$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa File: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (raw, json) Hash identifier: 5O8DYgHc79V6KcmKNVHeX4W4dMmoUEhQnrmExgSqPEk= Subject key identifier: BC:A5:CE:39:85:10:8D:60:DF:98:7F:48:AB:20:73:B6:56:09:CA:06 Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Certificate serial: 0F0F Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa Signing time: Mon 12 Feb 2024 18:36:00 +0000 ROA not before: Mon 12 Feb 2024 18:36:00 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 138584 IP address blocks: 103.133.200.0/22 maxlen: 22 103.133.200.0/24 maxlen: 24 103.133.201.0/24 maxlen: 24 103.133.202.0/24 maxlen: 24 103.133.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3855 (0xf0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Validity Not Before: Feb 12 18:36:00 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65ca6510-165c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:fe:38:fd:5e:98:a1:c5:db:08:39:59:96: ef:f7:ac:b6:e9:ac:ca:7c:ac:1e:c4:ec:b7:00:db: b5:fe:8e:1e:ae:50:14:38:bf:5b:e8:82:12:dd:7d: 6b:59:69:d4:d0:0d:fd:9b:2a:df:2c:0b:35:b8:fa: dd:40:d1:87:cb:90:51:ee:3c:17:11:33:03:d4:2a: 1b:4f:66:2e:13:a8:b8:ad:b0:1f:8b:fd:1a:1c:d4: c0:ce:19:72:05:ae:93:66:9e:3e:ff:b8:25:03:65: ef:96:08:bf:43:13:0a:a3:91:62:66:63:e4:80:a6: 19:23:0e:bc:ba:e9:a1:ef:a8:78:35:35:e3:69:50: d6:ca:95:a0:87:39:4e:cb:73:c5:85:25:53:14:40: 71:fb:d9:2e:fb:b3:dc:7d:1c:35:7e:fd:4b:c8:7d: 6b:18:30:d1:9a:b1:e9:d1:9e:58:1b:58:cd:d4:e0: 0c:a1:f9:2b:96:32:02:74:9c:9c:97:19:21:ce:7b: cb:ba:20:f2:d1:eb:16:c7:0b:48:90:ad:0d:df:bc: d3:1d:a1:32:ba:a0:f4:28:f2:ac:6b:2a:2a:26:14: 90:bf:60:2c:82:e9:b6:af:d1:dd:1a:dc:db:ac:39: be:28:f5:40:0f:b5:1a:ac:88:d5:4a:38:b3:79:8a: 5c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A5:CE:39:85:10:8D:60:DF:98:7F:48:AB:20:73:B6:56:09:CA:06 X509v3 Authority Key Identifier: keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.200.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:2b:cb:1e:94:64:11:e3:c3:fc:a6:ad:a0:02:53:d9:8b:08: 75:26:5b:23:24:ac:29:a3:6f:4e:28:40:18:57:3f:57:0e:d9: e0:b9:8e:9b:b3:e7:7e:bc:8d:52:74:b4:07:ee:2f:8f:d9:04: 12:8c:3e:89:85:14:4b:90:4a:90:d7:30:af:2f:c9:6c:85:1d: c8:15:f3:0f:a4:24:07:91:5f:17:d6:68:6c:03:7b:1c:42:ee: f4:c2:98:12:f5:c3:eb:4c:ab:66:fe:1c:9c:1c:4e:f3:fa:6b: ab:5b:f6:ff:00:7d:42:96:00:7d:de:16:c6:a8:df:19:57:41: e2:6e:e4:6a:47:78:fc:5b:ec:4f:db:f5:13:f0:3e:bb:32:cc: 05:a6:1a:28:03:e0:08:7b:de:e4:3d:cc:ef:f3:9a:70:e3:83: ad:94:7f:81:aa:40:a9:4d:f1:b8:cf:53:9f:99:5b:45:73:49: 60:36:66:ed:04:23:29:18:fb:ad:7e:4f:3a:24:71:22:87:12: 4a:5f:fc:3a:5d:c3:f5:47:c5:98:90:13:a7:9b:2f:1a:ba:2e: 76:8c:6e:cf:bf:25:b4:74:ab:15:d7:05:5c:87:4f:34:f1:9a: bd:bb:d3:6b:06:ee:97:ab:d2:29:26:67:db:56:77:c2:e8:af: dd:bd:5a:df -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDMjIxMTAvBgNVBAUTKDI4RjVFNjVENzUwNTk2MURDNTUwQTk0OTI0REJDRUZC QjY3Njk0QkQwHhcNMjQwMjEyMTgzNjAwWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNhNjUxMC0xNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1J7+OP1emKHF2wg5WZbv96y26azKfKwexOy3ANu1/o4erlAUOL9b6IIS3X1r WWnU0A39myrfLAs1uPrdQNGHy5BR7jwXETMD1CobT2YuE6i4rbAfi/0aHNTAzhly Ba6TZp4+/7glA2Xvlgi/QxMKo5FiZmPkgKYZIw68uumh76h4NTXjaVDWypWghzlO y3PFhSVTFEBx+9ku+7PcfRw1fv1LyH1rGDDRmrHp0Z5YG1jN1OAMofkrljICdJyc lxkhznvLuiDy0esWxwtIkK0N37zTHaEyuqD0KPKsayoqJhSQv2Asgum2r9HdGtzb rDm+KPVAD7UarIjVSjizeYpcaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLylzjmF EI1g35h/SKsgc7ZWCcoGMB8GA1UdIwQYMBaAFCj15l11BZYdxVCpSSTbzvu2dpS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0MyMi82OTA2QzZGQTRD NzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxoM0ZVS2xKSk52Ty03WjJs TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQWG1YWFVGbGgzRlVLbEpKTnZPLTdaMmxMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNDMjIvNjkwNkM2RkE0Qzc0MTFFOUI3QzRCQjU1QzRGOUFFMDIvRUY2NkRERTRF NDZBMTFFQjk1NTJEMzFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnhcgwDQYJKoZIhvcNAQELBQADggEBAJ8ryx6UZBHjw/ym raACU9mLCHUmWyMkrCmjb04oQBhXP1cO2eC5jpuz5368jVJ0tAfuL4/ZBBKMPomF FEuQSpDXMK8vyWyFHcgV8w+kJAeRXxfWaGwDexxC7vTCmBL1w+tMq2b+HJwcTvP6 a6tb9v8AfUKWAH3eFsao3xlXQeJu5GpHePxb7E/b9RPwPrsyzAWmGigD4Ah73uQ9 zO/zmnDjg62Uf4GqQKlN8bjPU5+ZW0VzSWA2Zu0EIykY+61+TzokcSKHEkpf/Dpd w/VHxZiQE6ebLxq6LnaMbs+/JbR0qxXXBVyHTzTxmr2702sG7per0ikmZ9tWd8Lo r929Wt8= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org