$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa File: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (raw, json) Hash identifier: MYlI9yRjETR2JPXMYIrWDtkNVEE6j+/Uw0eg1BqzYM0= Subject key identifier: FE:DD:D2:A7:A1:63:72:0E:DC:BD:7B:BF:9D:B7:B9:E7:9A:64:59:7A Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Certificate serial: 04 Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa Signing time: Mon 22 Apr 2024 06:28:44 +0000 ROA not before: Mon 22 Apr 2024 06:28:44 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 135526 IP address blocks: 103.80.69.0/24 maxlen: 24 103.221.245.0/24 maxlen: 24 2001:df2:7e01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Validity Not Before: Apr 22 06:28:44 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=6626039b-13e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a9:24:5d:5c:68:7f:b0:ab:d7:df:7b:cc:c5: 8a:15:9e:3c:0d:ef:3c:b4:58:db:bd:85:0f:15:23: d3:65:60:48:77:45:97:0c:8a:27:e2:69:ec:7a:09: 73:a7:2f:6e:92:89:a8:47:b3:80:50:97:88:ad:7c: c7:ed:c5:98:0f:ee:37:82:80:16:f1:79:4d:96:25: 05:60:d3:be:3e:fe:6a:d5:d5:16:de:ab:e3:26:0d: 60:28:6a:10:fe:ca:2b:5b:5c:03:da:aa:9d:8e:2b: 84:03:0f:70:e2:3c:9f:b9:c4:5e:89:ec:ab:cc:3f: 11:36:e7:39:ee:46:72:ca:60:cc:4a:82:c6:26:a7: d5:dd:5c:ef:8e:f9:1d:ee:55:d4:d0:8b:6a:5b:d6: 51:fb:6f:2b:56:8c:47:a2:9a:47:9b:f3:81:19:a7: a8:31:30:c5:89:8e:53:35:3d:4d:ee:80:9e:eb:b4: 65:33:7c:12:db:4e:65:20:b4:93:6b:5a:21:e0:32: 75:d3:59:e6:22:7b:c1:6a:fc:8a:1c:3a:93:51:89: e3:3a:f4:74:c8:da:a2:6f:4f:20:91:80:3f:df:ad: 21:6c:8e:fa:53:1d:53:84:b8:45:e9:21:60:50:85: b7:71:04:b8:fe:f6:14:14:88:8a:2b:32:9b:43:99: c0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DD:D2:A7:A1:63:72:0E:DC:BD:7B:BF:9D:B7:B9:E7:9A:64:59:7A X509v3 Authority Key Identifier: keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.80.69.0/24 103.221.245.0/24 IPv6: 2001:df2:7e01::/48 Signature Algorithm: sha256WithRSAEncryption 36:a4:b6:c8:21:12:8c:14:04:d3:37:c6:c2:e5:ad:d7:cb:b3: 55:7f:de:46:d7:c0:62:91:f5:6f:a2:1e:51:98:b0:37:c3:77: 51:32:a9:68:07:9a:68:e9:ad:93:50:8d:b5:52:03:d2:0d:61: 58:a6:15:41:2f:fd:38:48:33:32:83:7d:97:39:56:e0:39:6c: 38:1d:04:02:83:ff:21:65:a1:5f:86:aa:ae:38:63:6d:ce:6b: 7f:b7:f0:88:93:30:cd:ed:a4:f7:19:d6:9e:27:7f:90:19:f7: c3:d2:84:f2:64:95:df:05:6d:68:d8:de:a5:67:20:de:0f:8b: 2e:24:55:05:6f:9b:58:40:7e:2b:94:ea:de:94:c6:a4:9b:cd: ee:5f:c9:c0:0c:43:95:4d:25:dc:d8:30:bd:c0:ce:f0:f5:fd: 15:36:b2:3e:da:70:c7:ba:31:21:05:ec:5e:7d:86:47:ea:1d: 5a:77:3e:03:98:2d:c3:5a:3c:9c:00:cf:95:c7:05:07:34:96: 31:98:5e:7f:94:21:8d:29:98:2d:33:ca:bf:aa:61:2f:30:e2: 0b:af:89:ed:d7:e9:36:cb:02:0a:44:3e:a6:78:b0:48:b2:ee: fb:e6:82:22:cc:3b:23:34:7b:1e:db:f1:3c:e9:8a:68:8d:c0: 8b:9b:a2:b4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTFCNTExMC8GA1UEBRMoRUVDMEU5OTk4N0RDMUVBOUQ0MDJGODg0RkNEQTk3RTAz MTQ1QTRBMDAeFw0yNDA0MjIwNjI4NDRaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MjYwMzliLTEzZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpqSRdXGh/sKvX33vMxYoVnjwN7zy0WNu9hQ8VI9NlYEh3RZcMiifiaex6CXOn L26SiahHs4BQl4itfMftxZgP7jeCgBbxeU2WJQVg074+/mrV1Rbeq+MmDWAoahD+ yitbXAPaqp2OK4QDD3DiPJ+5xF6J7KvMPxE25znuRnLKYMxKgsYmp9XdXO+O+R3u VdTQi2pb1lH7bytWjEeimkeb84EZp6gxMMWJjlM1PU3ugJ7rtGUzfBLbTmUgtJNr WiHgMnXTWeYie8Fq/IocOpNRieM69HTI2qJvTyCRgD/frSFsjvpTHVOEuEXpIWBQ hbdxBLj+9hQUiIorMptDmcAjAgMBAAGjggKsMIICqDAdBgNVHQ4EFgQU/t3Sp6Fj cg7cvXu/nbe555pkWXowHwYDVR0jBBgwFoAU7sDpmYfcHqnUAviE/NqX4DFFpKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFMUI1LzhCNDA1RTVFMDAz QjExRUY5MTFCOEY2OEM0RjlBRTAyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN3NEcG1ZZmNIcW5VQXZpRV9OcVg0REZGcEtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTFCNS84QjQwNUU1RTAwM0IxMUVGOTExQjhGNjhDNEY5QUUwMi9EMkEyRkY0QTAw M0IxMUVGQTY2NThEMERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA2BggrBgEFBQcBBwEB/wQn MCUwEgQCAAEwDAMEAGdQRQMEAGfd9TAPBAIAAjAJAwcAIAEN8n4BMA0GCSqGSIb3 DQEBCwUAA4IBAQA2pLbIIRKMFATTN8bC5a3Xy7NVf95G18BikfVvoh5RmLA3w3dR MqloB5po6a2TUI21UgPSDWFYphVBL/04SDMyg32XOVbgOWw4HQQCg/8hZaFfhqqu OGNtzmt/t/CIkzDN7aT3GdaeJ3+QGffD0oTyZJXfBW1o2N6lZyDeD4suJFUFb5tY QH4rlOrelMakm83uX8nADEOVTSXc2DC9wM7w9f0VNrI+2nDHujEhBexefYZH6h1a dz4DmC3DWjycAM+VxwUHNJYxmF5/lCGNKZgtM8q/qmEvMOILr4nt1+k2ywIKRD6m eLBIsu775oIizDsjNHse2/E86YpojcCLm6K0 -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:30 2024 by rpki-client on console-fra.rpki-client.org