$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa File: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (raw, json) Hash identifier: 0gX4UrZECG0FToJDBxjG8qBIchgjnj/y4QahR0VE2wc= Subject key identifier: DF:57:0F:3F:A5:A2:6B:9B:71:B4:DA:0A:3F:72:06:50:3E:58:4F:8E Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 07 Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa Signing time: Mon 17 Apr 2023 14:07:10 +0000 ROA not before: Mon 17 Apr 2023 14:07:10 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 139839 IP address blocks: 103.132.20.0/23 maxlen: 23 103.132.20.0/24 maxlen: 24 103.132.21.0/24 maxlen: 24 2400:f6a0::/36 maxlen: 36 2400:f6a0:1000::/36 maxlen: 36 2400:f6a0:2000::/36 maxlen: 36 2400:f6a0:3000::/36 maxlen: 36 2400:f6a0:4000::/36 maxlen: 36 2400:f6a0:5000::/36 maxlen: 36 2400:f6a0:6000::/36 maxlen: 36 2400:f6a0:7000::/36 maxlen: 36 2400:f6a0:8000::/36 maxlen: 36 2400:f6a0:a000::/36 maxlen: 36 2400:f6a0:b000::/36 maxlen: 36 2400:f6a0:c000::/36 maxlen: 36 2400:f6a0:d000::/36 maxlen: 36 2400:f6a0:e000::/36 maxlen: 36 2400:f6a0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: Apr 17 14:07:10 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=643d528e-ab97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:91:4c:c9:ec:09:f7:52:e9:e6:04:dc:45: 97:ca:29:24:99:88:8b:cd:eb:29:34:4d:29:16:eb: ba:71:b5:13:0f:24:f7:b8:a0:a8:12:18:20:9b:db: e2:28:6c:cf:66:18:ac:9a:e1:30:d3:e5:b5:cc:94: ab:0a:ff:2b:bb:6c:34:ac:1f:f2:4b:91:6d:20:64: b2:f2:61:cc:60:84:bc:aa:fb:8c:0c:56:d4:f9:8b: 6d:99:af:2a:48:76:62:0c:b0:55:c6:89:cb:b1:03: 6b:60:b6:68:d9:66:a2:72:39:cc:6b:50:3f:44:6b: 71:11:fb:ea:f3:03:07:2d:3c:fd:db:ab:a8:dd:4b: 22:02:7a:df:01:59:1a:8c:f7:15:12:97:08:d0:29: 9c:49:b0:f8:fa:bf:e1:db:c6:d6:15:7c:60:dc:36: e7:3f:e1:61:65:9c:9a:52:a7:4a:91:bd:82:a3:76: 0e:ea:4d:50:42:28:ff:bc:86:2a:aa:a1:56:13:32: 94:72:62:81:c8:64:cc:58:7d:93:64:dc:84:cf:72: 04:35:b5:8f:d1:39:e2:23:6e:35:48:04:e9:d9:2d: ab:c4:20:43:1b:75:1c:82:97:f5:3c:da:c8:bf:20: ec:2f:97:89:f2:54:5b:92:e0:be:fb:ca:b1:ff:fc: f4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:57:0F:3F:A5:A2:6B:9B:71:B4:DA:0A:3F:72:06:50:3E:58:4F:8E X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.20.0/23 IPv6: 2400:f6a0::-2400:f6a0:8fff:ffff:ffff:ffff:ffff:ffff 2400:f6a0:a000::-2400:f6a0:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 90:73:b0:a7:bd:a9:df:bb:f0:f3:44:87:45:81:30:9e:05:75: 0e:56:f8:76:d7:46:d9:c3:10:70:34:72:1b:00:6a:87:9d:b1: f1:cf:59:01:08:1d:67:55:6d:21:ca:62:e1:ec:48:1d:b0:f6: 78:e1:41:38:0a:b8:c4:dd:f3:6d:a7:08:3b:f6:22:88:56:be: 22:c2:b6:de:28:c9:4d:84:cc:20:30:e7:85:33:08:3d:97:46: fb:4a:57:bd:83:ba:f9:17:da:41:71:8c:e9:a4:19:dd:ca:19: 1d:2e:27:35:48:9f:a5:82:54:99:33:b7:2e:2b:c7:03:6e:1c: f8:1a:4d:7f:f9:97:a5:41:54:7a:fa:dd:8b:6c:53:68:61:71: 4e:58:63:56:49:2a:a2:65:58:0a:f1:a7:cb:af:3f:39:fd:9a: 03:a3:fb:2a:70:0a:c8:9f:bf:02:99:4d:a0:14:97:af:26:aa: c3:8f:b9:e1:06:a5:fb:f1:14:5e:45:ce:7c:9d:1f:eb:b8:37: 0d:c7:6f:7d:02:4c:78:f0:d0:c8:12:1f:f9:da:86:d5:f2:1b: 7e:e4:da:e9:7c:d9:8e:4f:ac:2f:5b:14:23:f1:c4:e7:4d:51: a8:dc:6c:cd:26:a3:06:d3:fc:d9:18:dc:e2:85:33:39:e1:cc: 1f:f4:d5:bb -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Nzg5MDExMC8GA1UEBRMoQzgzOTI0NDUxNTRBMjExNDU3NDY4REM5MjY3NUM2QjJC QzlDNDQ4QjAeFw0yMzA0MTcxNDA3MTBaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY0M2Q1MjhlLWFiOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNmJFMyewJ91Lp5gTcRZfKKSSZiIvN6yk0TSkW67pxtRMPJPe4oKgSGCCb2+Io bM9mGKya4TDT5bXMlKsK/yu7bDSsH/JLkW0gZLLyYcxghLyq+4wMVtT5i22ZrypI dmIMsFXGicuxA2tgtmjZZqJyOcxrUD9Ea3ER++rzAwctPP3bq6jdSyICet8BWRqM 9xUSlwjQKZxJsPj6v+HbxtYVfGDcNuc/4WFlnJpSp0qRvYKjdg7qTVBCKP+8hiqq oVYTMpRyYoHIZMxYfZNk3ITPcgQ1tY/ROeIjbjVIBOnZLavEIEMbdRyCl/U82si/ IOwvl4nyVFuS4L77yrH//PStAgMBAAGjggK/MIICuzAdBgNVHQ4EFgQU31cPP6Wi a5txtNoKP3IGUD5YT44wHwYDVR0jBBgwFoAUyDkkRRVKIRRXRo3JJnXGsrycRIsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3ODkwL0FERTEzMTg2REFE RjExRURCMUY5RDcxOUM0RjlBRTAyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveURra1JSVktJUlJYUm8zSkpuWEdzcnljUklzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi9FQzhDQTcyQ0RB RTMxMUVEQTBBNkIwM0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBJBggrBgEFBQcBBwEB/wQ6 MDgwDAQCAAEwBgMEAWeEFDAoBAIAAjAiMA8DBQUkAPagAwYEJAD2oIAwDwMGBSQA 9qCgAwUAJAD2oDANBgkqhkiG9w0BAQsFAAOCAQEAkHOwp72p37vw80SHRYEwngV1 Dlb4dtdG2cMQcDRyGwBqh52x8c9ZAQgdZ1VtIcpi4exIHbD2eOFBOAq4xN3zbacI O/YiiFa+IsK23ijJTYTMIDDnhTMIPZdG+0pXvYO6+RfaQXGM6aQZ3coZHS4nNUif pYJUmTO3LivHA24c+BpNf/mXpUFUevrdi2xTaGFxTlhjVkkqomVYCvGny68/Of2a A6P7KnAKyJ+/AplNoBSXryaqw4+54Qal+/EUXkXOfJ0f67g3DcdvfQJMePDQyBIf +dqG1fIbfuTa6XzZjk+sL1sUI/HE501RqNxszSajBtP82Rjc4oUzOeHMH/TVuw== -----END CERTIFICATE-----Generated at Fri May 17 08:52:52 2024 by rpki-client on console-ams.rpki-client.org