$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/D82E5F1ADBC211E99D686940C4F9AE02.roa File: D82E5F1ADBC211E99D686940C4F9AE02.roa (raw, json) Hash identifier: tbS/wvqaBTwGMNLK0mwJip2xqGmQHr/fjRxp6YrH0zA= Subject key identifier: 26:EA:F2:85:15:A0:98:69:ED:2F:C2:5C:28:18:87:F8:18:73:CA:BB Certificate issuer: /CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Certificate serial: 120B Authority key identifier: 12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/D82E5F1ADBC211E99D686940C4F9AE02.roa Signing time: Tue 07 May 2024 22:39:22 +0000 ROA not before: Tue 07 May 2024 22:39:22 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 62597 IP address blocks: 103.35.248.0/24 maxlen: 24 103.35.249.0/24 maxlen: 24 103.35.250.0/24 maxlen: 24 2402:cf80::/32 maxlen: 32 2402:cf80::/48 maxlen: 48 2402:cf80:100::/44 maxlen: 48 2402:cf80:1000::/48 maxlen: 48 2402:cf80:1003::/48 maxlen: 48 2402:cf80:1004::/48 maxlen: 48 2402:cf80:1005::/48 maxlen: 48 2402:cf80:1006::/48 maxlen: 48 2402:cf80:6259::/48 maxlen: 48 2402:cf80:7ffe::/48 maxlen: 48 2402:cf80:7fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4619 (0x120b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Validity Not Before: May 7 22:39:22 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=663aad9a-6ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:de:c2:a9:c2:2a:53:5c:05:cb:21:38:b6:60: 5f:8f:54:31:1d:0a:b3:0e:dd:ea:98:2e:2d:c8:f8: 72:3b:8c:2a:cf:db:16:a8:b1:7b:8f:b0:a5:fc:89: e5:89:f4:55:ac:8e:b6:dd:21:c5:db:71:62:ec:07: c3:31:67:7b:0e:0a:70:08:c4:7d:9b:fa:f2:73:03: e1:07:15:8a:65:50:88:b9:20:37:ce:12:bc:e4:87: 07:9c:50:ac:be:0c:8a:8b:6e:36:eb:6a:7d:76:ed: d7:35:5d:4e:b0:63:3c:bd:18:a8:1c:3b:79:60:94: a1:2a:67:72:1e:79:53:65:a7:ce:e4:91:ee:1f:3d: 2e:da:72:9f:8a:b5:60:2f:1b:84:3a:94:b8:fa:52: 0a:96:b8:97:37:41:80:19:eb:ea:72:2f:9e:5d:55: 17:6b:68:3f:58:e1:b6:e6:ac:bf:46:d4:59:b3:ab: 18:98:e7:e7:32:0a:eb:61:84:48:f2:e8:5a:11:da: 56:a9:f9:57:02:46:7a:72:6d:10:c3:26:d7:01:1b: 47:2f:0a:b0:d2:7f:df:41:12:4e:35:ef:9b:f7:52: 76:68:40:68:0d:28:a9:eb:1f:27:86:8e:f0:45:00: ab:68:52:c9:bd:38:eb:25:57:62:7b:c2:82:09:c3: 14:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EA:F2:85:15:A0:98:69:ED:2F:C2:5C:28:18:87:F8:18:73:CA:BB X509v3 Authority Key Identifier: keyid:12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/D82E5F1ADBC211E99D686940C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.35.248.0-103.35.250.255 IPv6: 2402:cf80::/32 Signature Algorithm: sha256WithRSAEncryption 53:d0:72:03:7e:c4:c3:6a:34:0e:0b:32:05:5d:9b:94:3f:0d: 03:7f:9b:b0:7c:b3:e8:24:dd:a5:4c:4e:02:56:c8:58:7a:89: 3c:36:d3:d2:35:ae:aa:9c:f9:ad:6c:e6:9b:40:19:05:20:a4: fb:e5:db:84:39:dd:7c:81:57:b4:7b:67:35:47:fb:60:2f:d7: c8:4e:73:4e:0f:23:cd:34:11:04:55:56:d4:f7:e4:c5:27:b7: bd:a6:b6:bf:64:66:a0:1b:8e:b0:58:b6:d9:42:af:e3:e5:7e: 29:fb:d7:a8:23:48:94:65:32:48:aa:4d:2b:22:60:47:84:42: a3:46:07:ab:89:87:e5:9f:63:49:e5:57:ec:3c:07:ca:aa:0c: 20:cc:84:c4:6a:90:b9:69:c6:01:67:b6:11:f3:a8:80:e5:88: 94:3f:83:12:22:5d:ae:61:33:fe:3e:9d:f7:60:d7:cc:f8:75: db:31:c0:b4:8e:10:79:0c:22:d6:e0:53:4f:3f:9c:d9:38:89: c2:d9:e0:3c:2d:a8:c2:c5:e1:ea:dc:99:b9:d5:50:f5:d4:d7: 2c:99:fe:ea:69:e5:74:d3:14:0d:0c:0e:97:65:6e:85:85:9e: 4c:f5:bb:ba:b9:bd:e5:3f:6a:17:ec:ce:71:08:c8:8c:1b:41: d5:e6:02:78 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICEgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYwMDYxMTAvBgNVBAUTKDEyRjkyRTZDNzJFNkNBMjVDMDc1MDU1QjQ4RkUzN0I2 NUFCNkUwNTIwHhcNMjQwNTA3MjIzOTIyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjNhYWQ5YS02Y2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA197CqcIqU1wFyyE4tmBfj1QxHQqzDt3qmC4tyPhyO4wqz9sWqLF7j7Cl/Inl ifRVrI623SHF23Fi7AfDMWd7DgpwCMR9m/rycwPhBxWKZVCIuSA3zhK85IcHnFCs vgyKi24262p9du3XNV1OsGM8vRioHDt5YJShKmdyHnlTZafO5JHuHz0u2nKfirVg LxuEOpS4+lIKlriXN0GAGevqci+eXVUXa2g/WOG25qy/RtRZs6sYmOfnMgrrYYRI 8uhaEdpWqflXAkZ6cm0QwybXARtHLwqw0n/fQRJONe+b91J2aEBoDSip6x8nho7w RQCraFLJvTjrJVdie8KCCcMU0QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFCbq8oUV oJhp7S/CXCgYh/gYc8q7MB8GA1UdIwQYMBaAFBL5Lmxy5solwHUFW0j+N7ZatuBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjAwNi9FNEZERTQ2QUMz RTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlpWEFkUVZiU1A0M3RscTI0 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V2a3ViSExteWlYQWRRVmJTUDQzdGxxMjRGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYwMDYvRTRGREU0NkFDM0U4MTFFOEFDNzZFQjE2QzRGOUFFMDIvRDgyRTVGMUFE QkMyMTFFOTlENjg2OTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEA2cj+AMEAGcj+jANBAIAAjAHAwUAJALPgDANBgkqhkiG 9w0BAQsFAAOCAQEAU9ByA37Ew2o0DgsyBV2blD8NA3+bsHyz6CTdpUxOAlbIWHqJ PDbT0jWuqpz5rWzmm0AZBSCk++XbhDndfIFXtHtnNUf7YC/XyE5zTg8jzTQRBFVW 1PfkxSe3vaa2v2RmoBuOsFi22UKv4+V+KfvXqCNIlGUySKpNKyJgR4RCo0YHq4mH 5Z9jSeVX7DwHyqoMIMyExGqQuWnGAWe2EfOogOWIlD+DEiJdrmEz/j6d92DXzPh1 2zHAtI4QeQwi1uBTTz+c2TiJwtngPC2owsXh6tyZudVQ9dTXLJn+6mnldNMUDQwO l2VuhYWeTPW7urm95T9qF+zOcQjIjBtB1eYCeA== -----END CERTIFICATE-----Generated at Tue May 14 19:10:26 2024 by rpki-client on console-ams.rpki-client.org