$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9BBCC1F60D2411EEA8431074C4F9AE02.roa File: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (raw, json) Hash identifier: mr9bH4na8Ni92Bl0tYhwxMl9YdPdkp1y6gqdJLkZgso= Subject key identifier: E1:41:8C:8F:25:09:27:E6:00:85:DB:85:6B:97:13:6A:3B:3E:1E:BF Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Certificate serial: 16 Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9BBCC1F60D2411EEA8431074C4F9AE02.roa Signing time: Sat 17 Jun 2023 15:35:38 +0000 ROA not before: Sat 17 Jun 2023 15:35:38 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 151324 IP address blocks: 103.196.176.0/23 maxlen: 23 103.196.176.0/24 maxlen: 24 103.196.177.0/24 maxlen: 24 2001:df2:6c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 06:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Validity Not Before: Jun 17 15:35:38 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=648dd2ca-cb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:4e:52:77:43:13:83:e4:d6:af:0b:2d:6f: 4a:05:15:69:03:9a:f4:a6:7c:51:ab:61:a8:5f:05: 15:4d:4b:68:48:a6:03:10:86:0e:3e:b0:75:83:b6: 2d:86:12:3b:84:78:20:5c:07:f3:3c:bb:20:2e:e1: cf:46:13:2b:09:40:b2:ad:7c:64:a4:83:2a:44:ef: 84:ec:10:c1:aa:33:ee:71:ad:8a:58:16:69:bd:48: 15:df:8a:14:6f:1f:7d:83:31:d5:5c:96:0e:c4:a2: ed:19:bb:95:74:6a:5b:0d:f0:7f:ff:cc:9f:4d:eb: 72:c8:8c:91:e1:30:65:56:9f:0b:72:2d:04:7a:fc: 08:34:d2:a1:49:fb:62:19:8c:70:26:ee:a2:d3:eb: 07:01:94:e8:7e:6e:1b:b9:c8:27:48:dd:89:91:0f: b5:6b:08:7c:75:86:39:ea:49:62:10:c0:3c:81:2c: ab:63:35:c8:44:8c:7e:61:2f:2d:5c:9d:fa:a3:62: 20:0d:a8:40:de:1f:fd:5b:9d:35:3c:f8:61:7d:78: 40:1a:ed:4e:6d:34:79:1b:92:66:11:bf:e1:ee:1f: 1e:14:2d:1a:99:0c:b4:ac:ad:76:d2:7d:19:c7:b0: dd:e4:fd:92:a6:57:c1:d4:ae:5b:ca:18:bc:0d:13: fb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:41:8C:8F:25:09:27:E6:00:85:DB:85:6B:97:13:6A:3B:3E:1E:BF X509v3 Authority Key Identifier: keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9BBCC1F60D2411EEA8431074C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.196.176.0/23 IPv6: 2001:df2:6c40::/48 Signature Algorithm: sha256WithRSAEncryption 66:17:44:64:dd:58:e2:ab:9b:0f:b2:de:0a:8f:ff:45:28:7d: 08:12:98:d9:4c:04:7d:3a:e3:0d:47:fe:d7:39:0b:9c:cc:b3: f9:95:f3:69:0d:4b:9d:5d:6f:5a:05:1d:38:58:4f:0b:c2:93: f8:ff:69:45:bb:6f:39:fe:a5:43:46:74:38:a0:d3:3b:79:64: 66:3d:8d:8e:93:3d:4a:aa:b2:2d:c3:c0:1f:0b:35:cc:5f:28: b6:5a:93:8b:d2:46:f5:30:6a:f3:d8:2b:4d:b1:66:9b:3a:fc: e7:57:89:09:62:56:e4:d6:45:47:e9:09:34:b2:ae:7a:e6:df: 13:75:12:66:c2:20:19:1f:fc:05:7e:a3:09:30:61:6e:04:ec: 4c:02:30:98:21:b2:75:75:e8:19:3f:05:dd:d3:5f:50:68:51: 3f:6a:0a:69:4c:98:ef:0f:a9:0c:86:e7:f5:ee:9b:2d:62:f8: aa:9d:35:6e:7e:da:b3:9f:7b:66:bd:a5:74:b3:7c:20:5a:e3: 78:3b:e1:eb:ad:b9:5a:60:ed:02:b9:72:62:0c:13:97:33:e1: 04:ed:9d:24:d2:b6:68:05:36:b8:0d:6e:72:6b:e3:dd:d6:bf: 31:c8:28:5b:b4:43:fe:bd:b9:38:8a:b6:ba:ef:50:e4:01:b8: f0:69:0d:bc -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD M0UzNzExMC8GA1UEBRMoRjQ1NjE4RUEyNzNGNDBCNEJDNjg1RTI5ODg3RTIwNTA4 M0M0OTBBNjAeFw0yMzA2MTcxNTM1MzhaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0OGRkMmNhLWNiNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGLU5Sd0MTg+TWrwstb0oFFWkDmvSmfFGrYahfBRVNS2hIpgMQhg4+sHWDti2G EjuEeCBcB/M8uyAu4c9GEysJQLKtfGSkgypE74TsEMGqM+5xrYpYFmm9SBXfihRv H32DMdVclg7Eou0Zu5V0alsN8H//zJ9N63LIjJHhMGVWnwtyLQR6/Ag00qFJ+2IZ jHAm7qLT6wcBlOh+bhu5yCdI3YmRD7VrCHx1hjnqSWIQwDyBLKtjNchEjH5hLy1c nfqjYiANqEDeH/1bnTU8+GF9eEAa7U5tNHkbkmYRv+HuHx4ULRqZDLSsrXbSfRnH sN3k/ZKmV8HUrlvKGLwNE/vrAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU4UGMjyUJ J+YAhduFa5cTajs+Hr8wHwYDVR0jBBgwFoAU9FYY6ic/QLS8aF4piH4gUIPEkKYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzRTM3L0I0NDU1M0Q4RjA5 RjExRUQ5QjRBMDczNEM0RjlBRTAyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtL WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUZZWTZpY19RTFM4YUY0cGlINGdVSVBFa0tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0UzNy9CNDQ1NTNEOEYwOUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85QkJDQzFGNjBE MjQxMUVFQTg0MzEwNzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWfEsDAPBAIAAjAJAwcAIAEN8mxAMA0GCSqGSIb3DQEBCwUA A4IBAQBmF0Rk3Vjiq5sPst4Kj/9FKH0IEpjZTAR9OuMNR/7XOQuczLP5lfNpDUud XW9aBR04WE8LwpP4/2lFu285/qVDRnQ4oNM7eWRmPY2Okz1KqrItw8AfCzXMXyi2 WpOL0kb1MGrz2CtNsWabOvznV4kJYlbk1kVH6Qk0sq565t8TdRJmwiAZH/wFfqMJ MGFuBOxMAjCYIbJ1degZPwXd019QaFE/agppTJjvD6kMhuf17pstYviqnTVuftqz n3tmvaV0s3wgWuN4O+HrrblaYO0CuXJiDBOXM+EE7Z0k0rZoBTa4DW5ya+Pd1r8x yChbtEP+vbk4ira671DkAbjwaQ28 -----END CERTIFICATE-----Generated at Mon May 27 07:39:40 2024 by rpki-client on console-fra.rpki-client.org