$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3DCB68C8699A11ED98B1CA19C4F9AE02.roa File: 3DCB68C8699A11ED98B1CA19C4F9AE02.roa (raw, json) Hash identifier: d0lPQuu8WiKmVqIHmsQhH+qKgsfP0HH5kvhf0yP/Uio= Subject key identifier: F6:F1:B5:A1:78:06:5B:42:BC:16:B6:E4:6E:21:76:81:4C:C5:C7:EE Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Certificate serial: 11FF Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3DCB68C8699A11ED98B1CA19C4F9AE02.roa Signing time: Fri 28 Jul 2023 17:34:48 +0000 ROA not before: Fri 28 Jul 2023 17:34:48 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 138039 IP address blocks: 103.120.116.0/24 maxlen: 24 103.120.118.0/24 maxlen: 24 103.120.119.0/24 maxlen: 24 2407:1840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 17:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4607 (0x11ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Validity Not Before: Jul 28 17:34:48 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64c3fc38-4d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:4f:a4:c1:a8:64:1a:38:d0:45:85:b1:76: 44:ac:f9:a4:38:3b:84:11:9e:32:6d:d6:55:30:08: 5e:e1:99:5c:ee:90:4b:b5:d0:4e:92:91:1a:55:14: 5b:c6:e1:32:9e:ed:e8:bd:d2:6e:77:81:02:85:86: de:bb:21:e7:d8:ab:f6:e0:8d:f4:12:58:c2:db:86: 07:73:25:23:9b:bb:d2:6a:48:73:e5:ac:0c:7e:bb: b0:c9:db:66:d3:dc:1f:8c:7a:28:2f:16:15:01:d4: 45:fd:bd:6b:16:e5:01:39:76:d8:73:7b:34:b8:90: 0e:9b:77:d3:d5:e5:98:33:23:86:11:5e:c0:b9:96: 61:27:5c:f5:40:2a:ee:89:f9:90:70:98:3e:be:17: 18:4e:da:27:ba:b6:d4:fe:b2:42:bb:46:1f:c0:6b: 13:8d:98:43:1e:4a:41:7c:a2:56:85:d7:dc:ab:8f: 69:fa:23:29:79:74:c1:db:63:40:f7:6f:ef:f2:7d: 18:05:a4:de:d9:fb:44:6b:7e:45:63:e0:2e:d0:ab: e0:22:30:ce:34:e6:48:81:f3:a8:d5:22:c2:d7:3d: 99:91:16:85:13:8a:bf:3c:a1:45:70:08:a3:94:ec: 83:22:e2:d7:70:5f:43:b1:f9:f9:57:cc:97:ed:26: af:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F1:B5:A1:78:06:5B:42:BC:16:B6:E4:6E:21:76:81:4C:C5:C7:EE X509v3 Authority Key Identifier: keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/3DCB68C8699A11ED98B1CA19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.116.0/24 103.120.118.0/23 IPv6: 2407:1840::/32 Signature Algorithm: sha256WithRSAEncryption 20:a9:74:80:ff:5d:8f:5c:ed:b5:de:e7:cc:7b:ea:a6:f4:80: c2:3d:a2:8c:e0:07:d7:ff:4b:f4:28:2b:3d:cc:6c:29:9a:dd: 74:04:cb:e5:b4:38:96:c3:d4:d0:14:ef:f7:dd:35:c8:30:c2: 32:a8:5d:84:22:4e:b5:d6:9e:47:f1:76:41:8e:11:73:75:0a: c5:fc:2f:28:c8:16:30:e0:eb:5a:d7:b3:91:e6:43:50:b7:b8: ef:28:50:61:09:b8:4b:a6:1a:3c:f6:d7:01:5a:8f:e9:f2:a3: 82:12:56:31:d8:f6:48:74:d2:b6:45:98:1e:11:f6:c0:d6:d2: 6e:77:a9:09:73:5f:35:8c:92:6d:9e:2a:5e:e9:3d:1b:58:98: 32:24:a1:07:af:d4:47:e6:ee:b5:46:86:54:fa:77:68:b1:51: 83:b0:a8:5d:66:26:88:7c:73:13:e8:d2:a9:30:63:76:20:3f: 65:c6:eb:68:67:8f:64:01:29:95:eb:b4:b2:c1:a4:a8:94:7a: 39:53:41:c1:0e:ce:09:2b:ee:50:b6:e1:12:1c:a3:57:65:b5: cb:a9:26:c7:75:9f:7b:a1:1b:f0:5d:6b:c6:85:7f:16:a8:57: e4:b5:22:09:30:80:15:e8:7b:c3:55:cd:34:78:90:b0:1d:ca: fe:31:6b:7f -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG MDNBNjA1QzMwHhcNMjMwNzI4MTczNDQ4WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGMzZmMzOC00ZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy19PpMGoZBo40EWFsXZErPmkODuEEZ4ybdZVMAhe4Zlc7pBLtdBOkpEaVRRb xuEynu3ovdJud4EChYbeuyHn2Kv24I30EljC24YHcyUjm7vSakhz5awMfruwydtm 09wfjHooLxYVAdRF/b1rFuUBOXbYc3s0uJAOm3fT1eWYMyOGEV7AuZZhJ1z1QCru ifmQcJg+vhcYTtonurbU/rJCu0YfwGsTjZhDHkpBfKJWhdfcq49p+iMpeXTB22NA 92/v8n0YBaTe2ftEa35FY+Au0KvgIjDONOZIgfOo1SLC1z2ZkRaFE4q/PKFFcAij lOyDIuLXcF9Dsfn5V8yX7SavVQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPbxtaF4 BltCvBa25G4hdoFMxcfuMB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3 NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODA5QUQvNjU2REQyNkFBNzY4MTFFODkzMzNDNzI1QzRGOUFFMDIvM0RDQjY4Qzg2 OTlBMTFFRDk4QjFDQTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABneHQDBAFneHYwDQQCAAIwBwMFACQHGEAwDQYJKoZIhvcN AQELBQADggEBACCpdID/XY9c7bXe58x76qb0gMI9oozgB9f/S/QoKz3MbCma3XQE y+W0OJbD1NAU7/fdNcgwwjKoXYQiTrXWnkfxdkGOEXN1CsX8LyjIFjDg61rXs5Hm Q1C3uO8oUGEJuEumGjz21wFaj+nyo4ISVjHY9kh00rZFmB4R9sDW0m53qQlzXzWM km2eKl7pPRtYmDIkoQev1Efm7rVGhlT6d2ixUYOwqF1mJoh8cxPo0qkwY3YgP2XG 62hnj2QBKZXrtLLBpKiUejlTQcEOzgkr7lC24RIco1dltcupJsd1n3uhG/Bda8aF fxaoV+S1IgkwgBXoe8NVzTR4kLAdyv4xa38= -----END CERTIFICATE-----Generated at Thu May 16 18:26:06 2024 by rpki-client on console-fra.rpki-client.org