$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1DDBD99AE1F211EEA360BE22C4F9AE02.roa File: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (raw, json) Hash identifier: arm7UtKLc4xYXM+k/6yKC2LRVE/77rycSyZpvfnJw88= Subject key identifier: 44:04:09:58:4D:66:70:EE:C0:1F:C5:51:C0:5D:AB:8B:FF:B8:43:64 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 03 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1DDBD99AE1F211EEA360BE22C4F9AE02.roa Signing time: Thu 14 Mar 2024 11:00:49 +0000 ROA not before: Thu 14 Mar 2024 11:00:49 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 139794 IP address blocks: 103.145.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Mar 14 11:00:49 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65f2d8e1-e5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:1e:76:98:79:93:0b:0d:57:32:3a:bc:d2: a3:35:be:87:b6:91:40:75:d8:f3:3c:a6:22:59:1e: 7a:11:e2:bc:f7:f6:03:09:b9:d4:22:36:cf:ba:0b: 51:89:82:d3:83:a0:b2:69:50:24:c0:33:37:52:b2: 69:df:d5:46:43:55:c7:77:a5:4b:2b:f3:d0:17:13: 36:c2:72:91:f1:a8:0e:91:45:15:d7:a9:cd:26:6b: 55:19:39:33:c8:71:db:2e:32:9e:85:71:4f:8a:c4: 74:1e:82:fb:b7:c8:e9:db:1f:07:d9:ea:9e:b4:72: 37:45:71:10:98:23:a7:51:99:c9:0d:39:25:e1:b6: 27:dc:ea:41:eb:ee:ca:b1:22:97:68:a2:96:5e:ab: 46:49:8d:8a:9a:65:32:e0:69:1f:8b:06:12:39:e0: 90:b4:0f:46:c6:35:20:46:ed:42:f4:4d:b6:61:d6: 45:9f:30:31:89:ec:c7:0f:ab:7f:c8:93:ba:e1:95: 2f:c9:e6:39:5f:73:bb:c6:5d:c5:e0:77:dc:64:c0: 4c:9b:7d:15:50:f9:3e:ec:07:2d:12:ba:f6:f1:90: 1f:45:a5:13:3e:4b:25:19:fe:30:d6:c4:e2:a2:97: 1c:e5:44:30:a6:fc:0b:fa:fd:1f:6e:0f:43:61:57: 78:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:04:09:58:4D:66:70:EE:C0:1F:C5:51:C0:5D:AB:8B:FF:B8:43:64 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/1DDBD99AE1F211EEA360BE22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.88.0/24 Signature Algorithm: sha256WithRSAEncryption ab:0b:4b:d1:94:c6:5c:40:6c:93:50:6d:53:67:7e:e5:5b:7d: c1:74:80:29:2c:90:6d:10:4d:4e:00:34:3d:22:95:2d:4d:80: b4:39:61:f9:45:0c:0d:15:dd:2c:09:3a:54:4d:fc:6c:99:5d: d1:24:34:21:e6:82:b2:8a:1f:88:e8:d6:c3:da:e7:18:60:7d: d2:06:46:51:fe:cf:4d:bf:84:78:f7:5a:24:51:bd:20:6b:e8: d3:3d:b0:a3:b6:a6:a2:0f:d9:50:b5:ac:26:9c:76:d3:6f:30: f4:ec:88:d8:ef:a5:94:8f:62:23:92:c7:78:8e:e5:df:93:d3: 74:62:0b:9a:c6:89:8e:5e:6e:34:22:0f:08:0c:35:04:9e:cd: 4f:92:23:cb:a5:fc:24:da:8c:33:30:1f:d1:fa:c6:d1:c4:49: 70:73:02:87:98:b2:81:97:8a:5d:a4:5d:23:c4:7d:a6:ff:a8: 45:89:ee:1a:2d:32:be:dc:39:eb:e0:4f:80:16:44:3b:d9:64: 9a:54:6d:f5:b6:9e:42:a2:3c:18:ca:7b:2d:09:a3:69:3d:12: c1:0e:3d:ab:59:64:8b:3c:8c:b7:40:9b:62:c5:2f:d7:40:f6: e3:5c:75:36:9a:19:87:85:a9:71:53:fb:20:f4:5a:84:cf:e2: eb:a3:e4:fa -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OENBQTExMC8GA1UEBRMoMzc3ODU0NEUyNDY5NTQ4QkYwOUI1NERERDgwM0Q3RDdE OTBGN0U2MjAeFw0yNDAzMTQxMTAwNDlaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZjJkOGUxLWU1ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8ER52mHmTCw1XMjq80qM1voe2kUB12PM8piJZHnoR4rz39gMJudQiNs+6C1GJ gtODoLJpUCTAMzdSsmnf1UZDVcd3pUsr89AXEzbCcpHxqA6RRRXXqc0ma1UZOTPI cdsuMp6FcU+KxHQegvu3yOnbHwfZ6p60cjdFcRCYI6dRmckNOSXhtifc6kHr7sqx IpdoopZeq0ZJjYqaZTLgaR+LBhI54JC0D0bGNSBG7UL0TbZh1kWfMDGJ7McPq3/I k7rhlS/J5jlfc7vGXcXgd9xkwEybfRVQ+T7sBy0SuvbxkB9FpRM+SyUZ/jDWxOKi lxzlRDCm/Av6/R9uD0NhV3gvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQURAQJWE1m cO7AH8VRwF2ri/+4Q2QwHwYDVR0jBBgwFoAUN3hUTiRpVIvwm1Td2APX19kPfmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4Q0FBL0RDRDAyQTIwRTFF QTExRUU5OTlDNzAyQUM0RjlBRTAyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjNoVVRpUnBWSXZ3bTFUZDJBUFgxOWtQZm1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi8xRERCRDk5QUUx RjIxMUVFQTM2MEJFMjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeRWDANBgkqhkiG9w0BAQsFAAOCAQEAqwtL0ZTGXEBsk1Bt U2d+5Vt9wXSAKSyQbRBNTgA0PSKVLU2AtDlh+UUMDRXdLAk6VE38bJld0SQ0IeaC soofiOjWw9rnGGB90gZGUf7PTb+EePdaJFG9IGvo0z2wo7amog/ZULWsJpx2028w 9OyI2O+llI9iI5LHeI7l35PTdGILmsaJjl5uNCIPCAw1BJ7NT5Ijy6X8JNqMMzAf 0frG0cRJcHMCh5iygZeKXaRdI8R9pv+oRYnuGi0yvtw56+BPgBZEO9lkmlRt9bae QqI8GMp7LQmjaT0SwQ49q1lkizyMt0CbYsUv10D241x1NpoZh4WpcVP7IPRahM/i 66Pk+g== -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:53 2024 by rpki-client on console-fra.rpki-client.org