$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa File: EC7311FEE5C311EEBF217685C4F9AE02.roa (raw, json) Hash identifier: qmFjn7wAfMqWkF24WNm8IekVR4ecxQdIio3RLzGcoHo= Subject key identifier: F3:5E:05:0A:BB:4C:B4:60:93:45:8F:C5:DB:D2:00:49:66:7F:F7:FC Certificate issuer: /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Certificate serial: 72 Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa Signing time: Fri 25 Oct 2024 05:49:32 +0000 ROA not before: Fri 25 Oct 2024 05:49:32 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 133760 IP address blocks: 45.115.50.0/23 maxlen: 23 103.41.58.0/23 maxlen: 23 103.41.59.0/24 maxlen: 24 103.55.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Validity Not Before: Oct 25 05:49:32 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671b316c-9a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:86:c5:33:98:0b:14:b1:58:da:5d:27:9a:9d: b0:ec:1d:e7:55:be:d7:d2:40:08:12:60:e3:2d:b5: cc:69:ef:12:c4:9b:d5:e2:39:96:ca:99:68:c6:c2: 8f:11:40:a6:dc:0d:3b:fb:42:c8:a9:cb:88:a0:57: 12:47:96:99:97:cc:26:32:50:78:27:e7:77:42:1c: cf:ab:39:ac:6c:d1:42:fb:26:22:f6:26:a1:96:ae: 60:27:fb:f6:71:84:ed:52:7b:d1:e5:1b:e4:99:a5: a4:4b:99:5c:62:05:40:3e:4b:a7:68:d4:53:9a:17: 0d:35:34:74:5d:c8:14:08:75:f1:df:dc:b9:8d:df: 48:4f:49:2d:42:42:96:84:87:2f:71:2b:33:b7:ec: 15:5a:44:36:ad:9b:3a:02:69:48:90:11:c4:f0:f2: 53:b2:77:16:75:34:2a:a5:cc:e2:8d:71:33:c1:32: 83:70:01:62:9c:81:9a:a0:53:d6:77:87:7f:ea:6d: 75:06:e5:b5:4a:63:4e:50:5b:d0:84:0e:03:5e:e8: 32:86:fc:06:5e:35:ed:49:50:5e:0d:35:13:1e:72: 39:53:06:f6:71:03:a2:3f:aa:58:d9:ea:8c:24:11: 32:95:c0:d8:87:00:53:6b:e7:26:95:9d:7f:9b:c1: 36:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5E:05:0A:BB:4C:B4:60:93:45:8F:C5:DB:D2:00:49:66:7F:F7:FC X509v3 Authority Key Identifier: keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.50.0/23 103.41.58.0/23 103.55.54.0/23 Signature Algorithm: sha256WithRSAEncryption b1:91:61:69:b4:8e:35:c3:68:ff:03:1d:9c:12:26:0d:b3:f8: 6c:8d:8c:a7:e2:9f:bf:c4:53:fe:78:9f:c3:c8:68:08:c3:1d: 59:be:9f:e6:79:05:3f:18:0a:9b:60:74:40:d9:22:28:67:47: be:35:31:2e:b2:7b:2f:a2:27:14:53:14:a2:d9:9b:f0:d8:46: ce:b1:62:e6:77:e3:86:27:f9:ea:de:6a:92:70:63:ff:f1:54: b4:cf:66:57:d0:d3:45:4f:7f:0d:9d:c3:2f:b4:5c:18:6d:b1: f5:ff:50:60:65:fd:a4:4b:87:62:56:aa:9b:ce:3a:2f:e0:f9: 7c:a2:b4:00:9b:5b:98:1d:76:ee:00:6d:ee:c4:c9:c2:b6:6e: a8:b2:b1:86:08:eb:08:47:45:ac:44:cb:5f:8a:66:8f:a8:32: e3:fa:26:74:e1:76:da:60:0b:c1:b2:7f:14:02:6c:28:85:40: 03:a8:16:aa:6b:9c:6c:2b:98:6e:d0:2c:e6:61:bf:00:cf:22: 27:14:e5:c5:af:89:bf:a4:54:7f:1f:96:7a:0b:df:93:23:df: 15:a6:2c:28:37:42:47:12:d6:2b:76:8c:c9:91:b1:74:7a:ef: 4c:be:fe:a3:78:02:da:60:d7:aa:32:50:ba:17:5e:29:c2:77: 33:6c:3e:ec -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REZGMjExMC8GA1UEBRMoRjgzREMzQTI0NkQxMjE1MUFDODdBNzcyQ0VDQTBFREQy MTVGODYyQTAeFw0yNDEwMjUwNTQ5MzJaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MWIzMTZjLTlhNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDphsUzmAsUsVjaXSeanbDsHedVvtfSQAgSYOMttcxp7xLEm9XiOZbKmWjGwo8R QKbcDTv7Qsipy4igVxJHlpmXzCYyUHgn53dCHM+rOaxs0UL7JiL2JqGWrmAn+/Zx hO1Se9HlG+SZpaRLmVxiBUA+S6do1FOaFw01NHRdyBQIdfHf3LmN30hPSS1CQpaE hy9xKzO37BVaRDatmzoCaUiQEcTw8lOydxZ1NCqlzOKNcTPBMoNwAWKcgZqgU9Z3 h3/qbXUG5bVKY05QW9CEDgNe6DKG/AZeNe1JUF4NNRMecjlTBvZxA6I/qljZ6owk ETKVwNiHAFNr5yaVnX+bwTZNAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQU814FCrtM tGCTRY/F29IASWZ/9/wwHwYDVR0jBBgwFoAU+D3DokbRIVGsh6dyzsoO3SFfhiow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURERkYyL0M5QUYyOTM0RTVD MTExRUU5OERCRTk2MkM0RjlBRTAyLy1EM0Rva2JSSVZHc2g2ZHl6c29PM1NGZmhp by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLUQzRG9rYlJJVkdzaDZkeXpzb08zU0ZmaGlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REZGMi9DOUFGMjkzNEU1QzExMUVFOThEQkU5NjJDNEY5QUUwMi9FQzczMTFGRUU1 QzMxMUVFQkYyMTc2ODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc MBowGAQCAAEwEgMEAS1zMgMEAWcpOgMEAWc3NjANBgkqhkiG9w0BAQsFAAOCAQEA sZFhabSONcNo/wMdnBImDbP4bI2Mp+Kfv8RT/nifw8hoCMMdWb6f5nkFPxgKm2B0 QNkiKGdHvjUxLrJ7L6InFFMUotmb8NhGzrFi5nfjhif56t5qknBj//FUtM9mV9DT RU9/DZ3DL7RcGG2x9f9QYGX9pEuHYlaqm846L+D5fKK0AJtbmB127gBt7sTJwrZu qLKxhgjrCEdFrETLX4pmj6gy4/omdOF22mALwbJ/FAJsKIVAA6gWqmucbCuYbtAs 5mG/AM8iJxTlxa+Jv6RUfx+WegvfkyPfFaYsKDdCRxLWK3aMyZGxdHrvTL7+o3gC 2mDXqjJQuhdeKcJ3M2w+7A== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org