$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa File: EB292D8A6BF811EB8E899650C4F9AE02.roa (raw, json) Hash identifier: haQ1wVHCjiOBIUnT4Cwar2Iew7eXxoRUFslAJoKYOBs= Subject key identifier: 2E:32:69:3D:EC:74:33:0D:1E:E2:66:7B:0A:0C:DE:E8:3A:E4:FD:34 Certificate issuer: /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5 Certificate serial: 05C8 Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa Signing time: Mon 01 Apr 2024 01:02:40 +0000 ROA not before: Mon 01 Apr 2024 01:02:40 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 132745 IP address blocks: 103.24.140.0/22 maxlen: 22 103.162.176.0/24 maxlen: 24 103.162.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5 Validity Not Before: Apr 1 01:02:40 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660a07b0-ff49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dc:95:cc:e2:21:43:a0:1f:d8:33:dc:90:8b: 81:50:ee:e4:18:b9:7e:01:9f:0f:97:57:e9:c4:72: 36:62:61:1c:50:c0:aa:d5:32:19:9d:18:07:13:58: 97:e6:f0:2a:a4:46:c7:ae:05:4b:c4:dd:67:f5:8f: 5e:fe:e1:da:d3:5d:b5:30:be:7a:e6:c9:a0:62:a6: 1f:50:8d:a6:21:73:37:b1:7f:55:05:6f:00:b8:b2: 67:4d:fc:45:85:e5:73:8a:32:57:f6:df:22:5b:48: 06:c1:66:83:71:b6:aa:dc:fb:cc:7e:2e:55:6b:34: fc:d7:a1:19:09:65:07:c7:e9:b0:da:f7:77:e3:b6: db:47:4d:66:20:0c:a6:e3:22:7a:43:2d:5e:88:ab: 47:19:32:76:03:65:0e:3f:ee:df:38:5e:af:4d:05: bc:92:33:49:1b:66:47:c8:6c:4d:e7:09:9b:d5:ab: 0b:85:a4:fd:1f:8f:9c:28:9c:07:49:4c:c7:f4:07: be:7b:ce:0c:df:1f:1a:b6:25:8b:39:60:09:41:c1: 45:60:21:85:c0:04:e0:9a:6a:7b:a5:39:bb:65:8d: 1c:32:32:96:6c:d3:6c:2a:fa:97:dd:0c:74:1b:2e: 91:98:9c:51:7e:d3:6a:f4:e1:22:06:58:22:89:f5: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:32:69:3D:EC:74:33:0D:1E:E2:66:7B:0A:0C:DE:E8:3A:E4:FD:34 X509v3 Authority Key Identifier: keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.140.0/22 103.162.176.0/23 Signature Algorithm: sha256WithRSAEncryption 89:27:5b:0c:1e:76:2c:03:2f:1f:ef:c4:29:b4:31:e1:7f:b9: 85:1b:36:9a:0c:c6:cc:8a:1c:a0:d3:01:0d:11:2b:a6:ec:6f: 92:65:73:c1:31:98:33:fb:a1:01:08:f3:ae:6d:bf:57:f2:bc: d3:e3:b0:ba:22:fa:a5:23:b4:df:c7:8c:98:3f:3a:76:33:f2: 74:33:14:46:26:65:25:38:34:09:98:c0:08:7e:86:66:f6:14: d1:36:6b:71:7a:07:7d:d4:f5:ce:6c:c4:8a:fb:27:9f:0e:f6: de:85:bb:a0:e3:33:d8:70:73:28:20:d4:e2:d9:94:7d:c2:72: 18:25:2e:61:3d:65:ab:66:7f:0c:67:ad:b1:b2:8d:e7:01:9d: d4:82:53:26:0c:e1:77:8c:2c:00:54:29:77:9f:a9:9c:30:3b: 97:e8:17:28:9d:29:68:c7:00:dd:3b:9a:e8:2a:fe:0d:71:40: 25:a2:a8:2f:eb:a2:83:a0:31:bc:68:85:8b:7b:74:4a:6c:05: 4b:2d:07:d1:a8:59:e5:70:5d:33:60:c3:5f:46:22:42:7c:ac: a6:09:6e:c9:f6:67:85:ca:fc:5a:69:08:ea:23:c6:27:3c:96: 21:78:76:7e:32:34:07:93:0e:04:ea:3f:f7:c5:df:a5:6c:40: e9:30:15:a1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQ0UxMTAvBgNVBAUTKDcyQzFCQzlDM0RCNzlCNDNGMzU2RjIzRjk1Njg4NDhD OUNGQjhERDUwHhcNMjQwNDAxMDEwMjQwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBhMDdiMC1mZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9yVzOIhQ6Af2DPckIuBUO7kGLl+AZ8Pl1fpxHI2YmEcUMCq1TIZnRgHE1iX 5vAqpEbHrgVLxN1n9Y9e/uHa0121ML565smgYqYfUI2mIXM3sX9VBW8AuLJnTfxF heVzijJX9t8iW0gGwWaDcbaq3PvMfi5VazT816EZCWUHx+mw2vd347bbR01mIAym 4yJ6Qy1eiKtHGTJ2A2UOP+7fOF6vTQW8kjNJG2ZHyGxN5wmb1asLhaT9H4+cKJwH SUzH9Ae+e84M3x8atiWLOWAJQcFFYCGFwATgmmp7pTm7ZY0cMjKWbNNsKvqX3Qx0 Gy6RmJxRftNq9OEiBlgiifW6vQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFC4yaT3s dDMNHuJmewoM3ug65P00MB8GA1UdIwQYMBaAFHLBvJw9t5tD81byP5VohIyc+43V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDRS9CNzMwNjlDNjZC RTkxMUVCQjdENTU2MERDNEY5QUUwMi9jc0c4bkQyM20wUHpWdklfbFdpRWpKejdq ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzRzhuRDIzbTBQelZ2SV9sV2lFakp6N2pkVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIwQ0UvQjczMDY5QzY2QkU5MTFFQkI3RDU1NjBEQzRGOUFFMDIvRUIyOTJEOEE2 QkY4MTFFQjhFODk5NjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnGIwDBAFnorAwDQYJKoZIhvcNAQELBQADggEBAIknWwwe diwDLx/vxCm0MeF/uYUbNpoMxsyKHKDTAQ0RK6bsb5Jlc8ExmDP7oQEI865tv1fy vNPjsLoi+qUjtN/HjJg/OnYz8nQzFEYmZSU4NAmYwAh+hmb2FNE2a3F6B33U9c5s xIr7J58O9t6Fu6DjM9hwcygg1OLZlH3CchglLmE9ZatmfwxnrbGyjecBndSCUyYM 4XeMLABUKXefqZwwO5foFyidKWjHAN07mugq/g1xQCWiqC/rooOgMbxohYt7dEps BUstB9GoWeVwXTNgw19GIkJ8rKYJbsn2Z4XK/FppCOojxic8liF4dn4yNAeTDgTq P/fF36VsQOkwFaE= -----END CERTIFICATE-----Generated at Fri May 17 01:06:59 2024 by rpki-client on console-fra.rpki-client.org