$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/EF98E11472E211EEB93A4F72C4F9AE02.roa File: EF98E11472E211EEB93A4F72C4F9AE02.roa (raw, json) Hash identifier: irBKz5hDdDQSuzPo8HTBKaH+G3tFJbjs2+W0RwVXyv8= Subject key identifier: 72:BA:AD:39:08:61:B4:5C:E9:D5:8B:C4:CB:CA:E9:0A:69:73:F0:1A Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Certificate serial: 58 Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/EF98E11472E211EEB93A4F72C4F9AE02.roa Signing time: Wed 03 Apr 2024 08:09:35 +0000 ROA not before: Wed 03 Apr 2024 08:09:35 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 140214 IP address blocks: 103.148.145.0/24 maxlen: 24 103.173.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Validity Not Before: Apr 3 08:09:35 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660d0ebe-4251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:d6:4c:d8:59:a3:d6:c8:ba:78:1a:83:7d: a2:67:d3:0d:dc:32:d6:99:6a:f6:db:14:74:c4:eb: ae:22:b1:6c:97:34:47:9a:9d:d4:e8:4c:cd:ef:9a: 5c:92:dd:f2:80:ee:f0:4e:e5:5d:9b:d0:4d:9a:e3: e0:28:9f:91:57:44:10:e7:13:b8:e3:d3:6c:a6:0b: 78:67:ec:be:01:2e:bc:07:ac:1b:57:7c:92:00:88: 83:82:3d:f7:31:8f:fd:bb:56:f9:7e:7e:af:71:fe: b4:8c:af:c3:30:4e:74:0e:04:c4:44:f9:cc:36:23: d3:8c:d5:47:fd:67:71:91:96:f1:05:da:dc:44:ca: a2:88:85:fa:6a:f3:49:bf:80:73:85:cc:f0:be:6b: f3:5a:59:2b:62:15:63:48:6a:4e:df:13:01:90:3a: 7a:0c:ee:7a:34:a6:d6:a8:c1:39:4f:b9:07:00:fd: 40:23:28:c5:69:ed:96:40:ca:a0:b4:72:35:30:a3: 17:7b:91:8d:b7:19:99:d2:5a:62:41:88:58:23:c2: 57:e8:53:22:f2:51:df:90:9a:f9:ac:9b:b3:29:18: 73:b7:ec:d7:45:fe:54:0e:f4:83:2a:53:29:d3:f8: cd:fe:d5:37:c1:60:42:e2:b7:9a:2b:9e:f0:d5:a3: 45:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BA:AD:39:08:61:B4:5C:E9:D5:8B:C4:CB:CA:E9:0A:69:73:F0:1A X509v3 Authority Key Identifier: keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/EF98E11472E211EEB93A4F72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.145.0/24 103.173.56.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:84:a4:1c:ed:45:bf:22:17:3d:22:bc:f4:00:fb:7e:00:18: 91:9d:64:6b:47:22:66:a0:88:92:04:0b:6c:df:e4:0a:5e:92: 43:92:98:a8:e1:73:8c:5b:e0:52:ec:1c:db:79:ae:56:8b:2d: 5c:20:51:87:8b:43:ed:d9:ec:14:8d:6c:cc:30:c6:b2:2a:f5: 91:58:14:2a:32:f3:75:2a:ed:4e:46:7a:21:bc:f7:d7:e3:80: bc:d7:8b:a7:6b:71:90:e8:22:78:9c:3c:cb:e3:a3:b7:84:11: 81:aa:0c:3e:82:ec:fb:90:15:db:56:4e:06:ee:4d:28:7b:50: 54:30:b6:c5:97:2e:f2:22:47:b8:79:d8:20:f0:1f:8e:52:9b: 2b:3c:e1:04:1a:9d:97:60:ca:4e:e9:ba:f5:43:76:9a:79:02: d6:03:7e:f8:88:1e:6f:0a:e6:7f:a2:68:cd:6d:aa:0d:26:d7: 5f:2d:d3:cd:87:dd:92:95:ff:60:31:09:54:58:f2:cc:c7:ff: 3e:f7:42:b9:79:13:62:8f:7a:3d:6f:e7:0b:f2:1b:a2:42:d2: dd:f5:a7:49:38:72:a1:62:10:5f:09:c0:2b:cb:2e:55:9e:63: 37:14:b7:58:02:c2:0c:26:b3:75:01:28:32:62:67:d5:22:b0: 9f:fa:c8:88 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MjhFMjExMC8GA1UEBRMoQzg4QzJBQTk0QUFFNUVGOUY0RDQ5N0U4Mzg3QTM5REQx QkNFOTM5RDAeFw0yNDA0MDMwODA5MzVaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MGQwZWJlLTQyNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtH9ZM2Fmj1si6eBqDfaJn0w3cMtaZavbbFHTE664isWyXNEeandToTM3vmlyS 3fKA7vBO5V2b0E2a4+Aon5FXRBDnE7jj02ymC3hn7L4BLrwHrBtXfJIAiIOCPfcx j/27Vvl+fq9x/rSMr8MwTnQOBMRE+cw2I9OM1Uf9Z3GRlvEF2txEyqKIhfpq80m/ gHOFzPC+a/NaWStiFWNIak7fEwGQOnoM7no0ptaowTlPuQcA/UAjKMVp7ZZAyqC0 cjUwoxd7kY23GZnSWmJBiFgjwlfoUyLyUd+Qmvmsm7MpGHO37NdF/lQO9IMqUynT +M3+1TfBYELit5ornvDVo0UVAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUcrqtOQhh tFzp1YvEy8rpCmlz8BowHwYDVR0jBBgwFoAUyIwqqUquXvn01JfoOHo53RvOk50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyOEUyL0NFNTQwNkY2NzJF MTExRUVCMDc4MTYxOUM0RjlBRTAyL3lJd3FxVXF1WHZuMDFKZm9PSG81M1J2T2s1 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUl3cXFVcXVYdm4wMUpmb09IbzUzUnZPazUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhFMi9DRTU0MDZGNjcyRTExMUVFQjA3ODE2MTlDNEY5QUUwMi9FRjk4RTExNDcy RTIxMUVFQjkzQTRGNzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAGeUkQMEAGetODANBgkqhkiG9w0BAQsFAAOCAQEAOoSkHO1F vyIXPSK89AD7fgAYkZ1ka0ciZqCIkgQLbN/kCl6SQ5KYqOFzjFvgUuwc23muVost XCBRh4tD7dnsFI1szDDGsir1kVgUKjLzdSrtTkZ6Ibz31+OAvNeLp2txkOgieJw8 y+Ojt4QRgaoMPoLs+5AV21ZOBu5NKHtQVDC2xZcu8iJHuHnYIPAfjlKbKzzhBBqd l2DKTum69UN2mnkC1gN++Igebwrmf6JozW2qDSbXXy3TzYfdkpX/YDEJVFjyzMf/ PvdCuXkTYo96PW/nC/IbokLS3fWnSThyoWIQXwnAK8suVZ5jNxS3WALCDCazdQEo MmJn1SKwn/rIiA== -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:44 2024 by rpki-client on console-fra.rpki-client.org