$ rpki-client -vvf rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/2F79F386050511EA87CC7D42C4F9AE02.roa File: 2F79F386050511EA87CC7D42C4F9AE02.roa (raw, json) Hash identifier: eC5ZCaV+uar8UhV81NoF6+j/mNJ5lnpowpcwQY80DEA= Subject key identifier: B1:88:96:E8:D7:E6:9F:C2:7B:61:80:DD:EE:8A:05:2F:A9:E2:5D:CC Certificate issuer: /CN=A917E754/serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D Certificate serial: 335D Authority key identifier: B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/2F79F386050511EA87CC7D42C4F9AE02.roa Signing time: Tue 10 Oct 2023 15:41:09 +0000 ROA not before: Tue 10 Oct 2023 15:41:09 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 132394 IP address blocks: 103.20.20.0/24 maxlen: 24 103.232.159.0/24 maxlen: 24 103.232.216.0/23 maxlen: 23 202.0.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13149 (0x335d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E754/serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D Validity Not Before: Oct 10 15:41:09 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65257094-ec28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:15:a0:0e:fb:86:25:86:a9:a6:9d:45:b4: e6:34:95:e3:b6:8e:e3:30:d3:8e:24:9e:c7:6a:40: 57:1a:bc:a7:4c:5b:4a:47:9c:b1:21:57:e9:c7:b0: 42:b1:fa:78:4e:70:84:f2:15:c0:05:59:53:61:56: 22:f4:dc:8f:10:da:7c:bc:61:d4:a2:e7:08:94:ce: 0e:05:e9:5a:95:13:b7:bc:a9:cd:f4:82:10:20:e4: 61:e7:6b:fd:d4:4b:b6:79:6f:d7:2f:0d:90:ef:ea: de:31:be:34:ac:1e:9f:d4:47:41:c5:82:f9:60:04: 22:9c:67:3b:dc:38:85:d8:ac:ff:b3:a8:55:a1:8b: 34:03:1c:47:f3:92:71:5f:d2:fe:b4:60:b1:29:99: 90:a3:8d:e9:af:a9:45:dd:c8:88:41:61:91:d3:d1: 09:39:c0:84:26:88:15:6a:1d:09:f4:6e:5a:90:ed: 9d:15:4f:ae:01:18:80:73:f0:10:32:2e:a4:d5:51: 77:18:46:dc:44:b6:c7:10:c1:9c:9e:a8:d8:b0:3c: a4:f5:ea:75:b3:65:e1:7c:c7:5b:6a:e2:56:b4:3d: d3:56:e0:ea:88:fd:06:ab:7b:55:cf:a4:0f:f6:5c: e4:c6:1e:8b:96:94:62:72:5f:49:61:8d:35:23:5b: cc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:88:96:E8:D7:E6:9F:C2:7B:61:80:DD:EE:8A:05:2F:A9:E2:5D:CC X509v3 Authority Key Identifier: keyid:B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/2F79F386050511EA87CC7D42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.20.0/24 103.232.159.0/24 103.232.216.0/23 202.0.150.0/24 Signature Algorithm: sha256WithRSAEncryption a7:80:24:ca:5f:91:1e:42:17:28:5f:23:ba:43:1c:ab:aa:8f: 8e:7a:36:0a:44:d2:9f:6e:d3:67:a5:37:4d:52:06:94:ac:94: 2e:09:ca:ca:aa:fd:7e:d4:43:db:69:46:ba:93:bb:a5:52:1a: 91:01:4a:13:a6:fb:15:9b:f1:72:39:b3:f0:fb:23:e4:73:1d: db:5e:ee:9e:eb:81:41:45:ff:73:29:72:87:03:3d:ee:b3:a9: 95:12:a8:09:b8:21:43:a2:6b:92:0d:c3:1e:af:6c:8e:1c:44: f7:a4:08:89:d3:96:56:3b:16:ed:fa:6c:f9:e4:61:a6:c5:6b: 98:e1:7b:69:a4:85:4d:2d:8a:35:ed:7e:84:b2:e2:e1:2d:23: 93:13:20:48:9e:c8:f7:39:b9:99:7b:6e:50:53:2c:7a:3b:18: 7f:69:3d:5c:94:2d:22:05:55:d8:a1:df:2b:3f:a2:53:8a:24: 15:fe:fd:40:b9:66:3c:1a:1d:90:6f:cb:67:8b:bd:3f:c4:bc: 9d:a0:dd:d2:bd:52:b6:16:04:31:3d:d3:07:04:13:a5:8b:06: 73:e1:f5:7b:c8:29:09:03:04:53:0c:a9:bc:b4:04:85:5e:fa: c8:10:2c:68:73:a9:df:20:0b:71:ca:8b:0b:da:78:69:01:d0: de:89:60:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICM10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3NTQxMTAvBgNVBAUTKEI1MDkzNzVFMjVBOTVEMkI1OUMxOTU4MUMzQzYzNUI2 OEE0OTExMkQwHhcNMjMxMDEwMTU0MTA5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTI1NzA5NC1lYzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/IVoA77hiWGqaadRbTmNJXjto7jMNOOJJ7HakBXGrynTFtKR5yxIVfpx7BC sfp4TnCE8hXABVlTYVYi9NyPENp8vGHUoucIlM4OBelalRO3vKnN9IIQIORh52v9 1Eu2eW/XLw2Q7+reMb40rB6f1EdBxYL5YAQinGc73DiF2Kz/s6hVoYs0AxxH85Jx X9L+tGCxKZmQo43pr6lF3ciIQWGR09EJOcCEJogVah0J9G5akO2dFU+uARiAc/AQ Mi6k1VF3GEbcRLbHEMGcnqjYsDyk9ep1s2XhfMdbauJWtD3TVuDqiP0Gq3tVz6QP 9lzkxh6LlpRicl9JYY01I1vMmwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFLGIlujX 5p/Ce2GA3e6KBS+p4l3MMB8GA1UdIwQYMBaAFLUJN14lqV0rWcGVgcPGNbaKSREt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTc1NC9BQ0QxRDc3MDFE QUIxMUUyQkEyODA2QUEwOEIwMkNEMi90UWszWGlXcFhTdFp3WldCdzhZMXRvcEpF UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RRazNYaVdwWFN0WndaV0J3OFkxdG9wSkVTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U3NTQvQUNEMUQ3NzAxREFCMTFFMkJBMjgwNkFBMDhCMDJDRDIvMkY3OUYzODYw NTA1MTFFQTg3Q0M3RDQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnFBQDBABn6J8DBAFn6NgDBADKAJYwDQYJKoZIhvcNAQEL BQADggEBAKeAJMpfkR5CFyhfI7pDHKuqj456NgpE0p9u02elN01SBpSslC4Jysqq /X7UQ9tpRrqTu6VSGpEBShOm+xWb8XI5s/D7I+RzHdte7p7rgUFF/3MpcocDPe6z qZUSqAm4IUOia5INwx6vbI4cRPekCInTllY7Fu36bPnkYabFa5jhe2mkhU0tijXt foSy4uEtI5MTIEieyPc5uZl7blBTLHo7GH9pPVyULSIFVdih3ys/olOKJBX+/UC5 ZjwaHZBvy2eLvT/EvJ2g3dK9UrYWBDE90wcEE6WLBnPh9XvIKQkDBFMMqby0BIVe +sgQLGhzqd8gC3HKiwvaeGkB0N6JYFQ= -----END CERTIFICATE-----Generated at Fri May 31 16:40:57 2024 by rpki-client on console-ams.rpki-client.org