$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/EEE4C606B5D411ECA20B840AC4F9AE02.roa File: EEE4C606B5D411ECA20B840AC4F9AE02.roa (raw, json) Hash identifier: 0XMlIXCMAiJZlp7fDiVuLUwSsm0ebLntYydTAPsauDo= Subject key identifier: B3:DA:EE:CF:F2:80:6A:E5:CD:54:2C:18:99:DD:AE:9C:8F:BC:18:A3 Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Certificate serial: 06AF Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/EEE4C606B5D411ECA20B840AC4F9AE02.roa Signing time: Mon 02 Sep 2024 23:21:36 +0000 ROA not before: Mon 02 Sep 2024 23:21:36 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 141398 IP address blocks: 103.140.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Validity Not Before: Sep 2 23:21:36 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66d6487f-f33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:51:36:7f:d0:23:1f:93:ec:31:3b:05:fd: 68:04:b8:68:f3:a3:36:8d:03:54:07:76:b6:04:c9: c2:c5:5c:96:65:b6:f5:66:a2:b4:0d:76:bc:3a:09: a5:74:08:60:88:d8:d0:bc:4f:5c:2d:cd:eb:1f:f0: fa:ef:eb:4b:12:71:c1:94:1e:86:13:00:74:3f:35: 61:8b:ca:4e:43:d4:4c:76:9b:35:e2:dc:90:66:6b: 26:1a:05:f4:ac:e0:a9:b9:34:f3:c6:64:f0:65:4c: b6:df:41:26:a8:25:47:f7:ba:e3:05:1d:d7:4c:ec: 8c:e9:fe:11:01:69:49:d0:5d:d9:2a:11:c3:ec:0c: 43:9d:c8:20:de:3d:6e:53:9a:f8:85:b3:a8:11:d8: 52:28:6b:04:79:c7:d7:eb:58:90:04:4b:22:92:9e: 59:8a:2c:cd:1e:74:77:59:d6:5d:ec:33:47:d6:6a: 7f:a7:60:92:ce:46:e4:4b:0c:e5:f9:5d:85:6d:c2: 17:ef:66:c7:b7:61:c0:4b:a6:e7:61:94:ae:dc:a3: e3:4c:e9:95:70:2c:61:4b:33:13:40:15:81:2a:a8: d5:a0:47:8f:97:a3:83:41:eb:ed:e2:0a:29:60:a4: 48:13:70:de:cc:b3:43:f8:61:90:ec:46:e9:2c:1f: 5e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DA:EE:CF:F2:80:6A:E5:CD:54:2C:18:99:DD:AE:9C:8F:BC:18:A3 X509v3 Authority Key Identifier: keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/EEE4C606B5D411ECA20B840AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.166.0/24 Signature Algorithm: sha256WithRSAEncryption a8:c2:7a:be:7a:b2:61:47:b9:92:18:93:77:de:2d:39:aa:63: 98:5f:1d:7c:9d:a0:ad:c4:d5:b1:a3:67:f9:71:61:6c:ce:c9: f3:03:cc:ab:0c:76:d7:77:48:88:27:39:8f:b2:12:c7:0f:f3: 0d:fd:23:e5:8e:05:74:64:27:08:57:65:c0:a7:10:b4:aa:36: ca:ea:fe:bb:ec:f1:98:8d:ce:29:c1:5c:6e:93:21:2a:99:8e: 07:50:53:bb:2e:64:4a:9a:51:83:58:fc:cb:ca:2c:bf:e2:f3: 49:32:1f:9a:1e:12:9a:6b:e9:4a:78:0e:42:8d:58:44:9f:24: 84:58:20:bb:c1:73:d6:1d:17:04:37:09:c9:7e:40:9c:ac:c0: 15:eb:e7:c8:4a:0e:e0:58:12:55:bd:7e:5a:09:89:9c:57:9b: fc:a4:9b:da:38:43:1f:bf:b3:f4:5d:6a:b7:29:44:75:8c:0d: 88:8d:bc:d4:88:b7:82:11:04:5b:30:74:eb:52:f3:a4:cf:cf: 7e:9d:2e:e7:a4:71:40:f6:01:f5:c6:f7:69:29:5a:e0:29:4c: 77:fb:fc:92:6f:b2:d0:f3:34:91:13:c8:11:5d:bf:ae:a7:c9: 26:b8:db:8f:a3:b0:0a:eb:3b:ac:40:bc:d9:c6:5d:b7:a9:28: 49:e1:3d:73 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy Qjk1NkNGRDcwHhcNMjQwOTAyMjMyMTM2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2NDg3Zi1mMzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuH1RNn/QIx+T7DE7Bf1oBLho86M2jQNUB3a2BMnCxVyWZbb1ZqK0DXa8Ogml dAhgiNjQvE9cLc3rH/D67+tLEnHBlB6GEwB0PzVhi8pOQ9RMdps14tyQZmsmGgX0 rOCpuTTzxmTwZUy230EmqCVH97rjBR3XTOyM6f4RAWlJ0F3ZKhHD7AxDncgg3j1u U5r4hbOoEdhSKGsEecfX61iQBEsikp5ZiizNHnR3WdZd7DNH1mp/p2CSzkbkSwzl +V2FbcIX72bHt2HAS6bnYZSu3KPjTOmVcCxhSzMTQBWBKqjVoEePl6ODQevt4gop YKRIE3DezLND+GGQ7EbpLB9e4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLPa7s/y gGrlzVQsGJndrpyPvBijMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6 OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ExQTYvMzhEOTNFMUUzRDMwMTFFQkIzQjJENjZFQzRGOUFFMDIvRUVFNEM2MDZC NUQ0MTFFQ0EyMEI4NDBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnjKYwDQYJKoZIhvcNAQELBQADggEBAKjCer56smFHuZIY k3feLTmqY5hfHXydoK3E1bGjZ/lxYWzOyfMDzKsMdtd3SIgnOY+yEscP8w39I+WO BXRkJwhXZcCnELSqNsrq/rvs8ZiNzinBXG6TISqZjgdQU7suZEqaUYNY/MvKLL/i 80kyH5oeEppr6Up4DkKNWESfJIRYILvBc9YdFwQ3Ccl+QJyswBXr58hKDuBYElW9 floJiZxXm/ykm9o4Qx+/s/RdarcpRHWMDYiNvNSIt4IRBFswdOtS86TPz36dLuek cUD2AfXG92kpWuApTHf7/JJvstDzNJETyBFdv66nySa424+jsArrO6xAvNnGXbep KEnhPXM= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org