$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/2EC10CF4071C11EFAD19C863C4F9AE02.roa File: 2EC10CF4071C11EFAD19C863C4F9AE02.roa (raw, json) Hash identifier: Y+jK0YiITj1fWstmg7VEHVKcSXHK5MXXLGNw5LXxFzk= Subject key identifier: 00:18:C8:93:F1:FC:2F:65:92:30:00:64:7D:F1:1D:DB:A0:49:A5:94 Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Certificate serial: 3D Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/2EC10CF4071C11EFAD19C863C4F9AE02.roa Signing time: Wed 10 Jul 2024 21:18:58 +0000 ROA not before: Wed 10 Jul 2024 21:18:58 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 58945 IP address blocks: 103.214.159.0/24 maxlen: 24 144.48.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Validity Not Before: Jul 10 21:18:58 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=668efac2-15e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b7:39:45:56:c5:a6:be:d3:7b:3d:e0:9d:d0: c0:b0:d4:72:62:09:ea:99:c4:47:a2:e0:57:30:83: d5:ac:6b:87:98:04:a5:49:db:d7:88:f5:f7:70:01: 6b:1f:97:d1:8b:f7:8b:37:6b:5f:83:4c:d0:98:1b: ae:58:da:5b:1d:19:6b:83:12:77:d8:56:92:eb:3a: eb:e9:32:c0:89:54:65:98:d8:34:f3:f1:ad:2c:07: c3:f7:b2:9e:43:c0:5b:e4:d3:5e:e5:6a:43:d8:6b: ae:e1:ce:62:c1:b8:ec:ad:a6:4b:50:df:5a:e5:88: 77:20:e2:b5:c6:47:ef:fe:db:3e:49:ee:a5:8d:13: de:ad:41:66:2c:69:dc:cc:8b:ab:75:53:27:7a:42: f7:42:af:95:08:2e:8e:96:8b:4e:a8:9e:69:fe:c5: ca:46:07:0e:18:49:9f:fb:52:60:1a:20:10:98:4b: ff:5b:2a:a3:a4:8f:6e:79:f2:cb:29:92:a8:32:65: f2:69:4a:0f:e0:90:a9:67:2b:b9:47:2b:ed:1c:42: 5e:c3:be:45:13:65:a3:78:01:6b:8d:af:0d:ee:9e: 7b:6d:8b:aa:ea:2a:41:0e:75:37:ca:c5:54:24:13: 86:65:3c:db:eb:0a:ce:b3:aa:eb:e1:19:4e:1c:57: 56:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:18:C8:93:F1:FC:2F:65:92:30:00:64:7D:F1:1D:DB:A0:49:A5:94 X509v3 Authority Key Identifier: keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/2EC10CF4071C11EFAD19C863C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.214.159.0/24 144.48.115.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:82:7c:44:db:aa:95:f6:b3:d2:64:f2:9e:cb:47:0e:06:3b: f0:cc:36:75:ab:cd:70:18:f0:5b:78:5d:66:77:d9:94:92:75: bb:27:69:4c:7b:8c:0d:fc:83:a3:38:aa:74:31:0c:88:2e:f7: 48:b3:e7:c2:82:46:d1:48:1c:b4:fe:a7:97:0e:b3:03:3c:a7: 40:7f:ba:0a:b0:59:ed:b6:16:b6:cb:65:34:45:9d:4b:83:ca: a8:d0:82:c2:58:5b:9f:33:9f:47:b0:de:8a:71:cb:f2:aa:19: 1d:bb:a8:9e:44:b6:0c:7d:08:5d:1f:65:f5:d9:66:67:db:65: be:f3:35:5b:1c:04:a4:1b:77:2a:f0:fc:3a:a4:c2:15:ba:15: a2:c8:59:68:29:0a:9d:c1:34:de:6a:54:d6:c2:9f:61:e7:e7: 08:48:18:3b:79:f7:d6:90:d5:b4:49:d7:1b:85:62:e3:c7:dc: 4f:d2:ef:1c:f7:36:d6:ce:86:b2:34:bb:54:c8:a7:db:22:60: 46:d8:c7:15:f7:20:2b:a5:2c:f4:42:bb:27:25:70:3e:0d:55: 00:0b:54:52:65:b7:1c:92:02:6e:e7:e7:24:36:f3:87:04:8d: fa:db:97:23:a0:b6:0d:fb:49:fb:e7:98:e0:4d:82:19:53:41: fa:81:fc:e9 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0I2ODExMC8GA1UEBRMoOUFDQjgwNjY2M0ZCMEZDRjZFQkM0M0MwMTBCOTM1RTA1 MjE0RkM5RjAeFw0yNDA3MTAyMTE4NThaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2OGVmYWMyLTE1ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrtzlFVsWmvtN7PeCd0MCw1HJiCeqZxEei4Fcwg9Wsa4eYBKVJ29eI9fdwAWsf l9GL94s3a1+DTNCYG65Y2lsdGWuDEnfYVpLrOuvpMsCJVGWY2DTz8a0sB8P3sp5D wFvk017lakPYa67hzmLBuOytpktQ31rliHcg4rXGR+/+2z5J7qWNE96tQWYsadzM i6t1Uyd6QvdCr5UILo6Wi06onmn+xcpGBw4YSZ/7UmAaIBCYS/9bKqOkj2558ssp kqgyZfJpSg/gkKlnK7lHK+0cQl7DvkUTZaN4AWuNrw3unntti6rqKkEOdTfKxVQk E4ZlPNvrCs6zquvhGU4cV1YHAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUABjIk/H8 L2WSMABkffEd26BJpZQwHwYDVR0jBBgwFoAUmsuAZmP7D89uvEPAELk14FIU/J8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3QjY4LzUzQTdCOTJDQjBB NTExRUE4RjkyRUQxN0M0RjlBRTAyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9K OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXN1QVptUDdEODl1dkVQQUVMazE0RklVX0o4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi8yRUMxMENGNDA3 MUMxMUVGQUQxOUM4NjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAGfWnwMEAJAwczANBgkqhkiG9w0BAQsFAAOCAQEATIJ8RNuq lfaz0mTynstHDgY78Mw2davNcBjwW3hdZnfZlJJ1uydpTHuMDfyDoziqdDEMiC73 SLPnwoJG0UgctP6nlw6zAzynQH+6CrBZ7bYWtstlNEWdS4PKqNCCwlhbnzOfR7De inHL8qoZHbuonkS2DH0IXR9l9dlmZ9tlvvM1WxwEpBt3KvD8OqTCFboVoshZaCkK ncE03mpU1sKfYefnCEgYO3n31pDVtEnXG4Vi48fcT9LvHPc21s6GsjS7VMin2yJg RtjHFfcgK6Us9EK7JyVwPg1VAAtUUmW3HJICbufnJDbzhwSN+tuXI6C2DftJ++eY 4E2CGVNB+oH86Q== -----END CERTIFICATE-----Generated at Wed Nov 20 21:35:02 2024 by rpki-client on console-ams.rpki-client.org