$ rpki-client -vvf rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa File: 3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa (raw, json) Hash identifier: /qosAUFjTR/Oysa3vkH6q4cvDQEajvhVRt1iG/L2ATQ= Subject key identifier: 32:0C:4C:83:41:A5:CA:1C:53:64:B3:81:07:8E:86:4E:AB:0F:69:F1 Certificate issuer: /CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Certificate serial: 1538 Authority key identifier: EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa Signing time: Sat 30 Sep 2023 17:14:32 +0000 ROA not before: Sat 30 Sep 2023 17:14:32 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 136757 IP address blocks: 103.89.38.0/23 maxlen: 23 103.239.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5432 (0x1538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2 Validity Not Before: Sep 30 17:14:32 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65185777-c810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:54:e4:48:ff:6d:33:62:5c:d9:17:d0:34: 6b:3d:3d:d5:d5:1c:6a:b8:77:88:64:17:5a:05:5f: e4:43:6a:97:97:6f:22:9b:39:ef:bf:28:f1:44:0d: c6:f1:5b:33:52:cc:0a:db:47:f4:46:c3:58:21:d6: 74:ca:5f:70:f7:5d:32:8c:96:15:7b:62:7d:9d:dc: 7a:47:d0:2c:f1:93:c4:42:65:73:e9:cf:4b:f2:04: f8:8d:b1:a8:3a:73:fc:80:57:cc:c1:e1:ae:60:e4: 67:5e:51:4f:8d:67:6a:01:2d:de:d3:ab:42:5a:da: fa:bf:5d:a8:54:58:37:56:98:aa:6f:fa:d3:03:3f: 86:8e:75:dd:a7:02:da:d7:94:5a:33:03:37:8c:ce: c0:80:17:3f:f3:06:c8:2f:58:35:a7:75:22:0c:ea: 06:7e:73:19:4b:58:ce:62:26:6e:54:5e:a8:a0:0c: c2:ca:d7:69:54:a6:c4:1d:73:42:87:91:c1:56:91: 60:0e:bd:ed:99:6a:1e:4f:bf:5d:c0:5f:da:3d:67: 54:2f:15:da:22:09:27:72:3b:66:74:94:8e:0b:a2: f2:52:59:d0:99:ac:7e:da:e2:7f:b1:65:48:ce:66: 7f:d3:e5:86:b2:3c:0c:a3:4a:07:04:8a:05:e0:cf: 89:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0C:4C:83:41:A5:CA:1C:53:64:B3:81:07:8E:86:4E:AB:0F:69:F1 X509v3 Authority Key Identifier: keyid:EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.38.0/23 103.239.106.0/23 Signature Algorithm: sha256WithRSAEncryption b1:5d:08:b7:4b:f5:7d:a7:25:84:46:53:1e:a8:45:9d:63:4b: bf:83:c7:c7:4d:44:74:93:8d:90:33:80:a1:5a:85:f1:83:c7: b5:6e:a8:40:6b:d5:a7:e6:8a:0c:ab:fb:d1:a5:1a:44:dd:4d: 05:ed:c8:b2:bb:c2:40:f6:5f:61:f3:9d:20:fd:1e:1d:55:2e: c3:b4:fa:66:ea:8c:4e:13:51:f9:74:04:86:9b:2d:71:1b:17: ab:44:7e:f8:af:98:47:5a:ac:90:ac:50:0b:ee:2f:52:d2:97: 47:4f:c6:93:d8:e9:e5:98:66:01:fc:e0:ff:d1:29:2d:47:0c: c9:07:83:ab:f9:68:0a:5a:8e:9d:cb:b3:cf:3b:41:63:9c:b4: a6:05:90:59:48:ca:60:de:d0:cc:d7:b6:3f:c7:4b:c1:ef:d1: cb:73:dd:de:23:79:67:c0:4f:25:9f:b0:a7:76:5f:93:c5:9b: ba:ba:13:dc:c2:94:18:d6:15:36:90:1a:91:aa:59:3d:0b:d1: e0:68:d0:fa:7c:3d:41:0f:c3:fd:8b:0c:c0:bb:a8:f7:4b:44: f9:62:e6:e9:4d:2e:0a:04:16:d9:64:f1:1c:e9:50:62:b8:6a: a5:ff:e0:7b:a6:fe:2b:b7:e2:6c:86:b3:c5:60:89:d4:90:d6: 0c:93:09:9e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICFTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIyQzMxMTAvBgNVBAUTKEVBRDM2QTdEMzBCMDY2MTU2QjgwMzAyNUFBQUE1RkY5 MjdBRDc1QzIwHhcNMjMwOTMwMTcxNDMyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE4NTc3Ny1jODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtO1U5Ej/bTNiXNkX0DRrPT3V1RxquHeIZBdaBV/kQ2qXl28imznvvyjxRA3G 8VszUswK20f0RsNYIdZ0yl9w910yjJYVe2J9ndx6R9As8ZPEQmVz6c9L8gT4jbGo OnP8gFfMweGuYORnXlFPjWdqAS3e06tCWtr6v12oVFg3Vpiqb/rTAz+GjnXdpwLa 15RaMwM3jM7AgBc/8wbIL1g1p3UiDOoGfnMZS1jOYiZuVF6ooAzCytdpVKbEHXNC h5HBVpFgDr3tmWoeT79dwF/aPWdULxXaIgkncjtmdJSOC6LyUlnQmax+2uJ/sWVI zmZ/0+WGsjwMo0oHBIoF4M+JnQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDIMTINB pcocU2SzgQeOhk6rD2nxMB8GA1UdIwQYMBaAFOrTan0wsGYVa4AwJaqqX/knrXXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjJDMy8xNTIzRDJFNDA3 QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1poVnJnREFscXFwZi1TZXRk Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0TnFmVEN3WmhWcmdEQWxxcXBmLVNldGRjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzIyQzMvMTUyM0QyRTQwN0FCMTFFOEFFNURGRTY0QzRGOUFFMDIvM0I3RUJBNUM3 RDc0MTFFQkFFRkI5MDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnWSYDBAFn72owDQYJKoZIhvcNAQELBQADggEBALFdCLdL 9X2nJYRGUx6oRZ1jS7+Dx8dNRHSTjZAzgKFahfGDx7VuqEBr1afmigyr+9GlGkTd TQXtyLK7wkD2X2HznSD9Hh1VLsO0+mbqjE4TUfl0BIabLXEbF6tEfvivmEdarJCs UAvuL1LSl0dPxpPY6eWYZgH84P/RKS1HDMkHg6v5aApajp3Ls887QWOctKYFkFlI ymDe0MzXtj/HS8Hv0ctz3d4jeWfATyWfsKd2X5PFm7q6E9zClBjWFTaQGpGqWT0L 0eBo0Pp8PUEPw/2LDMC7qPdLRPli5ulNLgoEFtlk8RzpUGK4aqX/4Hum/iu34myG s8VgidSQ1gyTCZ4= -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org