorithm: sha256WithRSAEncryption 22:61:81:70:16:66:b6:d5:e4:7f:95:b4:aa:63:70:df:92:5d: 90:09:a5:5f:3d:bc:c4:0c:ae:8a:f5:b9:6a:22:33:39:a4:a6: 9f:d8:2a:c5:91:dd:90:a2:a7:52:b6:11:06:5e:a4:b8:d6:32: 71:2e:eb:82:05:bd:8e:b6:71:7f:15:00:0c:2d:98:11:64:df: ba:c5:57:54:c5:7d:9f:bd:0d:55:b8:34:cb:0e:c7:4f:9c:d0: 3d:a3:d7:31:7b:bd:76:22:9e:ca:7a:d5:a9:65:fb:43:5c:3b: 2b:fc:8a:a4:7a:17:9f:e8:41:f6:df:8b:00:e9:89:ae:42:df: 0c:80:84:3c:77:7e:9d:b9:1c:e0:c1:63:d1:2a:e5:09:13:4a: 82:53:38:3e:96:dc:7f:57:39:ee:7e:83:50:22:9c:51:c9:cf: 82:6d:13:2d:0d:c7:b7:50:60:2c:44:ef:1a:ee:9d:21:3f:bf: e6:07:59:02:b1:2d:c5:54:38:d9:e9:94:e6:7d:ef:48:f6:37: de:74:c2:f5:0d:f5:1f:22:5d:0e:bb:9c:80:9c:cd:aa:25:72: 7b:97:c0:d1:83:42:4c:06:1a:20:61:89:03:a1:f8:96:dd:57: e2:33:fc:cd:0f:0c:88:40:58:13:aa:d0:7f:1d:ea:f5:f6:d9: 41:65:c9:30 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw RDNEOEE2RDAwHhcNMjQwODE2MTgxNjA4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmOTc2Ny0wZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0h1610s5brin/rKHpqYmbHfW8UO8Q64B00NATkh5prROnlaLulMNEYyfDAWF nroK/9Ue4wMeLwFXGpY/tTwry2I5Q6aCwSJebFUI7tNNyVvy2SPpbuFw2hMYA0yz J3FtWkdLuUtwMyVer8wZ+RZ8kJjvy/XZtkuWVNha1XvLj8T2PMoAq8Z7eFmt/zgM ehwD68IYE6OSiV+fMd2SRQVPzhrFcOKRinRUW+r4B1esbrGefH09RjdW8Pb2RNxv sDBuze40+xh9WDIydRCJfvoKt5ZqGljhK8YfqaSJ2JH9y9oWcrfP/cWP3gFe8+3q qCn2qE7B9NwcmylmkXI93/xFNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ3VkrRR StiFtXoWtMAT6b6DSKRTMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvQjUzRkQzMzQ1 NzU0MTFFQ0FBMDk0ODc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnitIwDQYJKoZIhvcNAQELBQADggEBACJhgXAWZrbV5H+V tKpjcN+SXZAJpV89vMQMror1uWoiMzmkpp/YKsWR3ZCip1K2EQZepLjWMnEu64IF vY62cX8VAAwtmBFk37rFV1TFfZ+9DVW4NMsOx0+c0D2j1zF7vXYinsp61all+0Nc Oyv8iqR6F5/oQfbfiwDpia5C3wyAhDx3fp25HODBY9Eq5QkTSoJTOD6W3H9XOe5+ g1AinFHJz4JtEy0Nx7dQYCxE7xrunSE/v+YHWQKxLcVUONnplOZ970j2N950wvUN 9R8iXQ67nICczaolcnuXwNGDQkwGGiBhiQOh+JbdV+Iz/M0PDIhAWBOq0H8d6vX2 2UFlyTA= -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:50 2024 by rpki-client on console-fra.rpki-client.org