$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa File: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (raw, json) Hash identifier: l4d1oVoyEM+HQ07ha4YtFHp1DrvW7G3vGypNnIxNS0M= Subject key identifier: 30:8D:5A:77:FF:0B:8F:F2:5F:7E:C7:97:C5:FD:B2:06:E3:0E:ED:32 Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 01C0 Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa Signing time: Wed 09 Oct 2024 02:16:26 +0000 ROA not before: Wed 09 Oct 2024 02:16:26 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 9304 IP address blocks: 103.1.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Oct 9 02:16:26 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6705e77a-ed97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:da:d2:d7:e8:a9:45:12:94:99:f9:99:48:b8: 8b:02:1e:17:53:4c:6b:c4:8c:c8:61:82:37:b2:2c: 9b:2a:b1:03:8d:28:4a:26:69:6d:4e:e1:11:11:2e: 3c:8d:2a:34:37:1d:4d:d5:da:d6:ac:fe:fd:8c:d3: 92:7d:4a:6a:8f:df:b7:78:3b:87:4c:8d:34:52:2c: 96:dc:18:f1:ae:50:f8:f1:e6:9c:cf:cc:b7:bf:ac: b5:fe:b1:ca:ab:ac:47:e3:fe:53:6e:3e:8d:95:36: ae:7c:b0:23:cf:bf:68:73:2c:8b:5a:03:de:7e:ad: dd:7f:0c:59:cf:6b:11:b1:ce:a4:22:f1:9e:d4:4c: 00:29:d3:79:5e:f9:38:b0:d4:2e:28:79:c7:e9:75: d6:a4:c3:98:10:81:e9:e1:f2:42:47:c4:6d:3e:73: b9:f8:23:f5:8f:14:68:13:1e:fb:70:9c:06:86:ea: f8:14:d8:b6:77:be:05:66:6e:37:d7:ed:db:b0:a5: 16:3c:f9:f6:9b:85:e6:b1:a5:19:50:55:fa:06:be: 84:9a:7f:e7:66:61:a5:98:24:cb:7a:d0:d2:fd:f8: 66:ad:ac:29:aa:ab:11:38:ea:73:c0:49:48:e7:06: d8:28:62:d2:59:81:79:dc:52:fa:a5:fb:d5:9a:e6: 9c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8D:5A:77:FF:0B:8F:F2:5F:7E:C7:97:C5:FD:B2:06:E3:0E:ED:32 X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.158.0/24 Signature Algorithm: sha256WithRSAEncryption 97:0a:81:68:09:7d:d3:99:81:a8:6b:1e:12:5f:6e:07:85:82: e5:96:15:b2:b2:09:84:ba:ef:12:e3:04:b1:c8:96:45:28:96: e8:40:fa:85:36:d9:0a:12:fc:f6:3b:64:5f:89:44:20:4b:a3: ed:c7:09:ac:0b:19:f3:22:98:10:57:7b:6c:c0:4d:d0:94:b6: b5:ea:7a:00:0a:0c:40:2a:54:08:59:b7:d2:60:96:45:60:1a: 6c:c8:40:b6:a1:d5:d1:95:7e:91:d2:7a:af:82:b8:8c:44:0b: 09:30:ce:89:bc:a4:20:ba:ba:47:2f:e8:56:f0:eb:26:36:ae: 2a:21:f9:d0:bf:c3:2f:59:42:5c:3c:46:ed:0b:a8:d0:40:a8: 5f:8c:a1:80:89:9d:38:fd:12:f8:08:4e:3f:d7:0f:7a:36:95: fd:6b:5a:f8:d6:4b:6c:5d:b9:15:95:30:3f:ab:24:df:48:0b: f3:48:60:c0:d7:95:ec:04:5b:fb:31:47:b2:f0:78:38:2c:88: 48:fd:5b:19:d7:be:e6:16:b6:db:8e:9c:71:98:06:24:9f:ef: 30:e8:2b:ef:8d:47:f4:45:fb:23:82:53:95:67:94:21:1d:5e: ea:4c:90:bf:2a:aa:29:36:f0:df:8a:2d:65:12:87:8d:68:85: 11:f9:f9:42 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjQxMDA5MDIxNjI2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA1ZTc3YS1lZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NrS1+ipRRKUmfmZSLiLAh4XU0xrxIzIYYI3siybKrEDjShKJmltTuERES48 jSo0Nx1N1drWrP79jNOSfUpqj9+3eDuHTI00UiyW3BjxrlD48eacz8y3v6y1/rHK q6xH4/5Tbj6NlTaufLAjz79ocyyLWgPefq3dfwxZz2sRsc6kIvGe1EwAKdN5Xvk4 sNQuKHnH6XXWpMOYEIHp4fJCR8RtPnO5+CP1jxRoEx77cJwGhur4FNi2d74FZm43 1+3bsKUWPPn2m4XmsaUZUFX6Br6Emn/nZmGlmCTLetDS/fhmrawpqqsROOpzwElI 5wbYKGLSWYF53FL6pfvVmuac/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDCNWnf/ C4/yX37Hl8X9sgbjDu0yMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA4N0YvRjczMTk2QUEzM0UxMTFFREIzQTBFQTU4QzRGOUFFMDIvM0REOUVEMkM0 QUU4MTFFRjlCQ0Y0QjQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnAZ4wDQYJKoZIhvcNAQELBQADggEBAJcKgWgJfdOZgahr HhJfbgeFguWWFbKyCYS67xLjBLHIlkUoluhA+oU22QoS/PY7ZF+JRCBLo+3HCawL GfMimBBXe2zATdCUtrXqegAKDEAqVAhZt9JglkVgGmzIQLah1dGVfpHSeq+CuIxE Cwkwzom8pCC6ukcv6Fbw6yY2rioh+dC/wy9ZQlw8Ru0LqNBAqF+MoYCJnTj9EvgI Tj/XD3o2lf1rWvjWS2xduRWVMD+rJN9IC/NIYMDXlewEW/sxR7LweDgsiEj9WxnX vuYWttuOnHGYBiSf7zDoK++NR/RF+yOCU5VnlCEdXupMkL8qqik28N+KLWUSh41o hRH5+UI= -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:55 2024 by rpki-client on console-fra.rpki-client.org