$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/CEC4C3FC903B11ED96D73F40C4F9AE02.roa File: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (raw, json) Hash identifier: 4j1+qtyMWN0dqgm2cyGCSaGaYzA8FF/mpgBxorKl3nQ= Subject key identifier: 39:D6:C4:C4:C5:30:A1:A0:F2:0D:25:1E:1C:F0:71:27:46:D4:25:FC Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Certificate serial: 0B1D Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/CEC4C3FC903B11ED96D73F40C4F9AE02.roa Signing time: Thu 28 Mar 2024 19:58:35 +0000 ROA not before: Thu 28 Mar 2024 19:58:35 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 59238 IP address blocks: 103.135.108.0/22 maxlen: 24 2404:7bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2845 (0xb1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Validity Not Before: Mar 28 19:58:35 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6605cbeb-3203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:ba:84:27:e4:22:e6:67:a7:58:7a:c5:8d: e9:d3:36:b6:87:2b:49:e5:81:b4:dc:fa:9c:ef:58: 13:5c:99:9b:86:07:45:cc:8f:40:4a:2f:e2:4b:a8: ba:1f:5d:93:7f:25:2e:a6:09:b7:64:13:c9:02:24: 75:e7:9a:78:b6:48:3c:b8:6f:6d:13:81:96:e0:0d: 22:50:be:1a:94:ba:5a:1a:e9:2b:24:f6:3f:7a:8f: 8b:10:c4:f2:8c:f7:97:6f:2d:c6:85:4d:e8:07:a7: 8e:03:b6:5f:3d:38:a6:e1:b8:61:c1:16:ba:31:60: fb:25:00:89:c7:82:7d:f5:fb:43:72:90:62:07:b2: aa:03:c0:7c:c5:f0:e0:ba:6e:8c:49:fc:0c:f8:73: 71:f7:ac:77:c3:d7:43:63:06:ea:f7:ba:fc:e3:64: 32:96:4e:cc:fe:30:35:21:da:eb:4c:46:31:12:7a: e8:6d:5d:60:88:75:b0:de:86:6c:4c:62:03:d4:27: 72:e0:ca:85:95:54:c4:26:c6:d7:a2:72:86:b2:00: df:08:e5:26:57:6c:e5:69:83:bc:9b:2e:7d:2f:d4: 89:de:74:eb:15:3c:c6:36:a1:5b:73:bb:fd:06:40: 32:fe:62:6b:2d:14:4a:83:b8:ce:03:37:10:c3:b0: ad:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D6:C4:C4:C5:30:A1:A0:F2:0D:25:1E:1C:F0:71:27:46:D4:25:FC X509v3 Authority Key Identifier: keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/CEC4C3FC903B11ED96D73F40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.108.0/22 IPv6: 2404:7bc0::/32 Signature Algorithm: sha256WithRSAEncryption 8f:c4:e3:ba:c8:ca:5d:5f:fe:2f:a7:96:97:dd:d6:16:a4:f5: 34:3f:f7:f0:3c:ec:af:03:54:f7:64:42:11:62:72:ae:36:9a: c5:52:5a:13:2a:2c:ac:96:1f:dd:4c:39:46:de:49:b3:49:76: 7e:ef:3b:83:d2:05:62:b2:a8:ad:c3:11:96:7f:e4:01:b3:a7: 5b:05:32:e9:52:64:58:83:dc:3c:03:e9:a6:1a:64:8b:ad:23: 59:61:99:6f:cf:a3:16:cb:29:fe:ae:69:09:3c:83:03:a3:20: 48:63:b4:dc:20:58:10:fb:6b:79:d4:4f:46:6d:b6:b1:a4:20: 49:e3:00:65:52:a2:96:98:a7:df:de:98:69:80:e7:11:f4:6d: b0:25:c7:eb:84:1d:ae:54:56:bb:d0:23:5b:60:d7:aa:f9:d1: 71:e4:cb:10:c7:c8:b1:c6:60:3f:98:04:2a:b4:cc:1b:ed:20: 84:7d:a4:38:ff:32:18:e0:fd:06:af:a3:04:d3:54:a9:e5:fd: ec:4e:ca:38:4d:68:09:6c:15:ca:65:30:6f:ba:e5:13:9a:b2: 96:8c:b4:2e:39:7d:25:e3:d4:a7:e0:2e:c1:cf:e1:d2:20:df: 3b:a8:8b:ab:48:41:50:04:c3:89:9f:a9:31:b9:9f:24:10:ae: e8:16:55:e3 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5ODQxMTAvBgNVBAUTKDhBQkEzRTQ3RDUxQzVEMkM5RUYzNDNFNUFGNDExMDFF NDNDNThBODgwHhcNMjQwMzI4MTk1ODM1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjA1Y2JlYi0zMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qi6hCfkIuZnp1h6xY3p0za2hytJ5YG03Pqc71gTXJmbhgdFzI9ASi/iS6i6 H12TfyUupgm3ZBPJAiR155p4tkg8uG9tE4GW4A0iUL4alLpaGukrJPY/eo+LEMTy jPeXby3GhU3oB6eOA7ZfPTim4bhhwRa6MWD7JQCJx4J99ftDcpBiB7KqA8B8xfDg um6MSfwM+HNx96x3w9dDYwbq97r842Qylk7M/jA1IdrrTEYxEnrobV1giHWw3oZs TGID1Cdy4MqFlVTEJsbXonKGsgDfCOUmV2zlaYO8my59L9SJ3nTrFTzGNqFbc7v9 BkAy/mJrLRRKg7jOAzcQw7Ct6wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDnWxMTF MKGg8g0lHhzwcSdG1CX8MB8GA1UdIwQYMBaAFIq6PkfVHF0snvND5a9BEB5DxYqI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk4NC8yODc0NUU0QzE1 RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hTeWU4MFBscjBFUUhrUEZp b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lyby1SOVVjWFN5ZTgwUGxyMEVRSGtQRmlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUU5ODQvMjg3NDVFNEMxNUVFMTFFQUEyRDlFMDZFQzRGOUFFMDIvQ0VDNEMzRkM5 MDNCMTFFRDk2RDczRjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnh2wwDQQCAAIwBwMFACQEe8AwDQYJKoZIhvcNAQELBQAD ggEBAI/E47rIyl1f/i+nlpfd1hak9TQ/9/A87K8DVPdkQhFicq42msVSWhMqLKyW H91MOUbeSbNJdn7vO4PSBWKyqK3DEZZ/5AGzp1sFMulSZFiD3DwD6aYaZIutI1lh mW/PoxbLKf6uaQk8gwOjIEhjtNwgWBD7a3nUT0ZttrGkIEnjAGVSopaYp9/emGmA 5xH0bbAlx+uEHa5UVrvQI1tg16r50XHkyxDHyLHGYD+YBCq0zBvtIIR9pDj/Mhjg /QavowTTVKnl/exOyjhNaAlsFcplMG+65ROaspaMtC45fSXj1KfgLsHP4dIg3zuo i6tIQVAEw4mfqTG5nyQQrugWVeM= -----END CERTIFICATE-----Generated at Sat May 18 20:48:20 2024 by rpki-client on console-fra.rpki-client.org