$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/E0C16642013B11EFA1286E46C4F9AE02.roa File: E0C16642013B11EFA1286E46C4F9AE02.roa (raw, json) Hash identifier: uhIUjELjVZa5Y62wg4YBJZgNj0OBhnAUsoUiBAK0Lh8= Subject key identifier: 17:4E:39:5E:27:C6:25:4F:B0:C0:0E:4F:8C:F5:79:2F:23:F1:0C:AB Certificate issuer: /CN=A91C62B6/serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC Certificate serial: 1E Authority key identifier: C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/E0C16642013B11EFA1286E46C4F9AE02.roa Signing time: Tue 23 Apr 2024 06:36:56 +0000 ROA not before: Tue 23 Apr 2024 06:36:56 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 138658 IP address blocks: 103.14.151.0/24 maxlen: 24 2401:9460::/32 maxlen: 32 2401:9460:8000::/36 maxlen: 36 2401:9460:9000::/36 maxlen: 36 2401:9460:a000::/36 maxlen: 36 2401:9460:b000::/36 maxlen: 36 2401:9460:c000::/36 maxlen: 36 2401:9460:d000::/36 maxlen: 36 2401:9460:e000::/36 maxlen: 36 2401:9460:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 09:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C62B6/serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC Validity Not Before: Apr 23 06:36:56 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66275707-b310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:26:7a:78:93:dd:ef:ef:8e:13:17:9e:ff: c5:f4:4b:4b:e5:46:c7:b1:05:00:aa:68:1d:71:46: d3:1e:e7:e7:17:63:3e:7a:71:b1:32:ec:b6:ec:57: 5c:80:df:fd:dd:fb:e5:c7:57:d4:f3:d8:32:ab:16: c1:37:2d:b6:44:60:27:0e:7b:a5:6d:06:f5:a2:4d: 6c:37:31:c8:a8:5c:a5:3e:0c:73:1a:aa:ae:38:79: 82:8c:73:38:17:2d:dc:72:c1:4e:22:43:37:53:81: ce:9f:77:1d:df:8e:81:52:1c:bb:6c:e8:46:a9:84: 6f:f6:38:d5:ac:65:80:11:a2:f4:68:44:e4:26:72: 63:47:97:bd:aa:d3:0e:f5:9d:fc:ae:6a:7f:f1:e6: 04:4d:39:08:00:75:33:22:c0:07:3e:45:03:12:93: 61:b7:6e:66:6a:05:45:b8:78:11:f2:0a:1b:8e:69: 1d:ac:a1:97:3c:9d:06:2a:3d:cb:ec:df:8f:22:70: c9:c5:fb:37:e1:74:5c:80:3a:b8:7d:80:86:d3:bc: b6:d2:a2:01:77:c9:c6:39:58:05:0c:a8:9c:a2:ea: bd:90:29:5c:34:96:06:d2:5b:85:e4:c1:41:d0:86: be:ae:89:4b:9f:b6:74:3e:1d:c5:96:12:76:25:e3: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4E:39:5E:27:C6:25:4F:B0:C0:0E:4F:8C:F5:79:2F:23:F1:0C:AB X509v3 Authority Key Identifier: keyid:C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/E0C16642013B11EFA1286E46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.151.0/24 IPv6: 2401:9460::/32 Signature Algorithm: sha256WithRSAEncryption 74:74:78:47:6a:24:15:e2:df:ae:20:e8:19:ef:06:64:e8:4b: 1b:a2:08:63:3c:0e:cc:44:03:46:dc:45:c4:ad:26:56:9b:04: 28:3b:d7:43:99:d7:dc:ff:36:2f:2a:53:51:bc:23:ad:4c:ca: 18:73:6a:8d:73:11:0e:db:f1:85:5e:9a:f9:2e:26:ee:0f:5e: c0:61:6c:ce:c6:40:c0:a2:7d:0c:82:66:8b:b6:e1:ad:6a:2c: b6:f3:64:26:dd:59:7c:b4:1a:89:95:f0:d1:4a:4e:94:f9:c4: c3:5d:8f:4b:30:54:a6:43:29:9c:1f:4d:67:13:8d:25:6b:70: c0:24:10:b1:e2:c3:5d:88:4b:6f:56:47:bc:a1:3b:5c:ee:06: 67:0d:cd:93:be:48:3c:15:71:96:1e:c8:97:ae:86:39:1b:ae: 4e:3a:e2:88:f3:d3:28:44:65:63:bf:93:3c:cf:62:d3:87:7c: f5:5b:b9:43:d0:13:b4:02:2f:a2:d9:a4:f5:ce:24:24:a4:33: 8f:e8:b3:b8:0b:9a:d2:73:b2:22:9f:d9:2a:2e:4d:bf:22:b3: 75:23:3a:f0:be:2c:4e:e8:26:cf:ba:2a:3d:93:47:4a:b8:e5: 2a:8b:f7:0d:7f:dc:4b:f9:01:5b:54:4e:a5:02:bc:91:23:d7: a0:83:6e:82 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjJCNjExMC8GA1UEBRMoQzE0QTBFNjA4MkYwRTkyMkNBRkUyMjk2OTUyM0U4NjRD N0E4RjFEQzAeFw0yNDA0MjMwNjM2NTZaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2Mjc1NzA3LWIzMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqjCZ6eJPd7++OExee/8X0S0vlRsexBQCqaB1xRtMe5+cXYz56cbEy7LbsV1yA 3/3d++XHV9Tz2DKrFsE3LbZEYCcOe6VtBvWiTWw3McioXKU+DHMaqq44eYKMczgX LdxywU4iQzdTgc6fdx3fjoFSHLts6EaphG/2ONWsZYARovRoROQmcmNHl72q0w71 nfyuan/x5gRNOQgAdTMiwAc+RQMSk2G3bmZqBUW4eBHyChuOaR2soZc8nQYqPcvs 348icMnF+zfhdFyAOrh9gIbTvLbSogF3ycY5WAUMqJyi6r2QKVw0lgbSW4XkwUHQ hr6uiUuftnQ+HcWWEnYl48OJAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUF045XifG JU+wwA5PjPV5LyPxDKswHwYDVR0jBBgwFoAUwUoOYILw6SLK/iKWlSPoZMeo8dww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MkI2L0I5OTg3QUE0RkU0 MDExRUU4RkU3NDU2OUM0RjlBRTAyL3dVb09ZSUx3NlNMS19pS1dsU1BvWk1lbzhk dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1VvT1lJTHc2U0xLX2lLV2xTUG9aTWVvOGR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjJCNi9COTk4N0FBNEZFNDAxMUVFOEZFNzQ1NjlDNEY5QUUwMi9FMEMxNjY0MjAx M0IxMUVGQTEyODZFNDZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAGcOlzANBAIAAjAHAwUAJAGUYDANBgkqhkiG9w0BAQsFAAOC AQEAdHR4R2okFeLfriDoGe8GZOhLG6IIYzwOzEQDRtxFxK0mVpsEKDvXQ5nX3P82 LypTUbwjrUzKGHNqjXMRDtvxhV6a+S4m7g9ewGFszsZAwKJ9DIJmi7bhrWostvNk Jt1ZfLQaiZXw0UpOlPnEw12PSzBUpkMpnB9NZxONJWtwwCQQseLDXYhLb1ZHvKE7 XO4GZw3Nk75IPBVxlh7Il66GORuuTjriiPPTKERlY7+TPM9i04d89Vu5Q9ATtAIv otmk9c4kJKQzj+izuAua0nOyIp/ZKi5NvyKzdSM68L4sTugmz7oqPZNHSrjlKov3 DX/cS/kBW1ROpQK8kSPXoINugg== -----END CERTIFICATE-----Generated at Mon Jun 17 11:39:27 2024 by rpki-client on console-fra.rpki-client.org