$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/0C98BB26325411ECB11CE73EC4F9AE02.roa File: 0C98BB26325411ECB11CE73EC4F9AE02.roa (raw, json) Hash identifier: 5K39QtI6zVT3fqpN6dKajJUlFJSUMTHVz9h+FsAwDOs= Subject key identifier: E1:D9:CD:43:18:8C:59:D7:62:12:68:D5:B6:0B:C8:7C:0F:F9:92:F3 Certificate issuer: /CN=A91DA59D/serialNumber=751FA49E712F88CF844CCD179EBE29B97EA1AACC Certificate serial: 062B Authority key identifier: 75:1F:A4:9E:71:2F:88:CF:84:4C:CD:17:9E:BE:29:B9:7E:A1:AA:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dR-knnEviM-ETM0Xnr4puX6hqsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/0C98BB26325411ECB11CE73EC4F9AE02.roa Signing time: Thu 22 Jun 2023 23:24:49 +0000 ROA not before: Thu 22 Jun 2023 23:24:49 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 399546 IP address blocks: 103.138.188.0/24 maxlen: 24 103.138.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/dR-knnEviM-ETM0Xnr4puX6hqsw.crl rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/dR-knnEviM-ETM0Xnr4puX6hqsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dR-knnEviM-ETM0Xnr4puX6hqsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 22:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1579 (0x62b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA59D/serialNumber=751FA49E712F88CF844CCD179EBE29B97EA1AACC Validity Not Before: Jun 22 23:24:49 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6494d841-1aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:63:6e:c0:21:97:9d:3d:a6:03:66:6d:ee: e0:ac:e7:4e:96:72:13:29:7d:56:0b:ff:e2:68:18: 79:4d:6d:7a:2c:01:e2:20:26:04:09:77:14:b6:8e: cc:52:00:f2:77:30:91:de:c2:84:fa:08:e2:11:6a: e4:24:dd:d1:ad:2d:18:02:c6:cd:78:e6:87:28:b3: 59:3e:6f:a4:e1:a3:c8:26:67:9b:eb:08:7e:a4:97: 6b:bb:ae:24:54:10:c5:69:29:5f:25:1f:4a:c0:fd: 1f:c4:05:53:0b:e2:af:1f:97:99:0a:f0:da:fc:48: b1:e8:5d:ed:4e:c9:1c:ce:4b:32:4d:f7:b1:38:1b: b5:a5:ba:48:40:71:52:7b:c7:92:91:4a:56:3e:2e: 94:b7:03:0b:b7:c8:66:14:40:71:ff:41:f2:0e:b5: 6b:44:ea:78:fd:e3:db:6d:85:5b:81:29:0e:73:1b: a7:a4:b9:27:a1:9e:51:98:30:96:c0:1a:3f:05:e3: 2d:98:b6:df:37:7c:b4:f2:7e:0e:a8:47:69:9a:2a: 29:18:bd:98:ee:db:95:90:c8:40:8e:6e:85:e6:40: 73:a1:b7:f3:2c:ee:69:0b:2f:ae:23:a0:0d:44:53: 73:3e:81:f0:81:13:6d:6a:62:c2:0e:b5:4d:16:5c: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D9:CD:43:18:8C:59:D7:62:12:68:D5:B6:0B:C8:7C:0F:F9:92:F3 X509v3 Authority Key Identifier: keyid:75:1F:A4:9E:71:2F:88:CF:84:4C:CD:17:9E:BE:29:B9:7E:A1:AA:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/dR-knnEviM-ETM0Xnr4puX6hqsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dR-knnEviM-ETM0Xnr4puX6hqsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/0C98BB26325411ECB11CE73EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.188.0/23 Signature Algorithm: sha256WithRSAEncryption 09:68:fb:30:e7:61:2d:29:42:2d:48:fe:4c:91:3c:59:34:9e: fc:03:dc:f8:70:2e:90:7a:3e:d0:2c:32:c6:4c:71:b6:af:2e: 3a:1f:31:89:cc:da:15:f4:81:7b:2a:19:6f:e6:09:36:ff:93: 02:d3:56:52:3b:37:ce:fb:55:89:f0:b3:56:f7:92:48:c3:dc: 70:d9:ce:e0:6f:fd:51:18:80:c6:41:e4:ed:52:41:e2:f3:ec: 2e:b3:74:ed:b5:64:b2:61:52:1c:11:1d:49:34:d9:33:e2:8e: a5:e3:52:9a:47:cf:c0:f8:84:45:b6:61:dd:c0:ca:c3:44:1d: 18:15:f3:0b:1f:7a:a6:93:f9:f0:fe:24:73:12:bb:bc:a2:c0: 4b:de:0a:5d:39:60:ab:a3:91:d6:9d:7c:ec:6c:92:90:3a:51: 05:b3:58:b3:25:bf:99:e6:b2:76:bd:45:99:3a:eb:50:d5:49: c3:ef:c6:bf:32:66:93:ad:23:5e:ad:61:c2:6c:81:25:f1:10: e0:71:8b:15:2c:db:af:76:c1:c0:96:73:72:b8:35:78:5d:e9: e1:af:a7:1a:62:d2:48:9b:be:10:28:ba:46:75:be:ad:f3:c3: 7a:28:f9:d6:d9:f4:71:18:24:97:38:1d:d3:77:2b:17:4e:b6: a0:a8:34:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1OUQxMTAvBgNVBAUTKDc1MUZBNDlFNzEyRjg4Q0Y4NDRDQ0QxNzlFQkUyOUI5 N0VBMUFBQ0MwHhcNMjMwNjIyMjMyNDQ5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDk0ZDg0MS0xYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWxjbsAhl509pgNmbe7grOdOlnITKX1WC//iaBh5TW16LAHiICYECXcUto7M UgDydzCR3sKE+gjiEWrkJN3RrS0YAsbNeOaHKLNZPm+k4aPIJmeb6wh+pJdru64k VBDFaSlfJR9KwP0fxAVTC+KvH5eZCvDa/Eix6F3tTskczksyTfexOBu1pbpIQHFS e8eSkUpWPi6UtwMLt8hmFEBx/0HyDrVrROp4/ePbbYVbgSkOcxunpLknoZ5RmDCW wBo/BeMtmLbfN3y08n4OqEdpmiopGL2Y7tuVkMhAjm6F5kBzobfzLO5pCy+uI6AN RFNzPoHwgRNtamLCDrVNFlziFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOHZzUMY jFnXYhJo1bYLyHwP+ZLzMB8GA1UdIwQYMBaAFHUfpJ5xL4jPhEzNF56+Kbl+oarM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTU5RC81NjNERTUwRTBE NTYxMUVCQTNEMTVEMkNDNEY5QUUwMi9kUi1rbm5FdmlNLUVUTTBYbnI0cHVYNmhx c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSLWtubkV2aU0tRVRNMFhucjRwdVg2aHFzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REE1OUQvNTYzREU1MEUwRDU2MTFFQkEzRDE1RDJDQzRGOUFFMDIvMEM5OEJCMjYz MjU0MTFFQ0IxMUNFNzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnirwwDQYJKoZIhvcNAQELBQADggEBAAlo+zDnYS0pQi1I /kyRPFk0nvwD3PhwLpB6PtAsMsZMcbavLjofMYnM2hX0gXsqGW/mCTb/kwLTVlI7 N877VYnws1b3kkjD3HDZzuBv/VEYgMZB5O1SQeLz7C6zdO21ZLJhUhwRHUk02TPi jqXjUppHz8D4hEW2Yd3AysNEHRgV8wsfeqaT+fD+JHMSu7yiwEveCl05YKujkdad fOxskpA6UQWzWLMlv5nmsna9RZk661DVScPvxr8yZpOtI16tYcJsgSXxEOBxixUs 2692wcCWc3K4NXhd6eGvpxpi0kibvhAoukZ1vq3zw3oo+dbZ9HEYJJc4HdN3KxdO tqCoNF0= -----END CERTIFICATE-----Generated at Wed Apr 17 01:28:33 2024 by rpki-client on console-ams.rpki-client.org