$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3BDD23E27CA611EE82D65D19C4F9AE02.roa File: 3BDD23E27CA611EE82D65D19C4F9AE02.roa (raw, json) Hash identifier: DWVN0wHi6QUPs6snWtASAJaDoQXZR8E1QW/cZGA9SNI= Subject key identifier: A9:0E:92:A7:BB:35:72:8E:82:87:0F:F2:7A:36:7D:78:1D:5A:B7:73 Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1C64 Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3BDD23E27CA611EE82D65D19C4F9AE02.roa Signing time: Mon 30 Sep 2024 16:24:19 +0000 ROA not before: Mon 30 Sep 2024 16:24:19 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 141711 IP address blocks: 103.12.120.0/22 maxlen: 22 103.12.120.0/24 maxlen: 24 103.12.121.0/24 maxlen: 24 103.12.122.0/24 maxlen: 24 103.12.123.0/24 maxlen: 24 113.203.200.0/22 maxlen: 22 113.203.200.0/24 maxlen: 24 113.203.201.0/24 maxlen: 24 113.203.202.0/24 maxlen: 24 113.203.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7268 (0x1c64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Sep 30 16:24:19 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fad0b2-c129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:28:9a:d5:98:80:51:88:ac:b6:d8:4c:94:52: 8b:36:bd:1e:c0:77:5e:a5:e6:70:68:28:8a:cb:8f: 5e:c4:56:e5:45:24:66:86:30:60:7c:b1:bb:f2:cd: 28:4e:22:ee:d3:e8:f5:c4:1d:b6:f2:aa:74:a4:ea: 84:b8:c5:ba:d7:c8:2d:3e:5f:81:c1:7e:a4:52:7c: 02:93:ab:7e:fa:bc:c1:db:60:f1:05:99:9f:2d:db: 6f:58:9b:ce:78:8e:b7:c9:0f:5d:85:f2:88:09:33: b0:ad:98:e5:4d:58:c9:c8:4e:28:f3:13:fc:01:b8: 18:6a:80:01:72:85:e7:34:ec:00:3f:13:b5:bc:2e: f3:b0:1b:b3:67:e4:7e:38:47:8c:6d:d3:f5:9a:a0: 14:b1:b3:9f:bf:ee:75:82:a9:9b:08:e3:c2:4a:99: f4:d6:99:0b:2c:2b:6b:a5:9f:d2:a1:74:7a:ad:ed: 32:3a:d5:e7:56:6b:9a:82:a0:74:a7:c0:86:b1:97: f1:23:6e:7a:ff:29:22:fd:cb:15:7b:7e:42:d0:5a: c2:da:dc:7c:55:84:c1:50:14:8c:eb:48:77:98:bb: 4e:3a:c4:84:f9:53:fb:96:cd:9d:34:88:69:2a:ac: de:7d:34:24:76:1d:b2:42:18:71:e7:21:c8:02:a3: 39:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0E:92:A7:BB:35:72:8E:82:87:0F:F2:7A:36:7D:78:1D:5A:B7:73 X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3BDD23E27CA611EE82D65D19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.120.0/22 113.203.200.0/22 Signature Algorithm: sha256WithRSAEncryption d2:0c:04:c6:e5:bc:b3:11:5c:9d:b8:95:ed:01:f7:67:4b:37: d1:3c:b4:d1:ad:ae:2e:75:f5:55:26:a5:ff:07:15:3b:ec:69: 6b:b9:ca:1c:ac:4d:f1:6f:82:a2:02:55:25:ad:dc:13:33:fa: 2c:a4:b3:05:b2:ee:cd:98:cd:9b:51:f2:e9:9e:9d:2f:bc:ce: d3:55:e3:bc:3c:47:0f:54:d9:88:78:91:be:ce:16:ab:fa:cf: 67:8c:6c:4f:ec:4d:0c:53:c9:d1:cf:9c:d3:45:00:f9:dd:7a: e2:67:7b:15:9e:c3:4b:ac:61:45:af:de:56:49:ee:67:c1:75: 9d:3e:01:f9:6c:06:fc:92:11:31:bc:b1:bb:10:7b:20:f2:03: 36:fd:b5:cd:6a:a3:22:ae:fc:a8:76:67:b7:57:47:88:4d:87: 77:d1:d4:4a:fb:ac:7f:b9:cf:1e:09:f4:f8:60:7d:d8:4d:e1: 4a:d2:0c:de:8d:24:c8:cc:c3:a9:cd:9d:15:7f:5c:5b:c3:90: b4:6f:9c:23:56:df:65:f8:3a:0e:ab:14:88:a4:f6:8d:5a:ad: 96:a2:e9:cf:51:1f:9d:2f:6a:77:53:06:bd:56:1a:c5:4a:ee: 90:ca:8e:4b:c2:42:60:e0:ae:b5:0f:c7:b1:ab:cc:27:4b:23: 55:62:8a:1c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjQwOTMwMTYyNDE5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZhZDBiMi1jMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yia1ZiAUYistthMlFKLNr0ewHdepeZwaCiKy49exFblRSRmhjBgfLG78s0o TiLu0+j1xB228qp0pOqEuMW618gtPl+BwX6kUnwCk6t++rzB22DxBZmfLdtvWJvO eI63yQ9dhfKICTOwrZjlTVjJyE4o8xP8AbgYaoABcoXnNOwAPxO1vC7zsBuzZ+R+ OEeMbdP1mqAUsbOfv+51gqmbCOPCSpn01pkLLCtrpZ/SoXR6re0yOtXnVmuagqB0 p8CGsZfxI256/yki/csVe35C0FrC2tx8VYTBUBSM60h3mLtOOsSE+VP7ls2dNIhp KqzefTQkdh2yQhhx5yHIAqM5wQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKkOkqe7 NXKOgocP8no2fXgdWrdzMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E4NEEvMTgwNTE5MUFFMUVGMTFFNjlEMzY1MDFCQzRGOUFFMDIvM0JERDIzRTI3 Q0E2MTFFRTgyRDY1RDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnDHgDBAJxy8gwDQYJKoZIhvcNAQELBQADggEBANIMBMbl vLMRXJ24le0B92dLN9E8tNGtri519VUmpf8HFTvsaWu5yhysTfFvgqICVSWt3BMz +iykswWy7s2YzZtR8umenS+8ztNV47w8Rw9U2Yh4kb7OFqv6z2eMbE/sTQxTydHP nNNFAPndeuJnexWew0usYUWv3lZJ7mfBdZ0+AflsBvySETG8sbsQeyDyAzb9tc1q oyKu/Kh2Z7dXR4hNh3fR1Er7rH+5zx4J9PhgfdhN4UrSDN6NJMjMw6nNnRV/XFvD kLRvnCNW32X4Og6rFIik9o1arZai6c9RH50vandTBr1WGsVK7pDKjkvCQmDgrrUP x7GrzCdLI1Viihw= -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:00 2024 by rpki-client on console-fra.rpki-client.org