$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/3D870D1C685F11EEA29D9F4BC4F9AE02.roa File: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (raw, json) Hash identifier: Qz5iGzyNOrGCX937jX4aRAOwunW0lhpKpg9tUyKFo7U= Subject key identifier: 8C:67:69:BE:7E:56:C0:E2:0D:6D:6F:87:D5:FC:6E:87:FB:86:93:DB Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 15 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/3D870D1C685F11EEA29D9F4BC4F9AE02.roa Signing time: Wed 11 Oct 2023 17:54:36 +0000 ROA not before: Wed 11 Oct 2023 17:54:36 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 151791 IP address blocks: 103.72.64.0/24 maxlen: 24 2001:df2:e840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Oct 11 17:54:36 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6526e15c-ea6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:fd:fe:90:7f:a3:90:a8:ca:cc:b5:f4:01: ff:ab:62:13:f8:cd:3d:59:94:59:d3:4f:ac:69:4c: 7f:f2:6d:1d:fa:cc:64:53:9b:a6:94:02:3d:44:01: 21:ee:c4:1a:3f:7e:7a:da:02:11:15:bd:da:bd:d5: a3:b5:26:06:12:73:f7:a2:3e:ef:56:a9:56:68:ca: 00:50:ed:6d:18:81:e1:77:3d:06:39:90:d1:96:10: 1a:0e:ed:1b:6c:69:b3:85:1b:73:d9:60:9e:98:3e: 24:76:28:53:ff:f7:68:ce:86:84:b4:3c:74:08:5a: 0d:b6:a1:b9:6a:db:c9:4e:cb:0b:f3:0e:41:40:4b: 1e:6b:f1:86:79:b2:a7:92:4f:c1:bc:4f:11:be:98: d6:3f:64:ae:c6:28:93:9c:92:48:7e:1d:b5:46:2d: b9:12:6b:ab:28:ec:19:3b:68:16:a9:35:b9:61:c2: ba:4d:14:77:ba:c7:c5:9a:12:61:0e:e9:52:fb:c9: da:2d:67:a8:55:74:d0:9f:70:94:6e:46:44:10:61: a7:b8:c2:2f:32:61:e2:80:be:77:49:c3:79:83:48: 76:c9:64:61:42:bb:03:03:fb:55:d2:2e:f8:90:e1: 53:36:8b:84:1b:b1:94:a2:96:d4:78:66:4b:45:cc: 2a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:67:69:BE:7E:56:C0:E2:0D:6D:6F:87:D5:FC:6E:87:FB:86:93:DB X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/3D870D1C685F11EEA29D9F4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.64.0/24 IPv6: 2001:df2:e840::/48 Signature Algorithm: sha256WithRSAEncryption 91:e6:b8:9b:da:93:4f:e2:d7:0f:fb:e7:17:47:a3:52:ee:d9: be:f8:d8:5c:4d:2b:8d:a7:50:87:e2:9a:b1:4b:ca:4e:ec:39: 98:73:62:ab:fc:ad:f9:9f:48:51:44:ee:96:f1:ea:ed:40:7e: 64:00:b9:19:67:78:d1:23:3f:8b:75:5d:55:e4:27:b7:0d:a4: 46:f9:fa:70:1f:cf:d4:45:07:9f:7b:3c:87:c7:ca:93:23:7f: d7:6e:d3:a8:ba:ab:d0:11:db:96:fa:97:0c:28:68:29:24:45: 49:18:fa:03:3f:a8:83:59:7a:dc:71:ab:01:ce:5f:25:dd:c4: 1b:e7:a2:e1:5b:52:ce:55:79:45:e0:48:a7:64:46:d3:9c:7a: 9a:62:4d:94:01:e0:34:d3:32:9b:e1:e4:01:83:b5:99:13:b4: 8e:c8:af:fe:1b:9b:29:09:57:28:16:f5:12:aa:bb:4f:3e:ab: 59:49:27:4a:f1:72:7a:7b:e6:82:89:0a:f6:73:76:92:ed:50: cd:10:0f:e6:5e:b7:c1:37:f2:27:2d:b1:54:ea:a3:e5:96:9f: ca:c6:1a:d7:9a:16:51:b4:63:5d:7b:0f:b3:ab:02:70:65:36: 2a:0b:6d:1d:d3:e6:67:6b:c1:06:de:5b:65:90:11:5a:a0:4d: 7a:b8:0b:ef -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RkYyNTExMC8GA1UEBRMoRjExRjI0OUI4MjFERkNDMkIxQjk3QUY0RTcwNTI2REQ5 MzNBMTI3RDAeFw0yMzEwMTExNzU0MzZaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MjZlMTVjLWVhNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2n/3+kH+jkKjKzLX0Af+rYhP4zT1ZlFnTT6xpTH/ybR36zGRTm6aUAj1EASHu xBo/fnraAhEVvdq91aO1JgYSc/eiPu9WqVZoygBQ7W0YgeF3PQY5kNGWEBoO7Rts abOFG3PZYJ6YPiR2KFP/92jOhoS0PHQIWg22oblq28lOywvzDkFASx5r8YZ5sqeS T8G8TxG+mNY/ZK7GKJOckkh+HbVGLbkSa6so7Bk7aBapNblhwrpNFHe6x8WaEmEO 6VL7ydotZ6hVdNCfcJRuRkQQYae4wi8yYeKAvndJw3mDSHbJZGFCuwMD+1XSLviQ 4VM2i4QbsZSiltR4ZktFzCrJAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUjGdpvn5W wOINbW+H1fxuh/uGk9swHwYDVR0jBBgwFoAU8R8km4Id/MKxuXr05wUm3ZM6En0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGRjI1LzYwNjRCQUIyNTJG NDExRUU4OThCOUI0M0M0RjlBRTAyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVu MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFI4a200SWRfTUt4dVhyMDV3VW0zWk02RW4wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi8zRDg3MEQxQzY4 NUYxMUVFQTI5RDlGNEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAGdIQDAPBAIAAjAJAwcAIAEN8uhAMA0GCSqGSIb3DQEBCwUA A4IBAQCR5rib2pNP4tcP++cXR6NS7tm++NhcTSuNp1CH4pqxS8pO7DmYc2Kr/K35 n0hRRO6W8ertQH5kALkZZ3jRIz+LdV1V5Ce3DaRG+fpwH8/URQefezyHx8qTI3/X btOouqvQEduW+pcMKGgpJEVJGPoDP6iDWXrccasBzl8l3cQb56LhW1LOVXlF4Ein ZEbTnHqaYk2UAeA00zKb4eQBg7WZE7SOyK/+G5spCVcoFvUSqrtPPqtZSSdK8XJ6 e+aCiQr2c3aS7VDNEA/mXrfBN/InLbFU6qPllp/KxhrXmhZRtGNdew+zqwJwZTYq C20d0+Zna8EG3ltlkBFaoE16uAvv -----END CERTIFICATE-----Generated at Fri Jun 7 08:56:37 2024 by rpki-client on console-fra.rpki-client.org