$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/AA5E96065B9F11EF9F1B175DC4F9AE02.roa File: AA5E96065B9F11EF9F1B175DC4F9AE02.roa (raw, json) Hash identifier: /YYAM/ja0JhV/6iA5BWq6W3oPILiMBn35Hx66aO0FaI= Subject key identifier: 19:C0:68:56:ED:76:30:BD:B2:75:8E:B7:E3:EF:8B:D9:E7:77:8C:A8 Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Certificate serial: 02 Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/AA5E96065B9F11EF9F1B175DC4F9AE02.roa Signing time: Fri 16 Aug 2024 07:17:59 +0000 ROA not before: Fri 16 Aug 2024 07:17:59 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 26658 IP address blocks: 103.212.72.0/22 maxlen: 22 139.5.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Validity Not Before: Aug 16 07:17:59 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66befd27-a138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:c0:99:8e:ee:1c:8f:f8:47:c7:18:e1:ee: 95:2a:cd:e4:cf:99:9c:e2:53:25:ef:87:c4:07:ed: 13:41:27:b1:12:7b:88:0f:61:fc:7c:40:9f:6a:60: 81:23:36:a2:f5:f2:c8:9d:1e:34:3f:25:be:87:d4: 5b:0a:ad:63:1a:6d:31:7d:86:83:70:6d:d6:b8:5d: 78:03:62:19:a2:9b:f3:79:30:aa:b9:1f:70:c3:07: c2:46:a1:1e:16:84:3e:57:af:d9:e4:96:0a:27:bd: f8:f3:45:2a:8b:b9:6b:c0:52:d9:73:ab:46:7d:fd: a2:e9:a1:6f:de:68:79:de:ac:7a:39:38:cc:e9:27: 22:2a:0e:c6:a7:91:47:40:40:bc:c5:45:2a:e8:df: 70:74:56:5d:66:4f:56:5e:63:05:0a:2e:67:6f:a5: 11:22:d1:b6:02:2e:b7:e2:1a:a8:55:0c:d9:26:fe: 28:ed:5d:76:8e:5c:bd:2e:c8:f0:ed:69:0e:db:e4: 69:59:98:f3:7c:e4:f8:5c:46:33:88:76:b8:fb:bf: 0e:91:d1:48:e0:48:8e:e3:7f:e5:b9:af:e8:b3:11: 0a:40:07:40:55:7f:9d:e8:8b:16:e7:b9:a6:57:c4: 70:51:41:74:f0:24:b9:c7:f4:8e:7e:65:ee:e9:c9: 56:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C0:68:56:ED:76:30:BD:B2:75:8E:B7:E3:EF:8B:D9:E7:77:8C:A8 X509v3 Authority Key Identifier: keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/AA5E96065B9F11EF9F1B175DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.72.0/22 139.5.180.0/22 Signature Algorithm: sha256WithRSAEncryption b9:e9:3c:9a:b1:1e:d4:e6:93:45:90:30:ab:94:38:b9:81:92: 34:0f:d1:ce:12:72:e9:5f:e0:30:74:d7:1a:d9:e0:fc:7b:09: 54:16:bb:e6:11:30:42:2f:9b:21:ac:a6:04:4b:3f:16:89:f4: 8c:cf:9c:00:3b:f9:72:7f:2b:24:e4:0a:52:57:3d:84:c1:4a: 16:56:ee:02:5a:03:9f:3d:cc:4f:e0:c0:f4:11:4f:53:15:9c: da:fd:5b:f1:08:da:90:fd:4f:b8:1b:27:6f:c1:80:18:d1:1d: 4c:d0:f4:6f:ba:e2:4b:b1:d9:d3:79:ac:64:a5:de:e6:7c:50: 5c:d4:f0:b5:0c:75:37:9e:c6:6e:eb:ce:d5:1a:a1:b2:4b:d2: 00:83:70:3d:6a:9a:99:e9:45:61:19:15:5a:3d:fe:ae:2c:36: b8:c2:b4:df:94:1a:80:b6:21:85:15:aa:d7:9c:51:76:a8:97: 5c:05:18:b4:be:25:0d:1e:8a:f0:35:a5:08:1c:3e:56:47:92: aa:71:d1:2c:79:0b:b4:e5:ff:b1:6e:34:97:bc:42:f1:80:72: f3:96:40:b1:9e:eb:fc:4a:e9:e7:75:55:1d:20:87:ba:ca:30: 74:b9:08:fd:80:e0:14:1f:06:b5:c9:bb:4f:5f:72:1d:97:6a: c9:a1:d8:ee -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MjJCMzExMC8GA1UEBRMoMjNDMEIyRDdBQ0UxMDlEM0RGRTgzQUVCRUYyRUEzMTQ5 QzVDQUMxNzAeFw0yNDA4MTYwNzE3NTlaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmVmZDI3LWExMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs+MCZju4cj/hHxxjh7pUqzeTPmZziUyXvh8QH7RNBJ7ESe4gPYfx8QJ9qYIEj NqL18sidHjQ/Jb6H1FsKrWMabTF9hoNwbda4XXgDYhmim/N5MKq5H3DDB8JGoR4W hD5Xr9nklgonvfjzRSqLuWvAUtlzq0Z9/aLpoW/eaHnerHo5OMzpJyIqDsankUdA QLzFRSro33B0Vl1mT1ZeYwUKLmdvpREi0bYCLrfiGqhVDNkm/ijtXXaOXL0uyPDt aQ7b5GlZmPN85PhcRjOIdrj7vw6R0UjgSI7jf+W5r+izEQpAB0BVf53oixbnuaZX xHBRQXTwJLnH9I5+Ze7pyVaZAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUGcBoVu12 ML2ydY634++L2ed3jKgwHwYDVR0jBBgwFoAUI8Cy16zhCdPf6Drr7y6jFJxcrBcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyMkIzLzVFNEQ0NzYyNUI5 RjExRUZBMTRCQkI1Q0M0RjlBRTAyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JC Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSThDeTE2emhDZFBmNkRycjd5NmpGSnhjckJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjJCMy81RTRENDc2MjVCOUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9BQTVFOTYwNjVC OUYxMUVGOUYxQjE3NURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfUSAMEAosFtDANBgkqhkiG9w0BAQsFAAOCAQEAuek8mrEe 1OaTRZAwq5Q4uYGSNA/RzhJy6V/gMHTXGtng/HsJVBa75hEwQi+bIaymBEs/Fon0 jM+cADv5cn8rJOQKUlc9hMFKFlbuAloDnz3MT+DA9BFPUxWc2v1b8QjakP1PuBsn b8GAGNEdTND0b7riS7HZ03msZKXe5nxQXNTwtQx1N57GbuvO1RqhskvSAINwPWqa melFYRkVWj3+riw2uMK035QagLYhhRWq15xRdqiXXAUYtL4lDR6K8DWlCBw+VkeS qnHRLHkLtOX/sW40l7xC8YBy85ZAsZ7r/Erp53VVHSCHusowdLkI/YDgFB8Gtcm7 T19yHZdqyaHY7g== -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:43 2024 by rpki-client on console-fra.rpki-client.org