$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/3CED465E8E0811EE8450D961C4F9AE02.roa File: 3CED465E8E0811EE8450D961C4F9AE02.roa (raw, json) Hash identifier: f/jpE5cHuMY3Uawe+lXgAaJQ4nT2A65yBQRPGfiONwY= Subject key identifier: 72:7F:71:8D:AA:21:10:FB:DC:78:26:64:6E:77:C3:6E:F3:B8:30:78 Certificate issuer: /CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10 Certificate serial: 8C Authority key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/3CED465E8E0811EE8450D961C4F9AE02.roa Signing time: Mon 15 Jul 2024 14:10:55 +0000 ROA not before: Mon 15 Jul 2024 14:10:55 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 149849 IP address blocks: 103.188.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10 Validity Not Before: Jul 15 14:10:55 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66952dee-57ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:2a:e7:e0:cb:b8:f5:57:d1:c1:04:ad:aa: 3a:82:34:1a:e5:f7:0e:42:cf:8c:e8:9e:57:2e:36: 18:4b:61:9b:a3:2b:1d:60:9c:74:e3:a7:5b:b1:9f: 6e:d1:eb:d3:1c:b1:9b:5d:d8:17:e7:bd:33:0f:f0: 70:c1:7f:1c:fc:db:00:8f:be:14:52:96:27:02:f0: 14:d7:4e:1b:1b:77:da:0a:f4:72:4e:0e:71:64:c6: cd:2e:2d:3b:aa:48:ff:d3:78:f5:ef:eb:10:72:ea: ca:a4:14:63:ae:48:a5:c2:fb:57:ad:db:a1:75:1e: c6:b8:86:ac:2c:0c:4a:9c:af:48:c5:c1:1f:c9:93: b4:d8:54:f2:ca:1d:ea:79:43:92:2e:b0:76:79:03: fa:e6:f7:29:66:3e:d7:ed:01:37:fd:06:1c:24:b5: fb:3c:c8:84:f7:63:58:f5:e0:ef:01:55:f0:5f:53: 2b:04:eb:2b:a1:3c:a8:33:47:8e:cf:93:21:c5:86: 23:fe:fa:63:10:63:ba:7a:75:48:55:7a:b2:8a:0c: 35:14:fb:f2:34:6f:34:16:57:72:6f:5c:e6:1e:d1: 14:75:38:d3:62:c8:0a:30:76:1b:5b:80:dc:d9:7f: a3:7c:73:af:cb:9d:9e:5a:52:10:48:ba:e1:98:df: d0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7F:71:8D:AA:21:10:FB:DC:78:26:64:6E:77:C3:6E:F3:B8:30:78 X509v3 Authority Key Identifier: keyid:B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/3CED465E8E0811EE8450D961C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.188.88.0/24 Signature Algorithm: sha256WithRSAEncryption 81:e1:a5:26:bf:d9:8a:3d:a5:29:e6:20:c0:94:b7:30:b9:10: 69:4b:56:83:d0:bb:f8:c6:9f:ec:04:2e:d1:00:bd:43:20:56: a7:3c:e3:cb:a5:06:30:22:fe:bc:20:2d:a0:1b:f5:06:49:f3: 0a:c1:52:70:a3:59:18:66:f9:37:5e:de:28:2e:6e:8b:f5:1e: 45:e4:bf:a7:8a:a8:db:eb:09:5c:71:72:82:71:d2:b5:01:9e: 1b:d0:f1:fa:81:de:1e:df:1d:48:8b:27:31:fb:ae:fc:9f:b0: 67:81:40:f8:6a:90:40:a0:4f:72:82:ef:59:4a:d7:9f:1a:f0: a2:e7:4e:82:e1:c4:1c:d5:e8:12:3e:91:c8:d0:6a:a3:69:76: 13:c1:9b:02:29:df:8d:0e:cd:23:1b:5c:d3:ab:d4:5f:5a:cb: 77:4a:9b:bb:55:79:67:37:bc:94:6e:e3:8c:93:e1:2f:40:c7: 2c:1c:35:1a:70:f0:b2:11:83:db:bf:56:d7:50:1b:ec:4f:8f: ca:e6:9f:41:b7:6d:28:ea:47:e6:90:b0:ff:fc:fc:27:8a:c6: d9:2f:68:ee:78:b7:0a:28:4c:cc:dd:f6:3d:7b:96:fb:8c:d1: ed:60:2c:40:ff:c3:d3:d0:a5:0f:9e:50:f1:fb:e1:5e:7b:9d: 0e:7f:16:7d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMDYxMTAvBgNVBAUTKEI2MDQxMkNFOTgwOUMxMEM2N0RERUFCQkEwRTMzNUUz QURBNEZFMTAwHhcNMjQwNzE1MTQxMDU1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk1MmRlZS01N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtm0q5+DLuPVX0cEErao6gjQa5fcOQs+M6J5XLjYYS2GboysdYJx046dbsZ9u 0evTHLGbXdgX570zD/BwwX8c/NsAj74UUpYnAvAU104bG3faCvRyTg5xZMbNLi07 qkj/03j17+sQcurKpBRjrkilwvtXrduhdR7GuIasLAxKnK9IxcEfyZO02FTyyh3q eUOSLrB2eQP65vcpZj7X7QE3/QYcJLX7PMiE92NY9eDvAVXwX1MrBOsroTyoM0eO z5MhxYYj/vpjEGO6enVIVXqyigw1FPvyNG80Fldyb1zmHtEUdTjTYsgKMHYbW4Dc 2X+jfHOvy52eWlIQSLrhmN/QfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHJ/cY2q IRD73HgmZG53w27zuDB4MB8GA1UdIwQYMBaAFLYEEs6YCcEMZ93qu6DjNeOtpP4Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMwNi8xNzE3OTIwRTcx NkIxMUVFQjE2NzMyNzdDNEY5QUUwMi90Z1FTenBnSndReG4zZXE3b09NMTQ2Mmtf aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnUVN6cGdKd1F4bjNlcTdvT00xNDYya19oQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkYzMDYvMTcxNzkyMEU3MTZCMTFFRUIxNjczMjc3QzRGOUFFMDIvM0NFRDQ2NUU4 RTA4MTFFRTg0NTBEOTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnvFgwDQYJKoZIhvcNAQELBQADggEBAIHhpSa/2Yo9pSnm IMCUtzC5EGlLVoPQu/jGn+wELtEAvUMgVqc848ulBjAi/rwgLaAb9QZJ8wrBUnCj WRhm+Tde3igubov1HkXkv6eKqNvrCVxxcoJx0rUBnhvQ8fqB3h7fHUiLJzH7rvyf sGeBQPhqkECgT3KC71lK158a8KLnToLhxBzV6BI+kcjQaqNpdhPBmwIp340OzSMb XNOr1F9ay3dKm7tVeWc3vJRu44yT4S9AxywcNRpw8LIRg9u/VtdQG+xPj8rmn0G3 bSjqR+aQsP/8/CeKxtkvaO54twooTMzd9j17lvuM0e1gLED/w9PQpQ+eUPH74V57 nQ5/Fn0= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org