$ rpki-client -vvf rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa File: 3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa (raw, json) Hash identifier: di3lTW+SGjtdOdKQhu7ngXS2N/Oh8YrYx17MC5hYJgM= Subject key identifier: B5:37:5D:20:E4:9B:63:BF:71:FA:2E:50:E6:2C:01:19:8B:E4:07:17 Certificate issuer: /CN=A913D03A/serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0 Certificate serial: 06BF Authority key identifier: DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa Signing time: Wed 10 Jul 2024 06:57:50 +0000 ROA not before: Wed 10 Jul 2024 06:57:50 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135376 IP address blocks: 103.84.97.0/24 maxlen: 24 103.139.179.0/24 maxlen: 24 103.215.210.0/24 maxlen: 24 103.215.211.0/24 maxlen: 24 103.216.160.0/24 maxlen: 24 185.193.212.0/24 maxlen: 24 185.193.213.0/24 maxlen: 24 185.193.214.0/24 maxlen: 24 185.193.215.0/24 maxlen: 24 202.3.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1727 (0x6bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D03A/serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0 Validity Not Before: Jul 10 06:57:50 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=668e30ee-a08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:28:c3:b5:d7:9c:eb:8d:71:34:fd:40:a2:50: 67:00:b1:9b:16:50:0f:b8:51:07:cd:a8:5d:58:5f: 33:10:41:0b:df:e4:24:a3:98:07:e4:5b:45:76:3f: df:ad:af:0b:36:74:32:df:82:1b:55:85:f4:59:bf: a5:f3:ad:c5:8e:2f:24:b0:94:48:5b:2c:d6:f4:57: 44:47:c8:47:03:d8:87:b8:d1:5c:cf:89:d0:4f:fc: 9e:34:02:41:a2:4d:01:ae:33:6a:f0:20:a9:ba:48: 97:8a:1f:0a:86:e7:bd:e4:67:db:40:ef:47:af:d0: 05:44:93:91:26:19:ff:8d:ce:52:23:bd:ba:1e:0f: 06:eb:b6:22:3b:38:da:80:af:43:77:aa:f6:fb:68: 47:0f:58:77:98:22:e2:93:01:98:76:e7:19:52:17: 58:ea:49:8e:31:9b:a5:2a:d4:d8:ff:97:d3:0f:fe: bb:1b:0c:a7:56:ad:c0:c7:fd:9f:58:f1:1d:04:ef: 7d:c2:5b:f9:84:75:67:24:6c:ce:5c:36:9b:77:58: 8a:b9:e0:77:e2:b5:bf:2f:56:ae:cd:39:86:bb:2e: 8f:c4:fd:ba:58:78:c2:7e:f5:8b:24:68:6a:c3:90: 00:a8:85:e6:4b:29:b8:80:74:d7:f5:ff:81:1c:1b: 03:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:37:5D:20:E4:9B:63:BF:71:FA:2E:50:E6:2C:01:19:8B:E4:07:17 X509v3 Authority Key Identifier: keyid:DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.97.0/24 103.139.179.0/24 103.215.210.0/23 103.216.160.0/24 185.193.212.0/22 202.3.76.0/24 Signature Algorithm: sha256WithRSAEncryption 86:57:20:6d:75:4b:e7:7a:ef:46:d7:40:41:0f:9a:9c:57:ad: b7:6c:15:18:4a:c0:27:9c:5e:64:f1:a3:d7:54:4a:88:7b:40: e9:42:c6:0b:00:68:66:a1:e4:74:8f:78:d6:97:a5:e7:ba:d4: 8f:55:0e:15:9c:7f:3b:a1:66:92:99:7d:d7:96:3f:77:7b:81: 19:96:c4:f9:48:57:bc:c6:d1:35:b2:71:38:9e:c4:2c:fd:e1: a1:6f:47:06:15:0c:01:d4:81:7c:2f:f1:0e:70:2d:35:83:52: 74:7f:8e:86:60:ef:db:1c:f7:9a:17:14:25:e9:bb:7f:c5:37: 1b:19:3c:f9:76:23:33:2c:c7:bd:3a:e0:3c:58:f8:b1:bc:4c: 77:a3:45:78:7f:1c:96:b5:3e:80:6b:0f:2d:9e:65:e6:2d:81: 18:44:a1:57:61:14:f7:18:26:66:4d:17:7a:db:c6:e2:b1:84: 7b:f3:29:81:66:f1:1f:ea:36:24:03:89:6e:85:04:b0:53:e0: 38:25:93:64:93:a4:58:5a:40:91:d9:e8:ca:3b:2e:f6:3f:17: a1:ef:91:5d:83:75:ef:66:8c:44:0e:42:86:a2:04:74:ac:f3: 6d:02:c6:e1:f6:6b:74:b3:96:df:c6:27:c8:33:74:09:8e:ad: 31:59:30:d2 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICBr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwM0ExMTAvBgNVBAUTKERCQkU5QkZDN0Y4QTNEM0JFMDVCQjVCNjAyMUY3NTQ1 QkU5ODFCRjAwHhcNMjQwNzEwMDY1NzUwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjhlMzBlZS1hMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySjDtdec641xNP1AolBnALGbFlAPuFEHzahdWF8zEEEL3+Qko5gH5FtFdj/f ra8LNnQy34IbVYX0Wb+l863Fji8ksJRIWyzW9FdER8hHA9iHuNFcz4nQT/yeNAJB ok0BrjNq8CCpukiXih8Khue95GfbQO9Hr9AFRJORJhn/jc5SI726Hg8G67YiOzja gK9Dd6r2+2hHD1h3mCLikwGYducZUhdY6kmOMZulKtTY/5fTD/67GwynVq3Ax/2f WPEdBO99wlv5hHVnJGzOXDabd1iKueB34rW/L1auzTmGuy6PxP26WHjCfvWLJGhq w5AAqIXmSym4gHTX9f+BHBsD5wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFLU3XSDk m2O/cfouUOYsARmL5AcXMB8GA1UdIwQYMBaAFNu+m/x/ij074Fu1tgIfdUW+mBvw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAzQS85MjZCNDNFODIx OTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BUdmdXN1cyQWg5MVJiNllH X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI3NmJfSC1LUFR2Z1c3VzJBaDkxUmI2WUdfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0QwM0EvOTI2QjQzRTgyMTkwMTFFQjgyQTQxQjQ4QzRGOUFFMDIvM0E5RjNBREMy MzRBMTFFQkEwQzQwQzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBABnVGEDBABni7MDBAFn19IDBABn2KADBAK5wdQDBADKA0ww DQYJKoZIhvcNAQELBQADggEBAIZXIG11S+d670bXQEEPmpxXrbdsFRhKwCecXmTx o9dUSoh7QOlCxgsAaGah5HSPeNaXpee61I9VDhWcfzuhZpKZfdeWP3d7gRmWxPlI V7zG0TWycTiexCz94aFvRwYVDAHUgXwv8Q5wLTWDUnR/joZg79sc95oXFCXpu3/F NxsZPPl2IzMsx7064DxY+LG8THejRXh/HJa1PoBrDy2eZeYtgRhEoVdhFPcYJmZN F3rbxuKxhHvzKYFm8R/qNiQDiW6FBLBT4Dglk2STpFhaQJHZ6Mo7LvY/F6HvkV2D de9mjEQOQoaiBHSs820CxuH2a3Szlt/GJ8gzdAmOrTFZMNI= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org