$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa File: 3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa (raw, json) Hash identifier: ReFTt+TXKiTCWQ2EeZN5sYY0hJNr3cSRmJoP/SBVLqs= Subject key identifier: DE:C3:EB:D1:B9:E5:6F:77:77:46:5B:FD:FC:2C:DF:C8:A1:3C:A7:50 Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Certificate serial: 0A51 Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa Signing time: Sat 20 Apr 2024 20:38:58 +0000 ROA not before: Sat 20 Apr 2024 20:38:58 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135155 IP address blocks: 103.211.28.0/22 maxlen: 22 103.211.28.0/24 maxlen: 24 103.211.29.0/24 maxlen: 24 103.211.30.0/24 maxlen: 24 103.211.31.0/24 maxlen: 24 146.196.48.0/22 maxlen: 22 146.196.48.0/24 maxlen: 24 146.196.49.0/24 maxlen: 24 146.196.50.0/24 maxlen: 24 146.196.51.0/24 maxlen: 24 2407:5f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 20:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2641 (0xa51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Validity Not Before: Apr 20 20:38:58 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=662427e2-d5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1a:ec:6b:22:7a:98:a7:43:83:8c:2d:3e:cb: 26:ac:b9:83:b0:fd:7b:b9:83:d8:48:71:da:60:a3: 7a:d6:51:90:9d:03:30:73:ec:06:1f:6a:1d:ce:81: 3f:25:f1:13:a2:7a:8d:85:ed:00:fa:5f:16:94:23: 10:2c:8a:45:40:a8:b1:0c:83:bf:b4:16:b8:64:0b: 65:35:f9:fb:d9:63:ca:de:04:b0:87:2d:29:ee:0c: 16:1c:b3:e4:28:e8:6a:fb:ec:64:12:37:eb:16:96: 5d:fd:e3:94:8f:0e:02:a2:02:37:98:1e:e1:c4:87: 77:3a:7e:38:68:a7:23:43:88:c4:9b:d9:a1:5b:c7: 04:c9:24:24:91:59:73:8e:4d:95:2f:5c:1f:01:5e: a0:75:b1:f7:4a:87:38:a5:a0:42:66:c1:e9:93:7d: 4f:84:1f:cd:e7:2b:56:03:5a:b0:ae:5b:e7:1a:68: f7:05:e8:d1:2e:db:de:f5:8d:fb:5e:cb:7f:a2:8e: 9c:75:bf:70:f3:27:96:b1:ed:b6:22:6c:02:61:e3: ab:61:4a:fb:8a:f6:ba:7a:ce:64:e6:9c:e0:bc:81: d4:ca:7a:f3:13:2e:7d:b0:12:ee:9f:48:b8:01:f1: 97:4a:20:54:d5:f6:69:d8:4c:59:5e:02:ce:76:39: 36:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C3:EB:D1:B9:E5:6F:77:77:46:5B:FD:FC:2C:DF:C8:A1:3C:A7:50 X509v3 Authority Key Identifier: keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.211.28.0/22 146.196.48.0/22 IPv6: 2407:5f80::/32 Signature Algorithm: sha256WithRSAEncryption 6c:08:36:bd:63:bf:11:c8:f5:4b:a5:14:19:d0:61:b9:7c:f4: 64:87:e0:3c:d2:07:a2:f9:be:86:51:5b:ab:97:7f:7b:3c:61: fc:76:fc:3c:dd:a3:14:31:21:a8:a7:a5:ad:fb:60:93:07:35: 75:bd:2e:57:36:9f:5a:8b:70:01:d8:3c:8b:81:13:e2:cd:5e: a1:a1:23:9f:46:90:0b:47:48:f5:0b:78:c5:db:35:68:68:95: 6c:6c:16:03:f7:b8:fc:0e:af:4e:a9:f0:8e:3b:e7:dc:11:c7: 45:30:58:93:a7:42:d5:87:e5:96:a9:bb:49:cc:aa:85:c8:64: 6a:b9:a8:1e:20:89:31:31:5e:10:38:25:23:ab:0a:95:c6:ac: c4:52:cc:42:d3:9c:38:f0:a8:cd:76:07:dd:44:87:02:bf:0a: 1f:23:b7:be:9f:69:96:c3:65:cc:b9:6f:86:6c:44:08:59:18: 69:2f:21:6e:db:fc:cc:91:c4:56:87:a0:3b:1a:c8:e8:6c:48: 81:04:df:47:92:cb:eb:7d:e0:21:1a:53:34:c6:fb:3f:0b:3a: ad:59:88:a5:3e:b2:c3:0d:c4:b2:48:eb:79:66:eb:16:a8:b1: 2d:0f:2b:5d:53:81:e4:6d:10:7c:42:e1:7a:89:2d:08:05:e0: 18:3a:ba:fd -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICClEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA2RjIxMTAvBgNVBAUTKEU3NEY0NjRDNDA4NjU5RUQyNTg5REI2NjRDRThFRjZB NkM2MDBDNDcwHhcNMjQwNDIwMjAzODU4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjI0MjdlMi1kNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxrsayJ6mKdDg4wtPssmrLmDsP17uYPYSHHaYKN61lGQnQMwc+wGH2odzoE/ JfETonqNhe0A+l8WlCMQLIpFQKixDIO/tBa4ZAtlNfn72WPK3gSwhy0p7gwWHLPk KOhq++xkEjfrFpZd/eOUjw4CogI3mB7hxId3On44aKcjQ4jEm9mhW8cEySQkkVlz jk2VL1wfAV6gdbH3Soc4paBCZsHpk31PhB/N5ytWA1qwrlvnGmj3BejRLtve9Y37 Xst/oo6cdb9w8yeWse22ImwCYeOrYUr7iva6es5k5pzgvIHUynrzEy59sBLun0i4 AfGXSiBU1fZp2ExZXgLOdjk2HQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFN7D69G5 5W93d0Zb/fws38ihPKdQMB8GA1UdIwQYMBaAFOdPRkxAhlntJYnbZkzo72psYAxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDZGMi84QjhDNEREMjNG NDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dlMGxpZHRtVE9qdmFteGdE RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUwOUdURUNHV2UwbGlkdG1UT2p2YW14Z0RFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA2RjIvOEI4QzRERDIzRjQ3MTFFQThFNURBODdDQzRGOUFFMDIvM0JGRThDRUMz RjQ5MTFFQUE5MUQ5QTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn0xwDBAKSxDAwDQQCAAIwBwMFACQHX4AwDQYJKoZIhvcN AQELBQADggEBAGwINr1jvxHI9UulFBnQYbl89GSH4DzSB6L5voZRW6uXf3s8Yfx2 /DzdoxQxIainpa37YJMHNXW9Llc2n1qLcAHYPIuBE+LNXqGhI59GkAtHSPULeMXb NWholWxsFgP3uPwOr06p8I4759wRx0UwWJOnQtWH5Zapu0nMqoXIZGq5qB4giTEx XhA4JSOrCpXGrMRSzELTnDjwqM12B91EhwK/Ch8jt76faZbDZcy5b4ZsRAhZGGkv IW7b/MyRxFaHoDsayOhsSIEE30eSy+t94CEaUzTG+z8LOq1ZiKU+ssMNxLJI63lm 6xaosS0PK11TgeRtEHxC4XqJLQgF4Bg6uv0= -----END CERTIFICATE-----Generated at Wed May 22 22:41:52 2024 by rpki-client on console-fra.rpki-client.org