$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B3876B1821C911EB991D562EC4F9AE02.roa File: B3876B1821C911EB991D562EC4F9AE02.roa (raw, json) Hash identifier: USMDrnzBwJmamUvpte7xS0PSkXwmOeAxXXKzfdcnaAk= Subject key identifier: B9:41:0A:71:D5:EE:A3:B6:3B:82:AE:A9:07:98:2F:70:B9:BF:16:3F Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Certificate serial: 0E25 Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B3876B1821C911EB991D562EC4F9AE02.roa Signing time: Wed 10 May 2023 19:28:53 +0000 ROA not before: Wed 10 May 2023 19:28:53 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 18013 IP address blocks: 103.113.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3621 (0xe25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Validity Not Before: May 10 19:28:53 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=645bf074-5930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a3:b3:21:35:9f:29:7c:a9:e2:47:e1:92:35: 04:8f:a4:49:f2:b2:f5:f8:81:5f:9a:bf:29:93:4d: 36:01:16:c6:49:02:ef:3a:7f:65:82:d1:c0:78:70: e1:a5:1b:f1:3f:c3:43:1e:46:5d:3a:67:fc:4f:a2: 4b:9f:eb:f0:fd:10:6e:cf:67:95:d3:ef:39:2a:cf: 2a:db:ec:24:00:14:41:f3:0d:a0:3f:02:b7:47:77: 6b:5c:e3:ce:9a:17:db:80:99:54:fa:ea:22:80:2d: 4a:57:94:35:49:79:e8:18:4c:b2:a4:21:c2:ef:e5: d0:5e:f2:93:fc:0c:76:bd:ee:c8:a9:96:08:d4:c3: d1:58:a6:51:b6:0f:7c:5d:7b:45:b4:13:f1:63:1a: 0d:55:66:a0:d4:45:35:c7:87:af:3c:3a:f2:22:54: 4b:1c:ab:29:79:2d:41:5c:66:77:ac:f0:4e:52:66: 90:9b:4b:c8:d9:b6:2e:d1:0a:9b:a4:ee:4d:a4:0d: 3f:2f:81:83:d0:7c:40:54:b9:1d:03:3c:6f:d5:38: 05:2b:fb:01:b0:7d:a9:fb:a7:d4:a9:4d:01:e2:23: 98:64:d5:0d:d6:2a:ea:b2:6a:f7:c2:65:fe:32:64: e9:74:f6:92:16:13:eb:66:86:27:95:5b:d0:c6:9a: da:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:41:0A:71:D5:EE:A3:B6:3B:82:AE:A9:07:98:2F:70:B9:BF:16:3F X509v3 Authority Key Identifier: keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B3876B1821C911EB991D562EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.92.0/22 Signature Algorithm: sha256WithRSAEncryption 70:cb:90:e7:98:67:53:d6:95:7b:23:79:44:ba:d5:6d:7c:ca: c3:de:a2:a2:6d:5e:d8:68:c5:42:4d:7a:0e:e0:ee:b0:26:41: 64:e7:9c:58:69:ed:ec:20:d4:6f:e6:20:c7:2c:c2:98:7c:56: c7:c4:3a:6d:dc:ff:4f:77:08:c7:5f:42:01:9f:fa:a6:ef:9f: 2d:46:63:32:45:d5:fa:e3:2e:0c:99:57:77:9e:c5:80:74:55: 7b:40:f1:39:b5:c8:3b:2f:51:75:39:58:89:ed:e0:4d:93:9b: a0:9e:68:c2:87:76:3a:78:8c:cc:5a:c9:aa:03:3b:77:5b:42: f2:a2:ad:ea:79:d5:78:ba:5b:12:1e:fc:d8:ac:ad:2a:9f:e2: 18:29:6e:1e:af:5e:11:b2:4f:66:d3:3b:cc:cd:ad:86:f5:f6: 79:5e:a6:31:0f:73:f2:2f:3e:90:eb:fa:7a:96:e8:0c:4f:72: 14:b6:7c:63:19:af:77:4d:2c:67:df:a1:42:5d:cd:5a:08:47: f1:88:61:3c:91:d4:81:8f:69:78:7e:24:ed:73:b1:45:fd:b1: c9:53:90:97:5e:0b:f1:5d:e1:1c:93:2d:a4:d5:fd:db:a3:34: 65:9d:8c:cb:00:e5:45:2a:9a:8d:ee:ae:4f:39:a6:14:03:6a: 70:a1:d5:38 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2 RkZBQzQ2NjEwHhcNMjMwNTEwMTkyODUzWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViZjA3NC01OTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aOzITWfKXyp4kfhkjUEj6RJ8rL1+IFfmr8pk002ARbGSQLvOn9lgtHAeHDh pRvxP8NDHkZdOmf8T6JLn+vw/RBuz2eV0+85Ks8q2+wkABRB8w2gPwK3R3drXOPO mhfbgJlU+uoigC1KV5Q1SXnoGEyypCHC7+XQXvKT/Ax2ve7IqZYI1MPRWKZRtg98 XXtFtBPxYxoNVWag1EU1x4evPDryIlRLHKspeS1BXGZ3rPBOUmaQm0vI2bYu0Qqb pO5NpA0/L4GD0HxAVLkdAzxv1TgFK/sBsH2p+6fUqU0B4iOYZNUN1irqsmr3wmX+ MmTpdPaSFhPrZoYnlVvQxpraZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLlBCnHV 7qO2O4KuqQeYL3C5vxY/MB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNGMDIvQ0NBQjU3NTA2M0YwMTFFOUE5QkNBMTQxQzRGOUFFMDIvQjM4NzZCMTgy MUM5MTFFQjk5MUQ1NjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJncVwwDQYJKoZIhvcNAQELBQADggEBAHDLkOeYZ1PWlXsj eUS61W18ysPeoqJtXthoxUJNeg7g7rAmQWTnnFhp7ewg1G/mIMcswph8VsfEOm3c /093CMdfQgGf+qbvny1GYzJF1frjLgyZV3eexYB0VXtA8Tm1yDsvUXU5WInt4E2T m6CeaMKHdjp4jMxayaoDO3dbQvKirep51Xi6WxIe/NisrSqf4hgpbh6vXhGyT2bT O8zNrYb19nlepjEPc/IvPpDr+nqW6AxPchS2fGMZr3dNLGffoUJdzVoIR/GIYTyR 1IGPaXh+JO1zsUX9sclTkJdeC/Fd4RyTLaTV/dujNGWdjMsA5UUqmo3urk85phQD anCh1Tg= -----END CERTIFICATE-----Generated at Thu May 16 19:10:57 2024 by rpki-client on console-fra.rpki-client.org