$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/F3CB78DC2D1D11EFB1125716C4F9AE02.roa File: F3CB78DC2D1D11EFB1125716C4F9AE02.roa (raw, json) Hash identifier: TPPWZGP5sV9IJtZUwLcKpBnJCq1AW3jjv3oaEJcerEg= Subject key identifier: 56:70:D4:36:5A:16:09:48:FD:AE:A4:C8:39:68:5C:B8:E4:B4:28:C1 Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Certificate serial: 24E7 Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/F3CB78DC2D1D11EFB1125716C4F9AE02.roa Signing time: Tue 06 Aug 2024 16:12:44 +0000 ROA not before: Tue 06 Aug 2024 16:12:44 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 38887 IP address blocks: 103.60.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9447 (0x24e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Validity Not Before: Aug 6 16:12:44 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b24b7c-414d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f2:44:22:92:3a:31:eb:d2:a0:56:b0:70:fb: 2a:7e:ca:92:3d:c5:b1:95:f3:ff:32:1e:f7:de:47: 8c:ad:c5:f9:41:c1:cd:fd:fd:11:ed:cc:4a:97:f3: ce:91:6c:06:5e:94:1e:25:e7:45:50:79:2a:87:64: 68:60:be:5b:fa:02:f4:4e:63:33:cf:ae:44:9d:31: e7:86:b9:12:e9:8a:a9:b8:77:c8:3f:32:07:e9:6b: 74:91:54:5e:46:f7:60:cb:01:64:78:d0:6f:19:de: 64:bf:9b:eb:fd:c5:e6:50:df:98:7f:76:cd:82:9f: 61:aa:63:f5:e3:48:91:a2:03:1a:64:37:e1:de:95: a6:77:cf:cc:5d:4a:eb:77:f1:50:9d:60:dd:ff:48: 20:b2:05:91:ca:c5:75:86:07:a4:7f:f3:b2:60:40: ad:1b:ca:d6:e5:b6:3a:d1:35:56:63:f8:6c:15:11: bc:e7:7e:71:6a:a6:e7:d1:c2:26:f2:c9:70:a4:53: f4:ab:ab:a0:5c:e4:99:82:b8:47:64:26:51:55:ec: 57:57:fd:18:71:80:fa:3d:07:6e:a2:3b:b3:fa:c0: 63:c5:dd:9d:14:fb:8f:31:c8:e1:d9:77:99:62:95: f9:49:4f:63:2e:81:47:77:c8:59:fd:61:68:c6:e7: 0f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:70:D4:36:5A:16:09:48:FD:AE:A4:C8:39:68:5C:B8:E4:B4:28:C1 X509v3 Authority Key Identifier: keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/F3CB78DC2D1D11EFB1125716C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.216.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:e6:79:64:73:23:e3:5e:a2:08:93:e5:fe:12:05:3d:ef:da: b7:b8:51:ea:00:6d:e2:cb:f8:ee:39:01:a3:e5:68:e4:1c:86: ff:95:09:25:18:bd:7c:03:3d:f7:33:49:39:61:37:df:a2:18: 2c:0c:8a:06:b4:3a:51:fd:b7:de:cb:f1:9a:d6:e8:37:b0:1c: 1b:2b:62:54:c1:e2:67:d6:e1:de:e8:f1:8e:8f:40:3c:59:a1: a8:41:43:64:ea:3f:60:e9:69:e8:fa:cf:61:c2:c6:88:0a:3e: 13:85:c2:74:77:c0:02:25:96:b6:f9:c8:e8:f2:2e:40:fa:19: fb:c2:ce:c9:db:35:39:86:3c:c2:75:ac:1b:0b:15:31:b3:a5: 56:50:96:79:ab:27:92:5d:ca:43:03:22:22:4a:b6:23:23:7c: 56:a2:fc:61:90:6a:ee:cc:b2:4f:25:68:50:1e:07:fc:da:a5: f4:1a:b3:99:f5:bf:55:82:be:ab:ee:cb:fd:9e:f8:a3:55:69: 9c:7c:cd:73:b0:c6:9a:eb:d0:ae:e5:28:c1:29:8a:8e:5f:e9: a7:e5:a8:e3:70:a9:c4:13:5d:51:8e:0c:21:d3:bc:1a:5a:4f: 29:41:32:7b:fa:be:ff:82:df:7b:4c:f9:ac:25:cc:72:ef:c6: 8d:f3:be:e5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz RjE2NzhDRjYwHhcNMjQwODA2MTYxMjQ0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIyNGI3Yy00MTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fJEIpI6MevSoFawcPsqfsqSPcWxlfP/Mh733keMrcX5QcHN/f0R7cxKl/PO kWwGXpQeJedFUHkqh2RoYL5b+gL0TmMzz65EnTHnhrkS6YqpuHfIPzIH6Wt0kVRe RvdgywFkeNBvGd5kv5vr/cXmUN+Yf3bNgp9hqmP140iRogMaZDfh3pWmd8/MXUrr d/FQnWDd/0ggsgWRysV1hgekf/OyYECtG8rW5bY60TVWY/hsFRG8535xaqbn0cIm 8slwpFP0q6ugXOSZgrhHZCZRVexXV/0YcYD6PQduojuz+sBjxd2dFPuPMcjh2XeZ YpX5SU9jLoFHd8hZ/WFoxucPpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFZw1DZa FglI/a6kyDloXLjktCjBMB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0 QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U2RUMvRDNBQjYwMTYxNEM4MTFFNUEyRkNFRjE1QzRGOUFFMDIvRjNDQjc4REMy RDFEMTFFRkIxMTI1NzE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnPNgwDQYJKoZIhvcNAQELBQADggEBAHvmeWRzI+NeogiT 5f4SBT3v2re4UeoAbeLL+O45AaPlaOQchv+VCSUYvXwDPfczSTlhN9+iGCwMiga0 OlH9t97L8ZrW6DewHBsrYlTB4mfW4d7o8Y6PQDxZoahBQ2TqP2Dpaej6z2HCxogK PhOFwnR3wAIllrb5yOjyLkD6GfvCzsnbNTmGPMJ1rBsLFTGzpVZQlnmrJ5JdykMD IiJKtiMjfFai/GGQau7Msk8laFAeB/zapfQas5n1v1WCvqvuy/2e+KNVaZx8zXOw xprr0K7lKMEpio5f6aflqONwqcQTXVGODCHTvBpaTylBMnv6vv+C33tM+awlzHLv xo3zvuU= -----END CERTIFICATE-----Generated at Tue Oct 22 17:18:40 2024 by rpki-client on console-fra.rpki-client.org