$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/C3C5C43A0A2011EC8B517885C4F9AE02.roa File: C3C5C43A0A2011EC8B517885C4F9AE02.roa (raw, json) Hash identifier: LpKGyXF5BUfwWxSekbAgu6cdwWEw0DkcoeIItH56IQo= Subject key identifier: 95:AB:2D:68:47:49:38:79:B4:D2:40:7C:E4:33:E1:7B:91:2C:A5:1B Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Certificate serial: 3391 Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/C3C5C43A0A2011EC8B517885C4F9AE02.roa Signing time: Tue 28 Nov 2023 14:40:21 +0000 ROA not before: Tue 28 Nov 2023 14:40:21 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 9676 IP address blocks: 210.208.72.0/21 maxlen: 21 2407:680::/33 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13201 (0x3391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Validity Not Before: Nov 28 14:40:21 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6565fbd5-c7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8f:72:45:c7:9b:87:12:f2:07:2a:0e:2c:ac: e0:68:d2:36:2f:f8:2b:60:52:f0:d3:70:a0:41:a6: 15:f3:3b:47:9d:84:b3:bb:bc:6a:66:e1:bd:ca:6b: 9b:e5:ed:43:fa:85:a7:30:53:6b:27:05:45:19:8a: 6d:a6:31:d3:7d:c5:91:f2:e3:e0:dc:5b:e3:16:b7: e3:8e:b8:f1:12:ce:df:0e:1d:cc:b2:c8:86:e4:c0: 95:3e:db:b0:34:8e:37:b9:db:fa:27:04:88:11:2e: 81:9c:9f:24:8c:ab:10:9d:25:3e:23:20:e8:33:d2: ac:5a:74:9d:66:ec:9c:93:f0:39:f2:ca:5b:f8:7a: 66:db:91:60:31:14:04:18:a1:69:71:82:25:03:87: 22:98:48:b3:c2:a9:59:6c:4b:72:98:c9:a4:79:bc: 08:ed:bf:f2:3c:72:1d:2e:34:63:21:5a:b2:96:91: 16:fa:45:20:8c:e8:85:f5:fc:99:51:7f:b3:92:ec: ae:4b:5b:02:60:c1:b3:a0:63:b1:b3:a3:5a:0a:3b: e1:2e:7f:d3:2e:e7:8b:7b:ef:ff:72:f4:1a:3a:d3: 98:f6:73:53:fa:1c:b2:6c:1f:fc:30:78:32:c9:e6: 87:8f:4e:64:1a:b0:63:32:38:99:e5:fa:49:a1:ba: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AB:2D:68:47:49:38:79:B4:D2:40:7C:E4:33:E1:7B:91:2C:A5:1B X509v3 Authority Key Identifier: keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/C3C5C43A0A2011EC8B517885C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.208.72.0/21 IPv6: 2407:680::/33 Signature Algorithm: sha256WithRSAEncryption 01:a9:a1:f7:4b:60:9f:d9:39:6c:73:06:9f:f0:f9:0f:0a:77: 01:39:08:2f:c5:bb:70:60:d1:15:99:69:1f:c8:2b:70:c5:6e: e7:39:dc:d5:09:45:0e:ab:3e:48:71:b9:f8:9b:c0:95:d1:77: 2e:e9:ee:4f:7a:45:ff:f7:ed:36:7f:83:77:5d:2a:d6:62:80: ba:c9:50:cb:73:a3:c1:a6:2f:7c:ff:d2:ba:05:08:bd:9d:ae: ce:e2:5d:36:b3:46:ca:7b:2a:a2:e3:74:3a:0d:93:55:cd:8e: 54:b7:35:2b:4d:9f:e0:47:1f:ba:fe:82:f8:b6:9f:48:17:13: 56:6b:3a:86:4c:1a:bf:22:03:f9:7b:8d:83:1c:6a:9a:e5:71: 52:50:ec:a7:65:c9:36:ea:ca:09:39:4b:4c:4d:9d:ca:68:f8: da:f6:fe:fc:84:4c:a4:ef:05:ad:5b:ac:71:e4:c8:6f:f6:ed: 71:c2:d1:1b:ef:0c:cb:f2:d1:51:8e:e7:59:d0:83:6f:48:52: ad:d5:36:0d:e6:0a:22:f4:da:9e:07:a4:61:99:f8:4c:be:41: 05:d1:4a:74:9f:e9:89:7d:34:f3:a4:3a:ce:ea:28:5d:66:33: 6c:20:7f:d9:20:84:01:b3:c8:b9:3d:2e:b7:3c:53:08:1d:3b: 90:e8:4c:92 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICM5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYwQTkxMTAvBgNVBAUTKDc3ODdGMUU1M0U5Qjc4MTMyREU5QTc4NzExMDg4MzE2 REQ2MDU1QjMwHhcNMjMxMTI4MTQ0MDIxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY1ZmJkNS1jN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5I9yRcebhxLyByoOLKzgaNI2L/grYFLw03CgQaYV8ztHnYSzu7xqZuG9ymub 5e1D+oWnMFNrJwVFGYptpjHTfcWR8uPg3FvjFrfjjrjxEs7fDh3MssiG5MCVPtuw NI43udv6JwSIES6BnJ8kjKsQnSU+IyDoM9KsWnSdZuyck/A58spb+Hpm25FgMRQE GKFpcYIlA4cimEizwqlZbEtymMmkebwI7b/yPHIdLjRjIVqylpEW+kUgjOiF9fyZ UX+zkuyuS1sCYMGzoGOxs6NaCjvhLn/TLueLe+//cvQaOtOY9nNT+hyybB/8MHgy yeaHj05kGrBjMjiZ5fpJobqXVwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJWrLWhH STh5tNJAfOQz4XuRLKUbMB8GA1UdIwQYMBaAFHeH8eU+m3gTLemnhxEIgxbdYFWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjBBOS82QkE4MDYxQTFE ODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVCTXQ2YWVIRVFpREZ0MWdW Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0Zng1VDZiZUJNdDZhZUhFUWlERnQxZ1ZiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTYwQTkvNkJBODA2MUExRDg0MTFFMkIzQTU0RkRBMDhCMDJDRDIvQzNDNUM0M0Ew QTIwMTFFQzhCNTE3ODg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAPS0EgwDgQCAAIwCAMGByQHBoAAMA0GCSqGSIb3DQEBCwUA A4IBAQABqaH3S2Cf2Tlscwaf8PkPCncBOQgvxbtwYNEVmWkfyCtwxW7nOdzVCUUO qz5Icbn4m8CV0Xcu6e5PekX/9+02f4N3XSrWYoC6yVDLc6PBpi98/9K6BQi9na7O 4l02s0bKeyqi43Q6DZNVzY5UtzUrTZ/gRx+6/oL4tp9IFxNWazqGTBq/IgP5e42D HGqa5XFSUOynZck26soJOUtMTZ3KaPja9v78hEyk7wWtW6xx5Mhv9u1xwtEb7wzL 8tFRjudZ0INvSFKt1TYN5goi9NqeB6RhmfhMvkEF0Up0n+mJfTTzpDrO6ihdZjNs IH/ZIIQBs8i5PS63PFMIHTuQ6EyS -----END CERTIFICATE-----Generated at Tue May 14 17:00:51 2024 by rpki-client on console-fra.rpki-client.org