$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/3ED2E738F0C511E9AD7DCC11C4F9AE02.roa File: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (raw, json) Hash identifier: OUM6xIiVFIOh+aNHeNW4rfpQ1L1FG6j6FDFz4bgTri8= Subject key identifier: AE:35:74:02:3E:38:AA:DA:81:A0:05:9C:CB:FB:D2:58:BB:35:75:D9 Certificate issuer: /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Certificate serial: 0B54 Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/3ED2E738F0C511E9AD7DCC11C4F9AE02.roa Signing time: Mon 31 Jul 2023 19:16:29 +0000 ROA not before: Mon 31 Jul 2023 19:16:29 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 139251 IP address blocks: 103.140.98.0/23 maxlen: 24 2001:df0:b980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2900 (0xb54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Validity Not Before: Jul 31 19:16:29 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c8088d-33b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:20:00:2e:e6:38:a8:4a:12:d2:11:7a:f5: 65:dd:ee:bb:43:fd:ff:e7:5c:d0:10:55:cd:0c:49: 51:b1:d1:33:59:0c:06:7d:45:8b:7e:d9:70:67:d8: d2:3b:0f:4d:67:aa:97:38:5e:ac:76:32:28:23:e8: 1d:c5:8f:94:c6:1e:3e:ab:cb:81:2b:37:6e:4e:ce: 61:29:ed:bd:5e:bf:15:0b:67:74:23:20:42:df:d0: 4b:0d:2f:1f:cb:86:c8:1a:be:e3:53:92:48:02:ff: 46:ce:a2:d0:e5:2f:cc:35:bc:5f:2c:7b:60:1c:92: 48:b8:e2:cd:98:50:37:35:ac:68:93:7d:dc:95:3d: 75:e8:b8:fd:11:5d:eb:2a:dc:df:6f:4b:e7:c6:d8: c8:f2:c8:f5:2d:67:45:80:1d:d9:ec:cc:6b:53:6b: 73:fc:f7:d7:93:25:68:52:06:55:23:32:2b:24:d4: 68:ed:4b:7f:20:83:2a:63:0c:25:04:17:52:96:a6: b0:26:c0:cb:62:75:6d:6c:f6:bc:20:08:f3:94:35: e2:9f:48:39:a4:bc:52:d6:18:ce:f4:13:fc:c9:34: 67:d1:68:f5:67:83:2f:ea:1b:27:97:7e:84:11:af: fd:80:95:bc:dd:ee:12:24:13:cd:a0:6b:4c:ab:7c: 85:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:35:74:02:3E:38:AA:DA:81:A0:05:9C:CB:FB:D2:58:BB:35:75:D9 X509v3 Authority Key Identifier: keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/3ED2E738F0C511E9AD7DCC11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.98.0/23 IPv6: 2001:df0:b980::/48 Signature Algorithm: sha256WithRSAEncryption 4e:7f:45:d3:93:73:94:22:3a:3e:37:01:9d:bd:03:16:10:db: 0b:8e:a5:b1:95:16:37:08:2d:49:ce:80:80:79:80:df:8c:4d: e6:e5:f4:21:cb:ce:32:7f:27:b2:0b:e6:3f:8f:09:aa:53:52: c6:fc:af:5c:fd:38:b4:ce:76:44:35:2c:74:68:f5:45:9e:79: 8e:13:0d:0c:80:52:de:fd:64:f9:38:b7:c7:59:4f:1e:c6:1f: 78:57:07:2e:c2:d8:26:8b:46:6b:0a:a6:c0:2b:0a:17:bf:4b: ba:0a:d0:85:46:f3:21:58:c0:01:1d:eb:68:ad:c9:07:69:e8: 8c:d7:f7:06:84:c5:24:e6:aa:25:de:92:b0:89:83:a0:3f:80: da:a0:e9:4f:5f:cc:57:88:b8:4a:e4:cf:32:47:40:67:24:2c: 5a:21:38:8d:f0:b4:66:74:b3:f2:15:76:0c:47:b5:c8:eb:7c: 07:6b:4b:22:0d:da:9c:e0:72:a5:be:4f:07:02:ec:16:f0:09: ea:96:7a:53:35:78:1a:fc:17:30:87:a0:60:c1:de:9c:7c:0f: 5e:b1:de:5d:b5:3c:77:a7:7d:94:3f:ad:bd:99:ff:c6:47:df: 04:63:2d:a4:be:a4:c3:14:1f:c6:29:ff:b7:a2:9c:d9:40:14: 25:0e:eb:5a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICC1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NTkxMTAvBgNVBAUTKDZBN0M4NjIwQjAxMTkxMzVBNEUyOTY3MTEwMjAyRTdB OTIxMEZENzYwHhcNMjMwNzMxMTkxNjI5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGM4MDg4ZC0zM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRIgAC7mOKhKEtIRevVl3e67Q/3/51zQEFXNDElRsdEzWQwGfUWLftlwZ9jS Ow9NZ6qXOF6sdjIoI+gdxY+Uxh4+q8uBKzduTs5hKe29Xr8VC2d0IyBC39BLDS8f y4bIGr7jU5JIAv9GzqLQ5S/MNbxfLHtgHJJIuOLNmFA3Naxok33clT116Lj9EV3r Ktzfb0vnxtjI8sj1LWdFgB3Z7MxrU2tz/PfXkyVoUgZVIzIrJNRo7Ut/IIMqYwwl BBdSlqawJsDLYnVtbPa8IAjzlDXin0g5pLxS1hjO9BP8yTRn0Wj1Z4Mv6hsnl36E Ea/9gJW83e4SJBPNoGtMq3yFxQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFK41dAI+ OKragaAFnMv70li7NXXZMB8GA1UdIwQYMBaAFGp8hiCwEZE1pOKWcRAgLnqSEP12 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY1OS9DNDY4RTlDNkYw QzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtUV2s0cFp4RUNBdWVwSVFf WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FueUdJTEFSa1RXazRwWnhFQ0F1ZXBJUV9YWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI2NTkvQzQ2OEU5QzZGMEMzMTFFOTkyNkNDRDBFQzRGOUFFMDIvM0VEMkU3MzhG MEM1MTFFOUFEN0RDQzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjGIwDwQCAAIwCQMHACABDfC5gDANBgkqhkiG9w0BAQsF AAOCAQEATn9F05NzlCI6PjcBnb0DFhDbC46lsZUWNwgtSc6AgHmA34xN5uX0IcvO Mn8nsgvmP48JqlNSxvyvXP04tM52RDUsdGj1RZ55jhMNDIBS3v1k+Ti3x1lPHsYf eFcHLsLYJotGawqmwCsKF79LugrQhUbzIVjAAR3raK3JB2nojNf3BoTFJOaqJd6S sImDoD+A2qDpT1/MV4i4SuTPMkdAZyQsWiE4jfC0ZnSz8hV2DEe1yOt8B2tLIg3a nOBypb5PBwLsFvAJ6pZ6UzV4GvwXMIegYMHenHwPXrHeXbU8d6d9lD+tvZn/xkff BGMtpL6kwxQfxin/t6Kc2UAUJQ7rWg== -----END CERTIFICATE-----Generated at Thu May 16 19:50:00 2024 by rpki-client on console-fra.rpki-client.org