$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/BA3A46C28D3211EB9BFE873BC4F9AE02.roa File: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (raw, json) Hash identifier: S0GYpjLrgBpDIxgc7Mwd0gNWlzaxzYWlC58o46vrKZQ= Subject key identifier: D6:61:55:46:87:16:F4:C9:F0:69:F9:CA:54:2D:4D:E4:14:4B:42:2A Certificate issuer: /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0 Certificate serial: 0D75 Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/BA3A46C28D3211EB9BFE873BC4F9AE02.roa Signing time: Thu 04 Jan 2024 18:36:30 +0000 ROA not before: Thu 04 Jan 2024 18:36:30 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 38199 IP address blocks: 103.7.68.0/22 maxlen: 22 120.138.80.0/20 maxlen: 20 163.47.88.0/22 maxlen: 22 221.133.32.0/21 maxlen: 21 221.133.40.0/21 maxlen: 21 223.27.128.0/20 maxlen: 20 2402:9a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3445 (0xd75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0 Validity Not Before: Jan 4 18:36:30 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6596faae-aeb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:3b:1a:85:01:4a:ae:15:45:ab:32:50:3e: 24:ad:d8:93:21:9e:d7:c8:e8:db:7c:e2:0f:29:c3: 5b:c7:88:5a:6e:dd:8b:71:37:ef:00:5b:10:22:ce: 23:06:1f:6b:8b:15:71:00:fa:63:7f:d0:9c:43:c6: 96:03:69:2c:22:90:d5:d5:86:84:c3:0b:22:44:5a: 82:8c:5d:ed:0f:4d:fb:0c:9e:d4:b9:23:42:10:1f: ae:f7:f8:0d:94:38:25:cc:a7:87:3b:02:e9:d0:72: ee:cc:ec:a5:d1:a8:44:bc:13:bb:62:e9:94:06:a0: 2b:5c:6e:e4:ba:51:7c:a2:c2:83:ee:4f:5c:ff:f9: 12:ca:8e:6b:bd:2b:17:ef:56:b4:e2:29:c1:1e:79: 04:4b:da:a1:af:41:d4:2b:99:57:06:fc:f5:7c:91: 14:5a:f9:03:be:8d:a3:fd:de:75:cf:f2:37:f0:48: 69:b9:c3:b1:8c:a2:d8:1c:b2:dd:7b:11:23:b9:f4: 83:bb:8e:f5:88:45:81:b2:84:88:a4:98:8f:b1:5b: 14:cb:0b:f8:0f:2c:0c:8d:4c:e8:ea:d3:95:8b:35: b8:a9:01:35:a7:64:b9:ef:ed:5f:5d:8b:45:50:22: 86:09:0a:d7:e7:26:d8:1e:99:c5:cb:7c:61:91:bc: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:61:55:46:87:16:F4:C9:F0:69:F9:CA:54:2D:4D:E4:14:4B:42:2A X509v3 Authority Key Identifier: keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/BA3A46C28D3211EB9BFE873BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.7.68.0/22 120.138.80.0/20 163.47.88.0/22 221.133.32.0/20 223.27.128.0/20 IPv6: 2402:9a00::/32 Signature Algorithm: sha256WithRSAEncryption 09:92:fc:24:3e:db:7d:88:5e:07:99:84:6a:cd:f1:82:6a:de: bd:c8:84:4b:95:d1:3f:e0:ec:fd:2e:31:db:20:04:48:2c:ad: 3b:7d:cc:93:89:8e:97:16:a6:9c:72:7e:79:9e:9c:4f:fb:82: 5a:12:1b:9f:62:5c:a5:78:7e:12:db:45:f5:5a:ca:a0:a6:83: de:b0:21:21:5a:1a:8e:d1:0a:d2:df:62:3b:32:53:e7:81:f4: 4c:a6:24:f0:db:93:ea:67:65:ce:3c:33:08:52:1c:6f:e6:6b: 81:f4:e8:a1:c7:4a:f3:38:67:54:64:0b:e3:60:29:a6:ec:a1: 08:cd:87:d1:06:35:8a:c2:d3:0d:af:94:ca:52:42:aa:32:ea: c3:46:a2:b6:2f:79:83:b6:c3:a7:ce:f9:fa:98:9c:b5:e7:77: e6:d6:0a:24:08:20:eb:54:3f:1c:26:c2:41:9d:2f:db:c1:64: a6:a6:d5:0d:68:e8:49:e2:1f:31:5b:83:23:6e:f9:c6:9b:dc: 4f:62:04:5f:fa:e2:f3:20:74:f8:6c:8d:96:dc:d3:f7:48:ac: 94:b1:42:c9:1f:b9:b4:be:70:b5:42:cb:16:74:94:87:b5:07: dc:96:02:34:6c:c2:4e:43:84:10:ec:aa:65:ef:e4:2b:86:e8: 61:4e:7a:4c -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICDXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxRDcxMTAvBgNVBAUTKDExMzYxOEIwRDQxMDY4MkFDMDZBOTAxRDY1QkI5QUM5 NTVFRDg5RTAwHhcNMjQwMTA0MTgzNjMwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk2ZmFhZS1hZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz187GoUBSq4VRasyUD4krdiTIZ7XyOjbfOIPKcNbx4habt2LcTfvAFsQIs4j Bh9rixVxAPpjf9CcQ8aWA2ksIpDV1YaEwwsiRFqCjF3tD037DJ7UuSNCEB+u9/gN lDglzKeHOwLp0HLuzOyl0ahEvBO7YumUBqArXG7kulF8osKD7k9c//kSyo5rvSsX 71a04inBHnkES9qhr0HUK5lXBvz1fJEUWvkDvo2j/d51z/I38EhpucOxjKLYHLLd exEjufSDu471iEWBsoSIpJiPsVsUywv4DywMjUzo6tOVizW4qQE1p2S57+1fXYtF UCKGCQrX5ybYHpnFy3xhkby3AwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFNZhVUaH FvTJ8Gn5ylQtTeQUS0IqMB8GA1UdIwQYMBaAFBE2GLDUEGgqwGqQHWW7mslV7Yng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTFENy82OEYwOTI5MjlF MkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFDckFhcEFkWmJ1YXlWWHRp ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VUWVlzTlFRYUNyQWFwQWRaYnVheVZYdGllQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTUxRDcvNjhGMDkyOTI5RTJGMTFFOUIyRTUyODBBQzRGOUFFMDIvQkEzQTQ2QzI4 RDMyMTFFQjlCRkU4NzNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAJnB0QDBAR4ilADBAKjL1gDBATdhSADBATfG4AwDQQCAAIw BwMFACQCmgAwDQYJKoZIhvcNAQELBQADggEBAAmS/CQ+232IXgeZhGrN8YJq3r3I hEuV0T/g7P0uMdsgBEgsrTt9zJOJjpcWppxyfnmenE/7gloSG59iXKV4fhLbRfVa yqCmg96wISFaGo7RCtLfYjsyU+eB9EymJPDbk+pnZc48MwhSHG/ma4H06KHHSvM4 Z1RkC+NgKabsoQjNh9EGNYrC0w2vlMpSQqoy6sNGorYveYO2w6fO+fqYnLXnd+bW CiQIIOtUPxwmwkGdL9vBZKam1Q1o6EniHzFbgyNu+cab3E9iBF/64vMgdPhsjZbc 0/dIrJSxQskfubS+cLVCyxZ0lIe1B9yWAjRswk5DhBDsqmXv5CuG6GFOekw= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org