$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/05B3C1D2134511EAB2075B28C4F9AE02.roa File: 05B3C1D2134511EAB2075B28C4F9AE02.roa (raw, json) Hash identifier: ++MQxyz4SvSJxW+ZF60oZzlPBvgOQzmFnm7G6eiSvzY= Subject key identifier: 3D:C6:DE:A0:FB:98:06:A1:6A:7C:D1:78:89:22:05:39:DF:2A:EF:E7 Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0E12 Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/05B3C1D2134511EAB2075B28C4F9AE02.roa Signing time: Thu 21 Sep 2023 08:23:33 +0000 ROA not before: Thu 21 Sep 2023 08:23:33 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 63996 IP address blocks: 45.120.112.0/22 maxlen: 24 103.60.172.0/22 maxlen: 24 103.205.68.0/22 maxlen: 24 192.144.86.0/23 maxlen: 24 203.95.220.0/22 maxlen: 24 2400:3240::/32 maxlen: 36 2400:3240:300::/40 maxlen: 40 2400:3240:8000::/48 maxlen: 48 2404:1380::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3602 (0xe12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Sep 21 08:23:33 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=650bfd85-5d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:8b:da:50:c0:cf:4f:ce:d8:74:a8:47:cb: e7:20:5b:fa:71:e8:e9:8c:ab:ca:97:57:0e:e1:e8: fc:cb:6c:81:3e:14:34:d6:ee:79:01:a8:4e:f6:b8: 3a:62:d0:9d:03:00:6e:ac:4f:74:02:45:1e:b7:a4: 8c:95:e3:a7:31:9f:ea:c5:90:ce:fe:f3:83:8b:5c: 6d:9c:bd:56:b2:9a:41:f4:1e:55:4b:8d:90:22:90: 02:6e:e4:4e:a0:5d:56:ac:0c:51:5f:53:c5:9c:65: 3c:a1:1c:b6:9d:9f:dd:9c:39:d0:85:65:7c:b6:1f: 25:d4:4f:e4:f7:89:da:bb:88:11:6d:e5:de:5b:c5: e1:1f:db:a1:7a:5d:7c:1a:2e:e2:08:cb:54:86:e4: 11:9e:df:70:31:65:12:f2:53:fb:d1:3c:dc:7e:2f: b1:71:7e:d9:a0:6c:a2:50:74:b1:ff:51:7f:02:eb: 74:96:79:d1:02:3f:21:fd:4a:a6:31:1a:83:58:ab: e6:24:ea:d5:ca:fb:12:91:00:9d:e0:43:4a:1f:0d: cc:dc:7d:ff:ed:fe:e2:93:ca:90:8e:d9:15:da:af: 18:d7:3a:1e:36:a4:ba:3b:6a:32:8e:02:7c:3c:26: c8:ba:9e:d0:2a:89:8d:b2:48:98:15:55:f8:83:20: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C6:DE:A0:FB:98:06:A1:6A:7C:D1:78:89:22:05:39:DF:2A:EF:E7 X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/05B3C1D2134511EAB2075B28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.112.0/22 103.60.172.0/22 103.205.68.0/22 192.144.86.0/23 203.95.220.0/22 IPv6: 2400:3240::/32 2404:1380::/32 Signature Algorithm: sha256WithRSAEncryption 75:81:d0:b4:ce:5f:ee:3d:e5:85:da:cf:fd:d1:a8:7c:c7:80: 34:52:f6:5b:57:c4:ff:8c:b0:91:58:a8:e1:41:37:03:ad:51: 3f:a1:38:a5:ff:56:ae:8e:0e:df:ed:37:23:35:3e:ad:ae:0c: 99:44:8b:b3:df:13:d3:01:5d:63:03:71:4b:55:d4:19:94:af: 5c:f9:02:8f:02:01:cb:54:13:36:12:0c:71:5d:aa:92:0e:51: 5e:b8:04:84:c6:8d:49:c4:bb:28:4a:de:91:d6:0f:e5:52:02: 16:40:5b:3f:63:72:1f:79:9b:34:1a:11:93:1f:e7:17:08:de: 90:85:b4:04:ee:4c:d8:f6:64:fe:2e:89:bf:53:a7:0f:3d:92: d0:8b:4e:60:60:9f:b1:0b:1d:f4:81:ae:ec:40:37:5f:78:6c: 3c:71:61:98:7f:cb:ab:cd:88:f8:a2:ed:bd:ff:4a:79:27:c6: 04:79:34:96:d1:fd:2d:89:7f:9c:f6:4f:57:57:e2:8b:3c:6e: b8:da:82:58:a2:48:db:eb:19:02:2a:af:85:53:11:50:41:48: b6:35:70:28:ac:cc:6a:f2:bd:6e:34:48:5a:77:af:da:d9:b4: 66:c2:8b:18:b1:99:05:32:b5:c7:8b:cd:63:41:d2:0f:8a:3c: d1:d8:8f:67 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICDhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjMwOTIxMDgyMzMzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTBiZmQ4NS01ZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttSL2lDAz0/O2HSoR8vnIFv6cejpjKvKl1cO4ej8y2yBPhQ01u55AahO9rg6 YtCdAwBurE90AkUet6SMleOnMZ/qxZDO/vODi1xtnL1WsppB9B5VS42QIpACbuRO oF1WrAxRX1PFnGU8oRy2nZ/dnDnQhWV8th8l1E/k94nau4gRbeXeW8XhH9uhel18 Gi7iCMtUhuQRnt9wMWUS8lP70Tzcfi+xcX7ZoGyiUHSx/1F/Aut0lnnRAj8h/Uqm MRqDWKvmJOrVyvsSkQCd4ENKHw3M3H3/7f7ik8qQjtkV2q8Y1zoeNqS6O2oyjgJ8 PCbIup7QKomNskiYFVX4gyCvHQIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFD3G3qD7 mAahanzReIkiBTnfKu/nMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU3REQvQUQ2MTVGNkU2RTU2MTFFOUJEOUI1RTY5QzRGOUFFMDIvMDVCM0MxRDIx MzQ1MTFFQUIyMDc1QjI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E PjA8MCQEAgABMB4DBAIteHADBAJnPKwDBAJnzUQDBAHAkFYDBALLX9wwFAQCAAIw DgMFACQAMkADBQAkBBOAMA0GCSqGSIb3DQEBCwUAA4IBAQB1gdC0zl/uPeWF2s/9 0ah8x4A0UvZbV8T/jLCRWKjhQTcDrVE/oTil/1aujg7f7TcjNT6trgyZRIuz3xPT AV1jA3FLVdQZlK9c+QKPAgHLVBM2EgxxXaqSDlFeuASExo1JxLsoSt6R1g/lUgIW QFs/Y3IfeZs0GhGTH+cXCN6QhbQE7kzY9mT+Lom/U6cPPZLQi05gYJ+xCx30ga7s QDdfeGw8cWGYf8urzYj4ou29/0p5J8YEeTSW0f0tiX+c9k9XV+KLPG642oJYokjb 6xkCKq+FUxFQQUi2NXAorMxq8r1uNEhad6/a2bRmwosYsZkFMrXHi81jQdIPijzR 2I9n -----END CERTIFICATE-----Generated at Fri May 31 19:47:49 2024 by rpki-client on console-fra.rpki-client.org