$ rpki-client -vvf rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/3A96E4AA981011EB9466711FC4F9AE02.roa File: 3A96E4AA981011EB9466711FC4F9AE02.roa (raw, json) Hash identifier: KlKA6Op+nzBkA9ij3QMcUkofpHfcTcCLoERibjlcbn8= Subject key identifier: 5A:99:21:23:6F:6C:8A:8C:38:D3:88:44:D6:21:97:BE:4B:6C:0A:5A Certificate issuer: /CN=A913A0DD/serialNumber=71D332604CD538EA726987AF7E6FE8B870F42FE4 Certificate serial: 0863 Authority key identifier: 71:D3:32:60:4C:D5:38:EA:72:69:87:AF:7E:6F:E8:B8:70:F4:2F:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/3A96E4AA981011EB9466711FC4F9AE02.roa Signing time: Fri 28 Oct 2022 21:47:50 +0000 ROA not before: Fri 28 Oct 2022 21:47:50 +0000 ROA not after: Wed 31 Jan 2024 00:00:00 +0000 asID: 135386 IP address blocks: 103.79.240.0/22 maxlen: 24 2400:4740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.crl rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 May 2023 22:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A0DD/serialNumber=71D332604CD538EA726987AF7E6FE8B870F42FE4 Validity Not Before: Oct 28 21:47:50 2022 GMT Not After : Jan 31 00:00:00 2024 GMT Subject: CN=635c4e05-aa4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:dc:d3:e9:ec:27:15:76:13:92:ee:22:6d: 5c:44:64:16:48:fe:bd:e9:aa:f6:f7:d1:ff:0b:e4: 6a:c0:24:43:03:87:e8:b9:a9:6b:81:3e:06:ff:d8: 43:2e:b4:a5:88:52:6b:06:53:99:d9:25:60:a7:7e: b1:3b:2a:04:41:59:f6:d0:7f:24:7e:ba:2b:a0:74: 4c:4e:9b:b0:bb:fb:52:0c:be:6d:98:12:21:65:dc: 6d:61:f5:60:a4:1f:cf:b0:51:a6:6c:e3:69:03:77: b5:83:55:4e:f1:aa:2e:38:7f:69:94:8b:b7:c9:39: 56:06:91:de:b4:4f:53:a8:8a:59:ae:4e:d5:3e:70: 1c:65:f8:b3:f8:aa:53:ce:a4:9f:b6:3d:6c:72:ba: e0:0e:a5:9b:46:39:87:af:47:93:b7:c1:ea:5b:81: e4:10:04:88:fb:44:aa:74:f0:e5:89:fc:ac:be:b8: 96:ca:55:b5:9c:0c:01:12:6a:c3:b7:fc:61:77:33: ef:eb:1d:37:9f:5d:f3:86:1f:8a:ac:1e:c3:d0:73: d5:d3:ee:f1:64:d1:51:1d:e4:09:16:10:99:82:d6: 79:12:b6:37:5a:49:f1:9a:03:c1:d9:1b:ed:78:06: 48:c8:39:5f:94:8d:2e:34:1c:75:78:19:66:97:58: c2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:99:21:23:6F:6C:8A:8C:38:D3:88:44:D6:21:97:BE:4B:6C:0A:5A X509v3 Authority Key Identifier: keyid:71:D3:32:60:4C:D5:38:EA:72:69:87:AF:7E:6F:E8:B8:70:F4:2F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/3A96E4AA981011EB9466711FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.79.240.0/22 IPv6: 2400:4740::/32 Signature Algorithm: sha256WithRSAEncryption 0a:07:f7:29:75:f8:dd:9a:54:3a:8f:a0:c7:f0:e1:45:91:fe: 79:9d:72:5d:6e:9c:66:a6:a3:a0:d8:b5:4d:a0:16:8b:a5:8b: 30:ab:96:94:68:d2:a2:f2:ef:60:e9:27:a6:c6:10:97:10:a1: 11:18:a3:fe:c5:b7:07:09:67:35:c5:6b:79:fa:7e:2d:2d:6f: ed:01:60:2a:60:6a:24:45:37:e4:1b:e6:ff:58:ed:b7:39:e7: ba:60:8a:c8:a4:44:e4:a8:8c:b6:dd:9d:57:3b:76:6c:79:96: 5c:18:16:81:b3:ae:ba:dc:43:6a:28:f3:3a:a4:5b:24:02:e5: 10:0c:97:27:20:aa:54:0b:cd:e4:86:6c:4b:ed:0f:df:ed:e2: d7:48:4d:e5:6d:51:6f:05:ce:42:af:0f:8c:0e:af:b9:ff:6b: 87:b4:45:02:17:aa:41:f1:0a:a8:14:fe:31:b9:9a:02:21:52: f5:29:62:2b:d0:30:da:f6:89:b2:52:42:43:7b:2b:26:a9:08: 86:51:de:65:db:e9:db:98:b4:06:2b:43:4e:f3:34:23:80:ff: 28:0b:37:fe:6e:87:44:df:29:38:13:23:07:ab:3c:5d:ba:3e: db:dd:d6:a7:36:04:9c:4d:7b:91:e2:79:ca:72:93:b8:9a:68: 4d:e1:00:a3 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0EwREQxMTAvBgNVBAUTKDcxRDMzMjYwNENENTM4RUE3MjY5ODdBRjdFNkZFOEI4 NzBGNDJGRTQwHhcNMjIxMDI4MjE0NzUwWhcNMjQwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02MzVjNGUwNS1hYTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOfc0+nsJxV2E5LuIm1cRGQWSP696ar299H/C+RqwCRDA4foualrgT4G/9hD LrSliFJrBlOZ2SVgp36xOyoEQVn20H8kfroroHRMTpuwu/tSDL5tmBIhZdxtYfVg pB/PsFGmbONpA3e1g1VO8aouOH9plIu3yTlWBpHetE9TqIpZrk7VPnAcZfiz+KpT zqSftj1scrrgDqWbRjmHr0eTt8HqW4HkEASI+0SqdPDlifysvriWylW1nAwBEmrD t/xhdzPv6x03n13zhh+KrB7D0HPV0+7xZNFRHeQJFhCZgtZ5ErY3WknxmgPB2Rvt eAZIyDlflI0uNBx1eBlml1jCbwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFqZISNv bIqMONOIRNYhl75LbApaMB8GA1UdIwQYMBaAFHHTMmBM1TjqcmmHr35v6Lhw9C/k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTBERC8yMTQzM0NEMjY4 MzMxMUVBQThBNzMyNzhDNEY5QUUwMi9jZE15WUV6Vk9PcHlhWWV2Zm1fb3VIRDBM LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NkTXlZRXpWT09weWFZZXZmbV9vdUhEMEwtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0EwREQvMjE0MzNDRDI2ODMzMTFFQUE4QTczMjc4QzRGOUFFMDIvM0E5NkU0QUE5 ODEwMTFFQjk0NjY3MTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnT/AwDQQCAAIwBwMFACQAR0AwDQYJKoZIhvcNAQELBQAD ggEBAAoH9yl1+N2aVDqPoMfw4UWR/nmdcl1unGamo6DYtU2gFoulizCrlpRo0qLy 72DpJ6bGEJcQoREYo/7FtwcJZzXFa3n6fi0tb+0BYCpgaiRFN+Qb5v9Y7bc557pg isikROSojLbdnVc7dmx5llwYFoGzrrrcQ2oo8zqkWyQC5RAMlycgqlQLzeSGbEvt D9/t4tdITeVtUW8FzkKvD4wOr7n/a4e0RQIXqkHxCqgU/jG5mgIhUvUpYivQMNr2 ibJSQkN7KyapCIZR3mXb6duYtAYrQ07zNCOA/ygLN/5uh0TfKTgTIwerPF26Ptvd 1qc2BJxNe5Hiecpyk7iaaE3hAKM= -----END CERTIFICATE-----Generated at Wed May 3 13:18:03 2023 by rpki-client on console-ams.rpki-client.org