$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/E40A00021F9311ECAF64925DC4F9AE02.roa File: E40A00021F9311ECAF64925DC4F9AE02.roa (raw, json) Hash identifier: Rji9v2vl0PMJCU+S/aNCxihdmwOiSNCJIoglgTlCMfk= Subject key identifier: AE:C5:7B:BC:7D:3B:CF:85:8A:E6:94:4B:2F:02:46:1B:2D:39:54:FF Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Certificate serial: 0B16 Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/E40A00021F9311ECAF64925DC4F9AE02.roa Signing time: Wed 02 Oct 2024 19:27:59 +0000 ROA not before: Wed 02 Oct 2024 19:27:59 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139605 IP address blocks: 103.142.54.0/23 maxlen: 23 103.142.54.0/24 maxlen: 24 103.142.55.0/24 maxlen: 24 2001:df7:a980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2838 (0xb16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Validity Not Before: Oct 2 19:27:59 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fd9ebf-6f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:40:f4:76:3c:e1:b4:63:b4:89:70:27:a5: 5d:8b:d5:24:98:0c:56:11:c2:14:79:89:79:17:74: fb:64:d5:0d:02:80:6e:a4:b9:70:c2:e0:a9:eb:41: e9:09:ae:2e:05:57:45:ef:c5:40:35:fe:55:93:40: 3d:67:0f:97:76:25:2c:69:92:d4:5c:a8:b5:98:2e: 5c:05:bf:c5:d6:f2:e9:3a:3e:e4:fc:a6:b8:a9:34: cf:0a:6d:bc:74:61:b0:34:e7:68:50:63:07:d0:7c: b7:7d:2c:35:9f:52:49:83:2d:9d:92:88:a9:64:c8: af:9c:7b:98:69:09:9a:b8:41:05:74:42:27:40:d7: fd:0d:88:cd:83:5a:2a:60:fb:75:37:6d:e0:a5:f6: 34:42:b9:5b:da:74:bc:c9:d7:24:c5:f7:4b:08:49: da:f8:18:6e:bc:19:f0:6c:dd:12:76:34:e5:d3:d7: 0d:3f:2d:3d:f0:12:1d:bf:5e:e0:77:b4:02:c2:f9: 37:0a:21:cc:6a:47:c8:b5:8c:96:57:e3:11:95:a9: 95:bc:d9:1c:01:60:63:69:41:5d:a1:4f:e1:e1:6e: 43:8e:29:e6:15:74:c8:2c:d6:a7:b0:1a:73:0e:7d: 1d:85:1b:77:54:bf:f9:55:8e:65:01:22:6c:33:cd: 5c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C5:7B:BC:7D:3B:CF:85:8A:E6:94:4B:2F:02:46:1B:2D:39:54:FF X509v3 Authority Key Identifier: keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/E40A00021F9311ECAF64925DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.54.0/23 IPv6: 2001:df7:a980::/48 Signature Algorithm: sha256WithRSAEncryption 76:74:20:57:ea:dc:83:f2:85:4c:49:e8:87:5b:a1:28:e8:7a: c9:09:66:7c:93:5b:d0:00:82:71:be:0c:60:af:5c:98:88:87: 5a:0e:53:32:c8:9e:34:8a:31:0c:cf:76:48:2b:9f:b5:a3:27: 2d:60:cd:c4:ce:a3:8d:7e:f8:26:89:9d:4e:a9:24:7d:0e:7b: bf:56:75:f6:6b:5b:8f:1b:a3:37:ec:2e:c4:81:d6:bf:3e:fb: 65:b2:4d:21:28:5a:22:08:87:4d:93:13:01:a5:e9:90:73:0d: fe:6c:57:1d:4b:21:35:ab:3a:06:f8:4a:58:e8:79:e3:f6:d3: cb:f7:1c:04:9c:d9:e3:d9:9d:a5:67:e8:0d:99:f8:a6:1e:a1: 11:dc:0c:91:d6:b1:b4:e1:a9:50:e9:7a:57:e6:19:1c:24:08: 82:91:84:2c:0f:5b:6d:3a:8b:22:df:d0:ea:c9:23:28:ba:a0: 1b:bb:9a:94:5f:c4:a7:33:7a:02:a5:7c:60:d9:f3:61:10:98: 63:60:95:fc:b6:c8:12:55:8e:97:f9:a5:16:16:69:70:b8:d8: a5:db:8f:3b:fc:cc:d0:40:cb:97:21:32:19:78:08:33:7a:dc: 35:e9:bd:3b:5e:72:4b:e1:1f:f9:19:10:55:40:ec:13:37:ff: 6c:1d:b4:69 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB QTk1Q0EyRDMwHhcNMjQxMDAyMTkyNzU5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkOWViZi02ZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouRA9HY84bRjtIlwJ6Vdi9UkmAxWEcIUeYl5F3T7ZNUNAoBupLlwwuCp60Hp Ca4uBVdF78VANf5Vk0A9Zw+XdiUsaZLUXKi1mC5cBb/F1vLpOj7k/Ka4qTTPCm28 dGGwNOdoUGMH0Hy3fSw1n1JJgy2dkoipZMivnHuYaQmauEEFdEInQNf9DYjNg1oq YPt1N23gpfY0Qrlb2nS8ydckxfdLCEna+BhuvBnwbN0SdjTl09cNPy098BIdv17g d7QCwvk3CiHMakfItYyWV+MRlamVvNkcAWBjaUFdoU/h4W5DjinmFXTILNansBpz Dn0dhRt3VL/5VY5lASJsM81c7QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFK7Fe7x9 O8+FiuaUSy8CRhstOVT/MB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjlFQkIvRjkyNjNEMTYyQjA3MTFFQUI4NUJCODdDQzRGOUFFMDIvRTQwQTAwMDIx RjkzMTFFQ0FGNjQ5MjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjjYwDwQCAAIwCQMHACABDfepgDANBgkqhkiG9w0BAQsF AAOCAQEAdnQgV+rcg/KFTEnoh1uhKOh6yQlmfJNb0ACCcb4MYK9cmIiHWg5TMsie NIoxDM92SCuftaMnLWDNxM6jjX74JomdTqkkfQ57v1Z19mtbjxujN+wuxIHWvz77 ZbJNIShaIgiHTZMTAaXpkHMN/mxXHUshNas6BvhKWOh54/bTy/ccBJzZ49mdpWfo DZn4ph6hEdwMkdaxtOGpUOl6V+YZHCQIgpGELA9bbTqLIt/Q6skjKLqgG7ualF/E pzN6AqV8YNnzYRCYY2CV/LbIElWOl/mlFhZpcLjYpduPO/zM0EDLlyEyGXgIM3rc Nem9O15yS+Ef+RkQVUDsEzf/bB20aQ== -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org