$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/DBE709060AA511EA86C8E31DC4F9AE02.roa File: DBE709060AA511EA86C8E31DC4F9AE02.roa (raw, json) Hash identifier: zgjsHos2MHOxvntym+ulSXBT66zLuQ8zyiMRNeqJYvE= Subject key identifier: 83:49:99:40:39:EF:70:85:80:01:7F:10:0B:E2:42:3D:D8:1A:AF:6A Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE Certificate serial: 0B77 Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/DBE709060AA511EA86C8E31DC4F9AE02.roa Signing time: Thu 16 May 2024 19:58:45 +0000 ROA not before: Thu 16 May 2024 19:58:45 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137541 IP address blocks: 103.112.148.0/22 maxlen: 22 103.112.148.0/23 maxlen: 23 103.112.148.0/24 maxlen: 24 103.112.149.0/24 maxlen: 24 103.112.150.0/23 maxlen: 23 103.112.150.0/24 maxlen: 24 103.112.151.0/24 maxlen: 24 2402:ab40::/32 maxlen: 32 2402:ab40::/48 maxlen: 48 2402:ab40:f00::/40 maxlen: 40 2402:ab40:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2935 (0xb77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE Validity Not Before: May 16 19:58:45 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66466574-850a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:48:14:54:1a:cc:fe:3f:34:01:70:9c:b4: 48:98:f2:f3:78:50:75:b4:44:7b:e2:7a:d0:05:25: 17:84:ba:ba:bc:2a:49:64:2a:6a:25:cb:a3:ff:85: 58:33:17:aa:1d:b3:3f:9a:be:22:3e:6d:f2:f0:46: 48:2e:ea:22:78:99:9c:7c:a1:ba:6f:f3:a5:e9:8e: 02:62:88:1f:8f:b7:66:5e:84:f4:41:02:c3:07:9d: d6:1b:4c:cb:86:14:06:68:40:8e:02:69:31:a0:ba: c3:ba:ee:cc:fa:dd:2c:0c:65:4d:24:8b:83:b5:dc: f2:60:ff:82:9c:f4:4e:a8:dd:87:a1:71:96:e8:06: 08:8d:5a:26:96:be:7c:d1:c7:57:66:d9:ef:42:93: ff:d3:35:63:36:86:59:44:25:0e:78:28:e2:39:99: a7:89:5d:6f:fa:45:5f:40:d5:ab:36:80:b0:36:36: e5:95:88:c8:49:6b:21:32:91:eb:30:b3:c1:ca:b6: fa:8c:0e:76:1c:68:8c:42:95:1c:a4:1f:55:55:00: b1:46:a5:cf:7d:c2:68:d6:4a:9b:33:20:5f:f2:47: 17:0f:19:dc:35:b1:d6:5a:09:d7:b4:cc:a1:1b:53: a2:8f:a1:c8:ad:36:e6:2b:66:e8:0e:e6:02:71:e8: 24:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:49:99:40:39:EF:70:85:80:01:7F:10:0B:E2:42:3D:D8:1A:AF:6A X509v3 Authority Key Identifier: keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/DBE709060AA511EA86C8E31DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.148.0/22 IPv6: 2402:ab40::/32 Signature Algorithm: sha256WithRSAEncryption 2d:c8:d8:59:e2:a7:ad:40:06:9d:72:a6:3c:58:c7:9a:a1:4c: cd:c3:a7:21:54:ca:2e:2c:cf:61:60:29:b0:41:c3:31:44:ce: f0:d2:3b:c3:2d:72:92:7c:c1:dd:09:a1:c3:7f:49:52:73:b6: 08:42:55:3d:c3:c6:5e:c2:35:e4:5f:f9:50:d0:26:89:26:a2: 21:cf:56:af:27:75:bf:da:ad:e9:75:88:8b:b2:31:a6:a8:5f: d1:01:48:e0:27:2d:75:f4:8e:fb:51:6b:66:4e:b5:cd:78:ba: 42:b5:dc:4e:df:74:3c:46:8f:17:cd:77:5b:74:ac:c6:b5:ec: 84:08:5c:f2:47:e8:9b:c1:38:87:0a:54:a2:83:db:6a:4f:17: 02:8f:db:78:3f:f3:19:b6:8e:dd:0c:bd:8b:8a:52:dc:7b:ab: d5:03:5a:c6:4c:8b:3e:01:53:9c:05:ce:eb:0e:34:f6:d4:08: da:1b:5d:7d:f4:06:08:4c:72:d0:71:b8:ad:e9:a9:04:dc:9e: 47:7c:9f:c3:f2:95:86:ac:23:6d:c4:54:e2:ed:97:cc:a1:8d: ba:03:47:92:b5:6b:ef:5a:9b:d3:b8:9a:b2:b3:60:7f:c4:a4: cf:14:c5:b6:39:5e:57:d6:dd:e9:54:89:30:3e:49:92:83:ae: fb:02:cb:95 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3 RjhGMjQ4QUUwHhcNMjQwNTE2MTk1ODQ1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ2NjU3NC04NTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxlIFFQazP4/NAFwnLRImPLzeFB1tER74nrQBSUXhLq6vCpJZCpqJcuj/4VY MxeqHbM/mr4iPm3y8EZILuoieJmcfKG6b/Ol6Y4CYogfj7dmXoT0QQLDB53WG0zL hhQGaECOAmkxoLrDuu7M+t0sDGVNJIuDtdzyYP+CnPROqN2HoXGW6AYIjVomlr58 0cdXZtnvQpP/0zVjNoZZRCUOeCjiOZmniV1v+kVfQNWrNoCwNjbllYjISWshMpHr MLPByrb6jA52HGiMQpUcpB9VVQCxRqXPfcJo1kqbMyBf8kcXDxncNbHWWgnXtMyh G1Oij6HIrTbmK2boDuYCcegkTQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFINJmUA5 73CFgAF/EAviQj3YGq9qMB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDJEQkMvNjlGQTI1NjgwQUE0MTFFQThDNUE4MzFCQzRGOUFFMDIvREJFNzA5MDYw QUE1MTFFQTg2QzhFMzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJncJQwDQQCAAIwBwMFACQCq0AwDQYJKoZIhvcNAQELBQAD ggEBAC3I2Fnip61ABp1ypjxYx5qhTM3DpyFUyi4sz2FgKbBBwzFEzvDSO8MtcpJ8 wd0JocN/SVJztghCVT3Dxl7CNeRf+VDQJokmoiHPVq8ndb/arel1iIuyMaaoX9EB SOAnLXX0jvtRa2ZOtc14ukK13E7fdDxGjxfNd1t0rMa17IQIXPJH6JvBOIcKVKKD 22pPFwKP23g/8xm2jt0MvYuKUtx7q9UDWsZMiz4BU5wFzusONPbUCNobXX30BghM ctBxuK3pqQTcnkd8n8PylYasI23EVOLtl8yhjboDR5K1a+9am9O4mrKzYH/EpM8U xbY5XlfW3elUiTA+SZKDrvsCy5U= -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org