$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/12DD779467A211EEA8239268C4F9AE02.roa File: 12DD779467A211EEA8239268C4F9AE02.roa (raw, json) Hash identifier: MkdiGM7NTjZBRj74OoYyFzkrxDeUSDJUstylSiELgzM= Subject key identifier: 95:E4:CD:34:F4:02:01:07:3F:30:AC:C7:A6:C0:C4:4A:BD:E8:9A:27 Certificate issuer: /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Certificate serial: 1E Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/12DD779467A211EEA8239268C4F9AE02.roa Signing time: Tue 10 Oct 2023 19:20:30 +0000 ROA not before: Tue 10 Oct 2023 19:20:29 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 139041 IP address blocks: 103.239.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Validity Not Before: Oct 10 19:20:29 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=6525a3fd-8316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:80:48:24:d3:82:a4:20:cb:b9:bc:12:a5: 9a:40:15:b9:a5:57:88:75:34:65:43:58:b7:a0:01: 3b:22:d2:5a:38:4d:ee:bd:af:a3:58:6f:4c:cc:17: 30:4a:29:a2:5c:cf:25:b5:f5:32:11:be:3f:eb:b8: 91:c4:e8:db:f3:bc:5d:96:4b:69:81:ab:e7:01:21: 59:ce:b3:30:4a:b0:38:73:bc:de:cf:d2:f9:48:22: 75:61:35:49:63:cd:35:78:8e:5c:37:ae:86:9e:83: 73:35:2a:0d:78:b7:14:3d:fd:b6:2f:57:ae:6c:f1: 9f:22:7a:e1:08:84:1b:8f:51:08:b1:96:68:54:05: eb:11:f1:54:3e:0d:f7:af:7f:a6:82:6c:19:81:e4: 43:2f:9b:fb:57:ce:5a:32:61:fb:11:7d:e6:0f:1f: 99:a7:6a:20:1f:6a:79:be:8d:8d:6e:f4:a6:ef:3e: 48:d4:93:d1:d5:4b:1d:b6:7a:f7:78:10:b0:12:13: c5:f2:bb:4a:56:4d:41:c7:77:f5:26:20:2e:ee:ed: e6:00:91:ab:a6:e2:b7:6c:5a:c8:5e:25:12:e5:31: 5b:5c:37:16:93:ce:20:1d:e2:6d:9d:e8:b8:87:2c: e4:e9:ed:0b:08:49:c4:a6:09:4f:92:88:49:6c:0f: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E4:CD:34:F4:02:01:07:3F:30:AC:C7:A6:C0:C4:4A:BD:E8:9A:27 X509v3 Authority Key Identifier: keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/12DD779467A211EEA8239268C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.239.14.0/24 Signature Algorithm: sha256WithRSAEncryption b3:6e:33:e0:7b:a5:f6:cc:d4:55:ed:96:eb:52:f7:e0:c2:07: 29:af:29:e9:c5:55:93:80:5f:55:eb:31:ea:02:a3:cc:e3:ab: 93:4f:d4:c2:04:77:35:00:f2:c0:7d:a4:b9:79:e5:2e:06:d4: 35:06:90:a7:3d:5f:5a:04:46:1c:94:ef:64:09:98:b9:6f:f5: 28:89:59:6d:b4:f6:33:0f:95:ad:06:d6:36:dd:45:b1:55:ff: ca:d4:3d:03:84:7b:02:93:01:1e:4a:0c:09:98:e3:2f:dc:f3: a9:d6:a8:d9:42:08:25:d0:ba:df:7c:de:45:db:3e:f1:b1:26: 49:6e:56:9d:7d:c7:66:94:29:de:d7:80:12:4e:62:51:82:35: ac:74:08:e6:92:88:23:ef:96:20:f5:47:60:8b:12:84:d4:0b: 80:66:64:cf:4f:59:ef:4a:45:e4:70:e1:9c:4f:bd:43:65:58: e0:7f:47:da:89:6c:6e:56:aa:e8:48:a0:43:ee:f9:ba:fa:7c: 62:92:08:b3:86:ad:40:98:4a:9a:59:a6:06:20:94:99:4f:b6: 34:b7:2b:67:da:69:50:e4:b3:da:15:79:48:12:03:c4:11:d8: 67:bc:e9:bb:48:fb:0d:1b:66:ff:bb:c1:a3:fd:80:e2:4f:f8: 50:32:8e:85 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTdDNDExMC8GA1UEBRMoRDc0NUUxQzg2QjE4MThGN0QwNTYzRjkwRThCQTEyQkU4 QjFBRTM3ODAeFw0yMzEwMTAxOTIwMjlaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MjVhM2ZkLTgzMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8r4BIJNOCpCDLubwSpZpAFbmlV4h1NGVDWLegATsi0lo4Te69r6NYb0zMFzBK KaJczyW19TIRvj/ruJHE6NvzvF2WS2mBq+cBIVnOszBKsDhzvN7P0vlIInVhNUlj zTV4jlw3roaeg3M1Kg14txQ9/bYvV65s8Z8ieuEIhBuPUQixlmhUBesR8VQ+Dfev f6aCbBmB5EMvm/tXzloyYfsRfeYPH5mnaiAfanm+jY1u9KbvPkjUk9HVSx22evd4 ELASE8Xyu0pWTUHHd/UmIC7u7eYAkaum4rdsWsheJRLlMVtcNxaTziAd4m2d6LiH LOTp7QsIScSmCU+SiElsDxQFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUleTNNPQC AQc/MKzHpsDESr3omicwHwYDVR0jBBgwFoAU10XhyGsYGPfQVj+Q6LoSvosa43gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5N0M0L0M2M0RGMjAwM0M2 NDExRUVCQ0FDNTE3MEM0RjlBRTAyLzEwWGh5R3NZR1BmUVZqLVE2TG9Tdm9zYTQz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTBYaHlHc1lHUGZRVmotUTZMb1N2b3NhNDNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTdDNC9DNjNERjIwMDNDNjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMkRENzc5NDY3 QTIxMUVFQTgyMzkyNjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfvDjANBgkqhkiG9w0BAQsFAAOCAQEAs24z4Hul9szUVe2W 61L34MIHKa8p6cVVk4BfVesx6gKjzOOrk0/UwgR3NQDywH2kuXnlLgbUNQaQpz1f WgRGHJTvZAmYuW/1KIlZbbT2Mw+VrQbWNt1FsVX/ytQ9A4R7ApMBHkoMCZjjL9zz qdao2UIIJdC633zeRds+8bEmSW5WnX3HZpQp3teAEk5iUYI1rHQI5pKII++WIPVH YIsShNQLgGZkz09Z70pF5HDhnE+9Q2VY4H9H2olsblaq6EigQ+75uvp8YpIIs4at QJhKmlmmBiCUmU+2NLcrZ9ppUOSz2hV5SBIDxBHYZ7zpu0j7DRtm/7vBo/2A4k/4 UDKOhQ== -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:38 2024 by rpki-client on console-fra.rpki-client.org