$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/EBC23D9A041E11ECA959B779C4F9AE02.roa File: EBC23D9A041E11ECA959B779C4F9AE02.roa (raw, json) Hash identifier: +yB6X4sI41mJC1GZElh1eqYzjhAxtA3zt3+jtncGoEs= Subject key identifier: EB:BE:36:74:6D:7F:ED:E6:6A:94:4F:F8:A3:98:80:D2:A1:0F:5F:8B Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 2372 Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/EBC23D9A041E11ECA959B779C4F9AE02.roa Signing time: Tue 26 Sep 2023 16:12:45 +0000 ROA not before: Tue 26 Sep 2023 16:12:45 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 49544 IP address blocks: 43.239.136.0/22 maxlen: 23 103.194.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9074 (0x2372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Sep 26 16:12:45 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651302fd-ac89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ba:0a:f7:2a:4b:dc:9b:6c:4b:60:fb:56:78: 77:2a:90:f4:5f:d7:70:4c:4b:4f:30:52:73:80:9f: 4d:7e:00:91:26:04:96:b4:d9:c8:03:65:fd:a0:34: 89:16:d3:c7:d9:ae:88:ce:1c:8d:73:75:7c:39:9a: 7c:bf:d6:55:aa:cb:3e:bd:91:16:10:9e:b9:dd:e9: 81:40:b2:1f:8d:61:3f:b9:2f:a9:3f:7f:44:51:3f: a1:21:17:bf:2d:de:da:d5:b9:8f:00:15:81:fa:be: 71:97:4f:44:0c:52:b1:c2:ed:98:b8:55:90:74:ad: ab:cf:8f:f4:ee:df:2d:f4:f3:5f:b6:c4:c7:72:e8: 11:b3:68:47:5d:11:a2:94:dd:71:0d:cf:d8:de:12: f1:75:f2:bd:64:ed:d1:c8:1d:58:7b:da:3c:b7:5d: b1:35:a4:d2:84:a3:3d:f6:39:61:4e:1a:77:56:40: 7a:fb:11:f4:f2:3c:54:f3:b4:e2:c2:33:4d:db:79: 79:32:9c:c3:38:24:7a:0f:35:32:af:6e:1e:42:26: 77:60:fd:02:b9:8e:6e:ee:c6:5c:34:9e:f3:2a:61: 30:26:e2:f0:12:c1:d3:e0:a3:9d:d1:78:74:1c:3e: b2:a5:cf:2b:a5:f0:2a:1b:ac:94:36:0d:96:90:d6: 1b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BE:36:74:6D:7F:ED:E6:6A:94:4F:F8:A3:98:80:D2:A1:0F:5F:8B X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/EBC23D9A041E11ECA959B779C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.136.0/22 103.194.164.0/22 Signature Algorithm: sha256WithRSAEncryption 27:ab:f4:b1:21:5d:76:f2:ab:64:70:87:40:1f:1c:4c:b7:6d: 58:f8:17:19:7a:9c:f1:3f:10:37:5c:65:0a:27:8e:79:9b:ad: 80:1f:0c:1b:05:06:ec:c7:37:4c:7f:77:26:ae:d2:9c:66:f7: bb:7d:e9:d4:1e:93:7a:97:bf:c3:e7:d9:a0:92:5a:79:a7:49: 8a:e4:2d:3b:cc:fd:85:da:24:7e:99:59:98:f6:79:d4:6a:36: 5d:a3:5b:3c:76:fe:e8:c2:2c:e0:cd:9f:d0:a5:cf:8e:a8:54: 05:a9:61:8c:87:2f:a8:66:8c:81:18:23:17:42:d1:fb:0b:e5: 36:e6:cf:42:ba:74:0b:cb:32:c0:75:be:d5:5e:3d:61:e3:5b: b8:d3:f5:df:f7:8e:05:2f:ec:eb:54:fc:4c:5e:f9:ae:64:af: d9:22:71:91:a1:0d:41:6b:6f:f1:23:c6:94:e5:bb:15:aa:8b: d4:23:9b:a2:ff:1d:a2:85:f5:8a:46:7f:f8:a0:79:ae:e8:24: bf:ae:88:9a:60:e1:e5:b1:b5:62:b6:25:9d:3e:ce:9b:aa:5c: a8:fc:be:89:46:e3:24:01:8d:57:77:b5:7d:f6:09:fd:7a:a1: 12:78:44:0f:c1:00:c1:8d:8b:71:d4:0b:4f:30:07:9a:31:9c: be:df:13:32 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICI3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjMwOTI2MTYxMjQ1WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEzMDJmZC1hYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3boK9ypL3JtsS2D7Vnh3KpD0X9dwTEtPMFJzgJ9NfgCRJgSWtNnIA2X9oDSJ FtPH2a6IzhyNc3V8OZp8v9ZVqss+vZEWEJ653emBQLIfjWE/uS+pP39EUT+hIRe/ Ld7a1bmPABWB+r5xl09EDFKxwu2YuFWQdK2rz4/07t8t9PNftsTHcugRs2hHXRGi lN1xDc/Y3hLxdfK9ZO3RyB1Ye9o8t12xNaTShKM99jlhThp3VkB6+xH08jxU87Ti wjNN23l5MpzDOCR6DzUyr24eQiZ3YP0CuY5u7sZcNJ7zKmEwJuLwEsHT4KOd0Xh0 HD6ypc8rpfAqG6yUNg2WkNYbeQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOu+NnRt f+3mapRP+KOYgNKhD1+LMB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjQzRjQvMTdBQzJBNzA0MTlDMTFFNTgzNUZEMTgzQzRGOUFFMDIvRUJDMjNEOUEw NDFFMTFFQ0E5NTlCNzc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr74gDBAJnwqQwDQYJKoZIhvcNAQELBQADggEBACer9LEh XXbyq2Rwh0AfHEy3bVj4Fxl6nPE/EDdcZQonjnmbrYAfDBsFBuzHN0x/dyau0pxm 97t96dQek3qXv8Pn2aCSWnmnSYrkLTvM/YXaJH6ZWZj2edRqNl2jWzx2/ujCLODN n9Clz46oVAWpYYyHL6hmjIEYIxdC0fsL5Tbmz0K6dAvLMsB1vtVePWHjW7jT9d/3 jgUv7OtU/Exe+a5kr9kicZGhDUFrb/EjxpTluxWqi9Qjm6L/HaKF9YpGf/igea7o JL+uiJpg4eWxtWK2JZ0+zpuqXKj8volG4yQBjVd3tX32Cf16oRJ4RA/BAMGNi3HU C08wB5oxnL7fEzI= -----END CERTIFICATE-----Generated at Sun May 12 17:52:13 2024 by rpki-client on console-ams.rpki-client.org