$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa File: EC7311FEE5C311EEBF217685C4F9AE02.roa (raw, json) Hash identifier: mgicUpDZxXO5Azvgkgoz1T1AT+5iZLFcqxyAcqCKDgM= Subject key identifier: 30:5D:15:43:35:8F:85:A6:E1:89:56:E5:E1:3F:4D:03:75:3B:31:D8 Certificate issuer: /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Certificate serial: 02 Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa Signing time: Tue 19 Mar 2024 07:40:14 +0000 ROA not before: Tue 19 Mar 2024 07:40:14 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 133760 IP address blocks: 45.115.50.0/23 maxlen: 23 103.41.58.0/23 maxlen: 23 103.41.59.0/24 maxlen: 24 103.55.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Validity Not Before: Mar 19 07:40:14 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65f9415e-10a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:54:44:e2:ae:a0:b4:c8:9e:2c:84:5b:6b: c1:22:6a:b7:03:7a:61:d9:cb:8b:2e:b9:bd:79:c7: d3:ac:a1:c7:f2:50:ef:2f:67:c8:7d:e4:e3:0d:d9: 31:9a:88:9d:3f:35:d6:cc:3c:b6:bf:5d:93:5a:d4: c8:17:2f:a4:10:a9:f2:e7:6f:12:cf:6a:17:54:9f: 7f:02:14:ba:e8:c3:91:57:4b:29:88:34:d0:52:a9: 4b:56:c6:15:1a:1f:c8:6a:50:62:29:ac:33:ac:82: fb:9d:aa:05:b7:25:ce:2b:38:53:9a:da:f3:10:38: 6c:8d:ec:cf:04:b7:4b:90:cd:23:23:ca:2d:3e:2b: 4e:ac:d2:34:aa:65:b9:ec:ec:26:af:29:85:a7:55: e2:3a:b5:01:c9:c4:a7:47:e7:19:16:6f:76:69:fe: 2f:bd:d5:37:3d:79:0d:a0:ee:f0:ba:b4:56:f2:9d: 54:52:9e:51:66:db:a4:e7:24:b2:70:96:b5:56:c6: aa:f7:a9:6a:b0:8e:ac:f5:68:fa:82:57:77:1f:96: d6:8d:12:9c:ec:b7:74:13:75:c2:56:9c:64:82:48: 27:32:9c:25:fa:4a:40:ec:9b:6a:29:ba:38:3a:16: 45:75:d1:a5:20:16:0e:f4:a0:86:fb:54:0f:e7:b4: fe:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5D:15:43:35:8F:85:A6:E1:89:56:E5:E1:3F:4D:03:75:3B:31:D8 X509v3 Authority Key Identifier: keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.50.0/23 103.41.58.0/23 103.55.54.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:4b:4e:ad:86:ab:7b:f0:d7:fb:bd:39:fb:3a:56:44:30:8e: 24:cb:92:28:fc:74:08:99:4f:6a:e1:d4:0c:d4:5e:49:c5:8e: 5d:f6:5b:41:33:d8:43:b0:a4:63:cf:51:89:c7:25:92:ee:d5: 06:e5:5a:75:b1:83:28:5f:cb:ce:0a:61:8b:34:11:0d:1a:47: ce:91:af:e1:eb:c4:49:42:d6:3d:79:7f:ee:9c:ee:58:b6:47: db:9c:c9:80:12:e5:3b:12:2a:df:ea:15:d5:d8:a1:ed:4f:c6: 5c:64:5e:de:22:14:aa:38:7e:60:3e:c8:23:79:51:ef:2a:fe: 6c:e0:ad:a4:17:9f:b0:22:d9:45:29:14:59:81:9a:49:2f:b5: bb:2c:58:d7:63:61:24:1b:29:91:aa:22:20:1e:94:ea:32:09: 69:51:02:5e:f7:76:cf:77:fa:82:71:07:98:0c:1c:39:f5:46: 56:ac:2c:4c:1f:bb:18:5d:3c:ab:89:4f:19:72:f3:d9:4b:f4: 28:fa:c5:85:c5:ae:2d:c7:fa:fb:a1:af:fa:98:fc:7e:0b:54: f5:db:4a:32:37:98:5b:c0:42:45:45:63:fa:26:31:5b:ed:b7: 8f:7e:7f:b8:a3:3e:ca:d3:f6:63:08:f3:dd:39:3f:ed:ba:f4: 16:33:62:09 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REZGMjExMC8GA1UEBRMoRjgzREMzQTI0NkQxMjE1MUFDODdBNzcyQ0VDQTBFREQy MTVGODYyQTAeFw0yNDAzMTkwNzQwMTRaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1Zjk0MTVlLTEwYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0sVRE4q6gtMieLIRba8EiarcDemHZy4suub15x9OsocfyUO8vZ8h95OMN2TGa iJ0/NdbMPLa/XZNa1MgXL6QQqfLnbxLPahdUn38CFLrow5FXSymINNBSqUtWxhUa H8hqUGIprDOsgvudqgW3Jc4rOFOa2vMQOGyN7M8Et0uQzSMjyi0+K06s0jSqZbns 7CavKYWnVeI6tQHJxKdH5xkWb3Zp/i+91Tc9eQ2g7vC6tFbynVRSnlFm26TnJLJw lrVWxqr3qWqwjqz1aPqCV3cfltaNEpzst3QTdcJWnGSCSCcynCX6SkDsm2opujg6 FkV10aUgFg70oIb7VA/ntP7vAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUMF0VQzWP habhiVbl4T9NA3U7MdgwHwYDVR0jBBgwFoAU+D3DokbRIVGsh6dyzsoO3SFfhiow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURERkYyL0M5QUYyOTM0RTVD MTExRUU5OERCRTk2MkM0RjlBRTAyLy1EM0Rva2JSSVZHc2g2ZHl6c29PM1NGZmhp by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLUQzRG9rYlJJVkdzaDZkeXpzb08zU0ZmaGlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REZGMi9DOUFGMjkzNEU1QzExMUVFOThEQkU5NjJDNEY5QUUwMi9FQzczMTFGRUU1 QzMxMUVFQkYyMTc2ODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc MBowGAQCAAEwEgMEAS1zMgMEAWcpOgMEAWc3NjANBgkqhkiG9w0BAQsFAAOCAQEA T0tOrYare/DX+705+zpWRDCOJMuSKPx0CJlPauHUDNReScWOXfZbQTPYQ7CkY89R icclku7VBuVadbGDKF/LzgphizQRDRpHzpGv4evESULWPXl/7pzuWLZH25zJgBLl OxIq3+oV1dih7U/GXGRe3iIUqjh+YD7II3lR7yr+bOCtpBefsCLZRSkUWYGaSS+1 uyxY12NhJBspkaoiIB6U6jIJaVECXvd2z3f6gnEHmAwcOfVGVqwsTB+7GF08q4lP GXLz2Uv0KPrFhcWuLcf6+6Gv+pj8fgtU9dtKMjeYW8BCRUVj+iYxW+23j35/uKM+ ytP2Ywjz3Tk/7br0FjNiCQ== -----END CERTIFICATE-----Generated at Fri Jun 7 11:02:55 2024 by rpki-client on console-fra.rpki-client.org