$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/DD057E30C32F11ED82655C36C4F9AE02.roa File: DD057E30C32F11ED82655C36C4F9AE02.roa (raw, json) Hash identifier: w/sJ3faEDfbcENeUZ21pDjqrR0eoJ16WZEL19vxq2+k= Subject key identifier: 22:27:7B:CC:16:65:78:1A:7A:42:00:0C:49:4B:72:F6:5B:BC:2B:EB Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Certificate serial: 08B3 Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/DD057E30C32F11ED82655C36C4F9AE02.roa Signing time: Wed 15 Mar 2023 12:49:46 +0000 ROA not before: Wed 15 Mar 2023 12:49:46 +0000 ROA not after: Sun 31 Mar 2024 00:00:00 +0000 asID: 58895 IP address blocks: 103.83.20.0/22 maxlen: 22 103.83.20.0/24 maxlen: 24 103.83.21.0/24 maxlen: 24 103.83.22.0/24 maxlen: 24 103.83.23.0/24 maxlen: 24 123.108.94.0/24 maxlen: 24 123.108.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 May 2023 22:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2227 (0x8b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Validity Not Before: Mar 15 12:49:46 2023 GMT Not After : Mar 31 00:00:00 2024 GMT Subject: CN=6411beea-9e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:31:16:3d:fe:16:04:4a:c9:e1:a6:ea:f4:d1: 1a:97:91:8d:a8:da:ca:0a:2f:fc:1e:b7:ff:15:b6: 2d:d4:1c:48:16:f8:f9:da:f3:b1:63:86:14:34:54: f2:37:64:fe:d1:df:f2:a5:70:50:cf:98:d3:94:48: 26:c1:c1:bb:76:2d:c7:cf:c4:0e:4a:24:23:88:8c: 71:f1:9c:34:d2:99:a2:32:05:4c:7a:fc:49:17:54: 74:dd:a5:70:bd:83:60:57:f9:f0:94:fa:5a:87:a4: f3:bb:93:5a:ff:6f:47:16:69:8f:fb:be:f2:c6:92: 6d:5b:7b:36:10:4f:08:66:ca:9e:4d:50:44:c1:d8: bf:bc:53:68:4e:7e:00:c2:ab:8d:69:76:c4:32:29: 3f:d8:39:4d:05:d0:5f:11:4b:b8:f0:9e:a1:ae:3f: a9:0a:68:78:88:88:eb:48:29:f2:54:53:a5:e7:18: b0:ac:ee:73:be:f0:0d:41:2a:f5:5f:b1:81:5d:5e: 95:ae:62:a0:d1:be:35:9c:57:e5:b8:6b:e4:4d:9f: 36:5f:48:c8:cd:ce:6d:98:27:64:0b:b7:cc:fc:ac: a0:fb:3a:2f:09:08:6a:fc:24:1d:0a:6c:7e:e1:a7: 96:fe:0c:bc:1a:80:99:61:e8:8b:3e:f0:cc:d3:49: 27:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:27:7B:CC:16:65:78:1A:7A:42:00:0C:49:4B:72:F6:5B:BC:2B:EB X509v3 Authority Key Identifier: keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/DD057E30C32F11ED82655C36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.20.0/22 123.108.94.0/23 Signature Algorithm: sha256WithRSAEncryption 80:d2:73:81:19:75:2b:01:29:86:c2:e9:ff:77:43:91:d9:af: 1e:ae:45:d1:9e:09:f6:40:a4:c5:9a:a1:8c:cf:a2:d5:40:e0: e3:14:12:8e:5c:0a:cf:2a:f0:6d:c1:05:7d:c0:82:f6:55:e9: 4e:57:e5:fc:0d:f1:37:3a:3e:8d:55:4f:82:62:86:f5:13:20: 02:8d:ce:45:47:de:c5:8d:7b:97:e0:ce:cc:15:8e:34:d4:b3: d7:54:2b:3d:b8:43:51:ea:56:09:6d:52:be:93:ba:51:0e:a1: 91:06:3f:1a:6d:f2:59:9d:77:91:6f:b8:0d:5d:7b:d7:a2:72: d8:f7:d6:0d:c1:ff:c2:aa:20:72:d7:e8:66:a6:19:99:73:0a: 61:3a:ed:4b:e8:34:b1:c3:d6:a8:7a:35:25:b6:6d:0a:9a:90: 93:89:5c:09:79:0f:a2:1d:7a:b2:55:51:e3:26:2b:48:d0:da: f7:ae:f5:2f:32:e2:60:3a:cd:64:98:bb:34:d4:d3:84:2a:d8: 6b:56:7e:0a:a2:2a:5e:65:61:ad:ef:bc:58:cd:47:dd:cb:51: b6:e0:7f:d8:b3:4a:f5:32:d7:a7:63:89:e0:1e:b4:fd:f4:c8: 81:3f:69:1d:23:ae:4b:09:61:d3:91:0b:61:10:e3:27:28:09: d4:2c:b1:f7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzQ0IxMTAvBgNVBAUTKEVERDJBNjk2ODY4NjUyNTZDOUIwRkRERDZCNzE0OTY2 RDUzNzhGMzMwHhcNMjMwMzE1MTI0OTQ2WhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDExYmVlYS05ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TEWPf4WBErJ4abq9NEal5GNqNrKCi/8Hrf/FbYt1BxIFvj52vOxY4YUNFTy N2T+0d/ypXBQz5jTlEgmwcG7di3Hz8QOSiQjiIxx8Zw00pmiMgVMevxJF1R03aVw vYNgV/nwlPpah6Tzu5Na/29HFmmP+77yxpJtW3s2EE8IZsqeTVBEwdi/vFNoTn4A wquNaXbEMik/2DlNBdBfEUu48J6hrj+pCmh4iIjrSCnyVFOl5xiwrO5zvvANQSr1 X7GBXV6VrmKg0b41nFfluGvkTZ82X0jIzc5tmCdkC7fM/Kyg+zovCQhq/CQdCmx+ 4aeW/gy8GoCZYeiLPvDM00knnwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCIne8wW ZXgaekIADElLcvZbvCvrMB8GA1UdIwQYMBaAFO3SppaGhlJWybD93WtxSWbVN48z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDNDQi9BOUE0MzlGQzY5 QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1VsYkpzUDNkYTNGSlp0VTNq ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkS21sb2FHVWxiSnNQM2RhM0ZKWnRVM2p6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQzQ0IvQTlBNDM5RkM2OUIyMTFFQTk3NzlERDQ4QzRGOUFFMDIvREQwNTdFMzBD MzJGMTFFRDgyNjU1QzM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnUxQDBAF7bF4wDQYJKoZIhvcNAQELBQADggEBAIDSc4EZ dSsBKYbC6f93Q5HZrx6uRdGeCfZApMWaoYzPotVA4OMUEo5cCs8q8G3BBX3AgvZV 6U5X5fwN8Tc6Po1VT4JihvUTIAKNzkVH3sWNe5fgzswVjjTUs9dUKz24Q1HqVglt Ur6TulEOoZEGPxpt8lmdd5FvuA1de9eictj31g3B/8KqIHLX6GamGZlzCmE67Uvo NLHD1qh6NSW2bQqakJOJXAl5D6IderJVUeMmK0jQ2veu9S8y4mA6zWSYuzTU04Qq 2GtWfgqiKl5lYa3vvFjNR93LUbbgf9izSvUy16djieAetP30yIE/aR0jrksJYdOR C2EQ4ycoCdQssfc= -----END CERTIFICATE-----Generated at Wed May 3 13:17:58 2023 by rpki-client on console-ams.rpki-client.org