$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/BC0960102C5A11ECAB4C276BC4F9AE02.roa File: BC0960102C5A11ECAB4C276BC4F9AE02.roa (raw, json) Hash identifier: fOG6E1uEMWBMMvid+cOfH446mAotQFl/kKBSOr9l7sE= Subject key identifier: F0:9A:72:BF:2F:9B:70:73:8D:FF:CD:C5:34:3C:A4:B0:FC:A8:AA:26 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 03A3 Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/BC0960102C5A11ECAB4C276BC4F9AE02.roa Signing time: Fri 01 Dec 2023 02:34:00 +0000 ROA not before: Fri 01 Dec 2023 02:34:00 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 147175 IP address blocks: 103.174.22.0/23 maxlen: 23 103.174.22.0/24 maxlen: 24 103.174.23.0/24 maxlen: 24 2001:df7:b380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: Dec 1 02:34:00 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65694618-0a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:ba:71:c1:58:2d:57:22:02:2f:de:88:16: 49:57:76:3c:aa:c0:8f:98:17:2e:e3:fe:a3:d3:70: 96:6b:66:33:5e:fe:23:dd:df:0c:d3:0f:a6:a3:19: d0:15:01:d1:6c:b5:71:12:a0:d8:f2:bf:8f:cf:f7: 94:31:c3:8b:ce:11:2f:ee:90:5b:34:23:63:9f:7c: 63:55:b9:fd:c7:a1:ec:69:6a:a8:5d:67:a3:03:d7: 65:bb:99:56:a2:35:20:7a:91:63:63:e0:2a:83:fc: 42:26:a4:03:72:69:3e:1b:df:b5:16:81:5b:b1:b1: 9f:a2:c5:da:3b:d0:88:53:80:5a:44:23:86:fc:15: 09:05:df:e7:d4:1b:d4:2d:ed:6b:a6:5b:3b:20:79: 70:05:30:38:5d:0a:22:1f:2d:1c:1a:2b:a5:87:0c: fe:b5:1c:9d:28:eb:6f:6d:a5:a7:7f:d9:33:f7:ac: 0f:fe:90:30:1b:d1:44:b1:e4:ab:01:e3:6b:56:51: 6d:6c:ee:11:95:a1:90:5d:51:78:52:7a:e9:a1:7f: 17:d4:fa:d2:d4:d8:5a:ee:2d:b7:e6:4a:0a:fd:29: 99:0f:29:d2:55:ab:db:db:22:7b:f4:01:02:c7:df: 45:35:66:4f:94:cc:1d:dc:35:d3:d2:a9:db:ed:e0: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9A:72:BF:2F:9B:70:73:8D:FF:CD:C5:34:3C:A4:B0:FC:A8:AA:26 X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/BC0960102C5A11ECAB4C276BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.22.0/23 IPv6: 2001:df7:b380::/48 Signature Algorithm: sha256WithRSAEncryption 6e:b7:70:42:08:14:79:58:d8:27:3c:a3:ea:f6:bc:b3:53:5c: 9b:17:d7:c3:85:5d:f3:e7:c0:9e:c5:13:ba:a7:0c:77:28:c0: 5d:df:48:89:91:b0:8c:16:16:e7:92:ef:18:59:b7:ee:1f:17: bc:71:16:52:b4:17:c0:94:7e:f7:cb:29:b0:f3:a5:ef:6c:6a: 74:cf:9a:11:59:a3:9c:14:9d:01:fe:f6:ee:81:5b:3a:18:a7: cf:c9:be:2f:12:3b:18:0e:6f:ac:5a:4e:79:70:6c:42:85:37: ee:4e:93:22:e6:1c:d7:94:76:8b:0d:67:75:3c:fa:f3:d1:bc: c8:15:91:52:2e:e2:26:5e:de:99:f9:68:41:08:18:be:53:3e: b6:78:14:b9:c6:c3:2f:5c:58:26:5c:30:85:46:cc:d1:dc:59: d2:2d:9c:cc:3b:e2:e2:51:f6:8f:67:f0:e6:1e:b6:c5:28:ad: fa:a3:77:be:ad:1c:ac:4a:53:58:74:61:d1:a6:21:d1:75:07: b8:8d:4f:03:c1:61:14:21:48:b1:e2:9c:d0:34:bf:3c:ee:20: d2:2e:07:f0:9d:68:ce:44:69:fa:2c:2c:93:dc:b4:04:74:54: df:ce:46:b0:9b:18:2c:1f:7b:f0:05:42:5f:bd:68:3c:b2:0a: 5c:90:fb:e9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjMxMjAxMDIzNDAwWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY5NDYxOC0wYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvli6ccFYLVciAi/eiBZJV3Y8qsCPmBcu4/6j03CWa2YzXv4j3d8M0w+moxnQ FQHRbLVxEqDY8r+Pz/eUMcOLzhEv7pBbNCNjn3xjVbn9x6HsaWqoXWejA9dlu5lW ojUgepFjY+Aqg/xCJqQDcmk+G9+1FoFbsbGfosXaO9CIU4BaRCOG/BUJBd/n1BvU Le1rpls7IHlwBTA4XQoiHy0cGiulhwz+tRydKOtvbaWnf9kz96wP/pAwG9FEseSr AeNrVlFtbO4RlaGQXVF4UnrpoX8X1PrS1Nha7i235koK/SmZDynSVavb2yJ79AEC x99FNWZPlMwd3DXT0qnb7eAhiwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPCacr8v m3Bzjf/NxTQ8pLD8qKomMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjkyODgvMUZEREE3QjAyQzU5MTFFQ0JBRjVGODZBQzRGOUFFMDIvQkMwOTYwMTAy QzVBMTFFQ0FCNEMyNzZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrhYwDwQCAAIwCQMHACABDfezgDANBgkqhkiG9w0BAQsF AAOCAQEAbrdwQggUeVjYJzyj6va8s1NcmxfXw4Vd8+fAnsUTuqcMdyjAXd9IiZGw jBYW55LvGFm37h8XvHEWUrQXwJR+98spsPOl72xqdM+aEVmjnBSdAf727oFbOhin z8m+LxI7GA5vrFpOeXBsQoU37k6TIuYc15R2iw1ndTz689G8yBWRUi7iJl7emflo QQgYvlM+tngUucbDL1xYJlwwhUbM0dxZ0i2czDvi4lH2j2fw5h62xSit+qN3vq0c rEpTWHRh0aYh0XUHuI1PA8FhFCFIseKc0DS/PO4g0i4H8J1ozkRp+iwsk9y0BHRU 385GsJsYLB978AVCX71oPLIKXJD76Q== -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:30 2024 by rpki-client on console-ams.rpki-client.org