$ rpki-client -vvf rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/E035CD6ECC8B11EA9169032FC4F9AE02.roa File: E035CD6ECC8B11EA9169032FC4F9AE02.roa (raw, json) Hash identifier: LqzS6UFr2joe/ASisAsS4V1BqArsY/UdnYeqtb0HOGM= Subject key identifier: F3:C9:6F:11:CE:EC:64:D4:65:FA:3A:1E:7B:9F:89:A3:85:50:2E:32 Certificate issuer: /CN=A91821EE/serialNumber=6BA8BEC06CA0B4075335EDA6A9263884D5AE032B Certificate serial: 07C7 Authority key identifier: 6B:A8:BE:C0:6C:A0:B4:07:53:35:ED:A6:A9:26:38:84:D5:AE:03:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6i-wGygtAdTNe2mqSY4hNWuAys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/E035CD6ECC8B11EA9169032FC4F9AE02.roa Signing time: Fri 20 Sep 2024 21:11:57 +0000 ROA not before: Fri 20 Sep 2024 21:11:57 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 64010 IP address blocks: 103.239.220.0/22 maxlen: 22 103.239.220.0/24 maxlen: 24 103.239.221.0/24 maxlen: 24 103.239.222.0/24 maxlen: 24 103.239.223.0/24 maxlen: 24 2001:df0:1400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.crl rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6i-wGygtAdTNe2mqSY4hNWuAys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91821EE/serialNumber=6BA8BEC06CA0B4075335EDA6A9263884D5AE032B Validity Not Before: Sep 20 21:11:57 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ede51d-ca57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:53:9b:e7:1a:9e:79:9c:42:35:f8:6f:ea: 1b:75:61:41:35:b4:6d:c4:d5:d4:65:6f:4b:4c:26: 69:76:ef:a6:68:77:3a:e5:13:91:1b:87:3f:5e:08: a3:40:c9:01:e5:63:02:97:47:60:62:1c:76:28:28: e3:ca:e3:f9:76:8d:8c:a5:4f:2e:c9:26:cb:2a:c9: a4:97:23:d9:6c:99:55:fb:2e:c3:ba:f8:02:6f:9f: c5:f3:13:62:cd:6c:e1:92:0e:22:a7:c8:e1:85:79: 47:eb:bf:6a:e9:6f:00:96:fc:d2:d6:1e:18:6d:09: 55:7e:7b:06:a2:7c:96:85:7f:3a:eb:ff:14:dd:45: 1a:36:a2:ac:6e:25:50:ba:bc:03:77:15:6b:9f:2e: ec:1f:88:b9:de:09:13:31:fb:9b:56:64:2d:b6:d4: ee:82:c8:b9:ce:15:b0:69:3c:43:40:1b:e1:a3:65: d4:f1:43:6d:6b:35:39:39:4b:25:08:f4:3c:83:7a: 67:af:d5:7e:18:22:7b:20:5b:7d:a7:58:b6:2a:1b: 56:74:de:12:5e:58:db:32:1a:f3:8b:3b:ad:14:3a: b5:0b:9d:82:ad:d1:49:0b:d5:8a:65:9c:49:3e:28: 3d:d8:47:12:9e:3b:a5:5c:31:18:15:f5:10:8a:4e: 78:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C9:6F:11:CE:EC:64:D4:65:FA:3A:1E:7B:9F:89:A3:85:50:2E:32 X509v3 Authority Key Identifier: keyid:6B:A8:BE:C0:6C:A0:B4:07:53:35:ED:A6:A9:26:38:84:D5:AE:03:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6i-wGygtAdTNe2mqSY4hNWuAys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/E035CD6ECC8B11EA9169032FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.239.220.0/22 IPv6: 2001:df0:1400::/48 Signature Algorithm: sha256WithRSAEncryption 99:35:67:b0:11:51:fe:ca:0f:fd:4a:8c:54:79:93:20:12:56: 38:48:ff:52:34:e9:5c:42:02:ab:a0:ef:ac:f0:ff:0e:0d:2f: 5b:2a:ad:e6:8a:e0:a8:62:65:b3:e4:af:fc:73:e6:f8:39:8e: 7c:a9:c1:d3:8b:57:22:c5:8e:2d:57:ca:c5:4d:15:eb:b4:5b: ab:67:23:be:ca:bf:5d:47:72:94:20:a3:62:29:c2:58:f2:cc: 1a:96:69:8e:30:42:df:d1:fa:c9:ed:26:2b:e0:44:04:0d:d3: 50:3e:70:5c:7f:cd:b1:ee:f3:b5:d6:75:e1:ce:97:43:90:6e: 62:d6:86:a8:a5:48:2f:0e:2e:b5:fd:1e:8a:57:9f:29:19:94: d1:e0:ad:04:fd:4b:ca:cc:7e:24:46:1b:7a:e1:9d:39:58:40: 01:7b:37:88:d2:15:22:fd:4a:fa:c0:c2:4b:49:98:96:39:ce: b4:6a:56:73:ea:f8:17:f3:c0:fb:2c:35:25:5c:f9:5c:d1:f1: 45:08:6e:23:6d:a6:b5:09:6a:89:de:2c:c0:ef:58:ae:c7:8f: 83:5f:ad:7b:4f:a8:24:11:c9:2b:2c:a9:6b:42:0c:ca:be:97: 2a:c8:1f:b3:29:70:f2:94:1c:7b:da:13:35:a0:41:be:57:31: 43:88:35:a2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxRUUxMTAvBgNVBAUTKDZCQThCRUMwNkNBMEI0MDc1MzM1RURBNkE5MjYzODg0 RDVBRTAzMkIwHhcNMjQwOTIwMjExMTU3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVkZTUxZC1jYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQhTm+cannmcQjX4b+obdWFBNbRtxNXUZW9LTCZpdu+maHc65RORG4c/Xgij QMkB5WMCl0dgYhx2KCjjyuP5do2MpU8uySbLKsmklyPZbJlV+y7DuvgCb5/F8xNi zWzhkg4ip8jhhXlH679q6W8AlvzS1h4YbQlVfnsGonyWhX866/8U3UUaNqKsbiVQ urwDdxVrny7sH4i53gkTMfubVmQtttTugsi5zhWwaTxDQBvho2XU8UNtazU5OUsl CPQ8g3pnr9V+GCJ7IFt9p1i2KhtWdN4SXljbMhrzizutFDq1C52CrdFJC9WKZZxJ Pig92EcSnjulXDEYFfUQik548wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPPJbxHO 7GTUZfo6HnufiaOFUC4yMB8GA1UdIwQYMBaAFGuovsBsoLQHUzXtpqkmOITVrgMr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjFFRS9GNkNBQTBBQUND OEExMUVBOUFFRkNFMkVDNEY5QUUwMi9hNmktd0d5Z3RBZFROZTJtcVNZNGhOV3VB eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2aS13R3lndEFkVE5lMm1xU1k0aE5XdUF5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIxRUUvRjZDQUEwQUFDQzhBMTFFQTlBRUZDRTJFQzRGOUFFMDIvRTAzNUNENkVD QzhCMTFFQTkxNjkwMzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJn79wwDwQCAAIwCQMHACABDfAUADANBgkqhkiG9w0BAQsF AAOCAQEAmTVnsBFR/soP/UqMVHmTIBJWOEj/UjTpXEICq6DvrPD/Dg0vWyqt5org qGJls+Sv/HPm+DmOfKnB04tXIsWOLVfKxU0V67Rbq2cjvsq/XUdylCCjYinCWPLM GpZpjjBC39H6ye0mK+BEBA3TUD5wXH/Nse7ztdZ14c6XQ5BuYtaGqKVILw4utf0e ilefKRmU0eCtBP1Lysx+JEYbeuGdOVhAAXs3iNIVIv1K+sDCS0mYljnOtGpWc+r4 F/PA+yw1JVz5XNHxRQhuI22mtQlqid4swO9YrsePg1+te0+oJBHJKyypa0IMyr6X Ksgfsylw8pQce9oTNaBBvlcxQ4g1og== -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org