$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/ECD869468DDB11ED8FBBE183C4F9AE02.roa File: ECD869468DDB11ED8FBBE183C4F9AE02.roa (raw, json) Hash identifier: ecKiFk7uN6InJInU9egVh8ACrhR1NqBjXQbROigcsNg= Subject key identifier: AE:7F:2E:E1:A3:3A:AB:6C:D1:D4:00:F9:60:BC:47:91:F3:16:71:B8 Certificate issuer: /CN=A91689C8/serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA Certificate serial: 8A Authority key identifier: 59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/ECD869468DDB11ED8FBBE183C4F9AE02.roa Signing time: Fri 29 Sep 2023 04:25:49 +0000 ROA not before: Fri 29 Sep 2023 04:25:49 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 150309 IP address blocks: 103.244.188.0/23 maxlen: 24 2400:a9e0::/32 maxlen: 32 2400:a9e0::/36 maxlen: 36 2400:a9e0:1000::/36 maxlen: 36 2400:a9e0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 05:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689C8/serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA Validity Not Before: Sep 29 04:25:49 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651651cc-a67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f6:49:f7:85:f7:cc:57:67:46:be:60:8e:50: c6:0f:3e:c4:d8:f9:73:b9:b3:a3:64:b6:9f:67:d2: 56:1b:88:dd:ae:f8:f0:51:aa:8f:92:2e:68:fb:88: a8:e9:78:ee:48:30:15:1b:a2:cf:ce:35:4f:2e:0e: e7:c2:ab:08:b9:2c:f9:eb:2b:f3:19:36:28:85:14: ad:8a:da:6d:a6:a6:e2:50:41:fd:0b:ef:99:e5:54: b3:a5:fa:e7:de:3f:4b:e0:00:73:58:53:a9:0d:26: 84:97:af:eb:c8:f3:c2:b0:cd:66:bc:92:b6:04:24: 0d:6b:9d:d0:25:fc:95:d8:63:c4:0e:4e:cc:9d:a6: dd:6e:e5:5c:b4:d7:70:0f:a3:b5:0f:26:d2:c4:f1: 48:3b:ce:e4:e9:d0:fb:93:5a:87:9c:bc:ef:f7:18: 2d:50:fa:5d:3d:1c:49:1c:a6:58:46:21:b2:0e:c3: 68:e0:af:b0:d2:22:32:63:14:a5:a1:9c:2f:62:be: 26:ad:e9:4c:31:c9:cd:eb:53:99:cd:52:de:55:58: 54:ff:0a:8b:cb:5e:ac:51:f9:09:ab:8b:a1:83:a0: bc:26:d9:ee:c7:e9:39:9d:99:f8:84:90:90:89:01: c6:09:c7:b8:84:cc:1e:74:d4:26:ba:bc:0e:8b:24: 5f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7F:2E:E1:A3:3A:AB:6C:D1:D4:00:F9:60:BC:47:91:F3:16:71:B8 X509v3 Authority Key Identifier: keyid:59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/ECD869468DDB11ED8FBBE183C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.244.188.0/23 IPv6: 2400:a9e0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:f0:31:5b:c1:44:24:7e:9f:b4:2d:e1:5c:8e:7e:1c:28:ca: 52:bf:3b:25:cc:0b:75:8a:8f:40:54:a2:e1:31:44:01:66:18: d0:4a:d3:1d:f6:fa:b3:f0:ca:d9:63:c1:05:6e:f7:3c:f1:28: 1d:51:54:0c:27:aa:d2:0c:9a:e4:1a:76:9d:ef:38:9e:fc:20: f0:24:65:23:1b:11:af:11:e4:1e:26:67:d1:9e:1d:9a:b6:3c: 57:ef:1f:49:b9:f4:d1:3d:1e:d6:30:d8:d2:c7:c9:1e:90:2c: e9:58:99:e0:84:f4:97:22:a9:dd:e8:23:ec:e0:c6:cf:10:a6: 4d:17:c9:64:11:4d:fd:dc:82:dd:d3:6b:d0:94:db:12:00:da: 2d:a4:a2:0a:2d:e0:05:a5:83:2d:19:7a:95:9f:40:40:97:10: 50:47:e1:b2:33:4e:70:09:0f:b9:b2:ee:2a:42:a0:f2:b3:40: 5b:bc:9d:c4:4e:26:73:9b:c5:42:5c:8c:2b:be:97:66:fe:46: 2d:eb:6e:2d:b6:3f:29:71:ba:9b:1c:66:7e:58:38:7d:a2:60: 80:de:fa:ae:ba:b7:44:24:78:a4:c4:ed:c7:24:87:ee:76:5d: c7:c5:5a:b2:8d:d5:19:40:b4:1a:77:51:14:50:64:ea:61:99: 1e:9b:45:2f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QzgxMTAvBgNVBAUTKDU5QUE0RUI5ODVFQTVDMDU0ODU0MDRCNDVDQzM1NEE3 RDFBMUE2Q0EwHhcNMjMwOTI5MDQyNTQ5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE2NTFjYy1hNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/ZJ94X3zFdnRr5gjlDGDz7E2PlzubOjZLafZ9JWG4jdrvjwUaqPki5o+4io 6XjuSDAVG6LPzjVPLg7nwqsIuSz56yvzGTYohRStitptpqbiUEH9C++Z5VSzpfrn 3j9L4ABzWFOpDSaEl6/ryPPCsM1mvJK2BCQNa53QJfyV2GPEDk7MnabdbuVctNdw D6O1DybSxPFIO87k6dD7k1qHnLzv9xgtUPpdPRxJHKZYRiGyDsNo4K+w0iIyYxSl oZwvYr4mrelMMcnN61OZzVLeVVhU/wqLy16sUfkJq4uhg6C8Jtnux+k5nZn4hJCQ iQHGCce4hMwedNQmurwOiyRf1QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFK5/LuGj Oqts0dQA+WC8R5HzFnG4MB8GA1UdIwQYMBaAFFmqTrmF6lwFSFQEtFzDVKfRoabK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlDOC8zOEIzOEU1RThE RDcxMUVEODUyMjVBN0VDNEY5QUUwMi9XYXBPdVlYcVhBVklWQVMwWE1OVXA5R2hw c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhcE91WVhxWEFWSVZBUzBYTU5VcDlHaHBzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg5QzgvMzhCMzhFNUU4REQ3MTFFRDg1MjI1QTdFQzRGOUFFMDIvRUNEODY5NDY4 RERCMTFFRDhGQkJFMTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFn9LwwDQQCAAIwBwMFACQAqeAwDQYJKoZIhvcNAQELBQAD ggEBADzwMVvBRCR+n7Qt4VyOfhwoylK/OyXMC3WKj0BUouExRAFmGNBK0x32+rPw ytljwQVu9zzxKB1RVAwnqtIMmuQadp3vOJ78IPAkZSMbEa8R5B4mZ9GeHZq2PFfv H0m59NE9HtYw2NLHyR6QLOlYmeCE9Jciqd3oI+zgxs8Qpk0XyWQRTf3cgt3Ta9CU 2xIA2i2kogot4AWlgy0ZepWfQECXEFBH4bIzTnAJD7my7ipCoPKzQFu8ncROJnOb xUJcjCu+l2b+Ri3rbi22PylxupscZn5YOH2iYIDe+q66t0QkeKTE7cckh+52XcfF WrKN1RlAtBp3URRQZOphmR6bRS8= -----END CERTIFICATE-----Generated at Tue May 21 05:59:12 2024 by rpki-client on console-fra.rpki-client.org