$ rpki-client -vvf rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/2A3E4DF001DC11EDA4B7F257C4F9AE02.roa File: 2A3E4DF001DC11EDA4B7F257C4F9AE02.roa (raw, json) Hash identifier: 56BPGPWaqRhhCkZAdHvAAee9wYzaL61TQ1IWobBaQTk= Subject key identifier: 2E:E5:71:36:DD:5C:BF:51:53:0A:6D:51:E2:CB:C0:97:F3:7F:04:8E Certificate issuer: /CN=A91C984B/serialNumber=3A830242E84EDC765A073120AC24F0400E4F6046 Certificate serial: 01D1 Authority key identifier: 3A:83:02:42:E8:4E:DC:76:5A:07:31:20:AC:24:F0:40:0E:4F:60:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoMCQuhO3HZaBzEgrCTwQA5PYEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/2A3E4DF001DC11EDA4B7F257C4F9AE02.roa Signing time: Wed 01 May 2024 05:07:09 +0000 ROA not before: Wed 01 May 2024 05:07:09 +0000 ROA not after: Thu 29 Aug 2024 00:00:00 +0000 asID: 17483 IP address blocks: 103.226.208.0/24 maxlen: 24 103.226.209.0/24 maxlen: 24 103.226.210.0/24 maxlen: 24 103.226.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.crl rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoMCQuhO3HZaBzEgrCTwQA5PYEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C984B/serialNumber=3A830242E84EDC765A073120AC24F0400E4F6046 Validity Not Before: May 1 05:07:09 2024 GMT Not After : Aug 29 00:00:00 2024 GMT Subject: CN=6631cdfd-a667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:6c:c7:f4:d3:55:b3:55:05:69:3a:17:df: 34:f4:ed:77:6c:37:dc:ac:4e:1c:4f:49:11:0c:4d: 80:9c:4e:2f:bb:21:f9:01:0a:ad:f1:e9:6b:4e:1f: aa:8b:c1:96:fc:d8:73:b2:00:57:57:2c:5b:5d:80: 8f:4c:65:9d:67:0a:25:e5:ab:7d:7e:d5:a6:9c:54: 72:23:56:52:76:b0:a6:4a:1d:d2:93:91:f8:c8:4e: 8e:5b:d0:55:c6:c2:3d:01:1e:6f:5b:0e:b6:c8:be: 4d:59:13:c1:b2:b6:95:0b:33:9c:2c:1e:9b:45:6d: 68:9b:1d:38:f3:bb:09:a5:33:ad:15:18:d7:e4:09: 59:3c:7f:20:dd:d6:2a:6e:70:5c:65:d4:2b:a2:cf: 33:2e:c2:cc:83:83:e9:5f:d0:1a:fc:14:c4:81:12: 18:28:de:7d:cb:6d:d0:34:5a:42:4a:82:14:51:61: 96:56:06:3b:fa:f0:be:e8:1f:50:e9:18:40:ad:f8: 2d:6a:30:90:c1:bb:09:27:57:aa:1a:e5:9a:9a:8f: c5:c2:f9:7f:86:1b:d2:ab:9b:91:e9:6d:ab:22:d0: 3e:a9:b6:24:9b:40:9d:16:59:e9:50:c2:08:02:20: 1c:ed:eb:7a:86:d4:7a:98:2b:0d:04:02:56:67:68: 47:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E5:71:36:DD:5C:BF:51:53:0A:6D:51:E2:CB:C0:97:F3:7F:04:8E X509v3 Authority Key Identifier: keyid:3A:83:02:42:E8:4E:DC:76:5A:07:31:20:AC:24:F0:40:0E:4F:60:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoMCQuhO3HZaBzEgrCTwQA5PYEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/2A3E4DF001DC11EDA4B7F257C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.226.208.0/22 Signature Algorithm: sha256WithRSAEncryption ed:91:4c:82:25:e9:b5:8e:dd:b1:ac:55:96:49:07:d3:79:cd: b4:0b:e4:65:1e:e8:62:01:c9:25:07:58:67:e6:dd:66:b0:ff: 22:72:ea:38:b7:99:78:60:e6:ed:c4:88:b3:20:29:d9:0f:94: 00:13:df:34:18:ae:bf:a8:a9:b9:8b:66:4d:83:36:7b:82:16: 66:b0:31:fa:70:13:67:fd:5c:a0:bb:c2:1d:c6:3a:e0:b2:03: ab:46:82:31:79:b4:7c:39:85:85:20:f9:77:43:54:51:b7:6f: cd:a5:8c:6d:80:f9:e5:07:47:3b:bb:81:fb:ff:42:b2:94:9c: b8:85:cf:1c:e4:87:2c:c1:4d:c4:9b:68:4b:f9:79:13:26:1d: 83:86:9d:ef:df:cf:64:24:62:d0:19:81:a9:95:f2:9b:4f:b8: 4e:bd:9d:ea:c9:c3:b7:6b:18:0a:1b:c2:44:10:15:df:9d:da: f9:80:7c:84:7f:fa:86:b2:c9:02:b2:a3:63:00:cd:f0:63:29: 51:e7:ed:ea:4c:3d:34:1d:af:36:70:d9:7d:c6:ad:70:8a:a0: 5d:bf:34:4c:72:f4:88:0d:0b:eb:91:3b:5a:ad:0a:ed:7d:10: d4:fa:14:ec:60:60:a2:2a:82:17:ef:18:2c:28:9d:34:c6:04: 6e:b7:c3:1a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk4NEIxMTAvBgNVBAUTKDNBODMwMjQyRTg0RURDNzY1QTA3MzEyMEFDMjRGMDQw MEU0RjYwNDYwHhcNMjQwNTAxMDUwNzA5WhcNMjQwODI5MDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxY2RmZC1hNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJxsx/TTVbNVBWk6F9809O13bDfcrE4cT0kRDE2AnE4vuyH5AQqt8elrTh+q i8GW/NhzsgBXVyxbXYCPTGWdZwol5at9ftWmnFRyI1ZSdrCmSh3Sk5H4yE6OW9BV xsI9AR5vWw62yL5NWRPBsraVCzOcLB6bRW1omx0487sJpTOtFRjX5AlZPH8g3dYq bnBcZdQros8zLsLMg4PpX9Aa/BTEgRIYKN59y23QNFpCSoIUUWGWVgY7+vC+6B9Q 6RhArfgtajCQwbsJJ1eqGuWamo/Fwvl/hhvSq5uR6W2rItA+qbYkm0CdFlnpUMII AiAc7et6htR6mCsNBAJWZ2hHvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC7lcTbd XL9RUwptUeLLwJfzfwSOMB8GA1UdIwQYMBaAFDqDAkLoTtx2WgcxIKwk8EAOT2BG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTg0Qi9GMzJGMDAxNDAx RDgxMUVEOUM4NUY4NTFDNEY5QUUwMi9Pb01DUXVoTzNIWmFCekVnckNUd1FBNVBZ RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vTUNRdWhPM0haYUJ6RWdyQ1R3UUE1UFlFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk4NEIvRjMyRjAwMTQwMUQ4MTFFRDlDODVGODUxQzRGOUFFMDIvMkEzRTRERjAw MURDMTFFREE0QjdGMjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn4tAwDQYJKoZIhvcNAQELBQADggEBAO2RTIIl6bWO3bGs VZZJB9N5zbQL5GUe6GIBySUHWGfm3Waw/yJy6ji3mXhg5u3EiLMgKdkPlAAT3zQY rr+oqbmLZk2DNnuCFmawMfpwE2f9XKC7wh3GOuCyA6tGgjF5tHw5hYUg+XdDVFG3 b82ljG2A+eUHRzu7gfv/QrKUnLiFzxzkhyzBTcSbaEv5eRMmHYOGne/fz2QkYtAZ gamV8ptPuE69nerJw7drGAobwkQQFd+d2vmAfIR/+oayyQKyo2MAzfBjKVHn7epM PTQdrzZw2X3GrXCKoF2/NExy9IgNC+uRO1qtCu19ENT6FOxgYKIqghfvGCwonTTG BG63wxo= -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org