$ rpki-client -vvf rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/DD530B9222B111EDA3B74073C4F9AE02.roa File: DD530B9222B111EDA3B74073C4F9AE02.roa (raw, json) Hash identifier: b+ElwuF9IlWpzIoG0CUYL1FRlttNp8NqrlKlsKBQkCo= Subject key identifier: 02:B8:30:7F:5D:95:66:46:77:32:83:04:08:2E:C6:7C:DA:3B:57:72 Certificate issuer: /CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Certificate serial: 013E Authority key identifier: 8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/DD530B9222B111EDA3B74073C4F9AE02.roa Signing time: Sun 31 Dec 2023 04:04:52 +0000 ROA not before: Sun 31 Dec 2023 04:04:52 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 149170 IP address blocks: 103.177.208.0/23 maxlen: 23 103.177.208.0/24 maxlen: 24 103.177.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Validity Not Before: Dec 31 04:04:52 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6590e864-f386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:05:a3:5f:09:79:1f:fa:4d:76:74:f0:f7: e7:72:00:5c:82:51:22:e0:d9:42:3e:b6:bc:87:f2: 6f:77:59:e2:14:33:12:0d:1d:d4:34:b3:a9:d4:8b: d7:02:c7:7a:b8:a0:7f:2c:06:4e:7c:68:3e:2a:04: d7:7e:ca:57:3f:8c:94:76:11:98:b6:32:35:2e:8e: 31:a8:70:b3:05:57:81:05:af:cd:42:14:b6:ef:30: 84:9f:9c:3a:39:84:53:4e:93:b3:4f:4d:26:6c:cd: 12:75:02:77:9e:47:40:92:dd:2c:2a:4b:a4:d8:f4: ea:cb:a2:49:81:ab:19:83:0a:dd:e8:9c:a3:13:5b: 62:42:a4:dd:18:ab:47:47:c4:38:25:93:fb:d1:4a: 25:5b:e2:99:49:6c:e3:a4:ed:00:e7:9b:54:2a:ff: 28:5f:ee:33:40:92:86:52:e6:85:74:78:47:42:5c: 88:87:95:d0:89:87:7b:42:f7:c5:77:8f:b1:3f:1f: 89:c9:8d:c6:09:73:94:da:fc:7d:db:fe:4c:f9:3c: 22:70:3c:8b:6d:93:b1:59:74:1e:70:38:24:13:15: 1e:2a:01:90:ef:3e:3b:01:46:6e:9c:40:b3:be:ef: 37:32:8b:76:ce:99:3a:d2:de:b7:53:b3:d1:56:e6: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B8:30:7F:5D:95:66:46:77:32:83:04:08:2E:C6:7C:DA:3B:57:72 X509v3 Authority Key Identifier: keyid:8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/DD530B9222B111EDA3B74073C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.208.0/23 Signature Algorithm: sha256WithRSAEncryption b8:30:33:94:46:b1:c1:c4:66:c9:03:6c:ee:02:cb:91:fe:af: 21:d6:57:54:74:62:8f:3e:e0:ff:30:41:ac:f7:b4:3e:06:38: cb:4d:b1:00:0e:0c:99:58:19:87:44:51:f8:23:3d:4e:8c:03: 47:24:35:c1:d5:fb:4e:c9:77:ca:bd:8f:51:68:9c:cb:2d:ae: 46:46:29:d4:e8:01:dc:f8:b7:e9:a0:1b:76:b9:52:d1:89:3a: eb:ef:d9:44:0a:26:98:86:53:7c:10:1d:fd:2f:48:65:f5:cc: f3:be:cf:fb:0d:2a:b9:56:7c:34:89:5a:15:5f:a7:dd:bd:e1: 2d:a2:13:4b:9f:9d:35:fd:e7:44:d7:c5:4f:9d:24:62:5f:89: df:02:50:b7:f0:e8:28:ff:4b:fe:d4:9c:75:9a:4a:97:7f:44: 37:2c:af:d5:94:0f:5c:6d:65:38:ba:08:0d:54:28:20:1b:a2: f7:ca:d6:4a:54:1f:9e:0c:2d:b4:4f:9a:33:7a:79:d7:06:25: e1:73:9b:09:54:b6:16:1d:36:d7:26:96:2f:39:e5:47:28:c3: db:ad:0c:f3:40:be:de:84:ac:ac:47:47:ae:f5:1d:4a:d1:bc: 46:9e:77:b8:e9:05:70:d6:5e:8f:7d:12:d2:68:81:38:12:44: 68:a0:25:15 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBQTIxMTAvBgNVBAUTKDhFQzRFM0ZBRkQ1MDkxMjhBRUMyQzA4NzlFNkFGOTEz OUUxNUVBQjYwHhcNMjMxMjMxMDQwNDUyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTkwZTg2NC1mMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvl8Fo18JeR/6TXZ08PfncgBcglEi4NlCPra8h/Jvd1niFDMSDR3UNLOp1IvX Asd6uKB/LAZOfGg+KgTXfspXP4yUdhGYtjI1Lo4xqHCzBVeBBa/NQhS27zCEn5w6 OYRTTpOzT00mbM0SdQJ3nkdAkt0sKkuk2PTqy6JJgasZgwrd6JyjE1tiQqTdGKtH R8Q4JZP70UolW+KZSWzjpO0A55tUKv8oX+4zQJKGUuaFdHhHQlyIh5XQiYd7QvfF d4+xPx+JyY3GCXOU2vx92/5M+TwicDyLbZOxWXQecDgkExUeKgGQ7z47AUZunECz vu83Mot2zpk60t63U7PRVuaj4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFAK4MH9d lWZGdzKDBAguxnzaO1dyMB8GA1UdIwQYMBaAFI7E4/r9UJEorsLAh55q+ROeFeq2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkFBMi8zREE4QTk0NDIy QTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtTaXV3c0NIbm1yNUU1NFY2 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzVGotdjFRa1NpdXdzQ0hubXI1RTU0VjZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDJBQTIvM0RBOEE5NDQyMkEyMTFFREJDOEE2QzgwQzRGOUFFMDIvREQ1MzBCOTIy MkIxMTFFREEzQjc0MDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnsdAwDQYJKoZIhvcNAQELBQADggEBALgwM5RGscHEZskD bO4Cy5H+ryHWV1R0Yo8+4P8wQaz3tD4GOMtNsQAODJlYGYdEUfgjPU6MA0ckNcHV +07Jd8q9j1FonMstrkZGKdToAdz4t+mgG3a5UtGJOuvv2UQKJpiGU3wQHf0vSGX1 zPO+z/sNKrlWfDSJWhVfp9294S2iE0ufnTX950TXxU+dJGJfid8CULfw6Cj/S/7U nHWaSpd/RDcsr9WUD1xtZTi6CA1UKCAbovfK1kpUH54MLbRPmjN6edcGJeFzmwlU thYdNtcmli855Ucow9utDPNAvt6ErKxHR671HUrRvEaed7jpBXDWXo99EtJogTgS RGigJRU= -----END CERTIFICATE-----Generated at Sat May 11 05:27:31 2024 by rpki-client on console-fra.rpki-client.org