$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/CBF7E2CE2D3611EEA81A490BC4F9AE02.roa File: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (raw, json) Hash identifier: GjQBLQ1QPq783AHBVS1MGjtSCxs3oCTF1KAHnsENe6M= Subject key identifier: 9C:AD:7F:74:DA:69:57:D8:F7:0C:64:00:1A:12:40:8E:B6:9C:8B:9C Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Certificate serial: 4A Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/CBF7E2CE2D3611EEA81A490BC4F9AE02.roa Signing time: Fri 28 Jul 2023 12:25:32 +0000 ROA not before: Fri 28 Jul 2023 12:25:32 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 136395 IP address blocks: 103.213.36.0/23 maxlen: 23 103.213.36.0/24 maxlen: 24 103.213.37.0/24 maxlen: 24 2401:5e0::/32 maxlen: 32 2401:5e0::/36 maxlen: 36 2401:5e0:1000::/36 maxlen: 36 2401:5e0:1000::/48 maxlen: 48 2401:5e0:1001::/48 maxlen: 48 2401:5e0:1002::/48 maxlen: 48 2401:5e0:1003::/48 maxlen: 48 2401:5e0:1004::/48 maxlen: 48 2401:5e0:2000::/36 maxlen: 36 2401:5e0:3000::/36 maxlen: 36 2401:5e0:4000::/36 maxlen: 36 2401:5e0:5000::/36 maxlen: 36 2401:5e0:6000::/36 maxlen: 36 2401:5e0:7000::/36 maxlen: 36 2401:5e0:8000::/36 maxlen: 36 2401:5e0:9000::/36 maxlen: 36 2401:5e0:a000::/36 maxlen: 36 2401:5e0:b000::/36 maxlen: 36 2401:5e0:c000::/36 maxlen: 36 2401:5e0:d000::/36 maxlen: 36 2401:5e0:e000::/36 maxlen: 36 2401:5e0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Validity Not Before: Jul 28 12:25:32 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64c3b3bc-c120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e6:81:1f:0f:3b:73:70:fa:b5:50:32:2f:b1: e7:a3:f7:25:c7:50:27:a3:72:2a:11:0e:f3:85:14: a5:43:9e:55:2d:c8:29:fa:2d:f2:3e:20:fe:73:a2: bf:12:d6:b1:65:d7:11:07:bf:24:ff:41:ee:18:26: 44:45:cf:5e:7f:f7:8a:57:f1:ef:d2:3b:67:79:8b: 4b:82:7e:a7:a9:3d:1d:99:ab:5e:5e:03:5d:ed:03: 6a:aa:2f:0a:06:eb:4e:f2:27:8c:e4:b5:a3:c0:3e: 64:55:74:df:3a:b7:47:a4:28:98:e2:65:e9:0c:ab: 68:b6:0a:10:79:1d:37:a8:74:37:d9:35:10:b9:9a: 1c:e3:47:b4:eb:a3:7c:2b:90:41:b5:88:36:ac:ec: 42:ad:5d:93:e3:77:a0:93:84:ee:af:4d:b1:c9:d5: 9b:ad:66:45:73:cd:98:7c:43:a7:53:73:d2:0e:af: c7:76:3e:db:90:ab:80:1e:b4:2d:a7:3a:e0:ff:21: ed:bd:f2:a8:2c:e8:89:c1:b3:5b:b2:ea:ba:46:ce: 16:74:e4:de:1c:e0:24:7c:38:12:be:cd:54:e8:dc: 1d:3e:0f:4b:ef:96:8d:71:fb:b5:1e:94:2e:5f:00: e4:d7:8f:f0:ae:ce:d8:ad:28:e0:c7:4a:56:95:6f: 7a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AD:7F:74:DA:69:57:D8:F7:0C:64:00:1A:12:40:8E:B6:9C:8B:9C X509v3 Authority Key Identifier: keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/CBF7E2CE2D3611EEA81A490BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.36.0/23 IPv6: 2401:5e0::/32 Signature Algorithm: sha256WithRSAEncryption 64:9b:bf:ee:c6:68:c0:f0:d8:77:1c:1c:13:85:8b:01:1c:86: a2:61:bb:fe:1f:85:65:d9:01:55:05:e4:13:aa:5f:af:bd:6a: 99:6e:87:3e:3b:8d:9e:65:43:a1:46:2e:cf:5c:fb:14:fb:ae: 75:bb:e7:fa:7f:8c:5d:80:16:81:6b:55:cc:20:82:6a:ed:0c: bf:74:3c:b3:58:22:21:70:c9:19:c1:8d:59:70:8a:71:2f:b0: 4f:18:94:0c:37:72:89:b9:ec:13:58:7f:1b:0a:e4:a8:cc:df: d8:6b:4c:be:d5:34:db:ca:d1:a6:e8:c0:af:d3:51:36:c4:09: 0c:5d:7a:37:52:7d:2c:71:3d:05:f9:d5:27:30:d8:d9:f0:8d: 21:67:f5:d8:44:55:c2:7e:46:8b:77:40:7c:78:28:30:70:5f: d8:b3:d8:4d:8c:39:17:be:f0:52:9f:53:22:68:54:ff:b1:f3: 9b:53:13:c9:74:ad:8b:f3:64:07:ff:68:7c:15:f2:7b:8b:6d: cc:b4:37:f6:1c:5c:de:ac:91:45:7e:55:4c:63:65:38:7a:90: a6:85:a3:5e:9a:c0:bc:17:84:30:71:21:7a:3f:ee:11:d7:1b: af:34:32:88:39:7d:84:f0:69:fb:53:65:e9:c1:a5:88:a3:bd: d4:95:77:cc -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjRDMjExMC8GA1UEBRMoREMyM0E2OUVBMUVGQzFBMzc5NDkyQzEzRTlBQzE0N0M0 OUY1QUQwNDAeFw0yMzA3MjgxMjI1MzJaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0YzNiM2JjLWMxMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp5oEfDztzcPq1UDIvseej9yXHUCejcioRDvOFFKVDnlUtyCn6LfI+IP5zor8S 1rFl1xEHvyT/Qe4YJkRFz15/94pX8e/SO2d5i0uCfqepPR2Zq15eA13tA2qqLwoG 607yJ4zktaPAPmRVdN86t0ekKJjiZekMq2i2ChB5HTeodDfZNRC5mhzjR7Tro3wr kEG1iDas7EKtXZPjd6CThO6vTbHJ1ZutZkVzzZh8Q6dTc9IOr8d2PtuQq4AetC2n OuD/Ie298qgs6InBs1uy6rpGzhZ05N4c4CR8OBK+zVTo3B0+D0vvlo1x+7UelC5f AOTXj/CuztitKODHSlaVb3rtAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUnK1/dNpp V9j3DGQAGhJAjraci5wwHwYDVR0jBBgwFoAU3COmnqHvwaN5SSwT6awUfEn1rQQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCNEMyL0IxN0U5NUQ2MDM3 MDExRUU5QkI2MkMyRkM0RjlBRTAyLzNDT21ucUh2d2FONVNTd1Q2YXdVZkVuMXJR US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0NPbW5xSHZ3YU41U1N3VDZhd1VmRW4xclFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjRDMi9CMTdFOTVENjAzNzAxMUVFOUJCNjJDMkZDNEY5QUUwMi9DQkY3RTJDRTJE MzYxMUVFQTgxQTQ5MEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWfVJDANBAIAAjAHAwUAJAEF4DANBgkqhkiG9w0BAQsFAAOC AQEAZJu/7sZowPDYdxwcE4WLARyGomG7/h+FZdkBVQXkE6pfr71qmW6HPjuNnmVD oUYuz1z7FPuudbvn+n+MXYAWgWtVzCCCau0Mv3Q8s1giIXDJGcGNWXCKcS+wTxiU DDdyibnsE1h/GwrkqMzf2GtMvtU028rRpujAr9NRNsQJDF16N1J9LHE9BfnVJzDY 2fCNIWf12ERVwn5Gi3dAfHgoMHBf2LPYTYw5F77wUp9TImhU/7Hzm1MTyXSti/Nk B/9ofBXye4ttzLQ39hxc3qyRRX5VTGNlOHqQpoWjXprAvBeEMHEhej/uEdcbrzQy iDl9hPBp+1Nl6cGliKO91JV3zA== -----END CERTIFICATE-----Generated at Sun May 19 07:40:44 2024 by rpki-client on console-fra.rpki-client.org