$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/9C3E2D18A98111EAB4B3FD50C4F9AE02.roa File: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (raw, json) Hash identifier: LJTye2A8+UyEDVtUA1P1h2s5ynNht6/dnZPTBhtQ7ww= Subject key identifier: EF:37:13:5D:DC:84:54:F8:8F:C7:0E:E8:B3:CC:9B:31:0B:17:0C:99 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 07AD Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/9C3E2D18A98111EAB4B3FD50C4F9AE02.roa Signing time: Thu 10 Aug 2023 21:18:22 +0000 ROA not before: Thu 10 Aug 2023 21:18:22 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 138022 IP address blocks: 103.120.32.0/22 maxlen: 24 2403:51c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 21:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Aug 10 21:18:22 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64d5541e-3cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:af:49:98:1f:2f:45:bd:14:e8:5a:bf:02: 4f:d6:8c:b5:53:aa:93:0d:fd:72:23:dd:64:e3:25: 9d:4b:0b:b6:73:fb:7f:c2:78:63:cc:27:4b:06:9a: b9:d3:eb:17:1f:b4:a3:07:5d:2d:7e:2f:f8:3e:23: 61:e5:01:ed:3f:3c:32:4c:88:87:09:28:9f:82:11: b5:05:7c:3b:e2:10:5a:96:b8:0f:06:1e:f1:8b:46: 71:11:d2:27:c3:74:74:21:09:55:96:23:c1:64:10: 25:bc:0b:0a:d2:a3:b2:1c:e2:a0:fa:04:64:28:e5: 19:01:e8:2b:7f:da:06:21:83:4e:10:26:25:f5:fb: 8c:6a:20:e4:0f:c0:01:32:fa:eb:6c:37:82:92:a1: e7:80:40:dd:9c:15:15:e3:74:08:3a:3b:9e:5f:f3: ed:8b:2d:2d:c9:a8:3d:ff:c6:c1:b3:15:a1:5d:4d: 97:77:14:34:7a:e2:f6:fd:99:a5:75:4d:69:83:97: b4:36:cf:51:c6:d8:1a:00:3d:7f:b5:26:8e:10:43: e0:0d:20:b8:db:d4:6f:84:6e:49:8d:0e:d4:62:c8: 21:f1:0e:a2:a0:db:ec:fc:33:8c:8a:53:21:54:23: 6a:f0:92:5b:3b:56:75:81:db:33:45:70:03:90:b3: 15:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:37:13:5D:DC:84:54:F8:8F:C7:0E:E8:B3:CC:9B:31:0B:17:0C:99 X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/9C3E2D18A98111EAB4B3FD50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.32.0/22 IPv6: 2403:51c0::/32 Signature Algorithm: sha256WithRSAEncryption 6a:9c:c9:87:cb:68:81:51:85:a9:87:69:5f:29:9c:0f:22:a8: 95:5b:2c:58:4c:a1:38:4b:51:84:f3:dc:e8:a3:2c:2b:56:8a: 9b:90:9c:98:75:1e:65:25:a1:3c:48:85:fb:e9:07:2d:3b:16: 2d:cb:78:56:c1:11:6c:4c:04:df:8f:6e:dd:65:dc:85:ea:e4: a8:3c:ef:1c:3d:c6:de:f2:a8:68:60:3e:48:84:64:da:e5:b6: 8a:5c:78:67:37:83:4c:9c:4d:57:bd:6a:d5:19:28:5b:35:d7: 6b:fb:32:b7:80:7b:70:80:00:25:dd:9a:38:2a:7d:56:9f:eb: de:b8:40:d3:6f:fe:1e:0c:d0:e4:6b:a7:5e:1a:4c:ad:ba:1b: 85:96:cf:91:94:06:ea:1d:97:52:3d:79:fd:71:7f:65:0e:d6: 12:3d:49:18:ec:10:ee:05:7c:62:e4:68:1b:f7:2a:db:06:a8: 27:aa:9a:d6:ac:ba:2e:3a:c7:ed:5f:6e:a0:65:f8:98:42:8b: 21:62:c9:1f:16:68:41:b5:36:02:15:91:3b:b6:48:5c:5b:8e: f9:35:28:b6:53:7b:dd:8c:7d:86:ec:ee:f8:f1:59:3b:c8:11: 3b:ec:8b:f3:e5:bd:67:60:0b:1d:a5:22:d8:a4:1e:7c:ba:1a: 19:1e:8f:d8 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjMwODEwMjExODIyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGQ1NTQxZS0zY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmmvSZgfL0W9FOhavwJP1oy1U6qTDf1yI91k4yWdSwu2c/t/wnhjzCdLBpq5 0+sXH7SjB10tfi/4PiNh5QHtPzwyTIiHCSifghG1BXw74hBalrgPBh7xi0ZxEdIn w3R0IQlVliPBZBAlvAsK0qOyHOKg+gRkKOUZAegrf9oGIYNOECYl9fuMaiDkD8AB MvrrbDeCkqHngEDdnBUV43QIOjueX/Ptiy0tyag9/8bBsxWhXU2XdxQ0euL2/Zml dU1pg5e0Ns9RxtgaAD1/tSaOEEPgDSC429RvhG5JjQ7UYsgh8Q6ioNvs/DOMilMh VCNq8JJbO1Z1gdszRXADkLMV1QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFO83E13c hFT4j8cO6LPMmzELFwyZMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzhFMzMvQUQyQ0YyMUVBOTdGMTFFQUJGNDNFRjRBQzRGOUFFMDIvOUMzRTJEMThB OTgxMTFFQUI0QjNGRDUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJneCAwDQQCAAIwBwMFACQDUcAwDQYJKoZIhvcNAQELBQAD ggEBAGqcyYfLaIFRhamHaV8pnA8iqJVbLFhMoThLUYTz3OijLCtWipuQnJh1HmUl oTxIhfvpBy07Fi3LeFbBEWxMBN+Pbt1l3IXq5Kg87xw9xt7yqGhgPkiEZNrltopc eGc3g0ycTVe9atUZKFs112v7MreAe3CAACXdmjgqfVaf6964QNNv/h4M0ORrp14a TK26G4WWz5GUBuodl1I9ef1xf2UO1hI9SRjsEO4FfGLkaBv3KtsGqCeqmtasui46 x+1fbqBl+JhCiyFiyR8WaEG1NgIVkTu2SFxbjvk1KLZTe92MfYbs7vjxWTvIETvs i/PlvWdgCx2lItikHny6Ghkej9g= -----END CERTIFICATE-----Generated at Fri Jun 14 22:37:18 2024 by rpki-client on console-fra.rpki-client.org