$ rpki-client -vvf rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/EE89292C896211EA9036675BC4F9AE02.roa File: EE89292C896211EA9036675BC4F9AE02.roa (raw, json) Hash identifier: KsVgadPixSXXRjY/x8oT3IjVXjgtEh5R8H13py1l+4I= Subject key identifier: E1:58:56:25:F8:58:0F:3F:AF:F9:79:2D:5E:8F:C1:F8:80:2A:B0:49 Certificate issuer: /CN=A912481E/serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2 Certificate serial: 0887 Authority key identifier: 56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/EE89292C896211EA9036675BC4F9AE02.roa Signing time: Sat 02 Dec 2023 21:28:59 +0000 ROA not before: Sat 02 Dec 2023 21:28:59 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 132165 IP address blocks: 103.131.8.0/24 maxlen: 24 103.131.9.0/24 maxlen: 24 103.131.10.0/24 maxlen: 24 103.131.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 21:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2183 (0x887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912481E/serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2 Validity Not Before: Dec 2 21:28:59 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656ba19b-3593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:29:8b:cd:dd:41:25:c8:77:d1:ee:2b:b6:05: c6:bb:e1:b6:c9:9b:07:d4:68:0c:0c:96:ed:2e:3b: 09:14:3c:11:05:6f:4a:a9:dd:0b:d9:f6:a1:c5:98: 2e:8b:1d:c4:2b:d6:8c:b8:b8:fb:c8:7d:f6:ae:65: 0d:b7:f2:90:70:31:1e:92:50:99:03:06:00:58:e3: 32:ea:4b:c1:64:e4:2f:96:30:41:0f:70:8c:bf:8d: 9a:49:12:9e:de:19:9d:aa:f7:91:db:c2:f5:a7:95: 15:86:0d:5c:64:4e:35:5b:04:62:7f:0a:c4:ab:80: 33:16:54:db:2f:14:3a:f5:b6:14:b9:ca:1b:64:ef: a5:1b:28:db:80:3d:68:9a:c4:c7:67:22:58:af:29: d7:1b:d8:eb:7f:3e:5c:c7:33:0c:38:44:ce:64:c9: e6:33:71:93:70:9e:e8:ca:7d:f6:5f:71:91:36:95: cb:0f:e9:61:09:00:e1:57:c7:e6:4c:a3:01:18:38: bb:cf:5c:eb:e4:58:4f:06:3c:a1:c9:b7:52:c2:ed: 27:27:4c:ed:c8:39:10:3e:97:27:e9:47:25:ec:b2: 30:56:03:76:7c:48:2f:1e:9c:39:83:8d:6c:c2:ad: b4:db:cc:98:35:6f:74:52:20:08:79:04:b5:bd:7b: 62:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:58:56:25:F8:58:0F:3F:AF:F9:79:2D:5E:8F:C1:F8:80:2A:B0:49 X509v3 Authority Key Identifier: keyid:56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/EE89292C896211EA9036675BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.8.0/22 Signature Algorithm: sha256WithRSAEncryption 04:a6:27:24:d3:2e:96:68:df:0d:ef:37:93:de:62:1a:aa:66: 2f:02:75:dc:71:44:2e:92:f3:bc:28:8c:ef:75:17:dc:de:0b: b3:c1:78:1c:66:d4:2b:dc:82:00:d2:92:54:c8:07:d4:c8:53: 3e:bc:e5:e4:2d:67:81:8f:c7:28:a6:d7:33:3d:a8:20:6b:b7: 8c:99:43:c8:3e:02:f8:c4:78:34:25:e4:d9:da:1c:8d:96:c3: 09:9e:bb:39:dc:cd:1a:31:4c:38:ef:6a:bf:37:e2:5e:ba:fe: 93:db:9c:cf:56:72:39:d0:27:a5:4b:9a:54:c3:3d:c3:79:f6: 0d:60:24:b9:83:a9:2d:c5:e3:bd:00:3d:df:8d:f5:a8:a8:15: f6:ca:54:44:4a:c5:c2:52:66:d7:d0:80:13:a9:64:66:b8:d8: fd:9b:8f:67:aa:1b:ca:1b:f2:51:a1:89:b5:1b:f9:4b:e8:e4: 84:93:ce:7d:68:d1:88:76:a7:f7:d1:fe:0f:98:b3:31:87:66: 1e:41:ca:98:8e:2b:ef:9e:64:c4:6c:1d:8a:0b:8f:68:ab:29: 2e:87:a2:98:8e:c2:e1:c6:cd:7a:24:b1:f7:19:f6:66:fd:74: 56:7f:48:1e:75:d6:88:07:d1:ab:21:19:f1:f2:ac:aa:9a:2c: 9a:2e:c0:ae -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4MUUxMTAvBgNVBAUTKDU2NUExMUY5NkQyRDhFODRDMzg2MUZFMkUwRkIzMURE MEJFNDA2QjIwHhcNMjMxMjAyMjEyODU5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiYTE5Yi0zNTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCmLzd1BJch30e4rtgXGu+G2yZsH1GgMDJbtLjsJFDwRBW9Kqd0L2fahxZgu ix3EK9aMuLj7yH32rmUNt/KQcDEeklCZAwYAWOMy6kvBZOQvljBBD3CMv42aSRKe 3hmdqveR28L1p5UVhg1cZE41WwRifwrEq4AzFlTbLxQ69bYUucobZO+lGyjbgD1o msTHZyJYrynXG9jrfz5cxzMMOETOZMnmM3GTcJ7oyn32X3GRNpXLD+lhCQDhV8fm TKMBGDi7z1zr5FhPBjyhybdSwu0nJ0ztyDkQPpcn6Ucl7LIwVgN2fEgvHpw5g41s wq2028yYNW90UiAIeQS1vXtiPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOFYViX4 WA8/r/l5LV6PwfiAKrBJMB8GA1UdIwQYMBaAFFZaEfltLY6Ew4Yf4uD7Md0L5Aay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDgxRS9BOTIyM0MyNjg5 NjExMUVBOUU2MDU2NTdDNEY5QUUwMi9WbG9SLVcwdGpvVERoaF9pNFBzeDNRdmtC ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zsb1ItVzB0am9URGhoX2k0UHN4M1F2a0JySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ4MUUvQTkyMjNDMjY4OTYxMTFFQTlFNjA1NjU3QzRGOUFFMDIvRUU4OTI5MkM4 OTYyMTFFQTkwMzY2NzVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJngwgwDQYJKoZIhvcNAQELBQADggEBAASmJyTTLpZo3w3v N5PeYhqqZi8CddxxRC6S87wojO91F9zeC7PBeBxm1CvcggDSklTIB9TIUz685eQt Z4GPxyim1zM9qCBrt4yZQ8g+AvjEeDQl5NnaHI2WwwmeuznczRoxTDjvar834l66 /pPbnM9WcjnQJ6VLmlTDPcN59g1gJLmDqS3F470APd+N9aioFfbKVERKxcJSZtfQ gBOpZGa42P2bj2eqG8ob8lGhibUb+Uvo5ISTzn1o0Yh2p/fR/g+YszGHZh5BypiO K++eZMRsHYoLj2irKS6HopiOwuHGzXoksfcZ9mb9dFZ/SB511ogH0ashGfHyrKqa LJouwK4= -----END CERTIFICATE-----Generated at Tue May 28 22:51:17 2024 by rpki-client on console-ams.rpki-client.org