$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa File: 3D8EDEB442FB11ED8178A936C4F9AE02.roa (raw, json) Hash identifier: PGMLfPuWIBmCT6CphKbhOv2hmlJAVDyCeGPWvNCe0G0= Subject key identifier: 9C:BE:01:E7:D8:EB:A4:D4:F4:23:D0:46:FB:5F:48:B1:3B:26:90:B1 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3E40 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa Signing time: Tue 12 Sep 2023 02:40:46 +0000 ROA not before: Tue 12 Sep 2023 02:40:46 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 131358 IP address blocks: 103.9.0.0/24 maxlen: 24 103.9.1.0/24 maxlen: 24 103.9.2.0/24 maxlen: 24 103.9.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 02:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15936 (0x3e40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:40:46 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffcfad-5463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:03:d4:ec:d2:73:6d:c3:71:3b:69:30:12:5b: 63:eb:31:e4:80:ba:dd:fa:59:26:d2:e3:01:c5:e1: 15:f0:b8:9e:35:15:71:99:aa:06:9c:2c:f3:05:b2: f2:cd:1e:43:49:55:fe:6a:54:32:27:87:2d:42:48: 39:97:6d:26:31:ec:a5:30:17:08:e1:93:c7:1d:59: a6:57:ce:6f:ff:89:ea:ad:c6:cf:c5:ad:1e:16:e5: 86:6c:b0:47:8a:0e:f7:82:06:69:81:50:34:3e:b8: 51:de:76:b8:12:e9:ab:f0:b1:4f:14:a7:07:44:bf: 26:41:b1:6e:74:0c:94:a3:d6:7c:12:6f:d0:7e:83: cb:7b:a5:5b:74:ee:1a:e4:f3:cd:ca:04:72:8c:6f: e5:f6:4c:45:e4:f0:15:44:1a:f6:84:89:bf:b7:6e: 6e:31:11:a8:93:53:b2:19:80:e6:fa:bb:a8:1a:b9: a2:34:3a:e1:84:20:b7:f3:e7:46:2d:f3:bd:13:20: 39:60:99:cc:a5:18:f7:0c:83:fc:88:d9:5d:ba:86: b1:3c:d9:72:f7:e4:ba:cb:4f:f9:74:6f:4c:dd:2e: 8f:2d:d1:e4:a0:de:b0:d3:72:bf:9b:9a:c2:d1:87: ad:99:32:a8:c0:ea:b5:6a:9e:bc:79:ab:58:a3:a2: a8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BE:01:E7:D8:EB:A4:D4:F4:23:D0:46:FB:5F:48:B1:3B:26:90:B1 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.9.0.0/22 Signature Algorithm: sha256WithRSAEncryption 82:1d:8b:a5:27:e5:5f:c6:83:33:9f:a1:6a:3b:6f:4f:67:77: e3:54:e7:ff:cb:34:67:92:40:e8:89:fe:43:3c:49:43:69:c3: 85:c5:67:1c:11:44:12:80:0b:de:e1:8f:85:79:1f:fd:4e:d1: 02:7f:37:a9:1b:2c:75:e1:b3:5b:27:a9:b0:fd:c2:52:aa:16: 37:57:84:02:60:f6:fa:90:8e:df:3f:be:23:ca:6a:41:47:41: 3d:e4:1c:b8:00:d4:02:0f:21:6d:ec:38:f6:8e:71:fc:7c:cf: dc:74:05:e1:13:1a:9f:23:b6:9e:88:e0:32:98:17:b4:66:1e: 65:69:2d:57:c4:23:30:ef:57:d0:d4:fc:fc:20:76:aa:30:32: 6d:81:c5:57:e7:e1:1f:b9:7d:ec:cd:e3:60:be:bd:82:3f:92: 06:f6:80:84:30:a6:7e:c2:a3:0c:bd:68:97:ae:24:81:bb:b5: c7:c5:04:1a:fa:a7:52:38:8c:2c:78:ec:a6:9d:8e:da:09:8f: 52:c0:44:cd:fc:6d:b2:55:ab:c4:c0:f8:d5:ae:65:0e:88:d0: ad:78:28:aa:07:8e:0f:13:41:f0:2d:54:b6:10:f0:86:d6:c5: fe:7c:b9:75:66:8d:d1:2f:66:d6:8a:6e:94:b0:59:9d:16:3b: 78:e3:3b:9e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICPkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0MDQ2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmY2ZhZC01NDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2APU7NJzbcNxO2kwEltj6zHkgLrd+lkm0uMBxeEV8LieNRVxmaoGnCzzBbLy zR5DSVX+alQyJ4ctQkg5l20mMeylMBcI4ZPHHVmmV85v/4nqrcbPxa0eFuWGbLBH ig73ggZpgVA0PrhR3na4Eumr8LFPFKcHRL8mQbFudAyUo9Z8Em/QfoPLe6VbdO4a 5PPNygRyjG/l9kxF5PAVRBr2hIm/t25uMRGok1OyGYDm+ruoGrmiNDrhhCC38+dG LfO9EyA5YJnMpRj3DIP8iNlduoaxPNly9+S6y0/5dG9M3S6PLdHkoN6w03K/m5rC 0YetmTKowOq1ap68eatYo6KovQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJy+AefY 66TU9CPQRvtfSLE7JpCxMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvM0Q4RURFQjQ0 MkZCMTFFRDgxNzhBOTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnCQAwDQYJKoZIhvcNAQELBQADggEBAIIdi6Un5V/GgzOf oWo7b09nd+NU5//LNGeSQOiJ/kM8SUNpw4XFZxwRRBKAC97hj4V5H/1O0QJ/N6kb LHXhs1snqbD9wlKqFjdXhAJg9vqQjt8/viPKakFHQT3kHLgA1AIPIW3sOPaOcfx8 z9x0BeETGp8jtp6I4DKYF7RmHmVpLVfEIzDvV9DU/PwgdqowMm2BxVfn4R+5fezN 42C+vYI/kgb2gIQwpn7Cowy9aJeuJIG7tcfFBBr6p1I4jCx47KadjtoJj1LARM38 bbJVq8TA+NWuZQ6I0K14KKoHjg8TQfAtVLYQ8IbWxf58uXVmjdEvZtaKbpSwWZ0W O3jjO54= -----END CERTIFICATE-----Generated at Fri Jun 14 04:11:24 2024 by rpki-client on console-fra.rpki-client.org