$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/38F69014325B11ED8403A325C4F9AE02.roa File: 38F69014325B11ED8403A325C4F9AE02.roa (raw, json) Hash identifier: xPxOBcWiHSTAw3zQ7FKJslNCxgd0Xv3rmMHCdbL8JBE= Subject key identifier: 76:4F:5D:8C:33:1A:9D:61:88:59:48:C6:C6:C2:49:6A:51:57:74:86 Certificate issuer: /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208 Certificate serial: 01B3 Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/38F69014325B11ED8403A325C4F9AE02.roa Signing time: Thu 07 Nov 2024 01:54:49 +0000 ROA not before: Thu 07 Nov 2024 01:54:49 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 137953 IP address blocks: 103.243.244.0/23 maxlen: 23 103.243.244.0/24 maxlen: 24 103.243.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208 Validity Not Before: Nov 7 01:54:49 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672c1de9-8f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:a6:fd:82:31:59:e1:9a:a8:d8:ff:7b:11: fb:86:c9:e0:a4:90:3c:45:9b:8f:aa:dd:cc:db:2b: 8e:5e:5e:45:e3:cc:ff:3c:f5:c1:11:46:c3:cd:12: c5:1a:2d:53:c5:9a:bf:7b:24:4a:83:37:2a:4d:de: a0:06:74:83:84:93:82:07:6a:49:c8:32:dc:d1:cc: 64:08:d7:22:3c:58:7a:c1:32:1f:72:8e:e3:c2:da: 6f:a0:f9:c6:19:51:05:3c:2b:f6:ed:25:ee:ad:58: 89:18:10:da:07:da:d1:49:1e:ea:c3:54:7a:29:8a: 13:93:64:f4:76:db:f5:a6:a1:f5:77:ba:36:cf:18: ce:3d:9f:c6:06:87:b2:92:41:3d:c1:9b:b0:ab:ae: 7b:45:9b:fa:69:3f:04:e3:78:84:fd:42:45:b8:cc: 9a:21:1d:67:43:11:9d:58:5b:5a:ae:7e:d9:86:9e: 98:89:5b:58:ec:3d:53:47:f2:a2:39:66:04:a8:97: 05:76:4b:a2:d8:2b:4d:52:f7:fd:fe:29:bc:24:ae: 2d:be:c2:6d:3f:b8:29:1f:d7:82:13:86:bc:5f:f6: 34:80:e8:36:8c:ac:58:19:b4:97:91:00:87:e4:d4: 52:67:8d:5b:de:d5:91:2a:23:2d:ea:9e:67:9a:d5: 9b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4F:5D:8C:33:1A:9D:61:88:59:48:C6:C6:C2:49:6A:51:57:74:86 X509v3 Authority Key Identifier: keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/38F69014325B11ED8403A325C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.244.0/23 Signature Algorithm: sha256WithRSAEncryption a1:4a:b8:16:72:f5:fd:2d:fe:74:64:50:85:af:06:de:b0:46: de:b1:46:d5:51:2c:fd:4e:0b:58:3c:6f:4d:df:0a:11:fd:60: 65:23:ef:54:5a:83:ea:21:fb:63:40:a1:7e:8f:17:9a:2e:35: bc:db:b4:0a:4a:44:a6:a4:9a:8d:bf:7b:84:a3:7c:50:e5:fa: 6f:60:68:4d:a1:37:88:21:a8:22:d0:48:3b:73:a0:f2:d6:f3: a1:a6:19:be:64:37:0a:8c:bd:56:03:6d:8f:8a:28:fb:a8:13: 09:42:86:65:37:1e:23:f5:50:a2:4e:37:a5:91:e4:e5:48:a6: 28:cf:4e:5e:bd:36:26:40:66:04:bf:2e:56:b3:06:f2:12:08: fc:f8:e8:66:f0:10:38:a9:d9:88:36:6b:f8:30:c2:80:9a:c6: 84:70:b4:95:51:8a:62:34:25:af:9f:37:aa:32:82:63:63:24: 7a:a0:a6:0a:ae:99:94:a6:12:b8:93:24:56:f0:6d:ee:f7:ed: f3:97:64:8a:78:c7:12:4f:89:71:ce:ea:82:f5:d3:25:bb:23: f2:69:79:01:7c:58:92:24:fc:d9:e7:60:63:96:4b:ae:e4:41: 01:df:d9:d9:b1:aa:40:cf:6c:88:6d:73:8c:ce:9e:a5:75:8c: f4:26:a2:d1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzOTMxMTAvBgNVBAUTKDlGNDlBMEMyOUFERjREODMwMzA3NzMzRDJDNjBBOUQ5 MzExMEEyMDgwHhcNMjQxMTA3MDE1NDQ5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJjMWRlOS04ZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsem/YIxWeGaqNj/exH7hsngpJA8RZuPqt3M2yuOXl5F48z/PPXBEUbDzRLF Gi1TxZq/eyRKgzcqTd6gBnSDhJOCB2pJyDLc0cxkCNciPFh6wTIfco7jwtpvoPnG GVEFPCv27SXurViJGBDaB9rRSR7qw1R6KYoTk2T0dtv1pqH1d7o2zxjOPZ/GBoey kkE9wZuwq657RZv6aT8E43iE/UJFuMyaIR1nQxGdWFtarn7Zhp6YiVtY7D1TR/Ki OWYEqJcFdkui2CtNUvf9/im8JK4tvsJtP7gpH9eCE4a8X/Y0gOg2jKxYGbSXkQCH 5NRSZ41b3tWRKiMt6p5nmtWb8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHZPXYwz Gp1hiFlIxsbCSWpRV3SGMB8GA1UdIwQYMBaAFJ9JoMKa302DAwdzPSxgqdkxEKII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjM5My8zMjZDQkQ1ODMy NTcxMUVEQjg4REZDMkNDNEY5QUUwMi9uMG1nd3ByZlRZTURCM005TEdDcDJURVFv Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24wbWd3cHJmVFlNREIzTTlMR0NwMlRFUW9nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUIzOTMvMzI2Q0JENTgzMjU3MTFFREI4OERGQzJDQzRGOUFFMDIvMzhGNjkwMTQz MjVCMTFFRDg0MDNBMzI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn8/QwDQYJKoZIhvcNAQELBQADggEBAKFKuBZy9f0t/nRk UIWvBt6wRt6xRtVRLP1OC1g8b03fChH9YGUj71Rag+oh+2NAoX6PF5ouNbzbtApK RKakmo2/e4SjfFDl+m9gaE2hN4ghqCLQSDtzoPLW86GmGb5kNwqMvVYDbY+KKPuo EwlChmU3HiP1UKJON6WR5OVIpijPTl69NiZAZgS/LlazBvISCPz46GbwEDip2Yg2 a/gwwoCaxoRwtJVRimI0Ja+fN6oygmNjJHqgpgqumZSmEriTJFbwbe737fOXZIp4 xxJPiXHO6oL10yW7I/JpeQF8WJIk/NnnYGOWS67kQQHf2dmxqkDPbIhtc4zOnqV1 jPQmotE= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org