$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/3475F1CEB3EE11EC80E9531CC4F9AE02.roa File: 3475F1CEB3EE11EC80E9531CC4F9AE02.roa (raw, json) Hash identifier: ySIGrE2LJRqWPqFDljJ5jXZYGB51ppypR+/f6FKmPPE= Subject key identifier: 95:59:CC:EB:F2:E0:CB:A2:00:79:7A:FE:DC:DC:A3:51:91:32:56:C2 Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Certificate serial: 06D6 Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/3475F1CEB3EE11EC80E9531CC4F9AE02.roa Signing time: Tue 16 May 2023 20:31:04 +0000 ROA not before: Tue 16 May 2023 20:31:04 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138917 IP address blocks: 103.137.40.0/24 maxlen: 24 103.143.148.0/24 maxlen: 24 2001:df0:1880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Sep 2023 09:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Validity Not Before: May 16 20:31:04 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6463e807-9c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:49:8f:35:a7:3c:a8:07:46:66:22:d7:77: 11:a3:77:c7:5d:a5:14:0a:57:3c:9b:05:bb:bf:f9: 54:c9:d3:c4:50:51:f4:f3:d1:6f:b2:b5:5a:6a:1e: 23:bf:eb:e6:59:04:ab:95:67:4c:07:47:86:a2:a3: 77:03:a3:0b:7f:e9:9e:15:26:a8:1b:2d:a9:cc:a5: 67:63:9f:e6:4e:68:f8:04:22:80:84:c4:9f:75:f5: 25:dd:90:e5:02:2c:fb:08:62:e5:2f:6e:d9:97:38: ab:3e:89:33:a9:f8:cf:7a:ae:2c:15:6c:c9:62:26: 73:11:27:c6:bd:ae:bf:c3:61:5e:82:33:96:51:0c: d6:1c:c8:57:62:3e:fb:09:12:ba:ea:91:d8:fb:e3: 5d:2d:42:5b:58:3a:74:72:5c:a3:21:c0:f8:21:1d: 7d:04:48:7f:e4:ed:8a:73:bc:f8:38:17:39:92:5c: 31:c4:c3:c5:0d:a9:9d:ee:f1:6e:f6:4f:1a:c7:82: 9d:54:87:f0:9d:70:1f:80:c4:53:54:e9:a8:fb:f2: e0:ec:7e:23:f2:9c:24:64:66:90:f2:7f:5b:c2:7c: 03:7c:ac:c9:e3:68:5e:d0:6c:64:d1:fb:ae:72:41: 28:2b:2b:58:54:f3:95:ad:44:c4:e3:38:1c:3c:39: da:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:59:CC:EB:F2:E0:CB:A2:00:79:7A:FE:DC:DC:A3:51:91:32:56:C2 X509v3 Authority Key Identifier: keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/3475F1CEB3EE11EC80E9531CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.40.0/24 103.143.148.0/24 IPv6: 2001:df0:1880::/48 Signature Algorithm: sha256WithRSAEncryption 9b:17:eb:f4:fa:cb:07:03:1f:4e:8f:9c:b3:f2:37:f0:a4:7d: f2:86:5b:91:4c:c0:c4:89:b8:c5:7d:34:f5:cf:30:20:76:09: 0e:cb:22:77:f5:ed:98:78:2a:69:06:ba:ef:15:db:8a:25:b2: 17:e2:d4:ac:c7:b2:81:2b:f4:a5:b6:94:75:c1:e7:23:b8:32: 8b:85:0b:f9:f2:86:7f:71:82:93:82:d7:2d:fb:21:de:aa:a7: 98:bc:53:1f:f4:9a:75:09:4e:6d:dd:4d:06:c1:ba:4d:67:f5: c0:0d:b9:33:c2:b0:b8:a5:1c:2d:9a:4a:1e:db:06:6a:6f:82: 7e:d3:a7:a4:7e:25:b0:35:fb:c9:5e:95:1d:e0:48:f4:60:38: 9c:ff:16:6b:da:5d:fc:50:f6:f2:e0:db:ae:61:a8:87:a6:89: 57:68:6b:c3:f2:41:5d:e5:b8:62:03:04:15:37:f3:e8:f7:1b: 15:50:fd:3d:2a:eb:97:36:d2:79:20:bf:75:06:11:6d:c2:a1: a3:29:08:18:69:bd:88:d0:9b:8a:3f:6d:32:90:a8:f0:d9:f1: ed:c8:c4:b0:6d:1d:dd:b0:7e:70:af:be:0b:aa:3b:fa:40:9d: 35:cf:1e:48:39:29:2d:e6:d7:68:27:39:2f:85:28:0b:21:fb: c6:00:8f:b4 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw NDJCRUFDNTYwHhcNMjMwNTE2MjAzMTA0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYzZTgwNy05YzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva5JjzWnPKgHRmYi13cRo3fHXaUUClc8mwW7v/lUydPEUFH089FvsrVaah4j v+vmWQSrlWdMB0eGoqN3A6MLf+meFSaoGy2pzKVnY5/mTmj4BCKAhMSfdfUl3ZDl Aiz7CGLlL27ZlzirPokzqfjPeq4sFWzJYiZzESfGva6/w2FegjOWUQzWHMhXYj77 CRK66pHY++NdLUJbWDp0clyjIcD4IR19BEh/5O2Kc7z4OBc5klwxxMPFDamd7vFu 9k8ax4KdVIfwnXAfgMRTVOmo+/Lg7H4j8pwkZGaQ8n9bwnwDfKzJ42he0Gxk0fuu ckEoKytYVPOVrUTE4zgcPDnaEQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJVZzOvy 4MuiAHl6/tzco1GRMlbCMB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA5REMvQTVCQkZBQTYwOTM1MTFFQUFCMTBDOTFGQzRGOUFFMDIvMzQ3NUYxQ0VC M0VFMTFFQzgwRTk1MzFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABniSgDBABnj5QwDwQCAAIwCQMHACABDfAYgDANBgkqhkiG 9w0BAQsFAAOCAQEAmxfr9PrLBwMfTo+cs/I38KR98oZbkUzAxIm4xX009c8wIHYJ Dssid/XtmHgqaQa67xXbiiWyF+LUrMeygSv0pbaUdcHnI7gyi4UL+fKGf3GCk4LX Lfsh3qqnmLxTH/SadQlObd1NBsG6TWf1wA25M8KwuKUcLZpKHtsGam+CftOnpH4l sDX7yV6VHeBI9GA4nP8Wa9pd/FD28uDbrmGoh6aJV2hrw/JBXeW4YgMEFTfz6Pcb FVD9PSrrlzbSeSC/dQYRbcKhoykIGGm9iNCbij9tMpCo8Nnx7cjEsG0d3bB+cK++ C6o7+kCdNc8eSDkpLebXaCc5L4UoCyH7xgCPtA== -----END CERTIFICATE-----Generated at Tue Sep 5 10:12:23 2023 by rpki-client on console-ams.rpki-client.org