$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/1E2DF1DE5CCD11EF80B55A71C4F9AE02.roa File: 1E2DF1DE5CCD11EF80B55A71C4F9AE02.roa (raw, json) Hash identifier: Vx9CKwW38xSqzrMCQYt2Ce0lmPo6uotFsV92mi3qiaA= Subject key identifier: 59:C6:3E:A0:9E:6F:F5:D5:62:6E:2D:23:A1:C0:D4:DE:EB:B7:B2:AD Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Certificate serial: 012D Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/1E2DF1DE5CCD11EF80B55A71C4F9AE02.roa Signing time: Sat 17 Aug 2024 19:15:52 +0000 ROA not before: Sat 17 Aug 2024 19:15:52 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 149870 IP address blocks: 103.189.232.0/24 maxlen: 24 103.189.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Validity Not Before: Aug 17 19:15:52 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66c0f6e7-b4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:41:14:79:2a:fc:af:78:72:d3:04:d7:53:43: 2f:4f:da:7e:18:88:84:24:27:fd:6d:0b:a3:ae:b0: 1d:9c:34:40:f8:f7:cf:ef:ef:84:62:37:75:8e:68: 13:65:6a:99:53:aa:74:5a:89:2c:dc:63:f2:9c:0e: ba:5b:b0:de:fd:d6:86:ba:27:2d:0e:07:a5:5d:eb: 01:0c:52:a5:13:46:ca:b9:4b:01:96:92:5a:64:5e: d3:83:17:2a:18:a4:e2:16:16:a6:7a:44:9b:36:c8: a7:9d:e7:88:30:55:9a:4f:b2:d6:3a:b8:c5:ce:1c: 03:cc:43:80:6a:c3:af:62:bc:68:b1:1c:79:e9:2c: b4:86:dd:09:ca:aa:b9:76:90:46:85:b8:f9:d5:7a: 74:9a:a1:36:b0:f1:22:83:b8:0c:38:57:01:e6:79: 10:7c:6e:dc:7d:72:70:72:1e:92:e2:19:7f:41:ae: eb:13:a6:05:ff:78:0c:fb:3d:9f:ac:fc:d1:93:ab: ac:0b:d8:ad:a6:e9:cd:67:5e:a7:43:65:61:5e:0e: 94:b3:cd:1f:e5:51:0a:1e:ab:ca:be:ca:6f:1b:92: df:43:49:9a:db:dc:c2:5b:0c:4c:7d:b6:e3:bb:cc: 53:d1:e7:42:ea:68:8a:ff:68:87:f6:79:88:c1:7e: 97:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C6:3E:A0:9E:6F:F5:D5:62:6E:2D:23:A1:C0:D4:DE:EB:B7:B2:AD X509v3 Authority Key Identifier: keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/1E2DF1DE5CCD11EF80B55A71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.232.0/23 Signature Algorithm: sha256WithRSAEncryption 56:e3:2b:62:0b:66:eb:4f:48:ef:70:64:68:37:81:93:76:06: 0c:99:54:1a:bc:d7:46:59:df:9b:e8:57:1b:cc:d0:d4:75:4c: 70:ee:56:47:e1:32:cf:68:13:ff:53:2c:4a:af:4e:9c:25:49: a7:fc:00:40:e8:d3:37:1b:5b:cb:e2:84:b4:14:3d:28:6c:66: 4e:73:30:c1:85:5c:c9:8f:99:62:e7:b0:f9:78:02:a4:d8:c3: a3:5a:2d:cf:33:db:89:94:03:46:54:22:49:34:24:0a:96:cf: b3:08:bb:e5:7d:54:54:82:a9:2e:66:82:76:c4:4d:23:24:10: b4:f7:04:e3:f6:ff:14:bd:6d:ec:4c:a0:37:4b:6d:62:72:1e: 8f:be:71:c1:fb:58:a0:0d:c3:7c:7a:a4:5d:d6:f1:0e:82:79: 96:a7:91:75:ef:6f:34:74:03:47:17:9a:08:33:00:72:27:af: 6b:aa:82:c7:38:e3:93:13:b3:62:1e:c5:c4:9e:40:1a:cd:dc: db:56:6f:8c:4e:12:ef:31:79:7c:fc:d8:34:da:09:87:af:42: f8:11:cd:80:19:f0:93:f1:82:45:25:43:fb:8d:ae:e6:fa:b2: cf:29:0d:49:eb:bb:a4:27:50:01:e4:c3:2e:db:08:4d:68:dd: 2c:03:f9:e4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQUExMTAvBgNVBAUTKDMyNjE4NjE4MjQ0QzhENkI0QkE2MEEyRkVEOTcyM0I5 OThEOUExNzAwHhcNMjQwODE3MTkxNTUyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmMwZjZlNy1iNGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEEUeSr8r3hy0wTXU0MvT9p+GIiEJCf9bQujrrAdnDRA+PfP7++EYjd1jmgT ZWqZU6p0Woks3GPynA66W7De/daGuictDgelXesBDFKlE0bKuUsBlpJaZF7Tgxcq GKTiFhamekSbNsinneeIMFWaT7LWOrjFzhwDzEOAasOvYrxosRx56Sy0ht0Jyqq5 dpBGhbj51Xp0mqE2sPEig7gMOFcB5nkQfG7cfXJwch6S4hl/Qa7rE6YF/3gM+z2f rPzRk6usC9itpunNZ16nQ2VhXg6Us80f5VEKHqvKvspvG5LfQ0ma29zCWwxMfbbj u8xT0edC6miK/2iH9nmIwX6XtQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFnGPqCe b/XVYm4tI6HA1N7rt7KtMB8GA1UdIwQYMBaAFDJhhhgkTI1rS6YKL+2XI7mY2aFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJBQS8yQ0ZEMzcxMkND RDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpXdExwZ292N1pjanVaalpv WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tR0dHQ1JNald0THBnb3Y3WmNqdVpqWm9YQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VCQUEvMkNGRDM3MTJDQ0QwMTFFRDk4MjUyRTc1QzRGOUFFMDIvMUUyREYxREU1 Q0NEMTFFRjgwQjU1QTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvegwDQYJKoZIhvcNAQELBQADggEBAFbjK2ILZutPSO9w ZGg3gZN2BgyZVBq810ZZ35voVxvM0NR1THDuVkfhMs9oE/9TLEqvTpwlSaf8AEDo 0zcbW8vihLQUPShsZk5zMMGFXMmPmWLnsPl4AqTYw6NaLc8z24mUA0ZUIkk0JAqW z7MIu+V9VFSCqS5mgnbETSMkELT3BOP2/xS9bexMoDdLbWJyHo++ccH7WKANw3x6 pF3W8Q6CeZankXXvbzR0A0cXmggzAHInr2uqgsc445MTs2IexcSeQBrN3NtWb4xO Eu8xeXz82DTaCYevQvgRzYAZ8JPxgkUlQ/uNrub6ss8pDUnru6QnUAHkwy7bCE1o 3SwD+eQ= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:52 2024 by rpki-client on console-ams.rpki-client.org