$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/E5BB4DB260E411EF83727F5CC4F9AE02.roa File: E5BB4DB260E411EF83727F5CC4F9AE02.roa (raw, json) Hash identifier: eZp2CA+M2VeWLVisSQN2NYrGntfUlIE7QcZK9HLRl2Y= Subject key identifier: 2F:44:14:6F:E9:3A:CC:69:F7:14:4A:E0:52:53:93:EB:FD:FA:29:30 Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Certificate serial: 1F Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/E5BB4DB260E411EF83727F5CC4F9AE02.roa Signing time: Fri 23 Aug 2024 00:16:10 +0000 ROA not before: Fri 23 Aug 2024 00:16:10 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 38716 IP address blocks: 103.161.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Validity Not Before: Aug 23 00:16:10 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=66c7d4c9-fb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:72:e7:32:8e:07:0c:48:ee:ad:98:93:73: 53:ae:e4:ee:0f:4f:0f:06:43:4b:4e:8e:d1:25:60: db:3e:e9:f3:0b:7f:d4:93:62:18:54:67:b6:21:0c: c3:f6:78:f1:91:20:c1:a6:ac:05:b1:19:50:3e:9b: 7c:df:2a:7a:82:0e:f8:0e:5e:d4:95:06:98:fe:0e: 74:32:2b:33:00:00:83:fe:7f:c6:a4:c3:1d:3c:29: 61:f6:95:5e:59:12:c1:7b:d2:e8:42:58:62:59:8b: 9e:44:5b:0a:d3:1d:fd:67:8e:d0:84:6d:3e:19:d4: 85:0d:ae:cd:a5:d6:5d:0e:a5:0c:04:f7:58:9a:3b: 0d:31:f2:34:45:ac:09:db:42:0c:f6:c7:f2:7f:24: b0:f2:ff:6e:52:16:0d:6b:55:af:c2:f0:d4:34:c5: dd:dc:dc:f2:db:7b:2a:c6:45:7f:08:ad:75:47:bd: 28:d3:05:4b:0a:40:34:91:63:42:34:9d:ea:60:30: 29:d9:6c:7d:8c:45:bc:66:09:2d:aa:da:fc:56:e5: cb:2e:40:d4:cd:9b:9b:d0:f9:2d:23:e3:09:a6:d9: 08:4d:91:eb:b4:39:6e:95:41:9c:58:9e:b9:0a:26: 42:28:62:f0:eb:46:59:dc:9e:9b:fe:1d:f5:33:93: 81:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:44:14:6F:E9:3A:CC:69:F7:14:4A:E0:52:53:93:EB:FD:FA:29:30 X509v3 Authority Key Identifier: keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/E5BB4DB260E411EF83727F5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.227.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:14:73:8e:48:d5:2a:da:17:31:30:56:34:ec:44:48:e8:d9: ab:58:fa:0d:a8:67:5b:1b:0e:c6:f2:62:b4:18:db:9c:54:7b: a9:cf:3d:78:5b:24:76:f4:57:a0:50:50:e4:81:bb:6f:6e:9f: 2c:81:3f:89:67:c6:ab:e7:0b:a8:c2:a4:e2:8d:a1:d6:ae:cd: d4:d7:33:22:6a:41:bc:a1:58:31:14:33:b8:51:78:2b:f8:f4: a9:3f:df:3f:ee:2a:8b:48:73:22:c8:fa:57:08:95:97:cf:88: 85:4a:dc:96:e0:6f:46:ef:c2:34:39:d5:27:db:1d:0d:8f:d9: 03:2d:e4:1a:f1:0b:67:ee:b9:4d:15:ed:7b:5c:fb:b0:cd:79: 1b:0e:bc:14:fa:2c:42:5f:8a:ba:cd:ea:4a:23:db:33:9b:49: 2d:d9:df:33:63:47:9d:20:b5:c7:04:33:65:da:2b:b4:ad:51: 53:69:09:a6:6e:0f:8c:76:b0:97:0c:e7:f7:df:a7:f6:fc:2d: 5d:5f:62:2d:59:7d:42:15:dc:ac:f1:d5:da:75:3f:fc:60:3b: a8:0a:91:4f:83:fb:56:ee:70:6f:84:a7:4b:03:62:ec:66:d9: 96:fe:d9:9e:49:f0:bb:ff:10:23:cb:94:a9:d4:e0:b7:fb:dc: 85:9c:9c:ec -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0QwQzExMC8GA1UEBRMoMzUyQzJGNDJGRkY2NkNCODZBNjlDNjdFRTYxQkFCNkUx MTE1NEVDQjAeFw0yNDA4MjMwMDE2MTBaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YzdkNGM5LWZiOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFGnLnMo4HDEjurZiTc1Ou5O4PTw8GQ0tOjtElYNs+6fMLf9STYhhUZ7YhDMP2 ePGRIMGmrAWxGVA+m3zfKnqCDvgOXtSVBpj+DnQyKzMAAIP+f8akwx08KWH2lV5Z EsF70uhCWGJZi55EWwrTHf1njtCEbT4Z1IUNrs2l1l0OpQwE91iaOw0x8jRFrAnb Qgz2x/J/JLDy/25SFg1rVa/C8NQ0xd3c3PLbeyrGRX8IrXVHvSjTBUsKQDSRY0I0 nepgMCnZbH2MRbxmCS2q2vxW5csuQNTNm5vQ+S0j4wmm2QhNkeu0OW6VQZxYnrkK JkIoYvDrRlncnpv+HfUzk4F5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUL0QUb+k6 zGn3FErgUlOT6/36KTAwHwYDVR0jBBgwFoAUNSwvQv/2bLhqacZ+5hurbhEVTssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDRDBDLzgxOUEwMjM0MzJD QjExRUY5RUEwQzk2QUM0RjlBRTAyL05Td3ZRdl8yYkxocWFjWi01aHVyYmhFVlRz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlN3dlF2XzJiTGhxYWNaLTVodXJiaEVWVHNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0QwQy84MTlBMDIzNDMyQ0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9FNUJCNERCMjYw RTQxMUVGODM3MjdGNUNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeh4zANBgkqhkiG9w0BAQsFAAOCAQEALBRzjkjVKtoXMTBW NOxESOjZq1j6DahnWxsOxvJitBjbnFR7qc89eFskdvRXoFBQ5IG7b26fLIE/iWfG q+cLqMKk4o2h1q7N1NczImpBvKFYMRQzuFF4K/j0qT/fP+4qi0hzIsj6VwiVl8+I hUrcluBvRu/CNDnVJ9sdDY/ZAy3kGvELZ+65TRXte1z7sM15Gw68FPosQl+Kus3q SiPbM5tJLdnfM2NHnSC1xwQzZdortK1RU2kJpm4PjHawlwzn99+n9vwtXV9iLVl9 QhXcrPHV2nU//GA7qAqRT4P7Vu5wb4SnSwNi7GbZlv7Znknwu/8QI8uUqdTgt/vc hZyc7A== -----END CERTIFICATE-----Generated at Tue Sep 17 08:12:29 2024 by rpki-client on console-ams.rpki-client.org