$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/2E18B9F4F91E11EC9E48A02BC4F9AE02.roa File: 2E18B9F4F91E11EC9E48A02BC4F9AE02.roa (raw, json) Hash identifier: yAfRR/+DRnQdilFydbUlQYYyxtfNQlGh28KEstk9hsc= Subject key identifier: 42:08:B0:B8:60:9C:E6:75:99:CA:51:4A:C8:F2:C1:83:BC:40:05:8C Certificate issuer: /CN=A91CE35F/serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C Certificate serial: 01A7 Authority key identifier: 81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/2E18B9F4F91E11EC9E48A02BC4F9AE02.roa Signing time: Mon 01 Jan 2024 04:05:10 +0000 ROA not before: Mon 01 Jan 2024 04:05:09 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 63927 IP address blocks: 103.125.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE35F/serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C Validity Not Before: Jan 1 04:05:09 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=659239f5-75f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:2e:a3:89:82:28:c0:58:5e:51:93:3d:d1: 09:03:9b:05:99:f3:74:b7:cd:be:bc:8d:34:15:2e: 07:c0:21:5d:05:f5:b3:da:32:ed:e1:95:61:65:7d: 5c:af:9b:55:04:09:3f:0f:cc:19:c1:7f:0f:16:fe: 63:42:13:d6:5b:3f:52:e8:c1:cb:43:e7:d3:24:19: 08:11:56:64:2c:9e:4d:91:8c:34:18:77:0e:07:66: 04:6a:ca:8a:c0:2d:80:d9:03:fa:0f:f6:75:af:fd: 33:75:d2:d0:20:58:7e:e5:86:03:c3:63:c8:87:f3: 5d:8e:2a:14:a9:2c:28:b0:da:83:bf:03:f3:f2:9b: 50:5b:28:91:c0:c6:c3:4d:bf:e9:43:cd:6a:1d:f6: bd:7e:28:97:5a:16:bd:4e:cb:44:ce:2d:54:8f:22: bc:d8:eb:9a:d8:70:8e:ee:2d:e5:6f:81:11:5d:bb: 93:98:6b:29:75:13:b2:12:d3:b2:2f:3b:a8:15:c5: 5a:89:5a:3e:a8:d0:e8:a8:97:df:e4:96:ff:eb:08: 45:0a:db:1c:90:7e:b5:5f:c5:ae:ff:14:91:e7:59: 72:e7:23:6e:fd:da:d6:01:6f:dd:b4:01:b1:82:1e: cf:e2:03:22:37:97:e0:b9:7e:c3:3e:76:9f:a7:28: 4b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:08:B0:B8:60:9C:E6:75:99:CA:51:4A:C8:F2:C1:83:BC:40:05:8C X509v3 Authority Key Identifier: keyid:81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/2E18B9F4F91E11EC9E48A02BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.125.244.0/22 Signature Algorithm: sha256WithRSAEncryption 16:f6:13:8a:96:0c:af:ad:5b:35:91:ea:4a:0b:70:b0:02:92: 48:fa:21:bd:77:ed:bc:88:37:36:8f:85:67:0f:9a:d2:0b:b0: ec:46:7d:9a:2d:9f:fb:03:03:09:1b:f7:4f:5f:82:45:26:70: 34:bb:5c:66:79:ef:57:fc:bc:a8:e0:95:81:e7:dd:8f:43:ae: fd:be:0e:5f:41:04:74:c3:bb:ad:65:c3:2a:03:99:d0:4a:ef: aa:ce:ba:36:10:c8:5e:d5:4c:00:a7:d2:9b:1e:eb:ca:82:5b: 36:26:ae:4d:9e:b0:6d:62:3a:95:49:b5:fd:c2:02:08:17:15: db:5c:be:f1:01:9b:95:b5:51:2f:2e:be:d8:d2:ae:5e:16:57: 83:78:0d:fa:44:28:09:93:0b:84:99:83:c1:69:c3:8c:6f:c2: c3:2d:96:55:f7:37:41:81:e2:8d:8f:2a:f8:3d:28:19:2d:df: 6e:dc:33:cd:7f:96:28:12:4f:c3:ad:ba:7a:6e:cd:5d:16:99: df:21:59:bb:28:b0:96:11:c7:46:e0:ce:2c:76:1a:30:06:8e: 56:1b:50:80:d5:72:01:63:52:6c:89:16:cb:01:c1:67:f6:bc: 40:14:30:d0:6d:df:fe:d5:bf:e5:4e:d0:b4:8d:98:78:eb:5d: 99:55:d9:43 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzNUYxMTAvBgNVBAUTKDgxQTM4QzhCMDk2NjcyMjVFRTA0RjczQUVDRkEwOTU5 MEQxRjQxNEMwHhcNMjQwMTAxMDQwNTA5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTkyMzlmNS03NWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkMuo4mCKMBYXlGTPdEJA5sFmfN0t82+vI00FS4HwCFdBfWz2jLt4ZVhZX1c r5tVBAk/D8wZwX8PFv5jQhPWWz9S6MHLQ+fTJBkIEVZkLJ5NkYw0GHcOB2YEasqK wC2A2QP6D/Z1r/0zddLQIFh+5YYDw2PIh/NdjioUqSwosNqDvwPz8ptQWyiRwMbD Tb/pQ81qHfa9fiiXWha9TstEzi1UjyK82Oua2HCO7i3lb4ERXbuTmGspdROyEtOy LzuoFcVaiVo+qNDoqJff5Jb/6whFCtsckH61X8Wu/xSR51ly5yNu/drWAW/dtAGx gh7P4gMiN5fguX7DPnafpyhLKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEIIsLhg nOZ1mcpRSsjywYO8QAWMMB8GA1UdIwQYMBaAFIGjjIsJZnIl7gT3Ouz6CVkNH0FM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM1Ri9FQzM0NzQyQ0Y5 MUExMUVDOTAxQjhGMjVDNEY5QUUwMi9nYU9NaXdsbWNpWHVCUGM2N1BvSldRMGZR VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhT01pd2xtY2lYdUJQYzY3UG9KV1EwZlFVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0UzNUYvRUMzNDc0MkNGOTFBMTFFQzkwMUI4RjI1QzRGOUFFMDIvMkUxOEI5RjRG OTFFMTFFQzlFNDhBMDJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnffQwDQYJKoZIhvcNAQELBQADggEBABb2E4qWDK+tWzWR 6koLcLACkkj6Ib137byINzaPhWcPmtILsOxGfZotn/sDAwkb909fgkUmcDS7XGZ5 71f8vKjglYHn3Y9Drv2+Dl9BBHTDu61lwyoDmdBK76rOujYQyF7VTACn0pse68qC WzYmrk2esG1iOpVJtf3CAggXFdtcvvEBm5W1US8uvtjSrl4WV4N4DfpEKAmTC4SZ g8Fpw4xvwsMtllX3N0GB4o2PKvg9KBkt327cM81/ligST8OtunpuzV0Wmd8hWbso sJYRx0bgzix2GjAGjlYbUIDVcgFjUmyJFssBwWf2vEAUMNBt3/7Vv+VO0LSNmHjr XZlV2UM= -----END CERTIFICATE-----Generated at Sat May 25 06:05:15 2024 by rpki-client on console-ams.rpki-client.org