$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa File: 0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa (raw, json) Hash identifier: JyqMsccIdMIwojnILIDKpIhGwL1vv0c257sVPtD7idA= Subject key identifier: 77:88:9A:7C:04:44:12:F1:69:B1:34:EC:5B:8C:A3:E3:ED:F0:95:AB Certificate issuer: /CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0 Certificate serial: 33B2 Authority key identifier: E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa Signing time: Tue 12 Dec 2023 15:00:55 +0000 ROA not before: Tue 12 Dec 2023 15:00:54 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 38830 IP address blocks: 103.10.8.0/24 maxlen: 24 203.12.235.0/24 maxlen: 24 2001:df0:218::/48 maxlen: 48 2001:df7:e800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13234 (0x33b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0 Validity Not Before: Dec 12 15:00:54 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=657875a6-7e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:09:65:95:00:44:ca:53:4f:06:72:80:46:77: 8e:1f:de:ba:1d:31:e4:e3:05:aa:bc:5d:6f:63:aa: b3:08:42:94:e7:36:0e:65:1e:17:5f:58:13:5b:88: 0e:6e:3d:18:7b:3d:cb:6c:57:4a:81:eb:04:e9:fb: a1:5b:a6:87:73:a2:5f:aa:12:ac:d3:6c:54:b3:5c: 27:8b:82:61:6e:a0:5c:27:b9:49:70:2c:5b:b7:2e: c0:00:86:ab:7a:3d:a8:1a:3e:3f:5c:be:6d:72:b6: d6:90:89:69:a7:32:6e:42:1e:74:95:67:ed:b4:fa: 43:58:e2:0f:93:57:b1:f7:53:ef:31:0b:8a:92:e3: ad:60:2a:97:a7:9d:05:32:75:35:4a:c3:92:26:90: e5:bf:39:59:00:17:50:a6:0b:53:73:48:ae:60:f9: c5:7b:18:c9:75:d1:af:41:0c:a1:cd:41:46:2e:a1: 20:26:9a:85:37:91:ce:68:5e:51:f3:00:f8:11:a3: 8b:f2:78:e1:8d:82:51:17:4d:76:1e:ed:ec:4a:45: f9:be:6f:20:56:3a:5f:aa:d1:10:1c:10:b7:df:ac: 11:d3:e4:e5:d1:a5:f7:f7:86:da:a4:28:65:9c:ac: 28:a9:48:fc:a2:a6:33:e8:58:fa:f1:d5:45:96:e3: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:88:9A:7C:04:44:12:F1:69:B1:34:EC:5B:8C:A3:E3:ED:F0:95:AB X509v3 Authority Key Identifier: keyid:E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.8.0/24 203.12.235.0/24 IPv6: 2001:df0:218::/48 2001:df7:e800::/48 Signature Algorithm: sha256WithRSAEncryption af:96:cc:cd:39:48:33:56:86:0e:53:a6:e1:ea:30:00:50:e4: 01:98:a7:8d:45:46:1a:57:55:cc:60:0a:59:e6:6e:bf:5d:13: d2:88:8a:94:32:3c:f8:2c:b9:e9:42:e0:ae:aa:28:8c:a9:17: 02:76:0f:74:e8:42:76:5f:39:43:a9:30:98:d4:38:1d:1d:23: 86:55:79:8f:58:06:c2:dd:37:31:a6:aa:4c:81:e4:b2:ea:68: 65:76:a6:30:6a:58:78:89:8d:a7:af:f0:6a:6e:03:2c:58:a2: 20:1f:99:99:f7:70:00:61:00:fc:f5:6d:78:8d:a7:51:d8:bf: 1f:f9:e4:89:bb:77:3f:88:24:0a:be:fa:e8:52:e3:bd:cf:43: ae:51:0e:fa:0c:ed:7e:b6:ce:2c:ac:11:13:18:50:5d:fe:8d: 4d:7e:36:7a:fb:d9:a6:53:d7:65:8a:f4:e1:60:10:31:31:b3: a2:e9:9b:ed:d4:29:d0:8c:94:7f:5c:77:7b:05:8e:3d:99:85: 5b:1b:e6:01:03:20:06:15:49:7a:c0:fc:06:0c:db:fd:79:6f: 05:0c:62:46:5f:13:42:a6:2b:2b:83:68:b5:ee:99:b6:bc:6a: 97:07:01:1c:3a:63:4a:e8:cc:53:34:ca:0c:42:63:9b:ee:d2: 80:2f:38:bf -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICM7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNCQjExMTAvBgNVBAUTKEU4M0E1OUI4ODFDRTFFNTczNUQxQUREQ0Q4QkFFMDVF NTNCODUzRDAwHhcNMjMxMjEyMTUwMDU0WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTc4NzVhNi03ZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9QlllQBEylNPBnKARneOH966HTHk4wWqvF1vY6qzCEKU5zYOZR4XX1gTW4gO bj0Yez3LbFdKgesE6fuhW6aHc6JfqhKs02xUs1wni4JhbqBcJ7lJcCxbty7AAIar ej2oGj4/XL5tcrbWkIlppzJuQh50lWfttPpDWOIPk1ex91PvMQuKkuOtYCqXp50F MnU1SsOSJpDlvzlZABdQpgtTc0iuYPnFexjJddGvQQyhzUFGLqEgJpqFN5HOaF5R 8wD4EaOL8njhjYJRF012Hu3sSkX5vm8gVjpfqtEQHBC336wR0+Tl0aX394bapChl nKwoqUj8oqYz6Fj68dVFluNSEQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFHeImnwE RBLxabE07FuMo+Pt8JWrMB8GA1UdIwQYMBaAFOg6WbiBzh5XNdGt3Ni64F5TuFPQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0JCMS9FQTFCMjJFMDFE OTYxMUUyOTgwNkM1N0YwOEIwMkNEMi82RHBadUlIT0hsYzEwYTNjMkxyZ1hsTzRV OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZEcFp1SUhPSGxjMTBhM2MyTHJnWGxPNFU5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTNCQjEvRUExQjIyRTAxRDk2MTFFMjk4MDZDNTdGMDhCMDJDRDIvMEIzRkM1OENC MERBMTFFNUE4QzhCRjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBABnCggDBADLDOswGAQCAAIwEgMHACABDfACGAMHACABDffo ADANBgkqhkiG9w0BAQsFAAOCAQEAr5bMzTlIM1aGDlOm4eowAFDkAZinjUVGGldV zGAKWeZuv10T0oiKlDI8+Cy56ULgrqoojKkXAnYPdOhCdl85Q6kwmNQ4HR0jhlV5 j1gGwt03MaaqTIHksupoZXamMGpYeImNp6/wam4DLFiiIB+ZmfdwAGEA/PVteI2n Udi/H/nkibt3P4gkCr766FLjvc9DrlEO+gztfrbOLKwRExhQXf6NTX42evvZplPX ZYr04WAQMTGzoumb7dQp0IyUf1x3ewWOPZmFWxvmAQMgBhVJesD8Bgzb/XlvBQxi Rl8TQqYrK4Note6ZtrxqlwcBHDpjSujMUzTKDEJjm+7SgC84vw== -----END CERTIFICATE-----Generated at Thu May 16 16:14:58 2024 by rpki-client on console-fra.rpki-client.org