$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B6B60A0BE0311EA970FD245C4F9AE02.roa File: 3B6B60A0BE0311EA970FD245C4F9AE02.roa (raw, json) Hash identifier: ys3x/qKaybsT1ORv92PaenqjVIC436SMSV/sk90N1Bw= Subject key identifier: 37:70:9D:F5:49:5E:C2:A4:3D:92:C5:89:AB:D9:73:C9:42:BB:A6:80 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C0E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B6B60A0BE0311EA970FD245C4F9AE02.roa Signing time: Wed 10 May 2023 16:22:40 +0000 ROA not before: Wed 10 May 2023 16:22:40 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135800 IP address blocks: 103.78.180.0/22 maxlen: 22 103.78.180.0/24 maxlen: 24 103.78.181.0/24 maxlen: 24 103.78.182.0/24 maxlen: 24 103.78.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27662 (0x6c0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:22:40 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc4d0-b808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9d:49:6d:ef:a8:1c:0b:ac:27:2f:ec:cd:eb: 60:22:6f:02:29:98:73:bf:1b:19:e1:f9:d3:32:ac: f2:78:59:be:a4:ec:c7:4f:7b:11:3e:f2:72:6d:81: cd:56:75:e8:6c:a8:6d:56:5d:e3:98:55:4c:43:59: 3c:0f:3c:fe:c4:0b:48:d0:b1:0b:41:08:1e:12:89: ba:ba:c3:8c:37:35:b3:65:c7:9f:73:8a:98:e1:5b: 59:ef:9a:8d:83:d1:08:db:a4:26:9d:46:0e:b2:31: e8:c5:73:1e:5f:09:65:0e:9f:dd:6a:a4:f4:d3:df: 72:43:be:a4:2e:20:25:70:9e:11:89:df:f3:4f:19: 1c:ac:0d:1f:4d:1d:61:a1:23:95:73:a5:0f:79:22: 46:a1:31:e6:33:2b:08:37:80:3d:6f:8f:97:e5:4d: 52:3d:a8:6f:2e:5f:da:ec:33:20:c8:9c:33:15:08: 54:24:1b:a9:de:ae:88:5e:31:25:15:ac:76:fa:b1: 3a:7d:e4:37:a0:39:3e:1a:9b:bb:08:04:75:48:fb: d7:8b:30:d9:de:09:87:9e:5a:c0:a3:50:85:32:51: 8d:80:0d:d4:f3:09:9e:78:02:06:6c:95:70:82:a4: e7:f5:25:c4:04:0a:b8:11:88:23:83:d1:a0:d3:2a: 38:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:70:9D:F5:49:5E:C2:A4:3D:92:C5:89:AB:D9:73:C9:42:BB:A6:80 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B6B60A0BE0311EA970FD245C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.78.180.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:d9:dc:91:7c:c4:89:75:22:76:28:0a:77:36:18:ca:78:72: 6c:51:62:88:95:e7:cb:21:87:e9:39:28:50:65:6a:59:85:c6: f9:bf:ac:6d:52:44:d1:b6:12:4e:58:e7:df:48:a9:85:45:28: 71:71:ad:47:ed:ba:2b:50:74:e0:ed:05:78:ad:b2:68:c2:b8: d2:87:b1:5b:55:73:2c:f1:c6:82:74:a4:22:b0:10:ba:59:1a: 61:f0:92:9d:cc:10:3d:e1:3d:24:d2:63:13:67:19:f5:27:0c: 24:6f:10:0a:23:00:15:a4:44:81:67:40:fe:be:e1:90:d1:d6: ca:6c:dc:9e:28:c3:c5:29:d4:13:81:3c:7e:07:65:d4:a9:00: f8:d8:fa:e2:e0:a9:2f:08:56:97:fd:a1:09:b8:00:fe:07:cf: 69:ed:bc:c4:a8:01:7b:23:ce:fe:66:6f:98:fe:82:17:1c:e4: fc:51:b2:23:82:e4:3d:5f:12:cf:7a:9e:f2:2b:63:c0:80:5c: a1:eb:af:36:e4:d8:7f:fd:38:95:3a:8b:51:cb:78:62:c3:38: e0:42:5e:33:30:22:a4:ef:da:06:f5:09:ce:81:24:73:e5:1b: 68:23:d3:70:80:36:1a:a4:68:6f:74:47:b0:a2:18:22:7e:d9: 5c:45:2c:67 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICbA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMjQwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzRkMC1iODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxp1Jbe+oHAusJy/szetgIm8CKZhzvxsZ4fnTMqzyeFm+pOzHT3sRPvJybYHN VnXobKhtVl3jmFVMQ1k8Dzz+xAtI0LELQQgeEom6usOMNzWzZcefc4qY4VtZ75qN g9EI26QmnUYOsjHoxXMeXwllDp/daqT0099yQ76kLiAlcJ4Rid/zTxkcrA0fTR1h oSOVc6UPeSJGoTHmMysIN4A9b4+X5U1SPahvLl/a7DMgyJwzFQhUJBup3q6IXjEl Fax2+rE6feQ3oDk+Gpu7CAR1SPvXizDZ3gmHnlrAo1CFMlGNgA3U8wmeeAIGbJVw gqTn9SXEBAq4EYgjg9Gg0yo4BwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDdwnfVJ XsKkPZLFiavZc8lCu6aAMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0I2QjYwQTBC RTAzMTFFQTk3MEZEMjQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnTrQwDQYJKoZIhvcNAQELBQADggEBAA3Z3JF8xIl1InYo Cnc2GMp4cmxRYoiV58shh+k5KFBlalmFxvm/rG1SRNG2Ek5Y599IqYVFKHFxrUft uitQdODtBXitsmjCuNKHsVtVcyzxxoJ0pCKwELpZGmHwkp3MED3hPSTSYxNnGfUn DCRvEAojABWkRIFnQP6+4ZDR1sps3J4ow8Up1BOBPH4HZdSpAPjY+uLgqS8IVpf9 oQm4AP4Hz2ntvMSoAXsjzv5mb5j+ghcc5PxRsiOC5D1fEs96nvIrY8CAXKHrrzbk 2H/9OJU6i1HLeGLDOOBCXjMwIqTv2gb1Cc6BJHPlG2gj03CANhqkaG90R7CiGCJ+ 2VxFLGc= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org