$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/3DF2A2EC3AB311EC977A5D60C4F9AE02.roa File: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (raw, json) Hash identifier: 7IAANyxDEmXIqjlkqfFbwfy+0yhpr6NgG5FWwa4XecI= Subject key identifier: A6:99:38:1F:19:F3:9E:06:B3:3F:EF:98:2E:4C:AF:4D:96:2A:5A:E4 Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Certificate serial: 0519 Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/3DF2A2EC3AB311EC977A5D60C4F9AE02.roa Signing time: Wed 04 Oct 2023 23:42:07 +0000 ROA not before: Wed 04 Oct 2023 23:42:07 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 9723 IP address blocks: 103.72.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1305 (0x519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Validity Not Before: Oct 4 23:42:07 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651df84f-9206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:c0:0d:16:5f:c6:e4:33:e9:1b:c7:d1:11: fe:a5:fa:31:28:02:5f:da:92:13:f9:c7:f0:94:69: d7:aa:72:a5:99:a9:69:a3:ab:be:4e:d4:23:17:da: e5:85:b4:7f:33:c9:a8:b5:1a:34:d0:13:f5:d8:ca: 37:83:e6:2c:e3:23:58:c6:84:40:3b:4a:e8:56:21: 27:1a:f7:52:48:f1:39:2d:73:7f:f3:12:41:f0:8e: 26:15:fc:7b:41:61:a0:3d:be:de:41:b7:e9:87:87: e1:70:7d:92:19:19:c1:f2:5f:7a:a2:68:ee:10:38: 97:7c:07:cd:fa:18:b3:a0:f0:97:3d:59:94:f1:5f: 65:5e:d5:a1:65:67:5a:b3:76:67:9c:81:b4:89:07: d2:32:be:fc:4d:e2:ef:ba:e6:33:2d:28:a3:1a:25: 69:ae:66:9e:0c:82:2e:d0:ed:f1:3e:7e:bb:45:a6: 05:3f:19:5f:f8:7f:6c:9a:f0:e7:0d:ff:6a:63:de: 2b:f9:f4:12:bf:4a:73:85:ac:e2:15:d9:44:fd:85: 4e:c3:f4:74:a8:f7:e1:04:9c:03:fd:34:00:e6:3f: e4:67:05:bd:e0:62:5d:68:df:5f:91:d2:18:b9:74: f3:e0:89:82:a2:50:4e:ef:68:19:7b:a7:63:57:28: 02:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:99:38:1F:19:F3:9E:06:B3:3F:EF:98:2E:4C:AF:4D:96:2A:5A:E4 X509v3 Authority Key Identifier: keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/3DF2A2EC3AB311EC977A5D60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.202.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:b2:19:cc:b6:18:52:97:e2:e9:cc:d6:c9:4c:9c:58:0f:20: 44:6c:97:e2:06:26:be:03:a5:5d:91:22:60:ff:8a:9f:38:65: 0d:15:d9:63:df:db:00:e3:73:75:d3:7d:a7:ad:1a:ef:36:b9: 40:53:f4:d3:22:cb:85:12:b6:ff:62:fa:97:27:1d:37:ff:73: 34:ed:e0:90:de:92:6a:c9:62:f1:08:7d:a5:bf:86:0a:18:c7: 9a:6f:d0:f8:1c:7e:b2:63:45:8b:b9:17:cd:31:25:67:fe:49: 0a:01:e6:e6:f9:13:9a:d6:60:4d:03:35:c0:27:de:e2:d1:a5: ff:76:6d:5a:56:56:16:ac:01:ba:7a:c0:42:47:ba:8c:78:a1: a4:74:df:4d:98:a9:26:43:d9:1b:2e:03:a5:a7:74:3b:8a:a6: 39:dd:20:73:fd:67:df:8b:30:28:b8:41:08:b5:e1:d9:33:3d: 94:84:68:d1:0b:e2:e6:15:57:a6:62:a1:b0:be:ef:f6:2b:89: f4:ec:20:21:21:67:9a:d8:49:d0:81:77:a5:59:dd:0b:39:76: 1e:a8:69:21:66:83:91:a2:eb:d6:94:a3:cf:37:91:45:10:0a: b4:d3:87:81:39:3e:05:b5:d3:bb:a7:6a:13:aa:77:cf:6c:33: e0:74:27:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC QkNENjYwODQwHhcNMjMxMDA0MjM0MjA3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFkZjg0Zi05MjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuW3ADRZfxuQz6RvH0RH+pfoxKAJf2pIT+cfwlGnXqnKlmalpo6u+TtQjF9rl hbR/M8motRo00BP12Mo3g+Ys4yNYxoRAO0roViEnGvdSSPE5LXN/8xJB8I4mFfx7 QWGgPb7eQbfph4fhcH2SGRnB8l96omjuEDiXfAfN+hizoPCXPVmU8V9lXtWhZWda s3ZnnIG0iQfSMr78TeLvuuYzLSijGiVprmaeDIIu0O3xPn67RaYFPxlf+H9smvDn Df9qY94r+fQSv0pzhaziFdlE/YVOw/R0qPfhBJwD/TQA5j/kZwW94GJdaN9fkdIY uXTz4ImColBO72gZe6djVygCtwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKaZOB8Z 854Gsz/vmC5Mr02WKlrkMB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI0MDcvOTAwREZGNUU5MDU5MTFFQjhGMUVFRTEwQzRGOUFFMDIvM0RGMkEyRUMz QUIzMTFFQzk3N0E1RDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnSMowDQYJKoZIhvcNAQELBQADggEBAI2yGcy2GFKX4unM 1slMnFgPIERsl+IGJr4DpV2RImD/ip84ZQ0V2WPf2wDjc3XTfaetGu82uUBT9NMi y4UStv9i+pcnHTf/czTt4JDekmrJYvEIfaW/hgoYx5pv0PgcfrJjRYu5F80xJWf+ SQoB5ub5E5rWYE0DNcAn3uLRpf92bVpWVhasAbp6wEJHuox4oaR0302YqSZD2Rsu A6WndDuKpjndIHP9Z9+LMCi4QQi14dkzPZSEaNEL4uYVV6ZiobC+7/YrifTsICEh Z5rYSdCBd6VZ3Qs5dh6oaSFmg5Gi69aUo883kUUQCrTTh4E5PgW107unahOqd89s M+B0J+8= -----END CERTIFICATE-----Generated at Fri May 17 01:06:58 2024 by rpki-client on console-fra.rpki-client.org