$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa File: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (raw, json) Hash identifier: clTuA98QXCvhi5mCW68DYLjtbFWaH5Tnj/x9STwbSAY= Subject key identifier: 2B:11:42:98:33:86:B2:E1:ED:3B:85:8D:6D:4F:9D:AF:8B:4E:61:43 Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Certificate serial: 3D Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa Signing time: Wed 07 Aug 2024 07:27:56 +0000 ROA not before: Wed 07 Aug 2024 07:27:56 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 135526 IP address blocks: 103.80.69.0/24 maxlen: 24 103.221.245.0/24 maxlen: 24 2001:df2:7e01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Validity Not Before: Aug 7 07:27:56 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b321fb-a6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:f2:97:85:b0:cb:42:99:be:80:3c:a9:b4: 8f:74:bb:11:5e:33:8b:df:9e:a4:f7:81:11:53:0c: 41:89:15:f4:c8:e5:29:f5:ad:49:a2:42:7c:21:a7: 2c:a8:c8:92:1c:7c:9b:69:98:ff:12:fd:5c:26:d5: 96:db:0f:bb:82:5c:d0:8a:18:83:82:92:f4:ec:b3: ff:63:ad:fe:01:e8:44:79:44:ae:b9:74:57:75:bf: b2:72:54:b6:15:da:9e:4e:63:df:d4:ff:7b:ff:bc: ec:0f:ea:a8:04:62:88:50:b0:95:6d:d7:6c:5a:36: 3a:77:2b:51:d2:35:0b:b8:1e:5b:a1:44:9d:ff:21: df:d3:23:a2:ce:d1:16:ee:df:3c:e7:9f:18:5b:98: 95:1f:f1:90:13:a8:a6:6f:31:2f:2c:e0:52:8d:72: 58:f9:5b:11:cd:78:9d:21:48:79:0e:73:04:0a:b3: 8b:08:b7:00:5d:88:e1:73:cc:06:e8:19:c3:8c:20: 3d:47:55:84:f5:27:09:4e:75:71:99:72:f7:b5:59: 6a:8f:36:d6:c2:a9:92:c0:4b:d9:96:1f:32:e5:4e: 25:6d:da:1b:4c:68:a9:de:92:95:31:bb:5a:8e:00: 11:8a:7b:59:6c:74:e9:28:cb:a8:b9:ce:ce:b0:a7: ff:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:11:42:98:33:86:B2:E1:ED:3B:85:8D:6D:4F:9D:AF:8B:4E:61:43 X509v3 Authority Key Identifier: keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.80.69.0/24 103.221.245.0/24 IPv6: 2001:df2:7e01::/48 Signature Algorithm: sha256WithRSAEncryption 8a:ef:b2:ef:48:08:54:59:0f:b9:95:cc:3e:65:f2:ff:6e:80: 3f:5b:c6:7a:c2:f7:1d:ab:9f:06:8f:d9:37:b0:0d:a7:63:74: 7d:f6:6e:6f:c1:73:8e:7d:46:39:81:25:3a:da:2f:dd:77:23: 5d:97:9b:0e:bd:9d:19:ba:51:33:3c:8a:3a:8d:d3:89:c3:50: 02:dd:87:28:d0:2e:a0:68:b5:64:ee:bb:98:ba:b3:32:17:13: b0:bb:45:5c:f9:a9:77:83:21:4b:e3:05:2a:63:50:5a:b9:0d: 0d:d0:11:6c:0b:0b:bf:b8:0b:35:33:f3:20:bb:a9:2c:45:8c: 84:5c:dd:52:2a:59:b9:80:41:c9:e2:8b:c7:84:99:74:45:4f: ca:39:90:fb:55:21:19:3b:61:05:d4:bb:17:fc:db:1e:8e:a3: b9:81:7e:21:af:61:d4:de:d6:f5:98:55:4f:ec:84:92:98:45: 1d:7b:0c:8c:7a:7a:d8:0a:58:44:ed:aa:e7:da:a7:33:e0:11: 1f:e6:d2:02:de:57:79:93:cb:4e:b5:80:2d:19:1d:09:c0:23: c0:43:65:07:84:05:99:6a:11:1a:f6:0a:35:f5:32:ab:05:6a: 7a:46:6e:8c:88:65:3b:e2:7d:dd:4c:81:0e:46:a5:3d:2c:37: 49:69:79:ed -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTFCNTExMC8GA1UEBRMoRUVDMEU5OTk4N0RDMUVBOUQ0MDJGODg0RkNEQTk3RTAz MTQ1QTRBMDAeFw0yNDA4MDcwNzI3NTZaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YjMyMWZiLWE2ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+u/KXhbDLQpm+gDyptI90uxFeM4vfnqT3gRFTDEGJFfTI5Sn1rUmiQnwhpyyo yJIcfJtpmP8S/Vwm1ZbbD7uCXNCKGIOCkvTss/9jrf4B6ER5RK65dFd1v7JyVLYV 2p5OY9/U/3v/vOwP6qgEYohQsJVt12xaNjp3K1HSNQu4HluhRJ3/Id/TI6LO0Rbu 3zznnxhbmJUf8ZATqKZvMS8s4FKNclj5WxHNeJ0hSHkOcwQKs4sItwBdiOFzzAbo GcOMID1HVYT1JwlOdXGZcve1WWqPNtbCqZLAS9mWHzLlTiVt2htMaKnekpUxu1qO ABGKe1lsdOkoy6i5zs6wp/9TAgMBAAGjggKsMIICqDAdBgNVHQ4EFgQUKxFCmDOG suHtO4WNbU+dr4tOYUMwHwYDVR0jBBgwFoAU7sDpmYfcHqnUAviE/NqX4DFFpKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFMUI1LzhCNDA1RTVFMDAz QjExRUY5MTFCOEY2OEM0RjlBRTAyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN3NEcG1ZZmNIcW5VQXZpRV9OcVg0REZGcEtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTFCNS84QjQwNUU1RTAwM0IxMUVGOTExQjhGNjhDNEY5QUUwMi9EMkEyRkY0QTAw M0IxMUVGQTY2NThEMERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA2BggrBgEFBQcBBwEB/wQn MCUwEgQCAAEwDAMEAGdQRQMEAGfd9TAPBAIAAjAJAwcAIAEN8n4BMA0GCSqGSIb3 DQEBCwUAA4IBAQCK77LvSAhUWQ+5lcw+ZfL/boA/W8Z6wvcdq58Gj9k3sA2nY3R9 9m5vwXOOfUY5gSU62i/ddyNdl5sOvZ0ZulEzPIo6jdOJw1AC3Yco0C6gaLVk7ruY urMyFxOwu0Vc+al3gyFL4wUqY1BauQ0N0BFsCwu/uAs1M/Mgu6ksRYyEXN1SKlm5 gEHJ4ovHhJl0RU/KOZD7VSEZO2EF1LsX/NsejqO5gX4hr2HU3tb1mFVP7ISSmEUd ewyMenrYClhE7arn2qcz4BEf5tIC3ld5k8tOtYAtGR0JwCPAQ2UHhAWZahEa9go1 9TKrBWp6Rm6MiGU74n3dTIEORqU9LDdJaXnt -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:20 2024 by rpki-client on console-ams.rpki-client.org