$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/3D13A01EA9AB11EAA4DBEA5EC4F9AE02.roa File: 3D13A01EA9AB11EAA4DBEA5EC4F9AE02.roa (raw, json) Hash identifier: /rJ72nX+kkgSo0V45R+mQxQnHh38w+ytfp+FOoflTT0= Subject key identifier: 5A:63:18:D3:C3:0B:C9:87:55:57:FC:94:1D:6E:C0:6F:A3:7E:86:B8 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 083D Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/3D13A01EA9AB11EAA4DBEA5EC4F9AE02.roa Signing time: Tue 30 Apr 2024 17:25:56 +0000 ROA not before: Tue 30 Apr 2024 17:25:56 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 135130 IP address blocks: 103.210.56.0/22 maxlen: 22 103.210.56.0/23 maxlen: 24 103.210.58.0/24 maxlen: 24 103.210.59.0/24 maxlen: 24 2404:6480::/32 maxlen: 32 2404:6480::/48 maxlen: 48 2404:6480:1::/48 maxlen: 48 2404:6480:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 17:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Apr 30 17:25:56 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=663129a4-d256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5c:59:8b:be:19:4f:36:58:d5:a9:73:bd:d8: 36:c6:c8:83:58:02:7a:07:9e:2d:17:5d:26:ca:cb: ff:d0:a8:92:da:17:13:16:d4:4e:6f:cf:5b:b2:9e: 4a:08:7a:ef:5d:f5:a0:e9:7e:11:77:18:26:45:08: 3f:2f:83:4f:1f:c2:3d:58:d1:12:fe:2a:4c:3d:7d: c6:82:ac:ae:f5:18:42:63:25:80:21:f4:0f:c1:ae: c2:7f:be:3f:55:e1:fa:f4:6f:ba:de:d8:6d:26:8f: 2f:75:5c:3a:b6:3a:98:79:cb:cf:54:43:32:49:2e: 7f:5d:e0:d4:ee:96:30:46:16:c4:77:b9:ec:d6:e6: 9a:d1:bb:66:b7:f8:47:b1:82:c7:54:f3:4c:90:ef: 57:73:eb:63:7f:c8:1c:0a:75:ca:cd:0d:99:78:f3: 66:89:e6:13:ee:62:0b:f2:b1:91:20:7d:a9:f4:7d: 49:e3:2b:0b:e5:84:44:50:46:99:8d:d1:4c:1c:35: 2d:fd:0c:0c:34:22:8d:ae:5f:d9:f7:92:8f:f1:27: fb:ef:4a:40:8e:ef:57:a0:08:ce:6e:3d:ad:e4:4a: 6f:6a:58:11:24:f7:3a:10:62:1f:9e:a8:09:d1:46: 81:88:a8:e2:9a:4d:83:0b:7d:24:70:cc:76:93:23: 36:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:63:18:D3:C3:0B:C9:87:55:57:FC:94:1D:6E:C0:6F:A3:7E:86:B8 X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/3D13A01EA9AB11EAA4DBEA5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.210.56.0/22 IPv6: 2404:6480::/32 Signature Algorithm: sha256WithRSAEncryption 91:40:3f:e1:f8:6b:87:d0:77:dd:99:1e:7d:37:39:10:14:b6: ca:ce:66:e5:4d:5b:fc:4a:f9:92:1d:8d:2f:7c:c9:2e:bb:a4: 8d:17:16:a0:c3:1b:d3:2a:e4:79:f5:b1:01:00:38:5e:c9:5e: 92:ea:d8:d9:76:86:3d:ec:8f:c3:a3:7a:ad:b1:ad:4a:79:cf: ff:5d:d1:9a:8c:36:2f:0f:a1:c4:58:17:19:06:1f:bb:c7:23: 61:30:d3:cf:9d:cf:6e:5e:bf:b1:f1:a6:e9:38:57:4f:86:72: 97:8d:b2:11:d3:c3:8d:fa:a4:cb:d1:31:7f:81:69:64:bf:0e: 35:5b:cf:2b:d5:8b:a2:e3:f8:4d:ed:cc:ca:a8:fb:11:3b:07: 95:3e:95:ef:e9:32:e5:f6:d5:41:85:1c:0a:83:be:6c:ef:05: ff:1c:da:cb:b9:e0:6a:18:9a:15:c1:2c:7a:69:bf:c1:a9:43: 50:80:90:56:a9:2d:4d:04:0e:82:67:be:8b:6c:65:b8:c0:c2: da:97:50:7e:85:8e:32:c9:fe:5a:56:46:a9:05:4a:57:12:0d: f4:6c:c3:4e:6f:e7:66:94:a3:e3:a9:6a:7b:d1:60:76:23:a9: e7:de:c4:17:1c:ff:7b:a8:e7:cb:c6:e5:a6:87:38:7f:c9:ec: 55:6a:fd:ad -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjQwNDMwMTcyNTU2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxMjlhNC1kMjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1xZi74ZTzZY1alzvdg2xsiDWAJ6B54tF10mysv/0KiS2hcTFtROb89bsp5K CHrvXfWg6X4RdxgmRQg/L4NPH8I9WNES/ipMPX3Ggqyu9RhCYyWAIfQPwa7Cf74/ VeH69G+63thtJo8vdVw6tjqYecvPVEMySS5/XeDU7pYwRhbEd7ns1uaa0btmt/hH sYLHVPNMkO9Xc+tjf8gcCnXKzQ2ZePNmieYT7mIL8rGRIH2p9H1J4ysL5YREUEaZ jdFMHDUt/QwMNCKNrl/Z95KP8Sf770pAju9XoAjObj2t5EpvalgRJPc6EGIfnqgJ 0UaBiKjimk2DC30kcMx2kyM2DQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFpjGNPD C8mHVVf8lB1uwG+jfoa4MB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNCMjUvN0U4OTJDQzJGNjE1MTFFN0I4MzAwOTZEQzRGOUFFMDIvM0QxM0EwMUVB OUFCMTFFQUE0REJFQTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn0jgwDQQCAAIwBwMFACQEZIAwDQYJKoZIhvcNAQELBQAD ggEBAJFAP+H4a4fQd92ZHn03ORAUtsrOZuVNW/xK+ZIdjS98yS67pI0XFqDDG9Mq 5Hn1sQEAOF7JXpLq2Nl2hj3sj8Ojeq2xrUp5z/9d0ZqMNi8PocRYFxkGH7vHI2Ew 08+dz25ev7Hxpuk4V0+GcpeNshHTw436pMvRMX+BaWS/DjVbzyvVi6Lj+E3tzMqo +xE7B5U+le/pMuX21UGFHAqDvmzvBf8c2su54GoYmhXBLHppv8GpQ1CAkFapLU0E DoJnvotsZbjAwtqXUH6FjjLJ/lpWRqkFSlcSDfRsw05v52aUo+OpanvRYHYjqefe xBcc/3uo58vG5aaHOH/J7FVq/a0= -----END CERTIFICATE-----Generated at Tue May 28 19:33:38 2024 by rpki-client on console-ams.rpki-client.org