$ rpki-client -vvf rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/3D69458C9E2111E9BCDFAE69C4F9AE02.roa File: 3D69458C9E2111E9BCDFAE69C4F9AE02.roa (raw, json) Hash identifier: JgAzd4b/Exw3WmYoicyj95VsDOgmvLq+AR0pC67cCiA= Subject key identifier: 2E:94:B4:6D:9A:35:F4:B8:81:AC:87:B4:2E:A9:5C:C0:E8:34:7E:B2 Certificate issuer: /CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Certificate serial: 0D23 Authority key identifier: 3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/3D69458C9E2111E9BCDFAE69C4F9AE02.roa Signing time: Mon 14 Aug 2023 18:35:40 +0000 ROA not before: Mon 14 Aug 2023 18:35:40 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 62707 IP address blocks: 103.140.164.0/23 maxlen: 24 2404:ffc0::/32 maxlen: 32 2404:ffc0::/48 maxlen: 48 2404:ffc0:1::/48 maxlen: 48 2404:ffc0:2::/48 maxlen: 48 2404:ffc0:3::/48 maxlen: 48 2404:ffc0:4::/48 maxlen: 48 2404:ffc0:5::/48 maxlen: 48 2404:ffc0:6::/48 maxlen: 48 2404:ffc0:7::/48 maxlen: 48 2404:ffc0:8::/48 maxlen: 48 2404:ffc0:9::/48 maxlen: 48 2404:ffc0:a::/48 maxlen: 48 2404:ffc0:b::/48 maxlen: 48 2404:ffc0:c::/48 maxlen: 48 2404:ffc0:d::/48 maxlen: 48 2404:ffc0:e::/48 maxlen: 48 2404:ffc0:f::/48 maxlen: 48 2404:ffc0:10::/48 maxlen: 48 2404:ffc0:11::/48 maxlen: 48 2404:ffc0:12::/48 maxlen: 48 2404:ffc0:13::/48 maxlen: 48 2404:ffc0:14::/48 maxlen: 48 2404:ffc0:15::/48 maxlen: 48 2404:ffc0:16::/48 maxlen: 48 2404:ffc0:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Validity Not Before: Aug 14 18:35:40 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64da73fc-04ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:52:43:3f:5a:2a:40:55:ac:8b:70:40:d3: 1e:92:99:a1:0a:69:38:36:35:9f:e6:39:7b:75:5e: 4c:b8:67:4c:1a:52:f8:6f:c1:e8:3b:10:1c:61:3b: e8:00:48:66:97:6e:9a:71:cc:35:03:f3:0e:c4:48: 3c:fb:01:bc:4b:bf:5a:f7:10:73:49:8b:1a:b0:cc: c8:39:22:5e:65:bf:31:a3:ac:b7:22:a9:7b:5c:3e: 60:9f:d2:0d:29:73:14:a8:7e:09:58:88:bd:27:65: 0e:dd:5c:67:f7:ac:ba:a1:89:00:a2:ff:22:2a:5c: 43:2d:7b:65:10:9f:92:83:88:d9:48:2e:9c:99:32: 3f:af:35:67:48:cc:48:f4:74:fd:42:d9:6a:8f:c1: 26:51:9b:b5:ab:d7:84:ca:7d:3d:f2:d5:6d:ed:75: 1f:f0:d9:f6:98:a9:7e:bb:dd:30:99:fc:43:44:17: dd:bf:90:3c:8f:7e:f4:e5:0b:1c:49:c1:95:f8:79: 8d:4a:94:0e:a1:94:11:67:29:10:bc:ef:eb:c9:a2: a9:4a:2a:f7:25:d2:d5:d7:95:37:58:f6:3a:20:2e: d2:ab:d1:da:02:18:de:43:85:9f:5f:33:c6:8a:8f: 86:10:fa:6c:7d:51:27:b2:fc:98:e4:b1:a1:bf:77: a3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:94:B4:6D:9A:35:F4:B8:81:AC:87:B4:2E:A9:5C:C0:E8:34:7E:B2 X509v3 Authority Key Identifier: keyid:3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/3D69458C9E2111E9BCDFAE69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.164.0/23 IPv6: 2404:ffc0::/32 Signature Algorithm: sha256WithRSAEncryption 09:2d:96:3b:33:91:4f:dc:72:a5:43:ee:b9:2f:de:4e:86:da: 88:e7:a1:e6:05:28:f2:f3:42:52:0c:f1:25:c2:70:28:0c:e6: ba:89:be:91:26:66:99:58:c6:a5:4f:07:61:d3:ca:ca:8b:4d: a0:3c:0a:14:49:c6:d2:6b:42:b6:30:06:8f:49:6d:3e:81:07: bc:ac:07:2d:a1:28:5f:8b:e9:93:f7:a2:00:7a:36:f9:40:d6: e3:51:5c:c6:a4:97:56:dc:5b:5c:b5:e0:37:b4:9a:6c:a7:58: e8:10:04:80:c5:71:36:a6:5c:7a:41:4e:b7:5d:c9:24:80:e3: c9:c4:82:06:6c:54:cf:62:52:ee:b2:62:40:4d:04:21:35:00: e0:62:00:1c:7c:bb:f0:e9:08:f1:25:74:28:2e:b6:08:23:3a: 2b:64:27:fa:eb:85:1b:41:51:81:f2:8a:ff:03:55:3a:df:08: 83:67:3d:4d:da:50:04:a9:19:1e:e0:81:53:08:85:b6:2c:e2: 67:97:38:21:e1:41:f8:51:f9:75:87:0f:be:ae:d0:f4:bf:6f: 55:57:77:8d:f4:f3:ea:26:c9:67:79:88:bd:c7:9f:f1:c4:2d: a9:f1:dd:ad:d8:f4:43:1e:07:b1:92:34:88:70:fd:c1:f9:17: 9a:26:05:7b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VBRTYxMTAvBgNVBAUTKDNEMzRGMUVBNTlFREIwODZGMTczMzRENTk5RTkzMTBE NzFGRTA3NDQwHhcNMjMwODE0MTgzNTQwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRhNzNmYy0wNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQ9SQz9aKkBVrItwQNMekpmhCmk4NjWf5jl7dV5MuGdMGlL4b8HoOxAcYTvo AEhml26accw1A/MOxEg8+wG8S79a9xBzSYsasMzIOSJeZb8xo6y3Iql7XD5gn9IN KXMUqH4JWIi9J2UO3Vxn96y6oYkAov8iKlxDLXtlEJ+Sg4jZSC6cmTI/rzVnSMxI 9HT9Qtlqj8EmUZu1q9eEyn098tVt7XUf8Nn2mKl+u90wmfxDRBfdv5A8j3705Qsc ScGV+HmNSpQOoZQRZykQvO/ryaKpSir3JdLV15U3WPY6IC7Sq9HaAhjeQ4WfXzPG io+GEPpsfVEnsvyY5LGhv3ejLQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFC6UtG2a NfS4gayHtC6pXMDoNH6yMB8GA1UdIwQYMBaAFD008epZ7bCG8XM01ZnpMQ1x/gdE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUFFNi83QkMyOTMyNjlC RjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJYnhjelRWbWVreERYSC1C MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUVHg2bG50c0lieGN6VFZtZWt4RFhILUIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VBRTYvN0JDMjkzMjY5QkY5MTFFOUFBNkQ4NDUzQzRGOUFFMDIvM0Q2OTQ1OEM5 RTIxMTFFOUJDREZBRTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnjKQwDQQCAAIwBwMFACQE/8AwDQYJKoZIhvcNAQELBQAD ggEBAAktljszkU/ccqVD7rkv3k6G2ojnoeYFKPLzQlIM8SXCcCgM5rqJvpEmZplY xqVPB2HTysqLTaA8ChRJxtJrQrYwBo9JbT6BB7ysBy2hKF+L6ZP3ogB6NvlA1uNR XMakl1bcW1y14De0mmynWOgQBIDFcTamXHpBTrddySSA48nEggZsVM9iUu6yYkBN BCE1AOBiABx8u/DpCPEldCgutggjOitkJ/rrhRtBUYHyiv8DVTrfCINnPU3aUASp GR7ggVMIhbYs4meXOCHhQfhR+XWHD76u0PS/b1VXd4308+omyWd5iL3Hn/HELanx 3a3Y9EMeB7GSNIhw/cH5F5omBXs= -----END CERTIFICATE-----Generated at Thu May 16 20:25:40 2024 by rpki-client on console-ams.rpki-client.org