$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/EE28B64661D611EE9C66300EC4F9AE02.roa File: EE28B64661D611EE9C66300EC4F9AE02.roa (raw, json) Hash identifier: hajaHc68BxQZ1WB6gbKAfNgHHMhtrFETJ7xWbOhfCDM= Subject key identifier: 15:C9:5D:33:01:BD:31:97:30:85:25:E4:F8:70:82:05:8B:1B:CB:12 Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 02 Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/EE28B64661D611EE9C66300EC4F9AE02.roa Signing time: Tue 03 Oct 2023 10:23:44 +0000 ROA not before: Tue 03 Oct 2023 10:23:44 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 140866 IP address blocks: 103.152.166.0/23 maxlen: 23 103.152.166.0/24 maxlen: 24 103.152.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Validity Not Before: Oct 3 10:23:44 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=651bebb0-1814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:ed:66:18:24:bb:ea:a7:ae:dd:eb:37:a3: 17:ef:df:f7:35:69:4d:35:0c:7a:6f:6f:5c:9a:ba: 2c:76:9f:f7:8b:db:eb:55:94:5c:94:1b:51:d3:ec: a0:95:9e:95:94:e2:bd:fd:a6:78:29:5f:c6:e7:31: b1:9e:ae:f6:68:20:62:3f:60:15:4d:8d:53:0a:16: 85:d1:e5:b2:e8:8d:ef:43:7d:20:4b:3f:81:cf:b0: f7:27:48:7d:32:d6:db:ed:87:6b:c7:34:7b:62:39: 0e:28:fd:fa:8d:8c:a2:35:1d:e5:8a:35:c7:fa:c4: 29:0a:34:93:3a:a5:f6:cf:ed:90:8f:b9:0b:14:77: f2:b3:11:50:ae:2e:74:59:29:0a:a0:09:64:df:09: 86:dd:3b:08:b6:b8:18:93:8f:89:e8:91:d2:f2:43: f1:21:87:40:f6:6c:6f:8c:6f:9a:cd:fc:df:ee:24: eb:8f:54:db:1e:1c:84:97:42:73:df:14:80:b6:1d: 66:9d:17:04:06:7f:dd:8f:f7:56:69:c8:78:8e:b6: db:26:62:d7:6b:de:b3:11:e3:38:6c:4b:7a:f7:9a: 07:24:56:0d:3d:63:dc:27:d6:48:74:0a:77:6f:8a: 5f:03:f9:9d:d9:c8:e1:48:48:3c:a7:40:bf:6f:b4: 85:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C9:5D:33:01:BD:31:97:30:85:25:E4:F8:70:82:05:8B:1B:CB:12 X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/EE28B64661D611EE9C66300EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.166.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:5c:64:22:1e:85:ad:3d:a6:40:b7:78:67:db:11:0b:7c:30: 57:b0:7a:c9:cd:a3:f1:c7:d8:3e:eb:83:3e:52:2a:a6:12:6d: 33:d6:8c:85:e9:69:df:96:38:df:52:69:85:2a:64:bb:f3:4e: dc:be:d6:8d:37:d8:b9:78:e3:90:83:dc:55:20:e6:b5:5a:dd: 0e:83:ff:09:b9:2f:16:61:ec:2e:c8:c6:dc:ef:19:31:13:30: 5c:4d:1c:e8:e2:a6:ad:42:7d:40:5b:ec:7b:cf:7b:0b:83:27: 85:eb:b2:02:4b:95:b1:66:2d:66:87:d2:fd:bd:b8:f6:91:38: 58:3a:b0:ce:c8:3d:46:d5:33:14:d5:19:ba:ca:5c:ea:ac:1a: 6c:0d:46:ba:cb:9e:f4:33:54:fc:4c:b5:31:fb:bc:9f:b7:ff: f1:db:ee:d4:6a:0b:d1:06:9e:15:8d:43:18:51:6f:64:5f:5f: 9a:8d:e4:6e:77:b1:55:19:31:41:91:05:19:c0:f6:d7:09:dd: 43:ad:b8:1c:fc:4e:3c:e6:d4:5d:42:0d:a9:e1:ff:48:75:e3: a1:c6:79:cf:22:dc:92:80:f7:1c:5f:ad:e1:8e:3a:d9:8f:ea: 52:d2:b4:4e:e5:04:72:a5:6c:14:56:43:f2:19:5a:5e:55:48: a9:70:e0:8d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Rjg1QjExMC8GA1UEBRMoREMzMUNGNUZDOUYyODM0ODM3REJCQjM2ODNDQjhBRjY0 MkFCNEE3QzAeFw0yMzEwMDMxMDIzNDRaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MWJlYmIwLTE4MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6nO1mGCS76qeu3es3oxfv3/c1aU01DHpvb1yauix2n/eL2+tVlFyUG1HT7KCV npWU4r39pngpX8bnMbGervZoIGI/YBVNjVMKFoXR5bLoje9DfSBLP4HPsPcnSH0y 1tvth2vHNHtiOQ4o/fqNjKI1HeWKNcf6xCkKNJM6pfbP7ZCPuQsUd/KzEVCuLnRZ KQqgCWTfCYbdOwi2uBiTj4nokdLyQ/Ehh0D2bG+Mb5rN/N/uJOuPVNseHISXQnPf FIC2HWadFwQGf92P91ZpyHiOttsmYtdr3rMR4zhsS3r3mgckVg09Y9wn1kh0Cndv il8D+Z3ZyOFISDynQL9vtIV9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUFcldMwG9 MZcwhSXk+HCCBYsbyxIwHwYDVR0jBBgwFoAU3DHPX8nyg0g327s2g8uK9kKrSnww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGODVCL0M3MTNDMkZFNjFE NTExRUVCQUEwNEE1RUM0RjlBRTAyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNu dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0RIUFg4bnlnMGczMjdzMmc4dUs5a0tyU253LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Qi9DNzEzQzJGRTYxRDUxMUVFQkFBMDRBNUVDNEY5QUUwMi9FRTI4QjY0NjYx RDYxMUVFOUM2NjMwMEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeYpjANBgkqhkiG9w0BAQsFAAOCAQEAalxkIh6FrT2mQLd4 Z9sRC3wwV7B6yc2j8cfYPuuDPlIqphJtM9aMhelp35Y431JphSpku/NO3L7WjTfY uXjjkIPcVSDmtVrdDoP/CbkvFmHsLsjG3O8ZMRMwXE0c6OKmrUJ9QFvse897C4Mn heuyAkuVsWYtZofS/b249pE4WDqwzsg9RtUzFNUZuspc6qwabA1Gusue9DNU/Ey1 Mfu8n7f/8dvu1GoL0QaeFY1DGFFvZF9fmo3kbnexVRkxQZEFGcD21wndQ624HPxO PObUXUINqeH/SHXjocZ5zyLckoD3HF+t4Y462Y/qUtK0TuUEcqVsFFZD8hlaXlVI qXDgjQ== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:34 2024 by rpki-client on console-ams.rpki-client.org