$ rpki-client -vvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/2CDB14025F0D11EC8C2C2820C4F9AE02.roa File: 2CDB14025F0D11EC8C2C2820C4F9AE02.roa (raw, json) Hash identifier: vbAv8jFpcKGkTBbQKVUR1BzPpCcxmGf0d9qtp3KoN/M= Subject key identifier: FF:FE:36:34:43:1C:DF:A3:AC:00:54:76:90:89:C8:0B:5A:56:D0:A7 Certificate issuer: /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A Certificate serial: 0354 Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/2CDB14025F0D11EC8C2C2820C4F9AE02.roa Signing time: Mon 01 Jan 2024 02:44:09 +0000 ROA not before: Mon 01 Jan 2024 02:44:09 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 149039 IP address blocks: 103.177.72.0/23 maxlen: 24 2001:df0:1ec0::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 852 (0x354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A Validity Not Before: Jan 1 02:44:09 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=659226f9-5213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9a:72:03:58:ef:66:67:6f:1e:1d:ff:fb:37: 86:27:5d:bd:44:b3:de:97:1b:29:74:f8:af:ff:1b: b8:3f:71:29:24:33:90:af:13:15:0e:64:a4:ad:03: f0:3b:21:c4:db:42:9e:4c:b8:f3:cc:4b:b8:23:29: 32:bb:1f:2a:2c:24:ab:ef:7f:32:f6:60:29:e5:3f: 8d:ed:5c:4d:98:de:28:9f:04:59:4e:b1:b3:56:54: fc:d3:ad:89:5a:a7:9f:39:f3:54:0b:e7:82:03:c4: 6a:b7:2d:ab:b8:e1:ce:cb:f5:93:bf:08:b0:8c:82: ce:61:55:18:ec:29:f5:5c:c0:03:68:ed:bf:95:be: 0e:98:58:de:f3:c3:50:74:d4:3a:de:cf:57:ec:ff: 6c:ba:47:d2:0c:72:d6:4d:34:14:fa:6d:d9:85:3a: f9:04:7e:61:42:96:7c:d7:d2:b6:02:b7:a9:66:6f: 85:58:69:1b:29:81:92:54:0e:e5:b6:5f:a6:76:2a: 3d:15:58:7b:bf:7b:31:f1:e4:e7:96:c8:8f:9c:83: a8:30:d4:0c:7e:4a:37:24:74:e0:b8:99:0e:17:3f: 0b:db:50:84:68:23:c7:f7:6b:2b:a2:32:27:f4:67: cd:30:93:60:88:16:38:81:9a:0d:0a:79:1b:08:c3: f8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FE:36:34:43:1C:DF:A3:AC:00:54:76:90:89:C8:0B:5A:56:D0:A7 X509v3 Authority Key Identifier: keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/2CDB14025F0D11EC8C2C2820C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.72.0/23 IPv6: 2001:df0:1ec0::/48 Signature Algorithm: sha256WithRSAEncryption 8f:18:3e:b8:00:2a:bb:d6:08:90:ad:94:a9:a7:22:b2:c5:f2: aa:8f:76:07:4c:e1:b8:5c:4e:72:88:63:c6:44:a3:62:5c:cc: 39:e4:2e:32:f2:aa:75:cd:a9:97:1f:9b:fe:14:4e:8d:22:7c: 79:76:65:0b:0e:80:e2:f6:3f:bf:c8:5b:25:97:69:8b:d7:ce: fb:fe:1d:49:66:a8:0a:72:e9:ae:da:4f:bf:85:39:04:3d:50: 3e:e7:95:3a:44:b1:8e:b5:8e:63:94:e2:ab:b4:91:0e:81:dc: ba:28:e1:09:a3:d5:49:ea:f3:e8:eb:9d:d9:12:5e:6e:34:9c: 12:5a:1c:6e:fb:b2:ed:19:24:e6:c2:2e:aa:6e:38:74:54:13: 67:a3:16:67:84:95:8e:c5:1c:00:73:b5:53:db:89:52:0c:8c: 68:c6:49:32:c0:84:e5:e1:10:e8:6f:98:7c:6f:1d:23:c0:ca: 5c:c9:fd:58:09:19:19:f4:14:f4:36:f6:bd:56:9a:46:ca:bc: 82:91:4f:89:da:1a:90:8c:98:8d:59:fa:9d:90:0f:e3:49:0b: 98:3d:a9:3b:30:79:db:fb:11:dc:86:51:14:61:15:52:b1:da: b6:50:15:78:39:7a:25:d1:55:4d:cb:ba:09:95:3c:5e:50:6c: 97:28:04:58 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI0QUYxMTAvBgNVBAUTKDVDMzE1REFGQzUzQTgyRkRENjJDNzIwMDVDNzY0NDMz M0JDMDI5N0EwHhcNMjQwMTAxMDI0NDA5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTkyMjZmOS01MjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JpyA1jvZmdvHh3/+zeGJ129RLPelxspdPiv/xu4P3EpJDOQrxMVDmSkrQPw OyHE20KeTLjzzEu4Iykyux8qLCSr738y9mAp5T+N7VxNmN4onwRZTrGzVlT8062J WqefOfNUC+eCA8Rqty2ruOHOy/WTvwiwjILOYVUY7Cn1XMADaO2/lb4OmFje88NQ dNQ63s9X7P9sukfSDHLWTTQU+m3ZhTr5BH5hQpZ819K2ArepZm+FWGkbKYGSVA7l tl+mdio9FVh7v3sx8eTnlsiPnIOoMNQMfko3JHTguJkOFz8L21CEaCPH92srojIn 9GfNMJNgiBY4gZoNCnkbCMP43wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFP/+NjRD HN+jrABUdpCJyAtaVtCnMB8GA1UdIwQYMBaAFFwxXa/FOoL91ixyAFx2RDM7wCl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjRBRi83NkM3RjBGNDUx RjYxMUVDOUUzQzZDM0FDNEY5QUUwMi9YREZkcjhVNmd2M1dMSElBWEhaRU16dkFL WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hERmRyOFU2Z3YzV0xISUFYSFpFTXp2QUtYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTI0QUYvNzZDN0YwRjQ1MUY2MTFFQzlFM0M2QzNBQzRGOUFFMDIvMkNEQjE0MDI1 RjBEMTFFQzhDMkMyODIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsUgwDwQCAAIwCQMHACABDfAewDANBgkqhkiG9w0BAQsF AAOCAQEAjxg+uAAqu9YIkK2UqacissXyqo92B0zhuFxOcohjxkSjYlzMOeQuMvKq dc2plx+b/hROjSJ8eXZlCw6A4vY/v8hbJZdpi9fO+/4dSWaoCnLprtpPv4U5BD1Q PueVOkSxjrWOY5Tiq7SRDoHcuijhCaPVSerz6Oud2RJebjScElocbvuy7Rkk5sIu qm44dFQTZ6MWZ4SVjsUcAHO1U9uJUgyMaMZJMsCE5eEQ6G+YfG8dI8DKXMn9WAkZ GfQU9Db2vVaaRsq8gpFPidoakIyYjVn6nZAP40kLmD2pOzB52/sR3IZRFGEVUrHa tlAVeDl6JdFVTcu6CZU8XlBslygEWA== -----END CERTIFICATE-----Generated at Fri May 17 03:16:58 2024 by rpki-client on console-fra.rpki-client.org