$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/5B5ECC52474711ECA7B2426CC4F9AE02.roa File: 5B5ECC52474711ECA7B2426CC4F9AE02.roa (raw, json) Hash identifier: dC278Jasv16ABeBncckRYaabj45oiL9uCdUDcCgUOqw= Subject key identifier: 22:40:84:21:69:CC:A8:79:0C:E3:BF:8A:44:08:E7:A0:23:0A:8A:5C Certificate issuer: /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Certificate serial: 3420 Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/5B5ECC52474711ECA7B2426CC4F9AE02.roa Signing time: Tue 18 Jun 2024 15:31:12 +0000 ROA not before: Tue 18 Jun 2024 15:31:12 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 38077 IP address blocks: 103.112.36.0/22 maxlen: 24 180.189.160.0/20 maxlen: 24 2405:1f00::/32 maxlen: 33 2405:1f00::/36 maxlen: 36 2405:1f00:1000::/36 maxlen: 36 2405:1f00:2000::/36 maxlen: 36 2405:1f00:3000::/36 maxlen: 36 2405:1f00:4000::/36 maxlen: 36 2405:1f00:5000::/36 maxlen: 36 2405:1f00:6000::/36 maxlen: 36 2405:1f00:7000::/36 maxlen: 36 2405:1f00:8000::/36 maxlen: 36 2405:1f00:9000::/36 maxlen: 36 2405:1f00:a000::/36 maxlen: 36 2405:1f00:b000::/36 maxlen: 36 2405:1f00:c000::/36 maxlen: 36 2405:1f00:d000::/36 maxlen: 36 2405:1f00:e000::/36 maxlen: 36 2405:1f00:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13344 (0x3420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Validity Not Before: Jun 18 15:31:12 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6671a840-5623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f9:ec:cc:a3:3e:08:77:e3:b6:ed:c9:e6:79: 7e:c2:e2:91:8b:78:79:e6:9c:e5:81:cd:3e:ca:1d: 93:20:6f:5f:37:30:1e:4d:06:98:94:1b:0f:cc:9a: 8c:eb:20:df:75:1d:fa:af:54:57:d0:10:2b:f7:28: f2:4b:11:70:bb:6a:52:21:06:46:01:d2:d1:02:ef: 87:5a:79:c9:c4:b3:b4:f9:25:97:87:f5:8c:c7:bd: 8d:33:70:5b:cd:52:5e:0c:9a:6d:27:81:4c:e7:e1: 46:43:87:7f:d3:3f:43:f1:0a:18:bc:d0:b3:f4:00: b3:a5:66:7c:5a:ae:9f:3c:be:38:3b:b6:f6:ae:e9: 0d:9d:97:54:30:dd:43:ae:88:05:47:83:1d:77:ac: 25:c2:e8:cf:0d:7d:29:d9:ff:cb:51:cc:5c:01:61: 5c:8b:07:23:5a:19:bf:52:70:a4:45:15:de:96:b0: 96:09:42:d1:7f:a9:25:dc:5e:9a:dc:18:c3:22:ac: 88:b1:d4:8b:87:38:2b:ef:59:72:76:86:a7:4a:3c: ab:0e:3a:71:30:a1:57:92:6a:6e:37:48:73:c9:12: 0a:1f:13:94:07:6d:43:7b:bf:66:cf:3a:52:99:ab: 47:4a:43:34:fd:e4:60:5d:c5:54:e6:34:ac:0b:2c: 66:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:40:84:21:69:CC:A8:79:0C:E3:BF:8A:44:08:E7:A0:23:0A:8A:5C X509v3 Authority Key Identifier: keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/5B5ECC52474711ECA7B2426CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.36.0/22 180.189.160.0/20 IPv6: 2405:1f00::/32 Signature Algorithm: sha256WithRSAEncryption 73:52:86:6d:6d:82:ef:29:9e:39:03:73:f2:97:d8:95:8d:e6: 1a:a6:88:ed:ae:b1:ce:2f:35:c6:be:5e:16:4b:96:6e:5e:f5: 3d:8f:6a:50:c6:e8:36:c4:c5:1d:e2:74:89:80:81:fd:49:1a: 1f:4a:f8:d4:45:7d:07:90:ef:4b:f5:32:8f:f2:68:a9:d1:02: 1a:f9:af:b0:15:2d:73:c5:06:41:bc:0c:55:d9:6a:38:53:6c: c4:34:cf:fc:13:31:43:ef:10:78:96:cc:96:9b:2a:94:51:08: 26:5a:bd:05:f9:05:09:49:2f:b6:57:9d:91:63:4b:5c:e4:4d: c8:a0:06:a1:bb:9e:76:b1:2d:02:44:a7:2f:65:32:c1:95:14: 06:2f:5b:64:94:79:fd:35:28:7b:e8:b0:16:70:f8:cb:9b:c3: 56:a3:33:31:86:4f:23:f9:ae:db:84:46:b9:60:eb:77:60:e0: 0f:b7:23:a1:aa:6d:bb:50:0a:49:70:4a:c2:47:9e:2e:7a:99: 64:d9:cc:6e:53:53:70:f8:9c:98:5b:13:6e:e1:8d:e5:0d:9e: 59:7b:04:e7:7f:b6:f3:04:f3:0c:ae:50:62:4a:33:63:fc:73: 04:5c:6f:ad:79:c7:0f:77:dc:09:7d:0d:cf:21:0d:0e:87:30: ee:91:1c:c5 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICNCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThEMjIxMTAvBgNVBAUTKEE2ODNGNjcyNEMwMkExM0YyRDM5Q0YyRjIxNTAwQkUw MDM4MERERTMwHhcNMjQwNjE4MTUzMTEyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjcxYTg0MC01NjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/nszKM+CHfjtu3J5nl+wuKRi3h55pzlgc0+yh2TIG9fNzAeTQaYlBsPzJqM 6yDfdR36r1RX0BAr9yjySxFwu2pSIQZGAdLRAu+HWnnJxLO0+SWXh/WMx72NM3Bb zVJeDJptJ4FM5+FGQ4d/0z9D8QoYvNCz9ACzpWZ8Wq6fPL44O7b2rukNnZdUMN1D rogFR4Mdd6wlwujPDX0p2f/LUcxcAWFciwcjWhm/UnCkRRXelrCWCULRf6kl3F6a 3BjDIqyIsdSLhzgr71lydoanSjyrDjpxMKFXkmpuN0hzyRIKHxOUB21De79mzzpS matHSkM0/eRgXcVU5jSsCyxmSQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCJAhCFp zKh5DOO/ikQI56AjCopcMB8GA1UdIwQYMBaAFKaD9nJMAqE/LTnPLyFQC+ADgN3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEQyMi8yNTI2OTc5ODFE OTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29UOHRPYzh2SVZBTDRBT0Ez ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvUDJja3dDb1Q4dE9jOHZJVkFMNEFPQTNlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThEMjIvMjUyNjk3OTgxRDkyMTFFMkI2MThDQUY0MDhCMDJDRDIvNUI1RUNDNTI0 NzQ3MTFFQ0E3QjI0MjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJncCQDBAS0vaAwDQQCAAIwBwMFACQFHwAwDQYJKoZIhvcN AQELBQADggEBAHNShm1tgu8pnjkDc/KX2JWN5hqmiO2usc4vNca+XhZLlm5e9T2P alDG6DbExR3idImAgf1JGh9K+NRFfQeQ70v1Mo/yaKnRAhr5r7AVLXPFBkG8DFXZ ajhTbMQ0z/wTMUPvEHiWzJabKpRRCCZavQX5BQlJL7ZXnZFjS1zkTcigBqG7nnax LQJEpy9lMsGVFAYvW2SUef01KHvosBZw+Mubw1ajMzGGTyP5rtuERrlg63dg4A+3 I6GqbbtQCklwSsJHni56mWTZzG5TU3D4nJhbE27hjeUNnll7BOd/tvME8wyuUGJK M2P8cwRcb615xw933Al9Dc8hDQ6HMO6RHMU= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org