$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/B972C58C8FA611EAB095C928C4F9AE02.roa File: B972C58C8FA611EAB095C928C4F9AE02.roa (raw, json) Hash identifier: eNqcJy9MbfULRfN7s1K38VlPL6Fzdy+Md4Shbxk/lNs= Subject key identifier: D9:DD:3F:2C:57:63:79:CD:8A:C3:B1:1A:E2:BD:76:8D:80:C4:DC:62 Certificate issuer: /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D Certificate serial: 0891 Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/B972C58C8FA611EAB095C928C4F9AE02.roa Signing time: Wed 31 Jan 2024 21:29:16 +0000 ROA not before: Wed 31 Jan 2024 21:29:16 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 394434 IP address blocks: 103.36.108.0/22 maxlen: 22 103.36.110.0/24 maxlen: 24 103.36.111.0/24 maxlen: 24 103.146.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 21:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2193 (0x891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D Validity Not Before: Jan 31 21:29:16 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65babbac-7350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:0c:bc:0a:22:09:c6:88:0f:0a:9f:c1:ab: 73:e6:46:d1:35:67:7c:99:c9:01:cb:57:dd:d4:0a: 7a:12:af:66:c2:70:57:2e:e9:0a:63:f4:56:83:ee: ff:03:09:d9:36:85:ec:2e:29:93:83:ca:19:31:c2: 02:51:fb:f5:c9:6b:a6:55:97:5b:f2:de:a2:1c:7c: a6:61:f9:97:fb:b1:2c:d0:62:d2:a9:2e:3d:fc:2c: 2c:a1:7b:db:af:75:53:95:d3:a0:fa:5a:d6:28:1b: f1:11:c0:a9:71:c3:97:b7:58:dc:52:30:83:8b:c2: 62:2b:d8:88:8d:80:78:22:90:8d:51:c8:1b:74:b0: 69:95:92:ca:94:2f:8e:ee:4f:e9:6c:3b:74:97:a8: 04:38:7d:50:23:ae:3e:40:ef:4c:56:e9:55:50:b4: ce:80:21:c6:f5:c0:74:12:83:e5:e0:3c:a6:ce:02: e0:67:49:0f:3b:1a:ae:b4:3c:d2:2d:19:04:a2:65: 33:0d:91:ed:94:f4:1b:99:a7:e3:31:03:0d:30:fa: ba:60:62:fc:fe:42:56:72:31:35:b2:84:91:61:f3: 68:05:f4:45:5c:77:85:6e:37:5c:27:bb:bc:f0:a4: 79:00:69:75:a7:55:95:49:5f:4d:b0:8d:1d:e9:bd: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DD:3F:2C:57:63:79:CD:8A:C3:B1:1A:E2:BD:76:8D:80:C4:DC:62 X509v3 Authority Key Identifier: keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/B972C58C8FA611EAB095C928C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.36.108.0/22 103.146.214.0/24 Signature Algorithm: sha256WithRSAEncryption 20:ca:9e:72:a8:9a:64:51:2f:d3:68:62:be:f0:da:74:07:e9: f7:85:73:fa:9d:4e:47:f0:82:cf:38:dc:62:2a:c0:86:b7:60: 1c:c2:7a:ca:52:16:bc:66:27:33:b1:45:38:7e:a4:cb:eb:85: d7:a1:33:d8:0e:4a:42:13:2c:dd:7d:eb:1c:08:ac:98:6d:e9: 44:02:e6:27:e2:05:6b:dd:a2:c5:1b:91:ee:90:4c:58:88:0e: 17:c2:26:7a:99:5a:45:72:3b:f4:f5:c8:b6:2c:da:3d:e0:dc: 57:f6:21:32:41:83:8c:0e:a3:ca:73:10:55:d4:1f:f9:ed:e1: 7f:4d:dd:cd:9a:d5:a9:39:7c:3c:cd:94:52:51:fe:97:6e:dc: c9:1c:e5:d1:4d:48:c6:e7:6e:0b:62:4f:8d:45:a4:bc:fc:02: 6f:b6:95:a1:20:58:40:f5:d4:eb:7c:c5:43:13:c5:33:19:44: 94:8e:28:e3:b9:68:34:de:11:3a:0e:52:09:bb:92:1e:dc:85: 25:bd:62:28:c3:5b:b5:c4:0f:78:89:e4:75:dd:e5:a3:7f:3d: 89:27:86:9e:20:76:37:29:83:7b:e4:8d:4a:a3:cb:8f:ce:0d: 39:f6:15:d8:f4:6b:d8:40:49:9c:71:f2:30:21:af:7a:37:e5: 1b:de:d8:0f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzQ0ExMTAvBgNVBAUTKDhBOUIzQjkyMzk5Mzk2RThGQzZCODYzMDlFRDU3MzMw Qzk0RTExN0QwHhcNMjQwMTMxMjEyOTE2WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJhYmJhYy03MzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtMMvAoiCcaIDwqfwatz5kbRNWd8mckBy1fd1Ap6Eq9mwnBXLukKY/RWg+7/ AwnZNoXsLimTg8oZMcICUfv1yWumVZdb8t6iHHymYfmX+7Es0GLSqS49/CwsoXvb r3VTldOg+lrWKBvxEcCpccOXt1jcUjCDi8JiK9iIjYB4IpCNUcgbdLBplZLKlC+O 7k/pbDt0l6gEOH1QI64+QO9MVulVULTOgCHG9cB0EoPl4DymzgLgZ0kPOxqutDzS LRkEomUzDZHtlPQbmafjMQMNMPq6YGL8/kJWcjE1soSRYfNoBfRFXHeFbjdcJ7u8 8KR5AGl1p1WVSV9NsI0d6b3/EwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNndPyxX Y3nNisOxGuK9do2AxNxiMB8GA1UdIwQYMBaAFIqbO5I5k5bo/GuGMJ7VczDJThF9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNDQS81N0QyMzgwMjhG QTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1ajhhNFl3bnRWek1NbE9F WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lwczdram1UbHVqOGE0WXdudFZ6TU1sT0VYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUEzQ0EvNTdEMjM4MDI4RkEyMTFFQThFQzA2RTFDQzRGOUFFMDIvQjk3MkM1OEM4 RkE2MTFFQUIwOTVDOTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnJGwDBABnktYwDQYJKoZIhvcNAQELBQADggEBACDKnnKo mmRRL9NoYr7w2nQH6feFc/qdTkfwgs843GIqwIa3YBzCespSFrxmJzOxRTh+pMvr hdehM9gOSkITLN196xwIrJht6UQC5ifiBWvdosUbke6QTFiIDhfCJnqZWkVyO/T1 yLYs2j3g3Ff2ITJBg4wOo8pzEFXUH/nt4X9N3c2a1ak5fDzNlFJR/pdu3Mkc5dFN SMbnbgtiT41FpLz8Am+2laEgWED11Ot8xUMTxTMZRJSOKOO5aDTeEToOUgm7kh7c hSW9YijDW7XED3iJ5HXd5aN/PYknhp4gdjcpg3vkjUqjy4/ODTn2Fdj0a9hASZxx 8jAhr3o35Rve2A8= -----END CERTIFICATE-----Generated at Thu Apr 18 23:10:16 2024 by rpki-client on console-ams.rpki-client.org