$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/3CD0F8AA120911EC9B2B737AC4F9AE02.roa File: 3CD0F8AA120911EC9B2B737AC4F9AE02.roa (raw, json) Hash identifier: Qhj+xNKH2IZf3Wy3p7IKrHO3bB/eW6VZjI7w4qXGyiI= Subject key identifier: 17:E0:23:2D:7B:2D:3C:AA:3C:60:0C:F9:CC:4A:88:74:A2:0E:18:4F Certificate issuer: /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Certificate serial: 03BC Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/3CD0F8AA120911EC9B2B737AC4F9AE02.roa Signing time: Sat 09 Sep 2023 00:52:12 +0000 ROA not before: Sat 09 Sep 2023 00:52:12 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 146964 IP address blocks: 103.172.104.0/23 maxlen: 23 2001:df7:6d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Validity Not Before: Sep 9 00:52:12 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=64fbc1bc-dfe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:55:a2:68:c1:99:89:63:87:3e:ab:0c:a5:e8: f1:46:28:9b:a2:e2:d1:86:49:a3:10:44:b8:27:8e: 2b:47:ed:c7:0c:17:98:62:fa:1d:e1:93:00:8f:9a: ea:bd:08:42:6b:61:dd:85:8b:57:15:30:62:13:30: 5b:70:ab:fe:05:b3:cf:38:91:a8:09:54:c6:ac:97: 8e:de:cb:26:76:b1:f6:4c:41:ae:d6:17:fe:2c:68: db:07:17:e3:1c:34:94:28:6e:c6:b9:e2:79:d1:8e: d5:80:df:c8:9f:91:67:78:dd:cd:9a:e1:a9:41:5b: 19:1c:78:eb:20:19:9e:ea:32:65:18:18:e2:86:b7: 5d:61:bb:93:17:d3:64:bf:ff:50:1a:dc:56:46:6d: 24:ae:10:e3:ff:b6:2b:1a:db:3e:80:f7:01:6c:40: 74:fd:90:25:76:38:15:63:a2:06:fb:2b:60:c4:d3: 63:cd:f6:51:bc:fa:43:61:c4:c4:9a:3b:39:05:ea: 1f:6f:e1:fd:da:f4:11:d6:6e:67:02:da:ed:b8:9f: 18:30:88:6d:9b:9a:23:ac:f3:3b:33:2e:82:6f:53: f9:59:a2:5c:a7:f7:89:69:1b:ab:d8:77:6e:3e:a9: 30:11:a3:c7:ee:d7:0a:78:b8:85:94:6b:49:2e:3c: dd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E0:23:2D:7B:2D:3C:AA:3C:60:0C:F9:CC:4A:88:74:A2:0E:18:4F X509v3 Authority Key Identifier: keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/3CD0F8AA120911EC9B2B737AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.104.0/23 IPv6: 2001:df7:6d80::/48 Signature Algorithm: sha256WithRSAEncryption 1e:77:59:3b:24:d6:c8:33:fd:eb:08:60:4c:ab:98:9c:e8:3f: c4:44:d3:61:bf:ef:fb:b1:3a:2c:c3:82:59:8c:15:77:df:df: a6:ba:79:31:ba:74:cf:b4:f7:3f:70:4f:7f:60:51:e3:43:71: 51:a5:75:02:f2:a0:53:e2:27:49:b2:df:09:ac:3b:af:8b:13: 96:fa:57:76:85:2b:ac:bb:af:04:8b:23:49:91:d5:38:b6:37: d0:ad:ed:b4:9e:a5:61:53:d6:e4:d1:5c:71:21:c8:db:04:92: 08:c4:7a:0b:04:44:ed:da:05:4d:ab:cc:a6:98:10:9f:78:08: 31:a7:28:bb:ba:e7:55:09:49:61:b7:f3:3b:a7:ed:2a:89:ff: 7f:27:62:e6:07:21:a6:60:e2:bc:cb:93:02:37:8e:ee:4c:35: f6:0b:f5:bd:8e:05:75:9f:34:68:c0:24:78:39:eb:4f:1f:16: cb:0e:d0:86:df:d9:a0:bf:7c:7a:f3:99:bf:08:c5:9c:72:77: ec:ac:72:67:e4:97:26:a1:11:4e:f1:73:a7:71:ec:d4:0b:65: 18:59:f3:ba:9e:16:9a:c4:c7:ed:a3:ef:e4:91:fd:29:cf:f1: f2:92:b3:12:a2:73:a8:59:66:36:82:dc:0a:48:ba:5e:77:46: 69:5a:94:f5 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMDQxMTAvBgNVBAUTKDFGNkZCQTNGQkY3QzRFNzUxMDgwRDY3NDNFMkZDRTAw RDI5NERCNDEwHhcNMjMwOTA5MDA1MjEyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZiYzFiYy1kZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FWiaMGZiWOHPqsMpejxRiibouLRhkmjEES4J44rR+3HDBeYYvod4ZMAj5rq vQhCa2HdhYtXFTBiEzBbcKv+BbPPOJGoCVTGrJeO3ssmdrH2TEGu1hf+LGjbBxfj HDSUKG7GueJ50Y7VgN/In5FneN3NmuGpQVsZHHjrIBme6jJlGBjihrddYbuTF9Nk v/9QGtxWRm0krhDj/7YrGts+gPcBbEB0/ZAldjgVY6IG+ytgxNNjzfZRvPpDYcTE mjs5Beofb+H92vQR1m5nAtrtuJ8YMIhtm5ojrPM7My6Cb1P5WaJcp/eJaRur2Hdu PqkwEaPH7tcKeLiFlGtJLjzdqQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBfgIy17 LTyqPGAM+cxKiHSiDhhPMB8GA1UdIwQYMBaAFB9vuj+/fE51EIDWdD4vzgDSlNtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIwNC84MzBBM0EyODEy MDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRuVVFnTlowUGlfT0FOS1Uy MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyLTZQNzk4VG5VUWdOWjBQaV9PQU5LVTIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTYyMDQvODMwQTNBMjgxMjA2MTFFQ0FFQ0VENDc3QzRGOUFFMDIvM0NEMEY4QUEx MjA5MTFFQzlCMkI3MzdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrGgwDwQCAAIwCQMHACABDfdtgDANBgkqhkiG9w0BAQsF AAOCAQEAHndZOyTWyDP96whgTKuYnOg/xETTYb/v+7E6LMOCWYwVd9/fprp5Mbp0 z7T3P3BPf2BR40NxUaV1AvKgU+InSbLfCaw7r4sTlvpXdoUrrLuvBIsjSZHVOLY3 0K3ttJ6lYVPW5NFccSHI2wSSCMR6CwRE7doFTavMppgQn3gIMacou7rnVQlJYbfz O6ftKon/fydi5gchpmDivMuTAjeO7kw19gv1vY4FdZ80aMAkeDnrTx8Wyw7Qht/Z oL98evOZvwjFnHJ37KxyZ+SXJqERTvFzp3Hs1AtlGFnzup4WmsTH7aPv5JH9Kc/x 8pKzEqJzqFlmNoLcCki6XndGaVqU9Q== -----END CERTIFICATE-----Generated at Fri May 17 02:38:40 2024 by rpki-client on console-fra.rpki-client.org