$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/EBD94A14049A11EBB73A8663C4F9AE02.roa File: EBD94A14049A11EBB73A8663C4F9AE02.roa (raw, json) Hash identifier: wMcaf6KjNyS0A+6aPLv02H8xkgAGjk1qWQXSXwZEtXM= Subject key identifier: 49:BD:44:D1:50:DA:04:E1:30:FD:23:53:DC:CF:2E:1C:E1:E1:14:FD Certificate issuer: /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2 Certificate serial: 070F Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/EBD94A14049A11EBB73A8663C4F9AE02.roa Signing time: Tue 16 Jul 2024 05:25:20 +0000 ROA not before: Tue 16 Jul 2024 05:25:20 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 136900 IP address blocks: 103.60.20.0/24 maxlen: 24 103.126.12.0/22 maxlen: 22 103.126.12.0/24 maxlen: 24 103.126.13.0/24 maxlen: 24 103.126.14.0/24 maxlen: 24 103.126.15.0/24 maxlen: 24 103.151.78.0/24 maxlen: 24 2001:df4:c500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2 Validity Not Before: Jul 16 05:25:20 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6696043f-3a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:a5:8d:79:77:9b:fa:69:f2:38:81:c3:98: b3:16:df:a9:2b:8f:a8:11:49:00:3d:8e:0d:cc:e5: 97:1b:74:72:72:2b:7e:8d:89:a6:66:82:2c:6b:ac: 07:a4:aa:c9:ca:47:00:21:d0:50:0d:ec:bb:c3:2f: 49:db:72:d6:d2:8a:4c:04:1e:0f:57:0b:e1:8e:0d: 5f:c2:d0:88:52:1c:61:ea:3c:d9:c7:2a:c4:4d:b9: f6:62:61:13:85:24:a2:f0:8f:1a:a6:58:03:1c:0a: 52:dc:56:7c:01:7c:fa:3e:d6:b1:c3:a1:d2:44:3e: a8:17:c8:39:ae:bc:b5:28:ae:79:d3:b3:b9:7e:dd: de:11:b5:5a:02:71:ef:f7:c4:9c:a3:54:46:b6:b9: 95:73:7d:d0:f6:2a:c9:c5:72:23:d9:5b:e5:2a:26: 35:86:8c:b4:c0:0f:a7:ba:4c:87:c7:70:cb:ef:c0: a3:51:a5:d5:21:a8:e7:5a:e9:90:50:3d:d5:9e:d6: a1:50:fb:82:67:a0:bd:fe:a0:88:31:f4:fd:2f:9c: 35:94:4a:fa:03:ea:3b:f7:ad:fd:27:dd:85:57:49: 85:8e:c3:4c:77:69:cc:20:0c:c2:99:c0:ee:56:5b: 6d:29:48:5c:be:9e:7c:4f:19:43:3c:a3:f9:4c:4d: 8b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BD:44:D1:50:DA:04:E1:30:FD:23:53:DC:CF:2E:1C:E1:E1:14:FD X509v3 Authority Key Identifier: keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/EBD94A14049A11EBB73A8663C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.20.0/24 103.126.12.0/22 103.151.78.0/24 IPv6: 2001:df4:c500::/48 Signature Algorithm: sha256WithRSAEncryption 31:1f:5c:88:36:64:9b:fb:14:8d:11:e7:07:5c:40:db:a3:61: f5:ed:02:d9:58:27:8f:4c:fe:4c:21:31:bc:55:63:01:9d:39: 10:2a:bb:44:f2:c0:fe:75:c1:fc:f6:c2:58:aa:f3:30:3b:8b: b4:15:ce:74:60:07:ea:7e:18:ab:e8:b9:87:9d:63:90:2c:67: a8:f7:02:ed:d4:35:e7:be:96:24:10:84:2a:e7:ad:50:03:6a: 76:f5:d8:d3:0d:3f:73:65:e5:d8:7b:5c:62:47:e4:24:b4:b4: d4:2e:91:d7:d0:06:5c:d1:6f:ba:28:72:b7:1c:8f:f7:bb:3e: 34:f3:45:a9:d9:d7:2b:76:32:84:01:ef:82:51:49:be:d4:43: d5:2c:84:a9:6b:d7:ff:2a:d4:81:f2:e0:59:e1:9a:2b:d6:b2: 12:34:7f:ee:51:7a:26:8a:ba:1f:cc:e5:b6:37:b1:f7:2c:f5: 20:72:53:fe:ba:4f:9f:1c:f9:26:f5:82:15:f5:8b:02:4c:e6: c6:78:fb:74:cf:3d:5e:11:42:15:a2:6a:e6:9e:3a:4b:0a:1d: 06:81:8f:57:93:a5:ab:86:70:ea:14:f6:21:cc:fb:d1:2c:a1: 03:92:a2:27:74:94:43:37:b1:3d:6e:97:ce:ac:c8:8c:22:6d: 11:ce:a6:bb -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNTMxMTAvBgNVBAUTKEUzRUIyNzlFRDAxRTgzOUVGMjQ1ODA2RTA0NTFGQzE1 NTAwOTI2QTIwHhcNMjQwNzE2MDUyNTIwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2MDQzZi0zYTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuISljXl3m/pp8jiBw5izFt+pK4+oEUkAPY4NzOWXG3Rycit+jYmmZoIsa6wH pKrJykcAIdBQDey7wy9J23LW0opMBB4PVwvhjg1fwtCIUhxh6jzZxyrETbn2YmET hSSi8I8aplgDHApS3FZ8AXz6Ptaxw6HSRD6oF8g5rry1KK5507O5ft3eEbVaAnHv 98Sco1RGtrmVc33Q9irJxXIj2VvlKiY1hoy0wA+nukyHx3DL78CjUaXVIajnWumQ UD3VntahUPuCZ6C9/qCIMfT9L5w1lEr6A+o79639J92FV0mFjsNMd2nMIAzCmcDu VlttKUhcvp58TxlDPKP5TE2LgwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEm9RNFQ 2gThMP0jU9zPLhzh4RT9MB8GA1UdIwQYMBaAFOPrJ57QHoOe8kWAbgRR/BVQCSai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM1My9FNzhFNDE2RTA0 OTgxMUVCQjFGRUU4NURDNEY5QUUwMi80LXNubnRBZWc1N3lSWUJ1QkZIOEZWQUpK cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtc25udEFlZzU3eVJZQnVCRkg4RlZBSkpxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJDNTMvRTc4RTQxNkUwNDk4MTFFQkIxRkVFODVEQzRGOUFFMDIvRUJEOTRBMTQw NDlBMTFFQkI3M0E4NjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABnPBQDBAJnfgwDBABnl04wDwQCAAIwCQMHACABDfTFADAN BgkqhkiG9w0BAQsFAAOCAQEAMR9ciDZkm/sUjRHnB1xA26Nh9e0C2Vgnj0z+TCEx vFVjAZ05ECq7RPLA/nXB/PbCWKrzMDuLtBXOdGAH6n4Yq+i5h51jkCxnqPcC7dQ1 576WJBCEKuetUANqdvXY0w0/c2Xl2HtcYkfkJLS01C6R19AGXNFvuihytxyP97s+ NPNFqdnXK3YyhAHvglFJvtRD1SyEqWvX/yrUgfLgWeGaK9ayEjR/7lF6Joq6H8zl tjex9yz1IHJT/rpPnxz5JvWCFfWLAkzmxnj7dM89XhFCFaJq5p46SwodBoGPV5Ol q4Zw6hT2Icz70SyhA5KiJ3SUQzexPW6XzqzIjCJtEc6muw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org