$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/EBD94A14049A11EBB73A8663C4F9AE02.roa File: EBD94A14049A11EBB73A8663C4F9AE02.roa (raw, json) Hash identifier: 1YjhnpcwYRY3mJE3BgnRA4xtPMKkhOZTYS7bbBwFKRg= Subject key identifier: CD:3E:61:65:E3:25:72:7A:EC:9F:87:C9:2E:ED:C8:FA:A1:1F:38:FB Certificate issuer: /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2 Certificate serial: 06DE Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/EBD94A14049A11EBB73A8663C4F9AE02.roa Signing time: Wed 01 May 2024 12:08:19 +0000 ROA not before: Wed 01 May 2024 12:08:19 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 136900 IP address blocks: 103.60.20.0/24 maxlen: 24 103.126.12.0/22 maxlen: 22 103.151.78.0/24 maxlen: 24 2001:df4:c500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 21:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2 Validity Not Before: May 1 12:08:19 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=663230b2-7a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:52:ff:fd:0f:01:40:65:83:95:35:1e:1c: 9e:50:5f:f2:5d:35:f4:74:66:02:fa:3e:b3:80:25: 99:51:c7:1b:70:74:61:ce:27:81:d1:4b:b2:ac:a3: 0d:25:1b:e7:2d:9d:a4:5e:3f:59:06:c3:ce:bc:66: 9b:8e:0b:c7:5f:db:3e:61:04:c0:2f:22:79:b8:3d: a8:05:b7:ab:cd:c1:81:f9:e8:01:3e:1d:de:d3:dd: db:32:c7:c0:74:60:63:8a:b8:3a:8a:2c:9d:53:5a: cd:aa:f7:29:a2:1d:5a:76:58:09:43:ac:0e:47:ac: af:7a:37:23:ce:71:f1:58:20:84:cf:6e:70:9f:e6: ef:aa:4f:2a:61:7a:d5:bf:87:31:ed:0b:35:81:b8: a7:f1:0c:c1:b3:a7:62:b7:99:db:39:3f:25:db:e4: 8c:f1:75:45:3e:9b:4f:d1:7b:9b:d7:2c:b6:02:d0: 48:e7:4c:6f:45:1c:5e:9b:fe:29:2f:01:2d:53:cd: 8c:46:3e:5e:8b:eb:76:33:2e:b8:f7:e9:7f:e0:a5: 2e:8a:f9:75:b3:68:e8:2c:22:32:9f:3b:2a:e2:20: 4f:16:30:5c:07:fb:33:94:d5:c8:1a:d7:1b:66:6e: 46:f3:9d:88:3b:04:42:6b:24:64:15:b9:ea:4b:ed: aa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3E:61:65:E3:25:72:7A:EC:9F:87:C9:2E:ED:C8:FA:A1:1F:38:FB X509v3 Authority Key Identifier: keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/EBD94A14049A11EBB73A8663C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.20.0/24 103.126.12.0/22 103.151.78.0/24 IPv6: 2001:df4:c500::/48 Signature Algorithm: sha256WithRSAEncryption 70:bd:c2:25:48:17:cb:47:df:73:b9:23:f9:6d:f2:47:32:90: 32:9f:1a:7e:9d:41:48:25:44:51:c1:b7:08:e7:51:5a:85:58: b1:1c:18:fc:d5:c9:67:37:fa:f6:c2:e2:8a:60:45:a0:7b:bb: fa:9c:de:b5:64:59:cd:61:d2:d3:ad:96:94:e5:3c:f2:c7:2c: 46:c4:b2:ae:a6:e9:0d:07:84:a9:37:99:3a:2f:06:69:08:09: b8:1f:75:aa:10:0d:b5:09:c9:65:d3:36:ff:ba:81:a0:b3:95: d7:68:6a:96:61:7a:a5:b3:1d:9b:dd:44:95:5e:ee:c6:c4:eb: 10:ab:72:ba:5a:0e:9f:bd:8c:9b:8d:8d:db:8f:dc:54:41:3a: b8:c9:c1:5e:be:82:2c:d9:66:1c:3c:90:3a:9b:7f:47:5c:52: cc:30:ac:2c:f2:dc:e1:6b:b2:05:4c:00:20:86:69:47:3d:09: 8f:c3:bf:5e:14:70:62:b3:96:f9:16:e3:7e:2a:5e:49:59:91: 5a:df:04:08:67:48:31:9e:2f:11:a1:f2:7a:47:d7:90:39:ef: c9:30:82:4c:6c:1f:c7:c5:1a:f0:2b:52:34:f0:3d:4b:01:59: 7b:8b:e7:25:ce:27:4b:bd:c6:98:05:c1:a1:d3:3a:fe:37:78: d1:e4:d8:99 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNTMxMTAvBgNVBAUTKEUzRUIyNzlFRDAxRTgzOUVGMjQ1ODA2RTA0NTFGQzE1 NTAwOTI2QTIwHhcNMjQwNTAxMTIwODE5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMyMzBiMi03YTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzpS//0PAUBlg5U1HhyeUF/yXTX0dGYC+j6zgCWZUccbcHRhzieB0UuyrKMN JRvnLZ2kXj9ZBsPOvGabjgvHX9s+YQTALyJ5uD2oBberzcGB+egBPh3e093bMsfA dGBjirg6iiydU1rNqvcpoh1adlgJQ6wOR6yvejcjznHxWCCEz25wn+bvqk8qYXrV v4cx7Qs1gbin8QzBs6dit5nbOT8l2+SM8XVFPptP0Xub1yy2AtBI50xvRRxem/4p LwEtU82MRj5ei+t2My649+l/4KUuivl1s2joLCIynzsq4iBPFjBcB/szlNXIGtcb Zm5G852IOwRCayRkFbnqS+2qxQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFM0+YWXj JXJ67J+HyS7tyPqhHzj7MB8GA1UdIwQYMBaAFOPrJ57QHoOe8kWAbgRR/BVQCSai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM1My9FNzhFNDE2RTA0 OTgxMUVCQjFGRUU4NURDNEY5QUUwMi80LXNubnRBZWc1N3lSWUJ1QkZIOEZWQUpK cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtc25udEFlZzU3eVJZQnVCRkg4RlZBSkpxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJDNTMvRTc4RTQxNkUwNDk4MTFFQkIxRkVFODVEQzRGOUFFMDIvRUJEOTRBMTQw NDlBMTFFQkI3M0E4NjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABnPBQDBAJnfgwDBABnl04wDwQCAAIwCQMHACABDfTFADAN BgkqhkiG9w0BAQsFAAOCAQEAcL3CJUgXy0ffc7kj+W3yRzKQMp8afp1BSCVEUcG3 COdRWoVYsRwY/NXJZzf69sLiimBFoHu7+pzetWRZzWHS062WlOU88scsRsSyrqbp DQeEqTeZOi8GaQgJuB91qhANtQnJZdM2/7qBoLOV12hqlmF6pbMdm91ElV7uxsTr EKtyuloOn72Mm42N24/cVEE6uMnBXr6CLNlmHDyQOpt/R1xSzDCsLPLc4WuyBUwA IIZpRz0Jj8O/XhRwYrOW+RbjfipeSVmRWt8ECGdIMZ4vEaHyekfXkDnvyTCCTGwf x8Ua8CtSNPA9SwFZe4vnJc4nS73GmAXBodM6/jd40eTYmQ== -----END CERTIFICATE-----Generated at Sun May 26 23:22:27 2024 by rpki-client on console-fra.rpki-client.org