$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/E328AA42736E11ECAC882873C4F9AE02.roa File: E328AA42736E11ECAC882873C4F9AE02.roa (raw, json) Hash identifier: B8T6qteReQBChdEYY8jZTYWuVxLCQ23sfPctCOIdxxA= Subject key identifier: 0E:50:AE:24:A1:44:0E:AB:D7:46:22:9B:24:88:8B:9B:5D:70:3C:07 Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 02C2 Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/E328AA42736E11ECAC882873C4F9AE02.roa Signing time: Sat 02 Sep 2023 17:04:07 +0000 ROA not before: Sat 02 Sep 2023 17:04:07 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 132376 IP address blocks: 103.15.136.0/24 maxlen: 24 103.15.137.0/24 maxlen: 24 103.15.138.0/24 maxlen: 24 103.15.139.0/25 maxlen: 25 2001:df1:5900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 17:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: Sep 2 17:04:07 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64f36b07-a1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a9:a9:34:b7:14:57:bd:2f:f3:cf:9e:4c:c6: 51:fd:69:ef:c0:70:9e:98:6f:f4:9a:ce:4d:c2:11: 56:5a:5f:17:00:58:8d:ce:2e:8d:e0:82:d7:6d:8e: 95:0b:61:8e:72:c6:e6:6f:06:37:be:c3:6c:8f:18: be:6f:d1:a8:13:fc:0e:18:f5:a3:25:dd:b4:66:54: 57:d6:2e:3c:d4:fa:5f:d0:15:d7:69:d6:7d:cd:90: ed:c8:a1:88:06:0c:6d:73:cd:bf:67:b1:8e:80:1f: 7b:e3:03:e5:52:2a:9c:5e:dc:49:73:a9:ac:20:43: 21:c5:66:c5:fe:e5:e0:f8:a6:84:22:4b:e0:e6:a1: 7d:52:05:8e:5b:86:5d:59:a0:3e:1f:57:9a:79:77: 6c:6d:72:26:aa:3e:ff:d3:d9:e6:fa:58:cd:97:0a: d5:cf:76:1d:c4:eb:77:50:8b:f9:7c:45:b4:13:81: d9:c6:ab:6f:94:d2:31:d7:4a:44:1c:70:b5:ea:40: c8:b6:76:98:53:c3:48:4b:aa:dd:b9:b4:a5:fa:9d: 78:8e:3d:77:03:44:ee:f0:b2:20:c6:92:9b:ed:79: ca:ad:9c:dc:86:d2:6e:53:32:0c:44:53:82:02:1f: c9:08:08:db:bf:f3:18:4e:b8:9b:61:21:a0:17:73: ff:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:50:AE:24:A1:44:0E:AB:D7:46:22:9B:24:88:8B:9B:5D:70:3C:07 X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/E328AA42736E11ECAC882873C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.136.0-103.15.139.127 IPv6: 2001:df1:5900::/48 Signature Algorithm: sha256WithRSAEncryption 55:87:db:d9:89:d7:2c:14:96:69:ce:33:3e:40:6b:f4:b0:f7: ff:80:e9:ef:77:cc:fc:70:e3:4b:68:8a:65:4f:54:dd:63:81: ad:a1:ab:0b:9a:0d:4a:0b:2d:00:1d:5a:9c:33:8a:dc:b4:64: a0:45:8f:aa:50:ed:9e:68:d9:6e:ac:f4:e0:5e:8f:c1:01:01: a1:a7:21:e4:e3:5b:a9:55:c6:41:3e:d2:2c:3a:c6:de:b5:28: eb:94:e6:f4:ff:2c:53:f6:ac:2d:6b:11:76:9f:b7:6b:b3:85: ed:17:46:fc:6e:59:fc:03:94:6d:e0:1c:f6:f5:83:e7:eb:63: d5:43:8e:99:c2:3b:20:ea:a4:ae:20:fb:83:0a:7f:6e:cd:e3: 3c:ed:35:8a:5d:ac:31:a7:65:4a:c4:58:43:3d:46:b5:16:a5: 85:6d:a0:f7:ab:88:eb:17:b9:c0:7e:df:ba:41:0c:30:cd:ba: 87:9a:77:33:fc:ef:a1:0f:be:e1:20:cb:6b:0b:34:b5:7f:66: 82:bc:9c:6a:53:08:df:5d:6a:08:95:70:11:09:c2:15:29:b2: f8:a9:92:2c:0c:98:37:be:01:8f:94:4a:6f:f0:e8:af:87:39: 4b:a7:37:a6:a3:83:0e:d0:7c:9f:9a:6b:d6:06:96:ae:24:37: ac:f7:24:79 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjMwOTAyMTcwNDA3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGYzNmIwNy1hMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKmpNLcUV70v88+eTMZR/WnvwHCemG/0ms5NwhFWWl8XAFiNzi6N4ILXbY6V C2GOcsbmbwY3vsNsjxi+b9GoE/wOGPWjJd20ZlRX1i481Ppf0BXXadZ9zZDtyKGI Bgxtc82/Z7GOgB974wPlUiqcXtxJc6msIEMhxWbF/uXg+KaEIkvg5qF9UgWOW4Zd WaA+H1eaeXdsbXImqj7/09nm+ljNlwrVz3YdxOt3UIv5fEW0E4HZxqtvlNIx10pE HHC16kDItnaYU8NIS6rdubSl+p14jj13A0Tu8LIgxpKb7XnKrZzchtJuUzIMRFOC Ah/JCAjbv/MYTribYSGgF3P/nwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFA5QriSh RA6r10YimySIi5tdcDwHMB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA4RjcvNDcxNDM4MEFENTk0MTFFNzhFN0M5MTQzQzRGOUFFMDIvRTMyOEFBNDI3 MzZFMTFFQ0FDODgyODczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMBUEAgABMA8wDQMEA2cPiAMFB2cPiwAwDwQCAAIwCQMHACABDfFZADANBgkq hkiG9w0BAQsFAAOCAQEAVYfb2YnXLBSWac4zPkBr9LD3/4Dp73fM/HDjS2iKZU9U 3WOBraGrC5oNSgstAB1anDOK3LRkoEWPqlDtnmjZbqz04F6PwQEBoach5ONbqVXG QT7SLDrG3rUo65Tm9P8sU/asLWsRdp+3a7OF7RdG/G5Z/AOUbeAc9vWD5+tj1UOO mcI7IOqkriD7gwp/bs3jPO01il2sMadlSsRYQz1GtRalhW2g96uI6xe5wH7fukEM MM26h5p3M/zvoQ++4SDLaws0tX9mgrycalMI311qCJVwEQnCFSmy+KmSLAyYN74B j5RKb/Dor4c5S6c3pqODDtB8n5pr1gaWriQ3rPckeQ== -----END CERTIFICATE-----Generated at Mon May 20 19:20:10 2024 by rpki-client on console-fra.rpki-client.org