$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/B0B722BEFA4A11EDA47C091DC4F9AE02.roa File: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (raw, json) Hash identifier: clx30qLYvbm68jKy4mtHXR8lQ9RAC1U+UxoMWQrquX4= Subject key identifier: DA:26:42:87:D3:81:B6:D8:84:C6:B1:97:6A:D5:60:76:D5:27:40:5C Certificate issuer: /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Certificate serial: 0B73 Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/B0B722BEFA4A11EDA47C091DC4F9AE02.roa Signing time: Fri 06 Oct 2023 18:56:58 +0000 ROA not before: Fri 06 Oct 2023 18:56:58 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 134146 IP address blocks: 103.73.224.0/22 maxlen: 22 103.73.224.0/23 maxlen: 23 103.73.224.0/24 maxlen: 24 103.73.225.0/24 maxlen: 24 103.73.226.0/24 maxlen: 24 103.73.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2931 (0xb73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880 Validity Not Before: Oct 6 18:56:58 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6520587a-fb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:db:6d:4d:31:35:cc:26:00:d7:f8:e7:d0: 5f:0f:c4:3a:1f:69:78:73:43:94:35:23:0c:a9:bc: 7e:6a:54:ec:1f:3f:7d:e3:9f:5e:be:c0:2b:8b:db: 01:83:10:01:6f:40:ab:d9:4c:2b:0d:45:2a:8f:65: 8c:fc:91:95:09:11:53:2d:d3:37:c0:63:f1:6b:be: 46:0d:78:09:60:f0:77:94:89:b7:83:65:ad:80:24: cb:4e:f7:9c:25:4f:c0:88:65:b3:0a:2d:1b:10:1f: 69:53:4b:9d:a5:e2:95:0b:43:54:66:c2:5f:9e:ea: 15:1f:b6:61:95:3f:4c:a6:dc:61:27:75:12:4a:a2: fd:8e:f5:14:52:db:fc:90:50:f1:d3:45:0b:ac:f1: d7:6b:44:45:85:82:9f:d4:e6:e9:b5:29:79:4e:fa: f2:f7:3e:4c:7e:9a:90:35:a4:74:3a:09:96:60:b8: 5f:4f:93:93:cf:12:f7:a0:f9:9e:43:72:47:dc:f9: af:52:99:a1:31:b5:fd:60:b4:c0:26:82:94:45:0e: 9d:9a:7b:6d:2e:3d:9b:4b:71:b7:16:0a:4d:44:93: 14:7d:55:d7:09:7d:99:0b:af:34:6b:a7:a4:d3:a4: 82:99:d2:ed:80:d9:07:62:17:c9:73:a5:44:49:3a: cc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:26:42:87:D3:81:B6:D8:84:C6:B1:97:6A:D5:60:76:D5:27:40:5C X509v3 Authority Key Identifier: keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/B0B722BEFA4A11EDA47C091DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.224.0/22 Signature Algorithm: sha256WithRSAEncryption a0:2f:b2:00:67:54:84:ab:c0:29:b5:42:12:cb:f9:95:b3:a1: 93:06:68:e2:f4:bd:7e:0e:25:30:22:9b:60:d0:25:53:a2:a7: a6:98:b7:17:da:ad:c9:f3:df:80:3f:f5:49:84:97:8a:92:6e: 79:c9:5d:f1:08:25:94:6d:f2:b2:a5:7f:4e:7c:44:d9:b7:ec: c3:94:05:c1:73:2e:4f:87:14:de:03:17:81:1d:ac:47:b9:1f: 78:34:4e:1e:c5:e1:da:32:45:a9:95:ba:fa:29:78:35:2e:44: f2:61:86:a5:26:0e:c2:83:ab:c9:c5:c0:d2:1c:b8:37:26:8a: 13:5b:41:48:c0:ca:35:93:9d:d6:e8:ab:c2:85:40:6d:f2:bc: 6b:88:bc:29:06:8a:16:6a:dd:36:c0:c8:99:b1:2e:95:18:cf: 41:69:32:bf:46:68:10:b9:30:01:cd:7f:12:fd:6d:98:c4:49: f3:08:36:e6:0c:2d:5b:92:02:d1:eb:e4:8e:0f:cb:f5:e5:16: ac:08:6d:86:e4:90:5e:aa:e4:70:c2:61:e2:13:83:b9:38:cb: 08:af:93:7d:a4:d9:85:79:aa:3b:5a:5a:4f:d6:d0:ad:b9:67: b9:fc:99:a2:5d:24:95:07:f0:fc:cc:b6:c3:b2:73:85:3c:60: 1f:42:b4:f9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0NkYxMTAvBgNVBAUTKDM5NzFGN0UyMUQwOEM5MjQzQUJCNDAzRjgwMzA2NEJG NzhCMkQ4ODAwHhcNMjMxMDA2MTg1NjU4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTIwNTg3YS1mYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/bbbU0xNcwmANf459BfD8Q6H2l4c0OUNSMMqbx+alTsHz99459evsAri9sB gxABb0Cr2UwrDUUqj2WM/JGVCRFTLdM3wGPxa75GDXgJYPB3lIm3g2WtgCTLTvec JU/AiGWzCi0bEB9pU0udpeKVC0NUZsJfnuoVH7ZhlT9MptxhJ3USSqL9jvUUUtv8 kFDx00ULrPHXa0RFhYKf1ObptSl5Tvry9z5MfpqQNaR0OgmWYLhfT5OTzxL3oPme Q3JH3PmvUpmhMbX9YLTAJoKURQ6dmnttLj2bS3G3FgpNRJMUfVXXCX2ZC680a6ek 06SCmdLtgNkHYhfJc6VESTrM1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNomQofT gbbYhMaxl2rVYHbVJ0BcMB8GA1UdIwQYMBaAFDlx9+IdCMkkOrtAP4AwZL94stiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDQ2Ri83REEyNEM3QTAw NjkxMUVBOEZEQjI4NURDNEY5QUUwMi9PWEgzNGgwSXlTUTZ1MEFfZ0RCa3YzaXky SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09YSDM0aDBJeVNRNnUwQV9nREJrdjNpeTJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Q0NkYvN0RBMjRDN0EwMDY5MTFFQThGREIyODVEQzRGOUFFMDIvQjBCNzIyQkVG QTRBMTFFREE0N0MwOTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnSeAwDQYJKoZIhvcNAQELBQADggEBAKAvsgBnVISrwCm1 QhLL+ZWzoZMGaOL0vX4OJTAim2DQJVOip6aYtxfarcnz34A/9UmEl4qSbnnJXfEI JZRt8rKlf058RNm37MOUBcFzLk+HFN4DF4EdrEe5H3g0Th7F4doyRamVuvopeDUu RPJhhqUmDsKDq8nFwNIcuDcmihNbQUjAyjWTndboq8KFQG3yvGuIvCkGihZq3TbA yJmxLpUYz0FpMr9GaBC5MAHNfxL9bZjESfMINuYMLVuSAtHr5I4Py/XlFqwIbYbk kF6q5HDCYeITg7k4ywivk32k2YV5qjtaWk/W0K25Z7n8maJdJJUH8PzMtsOyc4U8 YB9CtPk= -----END CERTIFICATE-----Generated at Fri May 31 22:13:03 2024 by rpki-client on console-fra.rpki-client.org