$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa File: E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa (raw, json) Hash identifier: iR4RoH3CimLxnFj7TtgZPU44u+Avhx+YT3aC4DIXKE4= Subject key identifier: D2:0A:C4:36:D5:AD:68:F7:60:03:BC:81:CD:7F:93:BD:09:49:6E:21 Certificate issuer: /CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC Certificate serial: 0D26 Authority key identifier: 32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa Signing time: Sat 02 Dec 2023 18:46:09 +0000 ROA not before: Sat 02 Dec 2023 18:46:09 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 134809 IP address blocks: 103.231.251.0/24 maxlen: 24 103.232.28.0/23 maxlen: 23 103.253.105.0/24 maxlen: 24 2405:d3c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3366 (0xd26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC Validity Not Before: Dec 2 18:46:09 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656b7b71-3f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:de:35:9f:38:1b:39:d9:59:3d:68:36:e3: 4e:ef:5c:ff:95:1f:99:6d:ce:60:33:38:3a:54:2c: 75:d7:78:6c:91:5c:ed:45:21:20:f4:4a:c9:c5:32: 58:37:72:46:22:1c:df:49:6a:cd:9f:29:df:fb:74: 09:c8:ca:51:f0:bc:16:2e:4d:3c:2c:b4:38:fb:e7: 0f:97:40:62:ee:43:0c:e7:a7:04:06:9c:8b:a6:c3: 2b:23:52:8c:c8:b1:ef:82:f9:2d:18:c6:9d:43:75: 19:80:5a:ed:f1:c0:33:d6:9c:9a:ad:4a:df:04:7d: 4b:57:2c:31:fb:f7:7d:5c:d9:cd:ad:99:ff:ad:48: c8:7c:e1:76:b5:ca:11:5c:06:d9:92:27:68:2f:b4: 00:20:6e:32:13:90:5a:b9:84:9d:9d:34:8d:fc:af: 35:a6:cb:17:2b:35:06:e1:cc:4e:33:5f:89:fd:c7: 98:3a:ae:ef:b2:b9:77:61:d3:7c:e1:d9:97:31:ee: c6:90:ba:d3:dc:91:6c:73:55:a6:d5:6c:38:a8:af: cb:e7:b8:30:2e:be:f0:de:54:20:9f:14:6f:a0:c2: bc:8b:c1:27:15:42:1b:03:fc:00:de:de:39:e4:8c: c7:99:b5:cb:f8:26:64:cd:1f:89:51:57:e4:ec:15: c8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0A:C4:36:D5:AD:68:F7:60:03:BC:81:CD:7F:93:BD:09:49:6E:21 X509v3 Authority Key Identifier: keyid:32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.231.251.0/24 103.232.28.0/23 103.253.105.0/24 IPv6: 2405:d3c0::/32 Signature Algorithm: sha256WithRSAEncryption d9:88:a4:5f:37:01:a8:58:b0:21:7b:4b:47:49:37:81:27:17: ff:bd:41:79:c7:65:5b:d2:2e:95:86:9b:9a:c7:96:95:a7:1b: 01:fd:bf:2b:41:48:4b:ca:44:2f:a1:e6:ea:da:29:26:04:b3: 83:e9:dc:b4:ad:d1:8a:a3:a7:b3:34:29:cf:e6:a2:37:a5:f4: ed:e8:29:62:ca:f4:76:5f:e4:6e:bf:5b:4c:4b:e2:f0:c2:ba: e6:ec:33:f5:29:c0:3d:12:87:47:ca:5f:bf:e7:bb:53:ca:c2: 66:50:78:ec:73:69:4a:91:41:7d:b2:90:16:e2:36:4e:00:5f: 25:5a:77:55:c9:82:89:62:af:c4:b7:88:ab:a9:ab:a8:d9:12: 31:80:22:85:21:dc:35:64:1f:b8:a9:81:ba:25:27:65:91:a4: 45:f1:09:d2:42:42:2e:f0:24:e8:8b:eb:85:db:ce:c6:a4:7d: 52:bb:cb:74:b3:d1:d3:1f:0b:5b:aa:e3:6a:9e:17:67:63:47: d6:07:3d:21:0b:15:5a:86:0a:12:ff:49:e7:8b:6e:63:23:1a: 82:27:eb:9c:51:8c:8f:f1:88:30:95:ef:66:06:81:4b:70:a0: a2:45:c6:e2:3f:8f:65:73:1f:45:50:71:d6:eb:98:ea:3c:8f: b3:d8:aa:e3 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICDSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQUQxMTAvBgNVBAUTKDMyNjJGNzgxMkQ3QzdEQUFFODc1QkMxRUU4RDcxRjkw NzJDRUVEQkMwHhcNMjMxMjAyMTg0NjA5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiN2I3MS0zZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLXeNZ84GznZWT1oNuNO71z/lR+Zbc5gMzg6VCx113hskVztRSEg9ErJxTJY N3JGIhzfSWrNnynf+3QJyMpR8LwWLk08LLQ4++cPl0Bi7kMM56cEBpyLpsMrI1KM yLHvgvktGMadQ3UZgFrt8cAz1pyarUrfBH1LVywx+/d9XNnNrZn/rUjIfOF2tcoR XAbZkidoL7QAIG4yE5BauYSdnTSN/K81pssXKzUG4cxOM1+J/ceYOq7vsrl3YdN8 4dmXMe7GkLrT3JFsc1Wm1Ww4qK/L57gwLr7w3lQgnxRvoMK8i8EnFUIbA/wA3t45 5IzHmbXL+CZkzR+JUVfk7BXIPwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFNIKxDbV rWj3YAO8gc1/k70JSW4hMB8GA1UdIwQYMBaAFDJi94EtfH2q6HW8HujXH5Byzu28 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJBRC84OUMwQkZDMEE0 MzIxMUU5ODhCRUIzODZDNEY5QUUwMi9NbUwzZ1MxOGZhcm9kYndlNk5jZmtITE83 YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTDNnUzE4ZmFyb2Rid2U2TmNma0hMTzdidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVCQUQvODlDMEJGQzBBNDMyMTFFOTg4QkVCMzg2QzRGOUFFMDIvRTJGQzFFN0VF NUI4MTFFREJDOERBMzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABn5/sDBAFn6BwDBABn/WkwDQQCAAIwBwMFACQF08AwDQYJ KoZIhvcNAQELBQADggEBANmIpF83AahYsCF7S0dJN4EnF/+9QXnHZVvSLpWGm5rH lpWnGwH9vytBSEvKRC+h5uraKSYEs4Pp3LSt0Yqjp7M0Kc/mojel9O3oKWLK9HZf 5G6/W0xL4vDCuubsM/UpwD0Sh0fKX7/nu1PKwmZQeOxzaUqRQX2ykBbiNk4AXyVa d1XJgolir8S3iKupq6jZEjGAIoUh3DVkH7ipgbolJ2WRpEXxCdJCQi7wJOiL64Xb zsakfVK7y3Sz0dMfC1uq42qeF2djR9YHPSELFVqGChL/SeeLbmMjGoIn65xRjI/x iDCV72YGgUtwoKJFxuI/j2VzH0VQcdbrmOo8j7PYquM= -----END CERTIFICATE-----Generated at Fri May 31 20:34:04 2024 by rpki-client on console-ams.rpki-client.org