$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/ED388A1840BB11E9A6718844C4F9AE02.roa File: ED388A1840BB11E9A6718844C4F9AE02.roa (raw, json) Hash identifier: RyCNpZPyi/g+YauzqBs7rDG8vGnkFGaOzI70T5pPGJQ= Subject key identifier: E1:F7:D9:19:46:AB:A3:26:80:E6:CA:FB:49:48:08:AF:15:B7:DE:2A Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 11C5 Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/ED388A1840BB11E9A6718844C4F9AE02.roa Signing time: Mon 20 May 2024 17:56:01 +0000 ROA not before: Mon 20 May 2024 17:56:01 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 134451 IP address blocks: 103.60.9.0/24 maxlen: 24 2406:f400:120::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4549 (0x11c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A Validity Not Before: May 20 17:56:01 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=664b8eb0-7bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:cf:af:ec:89:4d:29:c5:c7:73:a5:3f:ab: 52:5b:07:ff:10:a1:52:73:20:ab:83:30:81:99:d9: c8:70:6e:6a:78:e9:38:58:3f:cf:0f:f0:f6:c1:8c: 57:3c:af:ac:97:0a:13:28:c0:74:3b:a1:7c:e7:2d: f0:39:70:42:c1:10:3f:0b:3d:2d:8a:e0:0f:c4:61: f8:26:03:67:4a:c9:b0:95:0c:8e:42:2f:0f:35:b6: 9e:44:0a:70:b5:11:96:c5:d9:10:b1:cb:94:3c:17: 69:c0:9e:02:c8:6b:7e:f4:d8:89:4f:4d:95:cc:c7: 2e:02:01:4d:17:15:1e:c1:5d:ac:8a:ff:d9:de:53: 93:2a:97:91:e0:3c:46:6d:63:7c:60:d6:eb:e6:c5: 05:13:ca:24:16:cd:1b:54:d2:08:da:a3:ea:40:80: db:bb:eb:e3:d1:18:f6:39:89:c7:0a:73:f0:e1:c9: 9c:d6:19:16:99:d9:a9:63:97:e1:75:28:24:02:a2: 56:3f:04:ea:ae:23:91:46:42:2c:bb:1d:1d:06:9b: 95:9d:1f:67:d8:9a:4d:8d:25:bc:ae:48:47:ea:14: d0:f7:14:dd:f1:af:1f:29:35:71:4d:db:22:5e:ae: e3:35:88:74:6f:59:d3:dc:40:dc:d9:10:c4:64:a9: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F7:D9:19:46:AB:A3:26:80:E6:CA:FB:49:48:08:AF:15:B7:DE:2A X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/ED388A1840BB11E9A6718844C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.9.0/24 IPv6: 2406:f400:120::/44 Signature Algorithm: sha256WithRSAEncryption d3:78:94:66:36:5a:4c:ad:1d:0d:6c:d6:22:6c:74:1c:65:a9: 75:99:33:fb:9d:1a:e8:63:f0:c0:dd:7d:67:60:23:fa:f2:3f: 85:a2:10:a9:e1:7e:b3:8c:2c:de:1e:b0:d6:c2:0a:c6:21:a5: 1b:04:78:19:d0:c7:0e:c5:58:3d:1e:24:ad:5c:69:9e:a2:cc: c0:2a:5d:47:5d:55:a2:c0:21:b1:1a:9d:01:ac:64:6c:ad:49: b2:d7:b6:6f:3b:31:dc:37:6d:9d:dc:35:3d:b9:2d:73:bd:d8: bd:50:12:fd:e3:ab:dc:8b:2f:19:80:5a:de:dc:96:f0:49:e7: 1c:13:85:29:87:6d:c4:02:3b:95:55:c0:e4:f2:00:0b:63:2e: 15:84:1f:30:5c:ea:fa:dd:b5:c1:dd:38:94:a9:f3:d7:c4:27: bd:98:7a:0f:b6:fb:df:e9:ae:01:45:76:18:47:96:9a:52:ef: 33:e6:c3:ed:a6:bd:76:52:84:9c:9a:93:3e:72:13:7e:6d:da: d5:e5:0c:d8:2d:f4:ca:a7:71:57:05:b7:00:1d:34:16:5a:26: db:3c:06:d7:3c:a2:13:52:8d:91:5f:9b:f9:36:bb:53:a4:2b: ab:a0:82:1e:f0:be:45:ff:90:30:fb:f6:2c:0f:d1:d8:59:68: cf:c0:1b:ab -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICEcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjQwNTIwMTc1NjAxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRiOGViMC03YmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8fPr+yJTSnFx3OlP6tSWwf/EKFScyCrgzCBmdnIcG5qeOk4WD/PD/D2wYxX PK+slwoTKMB0O6F85y3wOXBCwRA/Cz0tiuAPxGH4JgNnSsmwlQyOQi8PNbaeRApw tRGWxdkQscuUPBdpwJ4CyGt+9NiJT02VzMcuAgFNFxUewV2siv/Z3lOTKpeR4DxG bWN8YNbr5sUFE8okFs0bVNII2qPqQIDbu+vj0Rj2OYnHCnPw4cmc1hkWmdmpY5fh dSgkAqJWPwTqriORRkIsux0dBpuVnR9n2JpNjSW8rkhH6hTQ9xTd8a8fKTVxTdsi Xq7jNYh0b1nT3EDc2RDEZKnMcQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOH32RlG q6MmgObK+0lICK8Vt94qMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkZFNkEvMUQ2NDMyOEVEMzg3MTFFOEJENzA3NTVDQzRGOUFFMDIvRUQzODhBMTg0 MEJCMTFFOUE2NzE4ODQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnPAkwDwQCAAIwCQMHBCQG9AABIDANBgkqhkiG9w0BAQsF AAOCAQEA03iUZjZaTK0dDWzWImx0HGWpdZkz+50a6GPwwN19Z2Aj+vI/haIQqeF+ s4ws3h6w1sIKxiGlGwR4GdDHDsVYPR4krVxpnqLMwCpdR11VosAhsRqdAaxkbK1J ste2bzsx3Ddtndw1Pbktc73YvVAS/eOr3IsvGYBa3tyW8EnnHBOFKYdtxAI7lVXA 5PIAC2MuFYQfMFzq+t21wd04lKnz18QnvZh6D7b73+muAUV2GEeWmlLvM+bD7aa9 dlKEnJqTPnITfm3a1eUM2C30yqdxVwW3AB00Flom2zwG1zyiE1KNkV+b+Ta7U6Qr q6CCHvC+Rf+QMPv2LA/R2Floz8Abqw== -----END CERTIFICATE-----Generated at Sun Feb 16 22:19:29 2025 by rpki-client