$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/C3A77BE8391F11EFBFAB6D66C4F9AE02.roa File: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (raw, json) Hash identifier: /2tjWIi0u7oNCgmiDrZKKU8I6bZFjH4t5+cXs2Pyels= Subject key identifier: 92:D7:45:3B:BE:A3:D2:E2:39:07:5D:F9:FD:58:5C:9A:D6:6D:65:A5 Certificate issuer: /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB Certificate serial: 3A Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/C3A77BE8391F11EFBFAB6D66C4F9AE02.roa Signing time: Wed 03 Jul 2024 09:36:46 +0000 ROA not before: Wed 03 Jul 2024 09:36:46 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 16509 IP address blocks: 103.10.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Sep 2024 03:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB Validity Not Before: Jul 3 09:36:46 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66851bae-78ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b9:99:61:47:d1:33:0a:0b:0c:6b:2e:fa:37: b6:c5:3d:92:da:8f:a6:7f:2c:69:5c:5b:1c:3d:c6: 22:a0:c3:9f:9d:60:ba:0c:a7:5a:7d:3b:d7:0a:28: 14:47:89:06:67:3c:98:b8:e2:cd:e8:95:4b:0c:90: 75:dd:7b:b3:fa:99:74:4c:a8:54:1a:64:d7:0b:42: ca:45:d3:53:e0:81:7e:1e:fb:93:9f:aa:55:86:39: 3e:3a:6f:2f:b8:c3:31:90:48:ad:8c:d3:b7:78:bb: 55:f2:2b:ee:58:d1:e6:49:97:f4:91:1a:7a:2c:11: 75:73:a7:6f:2c:60:d9:34:05:a3:2a:56:97:8b:32: ce:9f:5e:a9:26:ae:2e:5a:ba:c0:de:07:54:3d:a6: 08:b8:73:e6:97:ce:1e:50:ef:12:7e:b0:a2:71:04: a3:f5:a6:48:f2:69:74:c2:e4:55:46:ad:7d:66:bc: a1:55:ef:06:be:9b:ea:60:57:e0:3b:a5:e9:b5:a7: 67:f4:60:45:ab:0f:dc:64:47:f3:96:3c:af:72:28: 4d:7d:ea:28:2e:59:94:45:12:f1:06:b5:2d:28:f5: 7e:4f:cd:57:4c:16:30:93:62:a3:bb:96:45:0a:a0: 82:05:78:ec:95:ae:8e:89:3f:fc:2a:58:5b:2c:c0: 0b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D7:45:3B:BE:A3:D2:E2:39:07:5D:F9:FD:58:5C:9A:D6:6D:65:A5 X509v3 Authority Key Identifier: keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/C3A77BE8391F11EFBFAB6D66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.9.0/24 Signature Algorithm: sha256WithRSAEncryption 39:9f:5e:40:d1:b0:95:d5:e0:8c:59:66:56:10:5f:b0:a4:1e: f8:df:71:ca:ab:37:89:13:3c:09:9e:92:70:03:44:ed:68:f3: 7b:9e:a4:7e:49:4b:8f:d9:af:51:b0:f0:a3:48:5d:41:7f:33: e4:e3:92:37:14:8b:58:a9:e9:f8:34:c6:f6:b8:d6:aa:ad:d1: 51:9d:a1:80:88:00:0b:87:0b:81:94:a8:4e:5a:31:1e:e8:8e: 94:dc:ee:f9:22:11:56:a0:6c:62:70:5e:3b:35:52:6f:be:98: 8a:c0:92:27:f1:a8:fa:fd:68:cc:a8:31:fa:be:55:11:5e:2d: 5a:4d:72:31:bb:da:48:1d:79:68:6f:24:c6:47:55:d9:ca:09: bb:ff:3f:ec:59:3c:35:a5:62:6a:29:65:dd:9b:b9:78:95:cc: 62:da:25:cb:25:75:58:d5:0b:91:8a:bc:6a:f7:0f:d9:1c:52: 74:7f:7c:eb:4e:59:30:c1:5b:6f:08:2d:34:7e:27:c9:2b:04: 32:c8:93:9f:33:75:69:c6:86:22:fb:6f:1e:0c:10:3b:59:92: 78:d8:24:ad:16:e4:bd:68:b7:89:a0:26:59:43:59:8f:0c:d3: 29:48:3a:21:00:dc:a2:e7:38:1c:08:71:63:5d:2c:ba:ba:93: a7:d1:3c:36 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjkwNjExMC8GA1UEBRMoNTAzMjcyREEzRUYwQUJFREU5NTM5QzdFMjQzQTFCODY4 NkIxNjFGQjAeFw0yNDA3MDMwOTM2NDZaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ODUxYmFlLTc4Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvuZlhR9EzCgsMay76N7bFPZLaj6Z/LGlcWxw9xiKgw5+dYLoMp1p9O9cKKBRH iQZnPJi44s3olUsMkHXde7P6mXRMqFQaZNcLQspF01PggX4e+5OfqlWGOT46by+4 wzGQSK2M07d4u1XyK+5Y0eZJl/SRGnosEXVzp28sYNk0BaMqVpeLMs6fXqkmri5a usDeB1Q9pgi4c+aXzh5Q7xJ+sKJxBKP1pkjyaXTC5FVGrX1mvKFV7wa+m+pgV+A7 pem1p2f0YEWrD9xkR/OWPK9yKE196iguWZRFEvEGtS0o9X5PzVdMFjCTYqO7lkUK oIIFeOyVro6JP/wqWFsswAuhAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUktdFO76j 0uI5B135/VhcmtZtZaUwHwYDVR0jBBgwFoAUUDJy2j7wq+3pU5x+JDobhoaxYfsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2OTA2LzI4M0E2NjhFRTc3 NjExRUVBQUZGM0U3NEM0RjlBRTAyL1VESnkyajd3cS0zcFU1eC1KRG9iaG9heFlm cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVURKeTJqN3dxLTNwVTV4LUpEb2Job2F4WWZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjkwNi8yODNBNjY4RUU3NzYxMUVFQUFGRjNFNzRDNEY5QUUwMi9DM0E3N0JFODM5 MUYxMUVGQkZBQjZENjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGcKCTANBgkqhkiG9w0BAQsFAAOCAQEAOZ9eQNGwldXgjFlm VhBfsKQe+N9xyqs3iRM8CZ6ScANE7Wjze56kfklLj9mvUbDwo0hdQX8z5OOSNxSL WKnp+DTG9rjWqq3RUZ2hgIgAC4cLgZSoTloxHuiOlNzu+SIRVqBsYnBeOzVSb76Y isCSJ/Go+v1ozKgx+r5VEV4tWk1yMbvaSB15aG8kxkdV2coJu/8/7Fk8NaViaill 3Zu5eJXMYtolyyV1WNULkYq8avcP2RxSdH98605ZMMFbbwgtNH4nySsEMsiTnzN1 acaGIvtvHgwQO1mSeNgkrRbkvWi3iaAmWUNZjwzTKUg6IQDcouc4HAhxY10surqT p9E8Ng== -----END CERTIFICATE-----Generated at Sat Sep 7 08:40:26 2024 by rpki-client on console-fra.rpki-client.org