$ rpki-client -vvf rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa File: E3901F981BD711EEB9597921C4F9AE02.roa (raw, json) Hash identifier: kDd0UyJiiGuqaONxiGP/252EeTqmNnyGZ50AdfF+Vyo= Subject key identifier: 35:C2:B0:41:15:1A:9A:16:23:82:82:CA:05:F0:7F:08:FC:B3:03:F8 Certificate issuer: /CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Certificate serial: AE Authority key identifier: 4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa Signing time: Mon 03 Jun 2024 07:47:49 +0000 ROA not before: Mon 03 Jun 2024 07:47:49 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 151326 IP address blocks: 103.197.254.0/23 maxlen: 23 2001:df2:6fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 06:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Validity Not Before: Jun 3 07:47:49 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=665d7525-14e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:51:c3:df:5c:0a:2e:87:63:95:bc:7b:85: 3a:2b:9c:91:af:e3:aa:5a:24:71:54:40:f2:d5:6e: 75:f0:0e:f1:e3:36:07:33:63:aa:b2:af:6e:69:08: bf:38:9a:ba:2c:ae:81:4c:1c:32:8e:3d:ad:f6:fd: 8d:0c:7b:2e:4b:7c:cb:af:16:39:19:f3:bd:82:36: 63:ad:90:9c:f5:76:3d:a4:d6:0d:7f:cf:35:c1:57: c0:48:d8:b2:64:85:c1:da:a4:dd:76:7e:91:82:c0: 79:68:74:78:7c:46:85:0a:f1:11:1e:b1:93:9b:d4: 3e:2b:a2:38:91:8e:ee:a7:8d:8f:c6:7f:3d:ae:c4: e8:e7:b9:aa:ed:eb:c9:88:30:95:ae:41:3b:c5:c4: 63:97:f0:d3:1a:27:90:4d:9d:59:be:ca:b9:ed:a2: a0:35:1b:3b:b2:c2:78:b6:4d:41:89:04:a0:0a:88: 3c:a2:1c:a9:be:e7:20:e0:41:03:14:f9:b3:ba:e5: e8:19:58:8e:de:7e:b2:eb:48:4c:1f:2a:ec:97:6f: b7:e3:97:36:c4:f5:fd:66:1b:fb:b4:e3:00:68:f2: de:1a:98:31:a5:4b:01:e0:1a:7d:86:09:4a:1c:c2: 4d:a7:ec:a9:1e:7e:91:c4:53:52:22:9b:29:d8:21: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C2:B0:41:15:1A:9A:16:23:82:82:CA:05:F0:7F:08:FC:B3:03:F8 X509v3 Authority Key Identifier: keyid:4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.254.0/23 IPv6: 2001:df2:6fc0::/48 Signature Algorithm: sha256WithRSAEncryption 13:be:86:5a:e0:f7:ba:30:dc:26:02:fc:e8:15:24:1d:a6:32: 8e:e0:dd:7f:16:01:f4:c7:df:51:f9:7a:38:37:42:78:76:9a: f3:da:2b:f6:89:b6:e4:23:ab:2d:26:08:24:af:ba:ea:c4:e6: e3:b2:b5:4c:53:ad:bc:46:74:d0:37:09:7b:2f:49:81:57:4e: f3:7d:1b:e3:28:82:d2:75:a5:a3:a1:f9:de:5e:a1:40:33:47: fd:64:0b:e8:af:2c:e6:8c:96:f7:10:f1:4a:7c:d7:0e:8f:a7: dd:ac:ab:4c:a1:41:81:f0:af:88:0d:60:11:49:94:75:73:1c: a6:75:c3:af:e8:5f:7d:73:a3:b6:67:44:a0:94:9e:21:f4:64: 11:f3:d2:52:e0:17:01:1f:23:4b:90:77:84:9d:43:82:cb:9e: 91:3c:73:0b:64:99:77:8f:3b:48:fe:c5:33:4f:0a:ec:46:3d: 11:41:c0:f2:ef:dc:4b:39:3d:98:0f:a6:50:ac:c1:28:ea:49: 30:cf:d1:47:d2:c3:e2:5b:53:4a:49:25:e3:aa:8c:92:17:63: 9c:76:a6:81:69:a6:53:96:94:9d:e0:f2:70:49:70:b0:37:e1: 90:17:da:7e:7a:9e:e6:e4:36:a3:de:ff:77:c3:34:20:a1:0d: ce:16:01:2a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2N0UxMTAvBgNVBAUTKDRCNzIyQTNBNjc5M0JGMzJDOUJDRjUyRTRFNzcyRTBB NkYzQTYzMTkwHhcNMjQwNjAzMDc0NzQ5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVkNzUyNS0xNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwINRw99cCi6HY5W8e4U6K5yRr+OqWiRxVEDy1W518A7x4zYHM2Oqsq9uaQi/ OJq6LK6BTBwyjj2t9v2NDHsuS3zLrxY5GfO9gjZjrZCc9XY9pNYNf881wVfASNiy ZIXB2qTddn6RgsB5aHR4fEaFCvERHrGTm9Q+K6I4kY7up42Pxn89rsTo57mq7evJ iDCVrkE7xcRjl/DTGieQTZ1Zvsq57aKgNRs7ssJ4tk1BiQSgCog8ohypvucg4EED FPmzuuXoGViO3n6y60hMHyrsl2+345c2xPX9Zhv7tOMAaPLeGpgxpUsB4Bp9hglK HMJNp+ypHn6RxFNSIpsp2CHuBwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDXCsEEV GpoWI4KCygXwfwj8swP4MB8GA1UdIwQYMBaAFEtyKjpnk78yybz1Lk53LgpvOmMZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY3RS82N0I0Q0I4NDFC RDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6TEp2UFV1VG5jdUNtODZZ eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzSXFPbWVUdnpMSnZQVXVUbmN1Q204Nll4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2N0UvNjdCNENCODQxQkQzMTFFRTk2NUZFRjM4QzRGOUFFMDIvRTM5MDFGOTgx QkQ3MTFFRUI5NTk3OTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnxf4wDwQCAAIwCQMHACABDfJvwDANBgkqhkiG9w0BAQsF AAOCAQEAE76GWuD3ujDcJgL86BUkHaYyjuDdfxYB9MffUfl6ODdCeHaa89or9om2 5COrLSYIJK+66sTm47K1TFOtvEZ00DcJey9JgVdO830b4yiC0nWlo6H53l6hQDNH /WQL6K8s5oyW9xDxSnzXDo+n3ayrTKFBgfCviA1gEUmUdXMcpnXDr+hffXOjtmdE oJSeIfRkEfPSUuAXAR8jS5B3hJ1DgsuekTxzC2SZd487SP7FM08K7EY9EUHA8u/c Szk9mA+mUKzBKOpJMM/RR9LD4ltTSkkl46qMkhdjnHamgWmmU5aUneDycElwsDfh kBfafnqe5uQ2o97/d8M0IKENzhYBKg== -----END CERTIFICATE-----Generated at Thu Jun 13 07:42:38 2024 by rpki-client on console-fra.rpki-client.org