$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/C3F53A0654F011E7BE4A6431C4F9AE02.roa File: C3F53A0654F011E7BE4A6431C4F9AE02.roa (raw, json) Hash identifier: slc5PZ764I0a4GJ+ghR69dJPBm3mYwOgWuKrbU/Ievk= Subject key identifier: 40:F5:E2:60:DD:9D:9F:5D:E2:63:94:38:AF:F9:8E:74:51:C7:17:E7 Certificate issuer: /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Certificate serial: 2F35 Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/C3F53A0654F011E7BE4A6431C4F9AE02.roa Signing time: Thu 08 Jun 2023 15:59:00 +0000 ROA not before: Thu 08 Jun 2023 15:59:00 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 32934 IP address blocks: 45.64.40.0/22 maxlen: 24 103.4.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12085 (0x2f35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Validity Not Before: Jun 8 15:59:00 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6481fac4-ffdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:c4:46:db:d6:c4:63:86:8a:33:bb:7a:27: a1:3d:56:16:51:f8:15:de:8c:54:98:e6:aa:2c:f5: 17:c8:58:65:a8:ed:de:04:85:f4:55:9f:52:fb:b2: 63:c0:1d:5e:05:8d:b3:f7:89:ff:d5:12:5d:82:78: ff:a3:e3:01:d6:87:3d:b3:93:06:68:d1:35:4e:c9: e9:09:18:69:c2:ad:ee:18:62:80:4d:62:4f:e6:e9: 35:fa:44:20:8e:02:25:01:40:71:c0:95:8f:69:08: e0:ff:6a:79:9f:ef:3d:88:0e:fb:8f:14:72:10:fc: a7:53:e0:e4:ff:db:8b:ac:4a:7d:04:20:51:a6:75: e1:d6:f5:3b:37:c4:14:e2:44:1a:b0:84:26:8a:79: 4b:c7:79:1a:ca:e0:a6:ca:f2:61:df:9f:6f:8f:2c: 98:88:49:0d:bc:aa:de:68:70:73:53:a0:d7:ab:e5: 30:e5:c7:2b:50:0b:6d:3f:58:2a:a3:72:ad:04:65: e5:64:86:67:84:89:73:ed:7a:e5:91:ef:d4:2e:58: b1:2c:26:9e:b3:11:06:f7:65:1a:82:97:72:17:33: f7:c6:be:16:8b:71:b0:28:5b:41:ef:38:63:09:fd: ff:e3:3c:9e:3b:ae:1c:9c:8e:4d:df:e2:b4:76:c5: d7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F5:E2:60:DD:9D:9F:5D:E2:63:94:38:AF:F9:8E:74:51:C7:17:E7 X509v3 Authority Key Identifier: keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/C3F53A0654F011E7BE4A6431C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.40.0/22 103.4.96.0/22 Signature Algorithm: sha256WithRSAEncryption 52:35:d9:22:e7:61:08:83:07:89:b7:2e:80:a1:95:9e:4d:34: 1b:9a:83:cf:82:28:50:6e:7d:8a:d6:66:06:bf:2b:21:98:54: 1d:a7:fd:bc:ec:35:c1:3e:c1:6e:23:0f:f8:43:1f:df:4a:ed: d6:97:02:4d:8e:47:3c:9c:69:be:5c:af:35:3f:ca:3e:f4:5b: 3b:22:d9:86:45:cb:99:9a:e3:2c:62:db:77:35:46:b0:f0:0a: e0:8d:7e:1d:06:58:e8:a9:ab:9e:3b:8e:37:5a:23:5b:9f:32: 20:17:df:35:27:08:f3:28:ca:5d:54:a0:d3:bd:4b:bf:12:16: 32:92:1c:df:e2:94:d5:f5:0a:d6:ab:64:cb:10:b9:70:db:bf: b8:27:b8:32:d7:62:f9:82:17:df:2e:5e:9b:4e:12:90:42:61: e1:03:c2:0c:97:a5:42:e0:47:fa:14:3e:52:49:dc:ea:31:56: db:c9:7e:ef:28:13:37:05:ff:1f:cf:31:7b:01:ba:a3:42:2b: 3f:b6:53:1f:04:32:17:8a:03:85:13:72:c2:3a:1a:e6:a9:2e: 66:6b:3a:e0:6d:39:9c:25:3c:82:d7:ad:f8:27:dc:43:bf:8b: 7c:d0:e2:70:f3:10:53:ee:46:9f:22:db:7f:8d:08:70:6b:87: 1a:01:02:c9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICLzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMzcxMTAvBgNVBAUTKENDODQzRTE0MEEyRTNFRkJFMEI5NDlERTBFRDgwMzgz OTA2MDU0MUQwHhcNMjMwNjA4MTU1OTAwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDgxZmFjNC1mZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6PERtvWxGOGijO7eiehPVYWUfgV3oxUmOaqLPUXyFhlqO3eBIX0VZ9S+7Jj wB1eBY2z94n/1RJdgnj/o+MB1oc9s5MGaNE1TsnpCRhpwq3uGGKATWJP5uk1+kQg jgIlAUBxwJWPaQjg/2p5n+89iA77jxRyEPynU+Dk/9uLrEp9BCBRpnXh1vU7N8QU 4kQasIQminlLx3kayuCmyvJh359vjyyYiEkNvKreaHBzU6DXq+Uw5ccrUAttP1gq o3KtBGXlZIZnhIlz7Xrlke/ULlixLCaesxEG92UagpdyFzP3xr4Wi3GwKFtB7zhj Cf3/4zyeO64cnI5N3+K0dsXXdwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFED14mDd nZ9d4mOUOK/5jnRRxxfnMB8GA1UdIwQYMBaAFMyEPhQKLj774LlJ3g7YA4OQYFQd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUEzNy82ODY4RTAyOEU3 RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2dmd1VW5lRHRnRGc1QmdW QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJUS1GQW91UHZ2Z3VVbmVEdGdEZzVCZ1ZCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFBMzcvNjg2OEUwMjhFN0YwMTFFMjhDMjgwNTg0NTkxMUVBMzIvQzNGNTNBMDY1 NEYwMTFFN0JFNEE2NDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItQCgDBAJnBGAwDQYJKoZIhvcNAQELBQADggEBAFI12SLn YQiDB4m3LoChlZ5NNBuag8+CKFBufYrWZga/KyGYVB2n/bzsNcE+wW4jD/hDH99K 7daXAk2ORzycab5crzU/yj70Wzsi2YZFy5ma4yxi23c1RrDwCuCNfh0GWOipq547 jjdaI1ufMiAX3zUnCPMoyl1UoNO9S78SFjKSHN/ilNX1CtarZMsQuXDbv7gnuDLX YvmCF98uXptOEpBCYeEDwgyXpULgR/oUPlJJ3OoxVtvJfu8oEzcF/x/PMXsBuqNC Kz+2Ux8EMheKA4UTcsI6GuapLmZrOuBtOZwlPILXrfgn3EO/i3zQ4nDzEFPuRp8i 23+NCHBrhxoBAsk= -----END CERTIFICATE-----Generated at Wed May 8 18:14:37 2024 by rpki-client on console-fra.rpki-client.org