$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/E5FC4584965E11EEBE3E0C54C4F9AE02.roa File: E5FC4584965E11EEBE3E0C54C4F9AE02.roa (raw, json) Hash identifier: v7dLmK1CZLoLxUWjZWdMzn94e/qgfqNNjyJGBbnx3cE= Subject key identifier: D9:A7:BF:59:D1:3B:15:F4:7D:FD:FA:7B:99:EE:73:34:4A:C5:24:3F Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: E2 Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/E5FC4584965E11EEBE3E0C54C4F9AE02.roa Signing time: Fri 19 Jan 2024 05:05:58 +0000 ROA not before: Fri 19 Jan 2024 05:05:58 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 151080 IP address blocks: 103.42.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: Jan 19 05:05:58 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65aa0336-6cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2a:f5:09:2c:1e:4e:e9:72:df:a1:85:08:30: 3c:d5:5a:80:f1:55:7a:0a:3c:62:da:12:87:fa:a8: 78:5d:50:cc:7f:ca:5b:87:35:79:00:fd:cd:90:c4: f0:10:ff:2f:20:d3:35:58:4a:73:00:06:e0:19:3b: 4b:a5:74:e0:df:d7:89:b8:62:9a:42:9d:82:bb:5a: f8:04:66:96:61:46:75:f7:b0:1e:45:7b:b4:fb:f0: 09:9d:c5:bb:ad:8d:1d:bd:e6:af:29:03:a9:89:18: 07:f7:7c:a0:75:9d:9a:04:7a:83:aa:2c:40:1e:f8: 28:a4:33:e3:22:7a:e5:bc:5e:42:9f:4f:f6:3b:8a: 38:15:f1:cd:0e:8a:79:02:5b:15:57:6c:f8:51:99: 57:d9:71:f6:9f:35:2f:ad:6d:ba:12:c4:98:3a:68: 13:19:29:b5:19:fa:c3:ea:aa:f5:bd:8b:b1:fa:54: 9c:ea:96:b6:36:37:a7:28:e4:69:13:d6:de:c1:31: 6a:3c:ae:7c:e5:72:2b:4c:e8:79:99:41:dc:66:05: ec:46:63:ab:83:21:ba:ac:3a:ef:32:9f:36:ae:0f: 60:4b:27:2e:60:fc:cf:33:bd:16:d5:f5:5a:13:5a: 46:68:4c:e0:c3:65:29:35:16:ea:1c:98:c5:ac:14: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A7:BF:59:D1:3B:15:F4:7D:FD:FA:7B:99:EE:73:34:4A:C5:24:3F X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/E5FC4584965E11EEBE3E0C54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.229.0/24 Signature Algorithm: sha256WithRSAEncryption 08:98:2d:46:74:21:52:ee:fa:46:89:41:f0:66:d2:9f:a3:7c: eb:e7:69:a3:2b:6f:77:bb:cc:8c:7d:53:89:4e:96:23:2c:47: fb:e9:0b:57:b4:63:93:e8:cd:bd:95:44:0b:a8:da:90:fb:05: 2a:17:34:7a:c1:55:5c:3b:98:5f:4b:7e:bd:46:9c:48:00:c9: 40:cb:68:c5:c5:e6:35:fa:48:61:55:dc:bb:8f:71:9f:e9:10: 46:5e:5f:93:2e:0a:97:69:ed:27:79:47:30:3b:2c:46:8b:4f: d3:6d:ae:d3:ad:b1:b8:20:6d:fa:97:ee:ce:2c:a6:8d:a4:86: ab:ea:5f:03:00:9c:c7:8f:a1:f8:ba:ec:1b:21:33:21:85:a6: d4:4e:74:80:0a:be:f6:1d:b8:b9:a5:74:3c:64:b0:62:ac:13: 2c:21:35:ba:b4:44:62:c4:4a:00:66:a9:cb:e4:7d:c8:84:fe: 5f:c7:63:76:28:82:1d:c4:e1:f1:94:bf:c6:75:7f:a3:62:e8: 7c:d0:86:1a:00:90:eb:a4:51:01:8b:40:eb:94:42:a7:c6:9a: d8:a5:5f:34:6f:0f:b2:e2:75:9c:84:af:d8:a2:73:99:72:e0: ae:30:07:11:4f:5b:3d:7a:ec:b8:a3:c9:3f:e9:7e:a4:dd:ff: f3:44:2b:97 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjQwMTE5MDUwNTU4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWFhMDMzNi02Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yr1CSweTuly36GFCDA81VqA8VV6Cjxi2hKH+qh4XVDMf8pbhzV5AP3NkMTw EP8vINM1WEpzAAbgGTtLpXTg39eJuGKaQp2Cu1r4BGaWYUZ197AeRXu0+/AJncW7 rY0dveavKQOpiRgH93ygdZ2aBHqDqixAHvgopDPjInrlvF5Cn0/2O4o4FfHNDop5 AlsVV2z4UZlX2XH2nzUvrW26EsSYOmgTGSm1GfrD6qr1vYux+lSc6pa2NjenKORp E9bewTFqPK585XIrTOh5mUHcZgXsRmOrgyG6rDrvMp82rg9gSycuYPzPM70W1fVa E1pGaEzgw2UpNRbqHJjFrBRfvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNmnv1nR OxX0ff36e5nuczRKxSQ/MB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThBNTIvRkI3RTRCREU3MEI1MTFFRDkzRjBERDE2QzRGOUFFMDIvRTVGQzQ1ODQ5 NjVFMTFFRUJFM0UwQzU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnKuUwDQYJKoZIhvcNAQELBQADggEBAAiYLUZ0IVLu+kaJ QfBm0p+jfOvnaaMrb3e7zIx9U4lOliMsR/vpC1e0Y5Pozb2VRAuo2pD7BSoXNHrB VVw7mF9Lfr1GnEgAyUDLaMXF5jX6SGFV3LuPcZ/pEEZeX5MuCpdp7Sd5RzA7LEaL T9NtrtOtsbggbfqX7s4spo2khqvqXwMAnMePofi67BshMyGFptROdIAKvvYduLml dDxksGKsEywhNbq0RGLESgBmqcvkfciE/l/HY3Yogh3E4fGUv8Z1f6Ni6HzQhhoA kOukUQGLQOuUQqfGmtilXzRvD7LidZyEr9iic5ly4K4wBxFPWz167LijyT/pfqTd //NEK5c= -----END CERTIFICATE-----Generated at Fri May 17 06:18:09 2024 by rpki-client on console-fra.rpki-client.org