$ rpki-client -vvf rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/3BABBD7699E611EAB3C00943C4F9AE02.roa File: 3BABBD7699E611EAB3C00943C4F9AE02.roa (raw, json) Hash identifier: ofC7tglYcEt0K5DgsHyHVWTgOvFGFcBwV3e64Pwy/mA= Subject key identifier: 25:7D:96:4F:FA:A6:22:EC:05:C6:AE:59:B6:80:07:C0:62:04:14:2B Certificate issuer: /CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Certificate serial: 088F Authority key identifier: 77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/3BABBD7699E611EAB3C00943C4F9AE02.roa Signing time: Fri 08 Mar 2024 21:29:38 +0000 ROA not before: Fri 08 Mar 2024 21:29:38 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 63916 IP address blocks: 43.245.220.0/22 maxlen: 22 43.245.220.0/24 maxlen: 24 43.245.221.0/24 maxlen: 24 43.245.223.0/24 maxlen: 24 103.209.100.0/24 maxlen: 24 103.209.101.0/24 maxlen: 24 103.209.102.0/24 maxlen: 24 103.209.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Validity Not Before: Mar 8 21:29:38 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65eb8342-336b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:40:b4:54:d8:ed:b8:df:66:68:e7:5c:c4:d1: a5:21:31:47:42:cc:9e:67:bc:ca:c4:c2:fd:4a:f3: 38:62:c7:d4:85:a3:09:ad:ad:d2:f8:03:d1:51:04: dd:aa:97:8d:b2:be:f6:ee:04:ea:0d:eb:f4:c3:e2: 79:29:33:d8:c0:db:24:89:8c:eb:0b:44:48:51:4f: 1f:d7:8f:fa:4e:2e:c2:f1:07:24:a3:91:41:20:60: 7f:7c:a7:30:33:44:a2:cc:87:d7:62:05:00:e0:6c: 12:f2:d9:93:54:d3:44:0e:10:d2:69:5e:64:1e:3e: 55:65:e0:53:60:7b:eb:19:2b:f0:ec:3b:00:73:42: 8d:0a:1e:ad:91:37:0f:eb:74:fd:f0:97:c1:9a:f5: 0f:f4:53:50:37:cd:9a:79:6f:ea:f6:06:89:08:3c: d4:de:ca:16:db:52:27:64:2f:6a:13:fa:e2:81:44: c8:43:d3:cd:0a:30:b6:0b:55:fb:27:df:b7:dc:8b: 36:8d:fd:7b:fb:de:a7:15:62:fd:2b:6c:5d:60:eb: f5:e6:31:a2:4d:41:52:b9:61:4c:c5:f5:0a:02:82: ba:3f:d9:8a:01:81:30:4f:a5:ca:5c:cc:60:a1:7a: 4f:bc:71:21:76:04:70:8d:ec:ba:62:f1:bb:78:56: 0b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7D:96:4F:FA:A6:22:EC:05:C6:AE:59:B6:80:07:C0:62:04:14:2B X509v3 Authority Key Identifier: keyid:77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/3BABBD7699E611EAB3C00943C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.220.0/22 103.209.100.0/22 Signature Algorithm: sha256WithRSAEncryption 45:f2:83:b2:dd:eb:1c:8d:e5:5b:64:cf:0c:96:dd:72:0d:7c: 79:d4:d5:5c:2e:4b:d4:6d:b7:6e:76:f1:9e:d7:43:b2:28:96: 6e:67:3c:a3:56:3d:56:8d:40:21:dc:9d:5d:a4:10:6f:d2:6b: 36:d7:75:59:66:bd:de:42:3c:9f:8d:2c:c2:6c:c7:dc:40:07: 95:8c:a1:b2:89:ca:06:f4:34:21:b2:f9:13:34:14:f2:89:51: f7:4f:87:30:14:19:52:6f:d6:c4:d2:45:b0:8b:e7:4b:f4:fa: 33:c1:95:9d:ea:7d:f9:d6:3b:e1:34:db:b1:db:52:3c:4f:91: e7:21:a6:13:6a:99:52:42:98:21:a0:f2:57:71:c3:f1:ba:88: 53:09:da:40:5c:c1:32:15:16:af:b4:b2:3c:a6:c8:f0:e0:45: c4:46:61:09:d3:e9:c5:fc:5d:41:c6:24:f7:80:6e:57:57:08: a3:41:50:bd:59:f9:ca:bd:59:0a:79:72:a5:2f:4a:b3:b6:a5: 83:dc:84:29:9b:c3:ef:5d:f9:62:4e:5a:b4:4c:9b:d6:39:92: c6:53:77:5a:eb:b6:96:f2:6d:e7:23:a1:41:46:be:ef:73:ad: 3f:41:ae:b5:50:22:ee:0c:1c:6e:81:4c:b5:cf:ef:d8:b4:80: 2b:f3:b4:e3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzNDIxMTAvBgNVBAUTKDc3REEyNDgwMDRFOEM1ODcyQkRGNzJCQUMxMjIyQzdD Q0I2RThFMzcwHhcNMjQwMzA4MjEyOTM4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWViODM0Mi0zMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EC0VNjtuN9maOdcxNGlITFHQsyeZ7zKxML9SvM4YsfUhaMJra3S+APRUQTd qpeNsr727gTqDev0w+J5KTPYwNskiYzrC0RIUU8f14/6Ti7C8Qcko5FBIGB/fKcw M0SizIfXYgUA4GwS8tmTVNNEDhDSaV5kHj5VZeBTYHvrGSvw7DsAc0KNCh6tkTcP 63T98JfBmvUP9FNQN82aeW/q9gaJCDzU3soW21InZC9qE/rigUTIQ9PNCjC2C1X7 J9+33Is2jf17+96nFWL9K2xdYOv15jGiTUFSuWFMxfUKAoK6P9mKAYEwT6XKXMxg oXpPvHEhdgRwjey6YvG7eFYLyQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCV9lk/6 piLsBcauWbaAB8BiBBQrMB8GA1UdIwQYMBaAFHfaJIAE6MWHK99yusEiLHzLbo43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjM0Mi9CREY4OTA4MDk5 RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZY3IzM0s2d1NJc2ZNdHVq amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q5b2tnQVRveFljcjMzSzZ3U0lzZk10dWpqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTYzNDIvQkRGODkwODA5OUU0MTFFQTg5QTRDMjQwQzRGOUFFMDIvM0JBQkJENzY5 OUU2MTFFQUIzQzAwOTQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr9dwDBAJn0WQwDQYJKoZIhvcNAQELBQADggEBAEXyg7Ld 6xyN5VtkzwyW3XINfHnU1VwuS9Rtt2528Z7XQ7Iolm5nPKNWPVaNQCHcnV2kEG/S azbXdVlmvd5CPJ+NLMJsx9xAB5WMobKJygb0NCGy+RM0FPKJUfdPhzAUGVJv1sTS RbCL50v0+jPBlZ3qffnWO+E027HbUjxPkechphNqmVJCmCGg8ldxw/G6iFMJ2kBc wTIVFq+0sjymyPDgRcRGYQnT6cX8XUHGJPeAbldXCKNBUL1Z+cq9WQp5cqUvSrO2 pYPchCmbw+9d+WJOWrRMm9Y5ksZTd1rrtpbybecjoUFGvu9zrT9BrrVQIu4MHG6B TLXP79i0gCvztOM= -----END CERTIFICATE-----Generated at Thu May 16 22:23:36 2024 by rpki-client on console-fra.rpki-client.org