$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/531D1196CEA011EAB60D4C55C4F9AE02.roa File: 531D1196CEA011EAB60D4C55C4F9AE02.roa (raw, json) Hash identifier: eVQO15EKQreoGfOLA2RBp0D6DCWgOVTiQ1/nBPswX4I= Subject key identifier: 3B:0D:E4:69:45:52:97:F9:50:1F:83:0E:61:A4:63:24:A9:72:AA:BF Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Certificate serial: 0792 Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/531D1196CEA011EAB60D4C55C4F9AE02.roa Signing time: Tue 30 Apr 2024 23:01:22 +0000 ROA not before: Tue 30 Apr 2024 23:01:22 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 140900 IP address blocks: 103.153.38.0/24 maxlen: 24 103.153.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 22:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1938 (0x792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Validity Not Before: Apr 30 23:01:22 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=66317842-83f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:e3:a5:8a:63:26:c2:1a:3c:80:70:ed:38: 9b:3c:3d:50:fb:b1:4f:ac:c2:86:4d:f2:5d:bf:5a: 91:24:10:32:c5:b5:7d:96:3e:02:1a:a0:d1:90:4f: fb:60:f0:c0:93:e9:74:7b:4e:e9:d9:3e:2f:21:c4: 64:1d:51:73:c2:07:c0:c6:b2:2a:3f:3b:ca:86:4f: 0e:bb:6a:8c:5c:c2:2b:8e:b5:32:12:37:cb:90:5b: d8:40:71:69:55:3e:88:06:76:e5:25:da:d4:ce:92: c1:e0:91:0a:91:c7:f4:79:7d:4c:07:42:92:ca:f4: e5:2d:4d:df:02:3e:30:70:d9:18:d4:b2:4f:a3:79: 5d:5b:24:2b:95:9c:00:2f:b5:f8:1d:9d:82:61:35: 43:9c:92:72:a9:c4:57:03:84:df:63:ae:15:e1:e8: 71:a2:5f:90:5a:03:df:c7:9d:60:a4:86:3b:ee:5e: cc:00:1c:3c:fc:a5:78:d5:23:32:ef:55:cb:06:07: aa:b0:27:27:a6:e7:59:d9:64:79:dc:df:d3:91:96: e8:01:72:7e:88:63:19:51:37:3b:4a:e8:72:11:9d: 1d:06:7b:a4:12:67:1f:f0:b9:88:de:2f:d8:92:72: d6:aa:2b:03:44:cc:a0:4a:7e:78:33:6f:5a:9f:5d: a3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0D:E4:69:45:52:97:F9:50:1F:83:0E:61:A4:63:24:A9:72:AA:BF X509v3 Authority Key Identifier: keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/531D1196CEA011EAB60D4C55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.38.0/23 Signature Algorithm: sha256WithRSAEncryption 97:8b:94:25:cd:19:b1:f2:cd:d3:53:1a:f7:80:6b:eb:ab:88: 19:bb:2e:51:4c:c8:c0:0c:fd:37:45:cd:4f:e1:f8:2e:9d:a2: 84:51:78:cf:80:da:64:89:41:68:0f:27:40:c7:bf:e2:b2:b3: 0a:ad:c5:c7:ee:15:71:5a:db:4e:c4:1a:9f:3b:b8:b6:77:cc: 2e:73:ab:1d:db:af:3a:6e:e3:56:ab:f9:45:45:03:c8:2a:8a: b4:e6:39:4e:e9:33:de:7a:56:9c:d7:f8:fb:63:8c:ea:30:e7: c5:0a:96:aa:43:f2:52:a5:84:08:0f:9a:f6:e0:6a:50:6f:70: 5d:ba:cb:95:7b:11:07:ff:66:88:08:ce:5a:d4:9f:bb:0d:24: ee:c1:fc:18:e0:3e:1d:5f:97:91:46:c7:a9:bf:50:31:2d:82: 17:f7:c5:93:ae:3f:70:10:b2:43:53:a8:77:db:c4:1f:87:8f: 22:01:ee:d7:7a:5f:eb:90:8b:22:ef:7d:a1:6b:c4:49:f2:0f: 05:3b:4b:aa:f4:a0:20:cf:29:be:13:bc:e2:de:f7:72:c8:4f: db:b4:a9:a9:20:67:18:db:9b:d2:fe:fa:d7:e4:0d:b3:0d:71: 3a:39:dd:83:61:15:7f:96:ef:ea:97:80:84:ff:70:0f:3c:70: 53:34:4b:10 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2 NUIxQTJEQUQwHhcNMjQwNDMwMjMwMTIyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxNzg0Mi04M2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtADjpYpjJsIaPIBw7TibPD1Q+7FPrMKGTfJdv1qRJBAyxbV9lj4CGqDRkE/7 YPDAk+l0e07p2T4vIcRkHVFzwgfAxrIqPzvKhk8Ou2qMXMIrjrUyEjfLkFvYQHFp VT6IBnblJdrUzpLB4JEKkcf0eX1MB0KSyvTlLU3fAj4wcNkY1LJPo3ldWyQrlZwA L7X4HZ2CYTVDnJJyqcRXA4TfY64V4ehxol+QWgPfx51gpIY77l7MABw8/KV41SMy 71XLBgeqsCcnpudZ2WR53N/TkZboAXJ+iGMZUTc7SuhyEZ0dBnukEmcf8LmI3i/Y knLWqisDRMygSn54M29an12j1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDsN5GlF Upf5UB+DDmGkYySpcqq/MB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDFBNkEvNjJCRTBBQzZDRTlFMTFFQTg4NTRBMTUwQzRGOUFFMDIvNTMxRDExOTZD RUEwMTFFQUI2MEQ0QzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmSYwDQYJKoZIhvcNAQELBQADggEBAJeLlCXNGbHyzdNT GveAa+uriBm7LlFMyMAM/TdFzU/h+C6dooRReM+A2mSJQWgPJ0DHv+Kyswqtxcfu FXFa207EGp87uLZ3zC5zqx3brzpu41ar+UVFA8gqirTmOU7pM956VpzX+PtjjOow 58UKlqpD8lKlhAgPmvbgalBvcF26y5V7EQf/ZogIzlrUn7sNJO7B/BjgPh1fl5FG x6m/UDEtghf3xZOuP3AQskNTqHfbxB+HjyIB7td6X+uQiyLvfaFrxEnyDwU7S6r0 oCDPKb4TvOLe93LIT9u0qakgZxjbm9L++tfkDbMNcTo53YNhFX+W7+qXgIT/cA88 cFM0SxA= -----END CERTIFICATE-----Generated at Mon May 20 23:16:44 2024 by rpki-client on console-fra.rpki-client.org