$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa File: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: tOW1+XlAohJ5jcO0tdct66+fo3vT7dx4hPR8gItTklY= Subject key identifier: 2E:11:50:E4:25:8F:86:6A:5C:A0:99:CD:F8:0F:DB:0E:AE:37:8C:34 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 33D8 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa Signing time: Tue 20 Jun 2023 14:50:14 +0000 ROA not before: Tue 20 Jun 2023 14:50:14 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 133376 IP address blocks: 203.209.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13272 (0x33d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jun 20 14:50:14 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6491bca6-809d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:f9:5c:71:cf:a1:bd:9f:98:9a:cb:88:43: 8c:b5:29:ad:7c:08:48:b3:94:39:a9:ad:dd:e7:d6: 58:93:44:77:d3:d4:b2:c1:09:a0:b0:da:31:2e:1d: 00:80:ee:9c:35:de:ec:b5:b1:8a:d8:86:4e:11:36: 72:ae:09:e5:fe:4b:39:b4:ec:70:7b:41:46:19:29: f7:d6:96:b9:76:a5:56:21:59:56:b5:3c:62:7a:eb: 73:23:81:1f:bf:3d:8f:e7:48:10:7c:9d:39:fe:24: 90:ad:91:7b:14:df:0a:c1:07:70:84:cb:70:8c:b9: 84:5f:96:c5:17:65:81:44:8d:6b:ba:26:9c:f1:fb: d1:9a:d2:7a:bb:9e:51:82:b1:31:b2:8c:6f:e0:04: 09:02:d1:b7:cd:9b:37:33:99:91:61:79:37:54:10: fd:3b:de:ed:b4:1e:b6:0f:99:27:2c:b4:ef:ce:58: 19:d8:65:d6:c4:2d:2c:ce:51:b4:b6:29:87:f6:0b: 3f:01:bb:ac:49:bb:34:6c:31:c6:1a:54:47:86:89: 22:14:6e:15:b0:d7:4e:39:11:5a:01:f1:77:88:21: ae:6a:03:45:fb:fe:05:6e:85:3d:05:91:72:f3:10: 5b:31:34:7e:06:47:df:7c:3e:a0:14:36:6a:91:de: a3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:11:50:E4:25:8F:86:6A:5C:A0:99:CD:F8:0F:DB:0E:AE:37:8C:34 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.209.121.0/24 Signature Algorithm: sha256WithRSAEncryption a7:42:f0:70:23:17:db:0f:b7:7a:2c:a6:ee:92:9e:c5:ac:3f: b0:59:86:62:72:f5:86:82:68:8c:af:cc:ba:c6:f4:0b:bb:10: 6a:10:5a:8d:52:b2:04:c4:1f:8a:4d:88:35:97:e2:16:bc:f6: 48:77:0a:8b:46:8a:92:b6:39:e7:74:c7:9d:46:1b:9c:97:0c: 84:5e:70:cc:0a:a3:15:f0:49:3f:6e:fc:8e:e4:fb:8a:49:f7: 40:a0:a4:06:ec:9a:9b:7c:5c:63:f0:de:1e:5d:b2:74:87:0f: 3a:8a:91:26:24:a7:d5:9a:6f:d3:d5:cc:09:84:84:b1:b4:30: 83:8f:fb:a9:40:e4:72:27:89:6a:01:e9:21:48:f8:40:08:c2: aa:a3:b3:19:2b:70:65:5b:d4:47:cb:50:99:77:94:e3:86:1a: bf:fd:ff:3e:67:a2:d8:8a:a1:89:9a:98:e8:14:56:8f:e7:8d: 2c:65:b4:e1:20:d3:4c:62:91:37:ac:7e:c7:1e:23:c6:8b:9a: b0:84:57:c4:7b:30:03:47:1c:54:29:e1:8a:d8:14:2f:7b:a4: e4:ed:6b:0e:a4:1e:2e:cf:78:4d:00:83:ab:10:97:e7:49:b4: 2b:1c:f6:5f:0f:8f:60:73:c4:c3:da:98:5c:d3:a4:40:0a:b1: a1:39:3d:08 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICM9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjMwNjIwMTQ1MDE0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDkxYmNhNi04MDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPL5XHHPob2fmJrLiEOMtSmtfAhIs5Q5qa3d59ZYk0R309SywQmgsNoxLh0A gO6cNd7stbGK2IZOETZyrgnl/ks5tOxwe0FGGSn31pa5dqVWIVlWtTxieutzI4Ef vz2P50gQfJ05/iSQrZF7FN8KwQdwhMtwjLmEX5bFF2WBRI1ruiac8fvRmtJ6u55R grExsoxv4AQJAtG3zZs3M5mRYXk3VBD9O97ttB62D5knLLTvzlgZ2GXWxC0szlG0 timH9gs/AbusSbs0bDHGGlRHhokiFG4VsNdOORFaAfF3iCGuagNF+/4FboU9BZFy 8xBbMTR+BkfffD6gFDZqkd6jZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC4RUOQl j4ZqXKCZzfgP2w6uN4w0MB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvM0VENzEwQzY4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADL0XkwDQYJKoZIhvcNAQELBQADggEBAKdC8HAjF9sPt3os pu6SnsWsP7BZhmJy9YaCaIyvzLrG9Au7EGoQWo1SsgTEH4pNiDWX4ha89kh3CotG ipK2Oed0x51GG5yXDIRecMwKoxXwST9u/I7k+4pJ90CgpAbsmpt8XGPw3h5dsnSH DzqKkSYkp9Wab9PVzAmEhLG0MIOP+6lA5HIniWoB6SFI+EAIwqqjsxkrcGVb1EfL UJl3lOOGGr/9/z5notiKoYmamOgUVo/njSxltOEg00xikTesfsceI8aLmrCEV8R7 MANHHFQp4YrYFC97pOTtaw6kHi7PeE0Ag6sQl+dJtCsc9l8Pj2BzxMPamFzTpEAK saE5PQg= -----END CERTIFICATE-----Generated at Thu Jun 6 14:59:01 2024 by rpki-client on console-fra.rpki-client.org