$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/3A6CB168758811EA93AADD3FC4F9AE02.roa File: 3A6CB168758811EA93AADD3FC4F9AE02.roa (raw, json) Hash identifier: vZA2+KWBR1wDSvH4IKxEBdO5KRub7QRUaZOldm9+tP8= Subject key identifier: 79:FF:12:A5:22:E1:59:D3:B7:FE:D0:FA:65:78:3C:0F:FE:F2:13:EA Certificate issuer: /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Certificate serial: 312E Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/3A6CB168758811EA93AADD3FC4F9AE02.roa Signing time: Mon 18 Mar 2024 15:51:56 +0000 ROA not before: Mon 18 Mar 2024 15:51:56 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 58890 IP address blocks: 45.120.38.0/23 maxlen: 23 45.120.38.0/24 maxlen: 24 45.120.39.0/24 maxlen: 24 103.19.130.0/23 maxlen: 23 103.19.130.0/24 maxlen: 24 103.19.131.0/24 maxlen: 24 103.62.144.0/23 maxlen: 23 103.62.144.0/24 maxlen: 24 103.62.145.0/24 maxlen: 24 202.74.48.0/24 maxlen: 24 203.82.218.0/24 maxlen: 24 2404:6180::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12590 (0x312e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Validity Not Before: Mar 18 15:51:56 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=65f8631c-bc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:0b:39:00:5e:fa:f4:27:32:54:b0:de:25: 59:79:b0:af:1a:7d:0b:59:ac:97:5b:23:dc:6f:b5: f8:1f:5e:d0:67:20:0b:7f:75:aa:6d:d3:bf:96:d8: e1:cf:d2:ea:3b:bd:36:14:fc:a1:89:18:18:c8:74: a5:fd:5d:34:53:38:ee:b9:d1:c0:8f:7c:96:02:8f: 02:cb:24:3c:99:9d:dc:6b:dd:14:a2:67:fd:5b:b3: 90:e1:a8:1b:6f:4d:72:e0:b3:33:a0:09:fc:26:ab: 2d:36:1e:c0:a7:8e:9a:b0:d8:8d:4c:03:ab:62:02: 38:1a:a2:19:fe:5c:32:d6:bf:24:2e:82:10:15:ac: 64:92:9b:c6:5f:22:51:b0:f8:92:29:45:8c:f3:39: 61:93:eb:07:1f:a5:e4:08:98:b4:d0:e9:7b:2c:98: 00:c8:29:cd:44:67:d8:40:c4:1b:8c:d9:11:94:e9: 39:eb:68:bf:ad:43:64:7a:e5:9e:10:9f:9e:fd:eb: 74:81:05:f7:cb:ab:53:13:fa:7e:8c:2c:03:18:18: 9c:00:51:85:f8:0c:b2:1f:15:82:37:45:c4:2a:07: 4b:a1:d6:e8:41:88:75:e0:a6:4b:4b:33:19:9e:7b: a9:f3:3a:bc:c7:a0:cb:49:1b:bb:f0:14:74:d1:ad: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FF:12:A5:22:E1:59:D3:B7:FE:D0:FA:65:78:3C:0F:FE:F2:13:EA X509v3 Authority Key Identifier: keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/3A6CB168758811EA93AADD3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.38.0/23 103.19.130.0/23 103.62.144.0/23 202.74.48.0/24 203.82.218.0/24 IPv6: 2404:6180::/32 Signature Algorithm: sha256WithRSAEncryption 74:a4:57:f1:12:f1:fa:ca:19:38:c2:11:56:19:d2:25:b8:da: 48:59:52:18:86:1c:53:a8:70:6c:c6:cf:ad:c1:90:45:33:92: 95:53:ff:d0:d8:fa:0f:54:61:7d:c8:fe:c9:18:86:f3:45:97: dd:54:16:fc:46:a4:b8:b2:99:02:b1:87:c3:5d:70:00:49:7e: 2e:c8:10:95:1f:fd:e5:c4:47:b6:5e:d5:1f:04:ec:c5:42:a0: 5a:aa:ed:19:a7:27:1f:6a:2b:88:1b:09:41:40:5e:39:c6:ca: 8a:04:39:a7:24:32:38:9b:d6:ff:f6:89:0f:e8:a0:8a:d5:8f: 47:ce:35:ed:ce:de:f7:ee:b0:f4:66:ff:7b:99:59:72:52:55: 14:e2:89:5f:b8:e9:80:b5:93:a0:03:bd:22:47:96:fb:76:4c: 8e:84:9d:55:4e:7d:64:c9:b6:91:67:b8:1a:0d:4a:a4:4c:cb: aa:b8:e2:9a:30:ad:7a:7b:41:6c:6f:47:fd:15:10:82:54:28: df:59:f5:30:47:38:0b:d1:e7:83:0c:58:6e:05:74:4e:e2:73: c7:ec:3b:2e:a7:52:60:30:0c:8b:5b:b9:1b:40:22:8c:db:f5: f1:99:df:9e:2c:d0:85:08:c3:30:dc:0a:d8:d0:6a:79:21:68: 24:7a:57:28 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICMS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0NDcxMTAvBgNVBAUTKEE4M0M2RUNFMjIzM0I2Q0I4Q0MwRUI2MTNGMEE5NTJD ODMzQzAzQTEwHhcNMjQwMzE4MTU1MTU2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWY4NjMxYy1iYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WQLOQBe+vQnMlSw3iVZebCvGn0LWayXWyPcb7X4H17QZyALf3WqbdO/ltjh z9LqO702FPyhiRgYyHSl/V00UzjuudHAj3yWAo8CyyQ8mZ3ca90Uomf9W7OQ4agb b01y4LMzoAn8JqstNh7Ap46asNiNTAOrYgI4GqIZ/lwy1r8kLoIQFaxkkpvGXyJR sPiSKUWM8zlhk+sHH6XkCJi00Ol7LJgAyCnNRGfYQMQbjNkRlOk562i/rUNkeuWe EJ+e/et0gQX3y6tTE/p+jCwDGBicAFGF+AyyHxWCN0XEKgdLodboQYh14KZLSzMZ nnup8zq8x6DLSRu78BR00a3sfQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFHn/EqUi 4VnTt/7Q+mV4PA/+8hPqMB8GA1UdIwQYMBaAFKg8bs4iM7bLjMDrYT8KlSyDPAOh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQ0Ny84MUIwRjE1QzlD NzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRzdU13T3RoUHdxVkxJTThB NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEeHV6aUl6dHN1TXdPdGhQd3FWTElNOEE2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU0NDcvODFCMEYxNUM5Qzc3MTFFMkE5ODM0OERGMkY1QTc3NTQvM0E2Q0IxNjg3 NTg4MTFFQTkzQUFERDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAEteCYDBAFnE4IDBAFnPpADBADKSjADBADLUtowDQQCAAIw BwMFACQEYYAwDQYJKoZIhvcNAQELBQADggEBAHSkV/ES8frKGTjCEVYZ0iW42khZ UhiGHFOocGzGz63BkEUzkpVT/9DY+g9UYX3I/skYhvNFl91UFvxGpLiymQKxh8Nd cABJfi7IEJUf/eXER7Ze1R8E7MVCoFqq7RmnJx9qK4gbCUFAXjnGyooEOackMjib 1v/2iQ/ooIrVj0fONe3O3vfusPRm/3uZWXJSVRTiiV+46YC1k6ADvSJHlvt2TI6E nVVOfWTJtpFnuBoNSqRMy6q44powrXp7QWxvR/0VEIJUKN9Z9TBHOAvR54MMWG4F dE7ic8fsOy6nUmAwDItbuRtAIozb9fGZ354s0IUIwzDcCtjQankhaCR6Vyg= -----END CERTIFICATE-----Generated at Sat May 18 17:20:04 2024 by rpki-client on console-ams.rpki-client.org