$ rpki-client -vvf rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/ACDAB45E592011EF976B8A1BC4F9AE02.roa File: ACDAB45E592011EF976B8A1BC4F9AE02.roa (raw, json) Hash identifier: U3ZnJBxT1IeYR8+mYBl3G+PAu8VK9/dUHIyNaklFW4o= Subject key identifier: 55:21:BB:88:F0:C0:60:30:4A:D1:81:A1:F3:7C:58:4C:C7:F2:00:A8 Certificate issuer: /CN=A917A53A/serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5 Certificate serial: 02 Authority key identifier: 59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/ACDAB45E592011EF976B8A1BC4F9AE02.roa Signing time: Tue 13 Aug 2024 03:03:54 +0000 ROA not before: Tue 13 Aug 2024 03:03:54 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133952 IP address blocks: 103.90.80.0/24 maxlen: 24 103.90.81.0/24 maxlen: 24 103.90.82.0/24 maxlen: 24 103.90.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A53A/serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5 Validity Not Before: Aug 13 03:03:54 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66bacd1a-913e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:85:2b:58:49:46:36:f2:c6:c6:eb:3e:33:cb: e9:b8:39:36:0f:40:36:64:75:3d:1f:ab:ab:41:d1: bd:87:84:18:b4:c9:15:25:f1:ad:63:9a:8a:f0:54: c7:c0:b2:49:77:f3:06:4f:9f:ea:c9:df:66:d5:36: dd:b1:3b:5f:af:40:4c:56:3a:1f:f4:55:24:b7:bc: 36:c9:f6:2f:1f:af:01:90:6b:ba:19:68:fa:c2:1d: 81:e3:f2:74:59:a0:df:83:77:71:c0:30:6c:9b:3c: 68:20:3b:67:50:f7:b9:5d:24:18:60:bf:16:e5:ed: 18:95:ae:fe:7e:06:6e:e1:8d:d0:28:c9:e5:a3:8a: 10:8f:86:2d:69:ef:b1:f5:8d:e7:95:94:52:25:f5: a2:45:e7:30:a7:b4:d7:91:f5:a1:c2:7b:90:73:d4: c7:47:d8:09:f9:f2:75:09:8a:9e:38:7b:59:83:cd: e9:c5:73:be:cc:f9:ef:48:b6:0f:81:51:44:5e:d3: 9d:64:a5:fc:8d:a8:d6:6f:9d:ef:bf:dc:94:28:53: 04:b1:d5:4f:2c:5f:c1:a9:af:b1:02:f6:28:0a:84: f5:bb:bd:92:91:7f:56:f9:7a:73:91:60:d4:ec:ad: cf:92:cf:2d:89:69:6b:14:e3:05:21:7b:b4:6b:3a: 22:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:21:BB:88:F0:C0:60:30:4A:D1:81:A1:F3:7C:58:4C:C7:F2:00:A8 X509v3 Authority Key Identifier: keyid:59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/ACDAB45E592011EF976B8A1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.90.80.0/22 Signature Algorithm: sha256WithRSAEncryption dd:c8:c2:67:5b:c8:0b:10:9b:4a:98:3a:8a:68:ea:a4:bb:a9: db:a5:54:06:70:d8:c9:8f:ca:ab:dd:83:2d:1c:5f:53:8e:13: db:36:cc:80:0d:99:1f:eb:1c:47:ec:86:35:e2:c5:a8:fe:16: ed:a9:3c:72:73:b8:04:18:e2:45:e8:d1:29:e5:1b:06:ba:22: 8a:e2:9e:b1:ee:b5:5b:6c:cc:8b:41:88:4c:ba:2c:d1:82:ba: bf:71:5c:3b:15:bd:ef:44:8c:44:a3:a3:d6:34:1f:bb:72:af: 48:7b:e1:e8:65:5c:93:d4:ce:fa:ee:8f:ec:52:f9:7a:4f:30: cb:84:a3:85:56:cc:5e:dc:b6:41:e5:31:9b:3d:49:1d:54:50: 2a:f6:1f:a1:22:1d:f0:fb:9d:bf:43:96:01:90:77:ef:38:68: b7:f4:2f:91:2a:51:b3:43:7c:ff:a4:52:e1:52:20:15:d5:0b: fa:57:69:1f:ca:2f:b9:67:07:59:ff:ad:93:6a:9d:a7:dd:0c: 08:27:15:b9:0e:1e:0e:48:9b:52:8b:4e:a2:70:05:ed:c8:05: 3a:12:b9:49:6e:a4:b1:f1:56:e5:78:90:d0:a4:2c:6b:50:81: 25:27:c7:6e:02:20:e9:5c:3e:90:34:e7:99:f2:62:78:aa:63: 29:e8:e4:18 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTUzQTExMC8GA1UEBRMoNTk0QkQxNDNCRjcyMzg4REEyQTVDQjY0QkJDMzkxMDg4 OEY2NERDNTAeFw0yNDA4MTMwMzAzNTRaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmFjZDFhLTkxM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnhStYSUY28sbG6z4zy+m4OTYPQDZkdT0fq6tB0b2HhBi0yRUl8a1jmorwVMfA skl38wZPn+rJ32bVNt2xO1+vQExWOh/0VSS3vDbJ9i8frwGQa7oZaPrCHYHj8nRZ oN+Dd3HAMGybPGggO2dQ97ldJBhgvxbl7RiVrv5+Bm7hjdAoyeWjihCPhi1p77H1 jeeVlFIl9aJF5zCntNeR9aHCe5Bz1MdH2An58nUJip44e1mDzenFc77M+e9Itg+B UURe051kpfyNqNZvne+/3JQoUwSx1U8sX8Gpr7EC9igKhPW7vZKRf1b5enORYNTs rc+Szy2JaWsU4wUhe7RrOiL7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUVSG7iPDA YDBK0YGh83xYTMfyAKgwHwYDVR0jBBgwFoAUWUvRQ79yOI2ipctku8ORCIj2TcUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNTNBLzRFNkJDNjZBNTky MDExRUZBNTYwMDA0RUM0RjlBRTAyL1dVdlJRNzl5T0kyaXBjdGt1OE9SQ0lqMlRj VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV1V2UlE3OXlPSTJpcGN0a3U4T1JDSWoyVGNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTUzQS80RTZCQzY2QTU5MjAxMUVGQTU2MDAwNEVDNEY5QUUwMi9BQ0RBQjQ1RTU5 MjAxMUVGOTc2QjhBMUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmdaUDANBgkqhkiG9w0BAQsFAAOCAQEA3cjCZ1vICxCbSpg6 imjqpLup26VUBnDYyY/Kq92DLRxfU44T2zbMgA2ZH+scR+yGNeLFqP4W7ak8cnO4 BBjiRejRKeUbBroiiuKese61W2zMi0GITLos0YK6v3FcOxW970SMRKOj1jQfu3Kv SHvh6GVck9TO+u6P7FL5ek8wy4SjhVbMXty2QeUxmz1JHVRQKvYfoSId8Pudv0OW AZB37zhot/QvkSpRs0N8/6RS4VIgFdUL+ldpH8ovuWcHWf+tk2qdp90MCCcVuQ4e DkibUotOonAF7cgFOhK5SW6ksfFW5XiQ0KQsa1CBJSfHbgIg6Vw+kDTnmfJieKpj KejkGA== -----END CERTIFICATE-----Generated at Tue Sep 17 07:38:16 2024 by rpki-client on console-fra.rpki-client.org