$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/E2AD90E813E811E9B287C144C4F9AE02.roa File: E2AD90E813E811E9B287C144C4F9AE02.roa (raw, json) Hash identifier: bLM4hecBjp4+kZrFBYpUYh3+T8MNWN7sNl7r7CCqW6U= Subject key identifier: F2:FD:25:00:84:BE:C0:FE:8A:0B:35:2B:AA:45:7E:59:E5:F6:CF:F9 Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Certificate serial: 2C9F Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/E2AD90E813E811E9B287C144C4F9AE02.roa Signing time: Thu 02 May 2024 16:02:31 +0000 ROA not before: Thu 02 May 2024 16:02:31 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 55651 IP address blocks: 103.24.120.0/24 maxlen: 24 103.24.121.0/24 maxlen: 24 103.24.122.0/24 maxlen: 24 103.24.123.0/24 maxlen: 24 2406:bd00:de00::/48 maxlen: 48 2406:bd00:de50::/48 maxlen: 48 2406:bd00:decd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11423 (0x2c9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Validity Not Before: May 2 16:02:31 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6633b916-0c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a6:d2:a3:06:7d:60:57:26:71:b6:c4:68:c8: a3:2c:13:2b:85:6b:a6:8d:0c:20:81:ef:fa:b7:4c: f7:e0:82:b1:bf:f5:5c:88:3c:51:4d:22:ec:2f:fa: 0a:3a:82:21:e6:83:fe:14:b5:0d:81:cc:e9:76:da: 8c:37:15:df:da:d5:7b:5e:84:05:c2:1d:71:b7:36: 92:e6:31:02:8d:7d:a6:41:42:35:03:9d:3a:ad:d2: bf:a6:e2:bf:07:2f:0f:f0:fa:77:20:7e:3d:fc:31: 43:e1:93:63:d4:26:b6:43:b9:b0:94:ee:ab:4e:8a: 8b:73:f2:2d:9f:3c:f6:2b:18:99:2f:ff:1b:20:14: fa:6e:1a:08:09:d1:f5:7f:f6:70:79:43:0e:cf:ea: ec:04:84:fd:30:55:ed:6f:ef:ea:d7:69:21:b0:74: 70:2e:02:c1:bb:26:e6:ba:cb:b8:26:59:a5:4f:e2: 12:75:3e:39:0e:06:fe:4b:13:9e:67:7b:ed:df:46: d5:9d:0e:39:15:27:1a:b3:d1:0e:cb:64:3f:9a:0f: d5:cf:08:00:f9:dc:6b:ab:2f:f4:f0:85:7e:47:23: 05:aa:68:c4:30:1f:05:d3:a3:a2:eb:14:77:49:c6: f5:bc:f2:d8:20:42:db:1b:59:df:8b:c9:85:db:ed: 8a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FD:25:00:84:BE:C0:FE:8A:0B:35:2B:AA:45:7E:59:E5:F6:CF:F9 X509v3 Authority Key Identifier: keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/E2AD90E813E811E9B287C144C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.120.0/22 IPv6: 2406:bd00:de00::/48 2406:bd00:de50::/48 2406:bd00:decd::/48 Signature Algorithm: sha256WithRSAEncryption 4e:46:7b:02:cf:5e:6c:3c:c2:a3:f6:68:7c:b2:b6:61:2d:10: 68:19:ca:6c:5f:2d:10:58:b1:df:d1:13:52:46:fe:b7:05:10: dc:d6:11:a8:31:3f:3f:9c:59:37:c6:39:11:a4:eb:9f:4c:2c: 5b:49:af:aa:b7:c8:57:36:a6:ce:3a:b4:4b:60:d7:d6:aa:5e: cf:1a:bc:f8:7e:e4:20:f1:3e:97:01:a9:27:08:07:0c:e7:09: 9c:32:ad:3e:9b:f4:d1:60:5d:6a:c6:16:35:22:ab:45:a4:90: 52:c7:a7:7f:5e:be:1f:39:99:b8:30:0b:c0:f5:7f:c8:b1:8d: 84:cf:c1:58:a4:47:ac:8b:87:9c:5d:0c:d4:97:20:0c:37:4c: 58:0c:26:e1:7c:11:7c:67:82:4c:83:82:18:b7:75:b0:22:43: c4:2b:e1:78:1f:65:dc:06:16:54:e7:63:80:62:a0:16:d4:be: c4:f3:10:82:af:8a:81:70:23:a6:20:5a:60:90:aa:e3:11:52: bf:62:ae:08:a0:be:3e:81:3c:8f:0f:7a:d7:11:b1:b4:2e:01: 77:d0:13:52:0d:87:1c:2d:a7:d2:1b:53:f6:d8:f4:42:fe:9c: 70:22:bc:3c:49:e1:4f:74:39:a8:28:98:9b:40:56:50:21:f1: 9c:29:a5:0d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICLJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2 QkIxQjc0RDkwHhcNMjQwNTAyMTYwMjMxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzYjkxNi0wYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6bSowZ9YFcmcbbEaMijLBMrhWumjQwgge/6t0z34IKxv/VciDxRTSLsL/oK OoIh5oP+FLUNgczpdtqMNxXf2tV7XoQFwh1xtzaS5jECjX2mQUI1A506rdK/puK/ By8P8Pp3IH49/DFD4ZNj1Ca2Q7mwlO6rToqLc/Itnzz2KxiZL/8bIBT6bhoICdH1 f/ZweUMOz+rsBIT9MFXtb+/q12khsHRwLgLBuybmusu4JlmlT+ISdT45Dgb+SxOe Z3vt30bVnQ45FScas9EOy2Q/mg/VzwgA+dxrqy/08IV+RyMFqmjEMB8F06Oi6xR3 Scb1vPLYIELbG1nfi8mF2+2KTwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFPL9JQCE vsD+igs1K6pFflnl9s/5MB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzIxQzcvNTQyMjJGRDA4RkFCMTFFMzkzNjJFRjM1NTkxMUVBMzIvRTJBRDkwRTgx M0U4MTFFOUIyODdDMTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMAwEAgABMAYDBAJnGHgwIQQCAAIwGwMHACQGvQDeAAMHACQGvQDeUAMHACQG vQDezTANBgkqhkiG9w0BAQsFAAOCAQEATkZ7As9ebDzCo/ZofLK2YS0QaBnKbF8t EFix39ETUkb+twUQ3NYRqDE/P5xZN8Y5EaTrn0wsW0mvqrfIVzamzjq0S2DX1qpe zxq8+H7kIPE+lwGpJwgHDOcJnDKtPpv00WBdasYWNSKrRaSQUsenf16+HzmZuDAL wPV/yLGNhM/BWKRHrIuHnF0M1JcgDDdMWAwm4XwRfGeCTIOCGLd1sCJDxCvheB9l 3AYWVOdjgGKgFtS+xPMQgq+KgXAjpiBaYJCq4xFSv2KuCKC+PoE8jw961xGxtC4B d9ATUg2HHC2n0htT9tj0Qv6ccCK8PEnhT3Q5qCiYm0BWUCHxnCmlDQ== -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org