$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E2E21364C4F811EAB8D31113C4F9AE02.roa File: E2E21364C4F811EAB8D31113C4F9AE02.roa (raw, json) Hash identifier: KT6K45U/vV1zQkhhfiaxr9a9XeTKLIwG0eEDcyR3ERI= Subject key identifier: 4A:2B:15:2D:85:F6:3F:E4:BD:39:2B:71:1A:FE:08:B8:0E:4C:46:78 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 082F Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E2E21364C4F811EAB8D31113C4F9AE02.roa Signing time: Tue 20 Aug 2024 21:29:33 +0000 ROA not before: Tue 20 Aug 2024 21:29:33 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 138538 IP address blocks: 103.152.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2095 (0x82f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Aug 20 21:29:33 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66c50abd-5b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:9a:f1:f2:a1:0b:0f:2c:e6:c3:d5:fb:0d: 37:8a:7f:f3:b7:ba:0f:94:1f:89:70:48:ec:02:e0: 6d:24:36:1a:95:4c:37:59:98:b1:ba:39:8a:da:89: 05:b3:84:de:f9:96:cb:e2:93:0d:5b:9c:2b:fd:f0: d6:4d:d2:3f:3f:27:7a:c8:8e:c0:b9:35:3f:9b:0c: e4:02:7b:15:cc:e7:e2:76:c2:45:5e:4d:15:5a:26: 78:34:76:1b:fb:dd:5e:da:9a:6f:ab:72:97:fd:fe: 55:0d:42:08:f3:c0:58:08:e0:3b:7f:65:04:eb:05: 7c:ed:fd:b9:e1:70:b3:2a:a4:4d:40:14:07:08:bf: cb:15:b5:1a:dc:1b:f9:4a:87:47:0b:5e:c8:d9:d1: 2d:d7:16:a1:d1:0d:7a:eb:52:f6:74:f4:b8:63:50: 93:d2:89:f2:f3:14:fc:e9:06:17:d3:a1:d0:bc:b2: da:53:f9:12:b4:a1:66:61:ee:e4:87:f2:7d:2d:31: e8:74:c3:90:17:9a:ed:27:d6:cd:19:09:87:0c:1d: 7e:d3:56:91:d2:8e:7d:a5:d7:10:a4:59:b6:03:cc: 76:7d:68:31:4d:39:21:20:f7:b3:3c:5e:22:3b:57: 11:25:f1:3b:05:f2:8a:80:a2:74:4c:7c:07:e1:fe: f0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2B:15:2D:85:F6:3F:E4:BD:39:2B:71:1A:FE:08:B8:0E:4C:46:78 X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E2E21364C4F811EAB8D31113C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.170.0/23 Signature Algorithm: sha256WithRSAEncryption a5:10:d8:d3:e5:b9:0f:a6:b8:09:f5:74:e6:b3:a3:87:f5:1c: 95:21:f7:62:c3:75:bb:ae:83:81:c9:7a:14:cd:eb:20:6f:47: ce:c2:c2:d4:ac:16:1f:d1:db:b0:40:4d:a7:4a:6f:fd:e7:f7: bd:e2:76:bc:bb:99:ef:88:2e:5a:f0:0b:a2:2c:3b:d2:b3:2b: a4:c9:a2:cf:c1:3a:e7:4c:2a:96:89:1d:74:af:6b:ac:95:be: ae:8a:ac:d1:26:64:f7:88:25:db:50:11:1f:ca:94:35:10:38: 82:8e:86:23:58:8e:f6:b4:85:00:a4:db:c7:2a:52:6f:5f:55: 63:a6:0f:fc:6b:65:5f:9a:f5:b5:07:f1:2c:a6:40:b6:d9:dc: aa:e5:09:4c:4b:83:0b:38:a7:18:31:da:e5:4b:d5:4d:d1:9f: b2:a3:ea:06:41:8b:66:a0:d3:39:95:85:5e:00:81:28:08:9a: ba:34:60:29:3e:b0:93:17:35:98:f6:bb:10:8a:6a:70:8d:42: f8:f6:e5:80:da:69:65:d3:03:26:5d:09:de:2b:96:ff:82:16: b8:9f:92:b3:c5:55:e7:94:34:77:9c:d3:bc:b8:db:52:22:81: ca:7e:1b:ff:01:56:8e:94:63:76:fe:21:8f:88:8b:27:f2:8d: ad:a3:a0:d7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjQwODIwMjEyOTMzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM1MGFiZC01YjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMaa8fKhCw8s5sPV+w03in/zt7oPlB+JcEjsAuBtJDYalUw3WZixujmK2okF s4Te+ZbL4pMNW5wr/fDWTdI/Pyd6yI7AuTU/mwzkAnsVzOfidsJFXk0VWiZ4NHYb +91e2ppvq3KX/f5VDUII88BYCOA7f2UE6wV87f254XCzKqRNQBQHCL/LFbUa3Bv5 SodHC17I2dEt1xah0Q1661L2dPS4Y1CT0ony8xT86QYX06HQvLLaU/kStKFmYe7k h/J9LTHodMOQF5rtJ9bNGQmHDB1+01aR0o59pdcQpFm2A8x2fWgxTTkhIPezPF4i O1cRJfE7BfKKgKJ0THwH4f7wTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEorFS2F 9j/kvTkrcRr+CLgOTEZ4MB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUJGRDkvNEFFODA0MUVCOUQ3MTFFQTlDRjUxRTVGQzRGOUFFMDIvRTJFMjEzNjRD NEY4MTFFQUI4RDMxMTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmKowDQYJKoZIhvcNAQELBQADggEBAKUQ2NPluQ+muAn1 dOazo4f1HJUh92LDdbuug4HJehTN6yBvR87CwtSsFh/R27BATadKb/3n973idry7 me+ILlrwC6IsO9KzK6TJos/BOudMKpaJHXSva6yVvq6KrNEmZPeIJdtQER/KlDUQ OIKOhiNYjva0hQCk28cqUm9fVWOmD/xrZV+a9bUH8SymQLbZ3KrlCUxLgws4pxgx 2uVL1U3Rn7Kj6gZBi2ag0zmVhV4AgSgImro0YCk+sJMXNZj2uxCKanCNQvj25YDa aWXTAyZdCd4rlv+CFrifkrPFVeeUNHec07y421Iigcp+G/8BVo6UY3b+IY+Iiyfy ja2joNc= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org