$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/2DE1069C050311EA93648E33C4F9AE02.roa File: 2DE1069C050311EA93648E33C4F9AE02.roa (raw, json) Hash identifier: zDl80I2OXRgu8XAGzajWbluuoVqJ4qa8l1cE9aEJ0WU= Subject key identifier: 0F:FF:88:64:21:C1:82:FD:2F:25:7A:AA:40:14:C9:30:D8:0C:29:F7 Certificate issuer: /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Certificate serial: 0B7F Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/2DE1069C050311EA93648E33C4F9AE02.roa Signing time: Fri 12 Apr 2024 19:27:57 +0000 ROA not before: Fri 12 Apr 2024 19:27:57 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135895 IP address blocks: 103.17.232.0/22 maxlen: 24 103.220.225.0/24 maxlen: 24 116.206.216.0/22 maxlen: 24 2402:4280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2943 (0xb7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Validity Not Before: Apr 12 19:27:57 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66198b3d-bdbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:33:27:d6:f9:23:5d:ec:3e:ef:1a:9e:66:e1: e4:a6:68:dd:65:9c:21:be:e4:f4:8f:f8:3f:e7:df: 34:12:00:1d:af:94:31:f9:e6:7a:cc:2a:4d:34:f7: b5:ca:f9:8e:ba:41:a2:bf:b5:19:6d:f5:5c:bb:93: 93:1e:e7:48:37:f0:8c:bd:0c:f2:4e:2e:37:a2:6e: 06:10:d0:3b:14:58:35:61:d7:66:07:f0:7c:13:d6: 45:a1:cc:f8:37:af:06:a7:64:d9:9e:ff:77:da:49: c5:7f:5b:c1:ed:de:5a:a5:d9:11:d2:50:09:de:c1: 88:8a:0f:ac:5f:ae:3c:41:1d:77:0f:87:59:31:79: f8:88:1c:f9:b5:12:8e:39:88:10:1c:28:17:3c:98: ef:8b:8b:58:e6:0f:4d:21:9f:59:26:95:e9:1f:4d: ba:36:c8:78:f3:0c:32:38:05:29:32:17:9f:7a:f6: 04:49:a5:cf:b1:27:64:8a:c5:6f:78:20:45:12:f7: 7d:ce:3e:eb:ac:1f:9f:7c:01:9d:87:52:d1:bd:e1: 67:11:81:fb:6b:68:1b:62:51:31:16:35:31:4e:1f: 68:33:27:02:b9:ce:07:b7:ab:30:24:cd:ce:33:c8: 84:b4:ab:42:49:8c:05:8b:2c:1a:a1:13:2e:44:09: 72:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FF:88:64:21:C1:82:FD:2F:25:7A:AA:40:14:C9:30:D8:0C:29:F7 X509v3 Authority Key Identifier: keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/2DE1069C050311EA93648E33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.232.0/22 103.220.225.0/24 116.206.216.0/22 IPv6: 2402:4280::/32 Signature Algorithm: sha256WithRSAEncryption 4b:3a:28:b9:a3:9a:8d:b5:91:8d:2f:29:40:77:00:ab:6a:f3: 8f:22:04:1c:0e:fa:3a:45:e2:37:7b:a2:e7:af:db:fd:65:64: 9e:2d:ba:20:e8:3d:7c:e7:0e:1e:f9:6a:36:49:1a:5b:d6:d3: 91:c0:2c:7f:af:af:29:c5:dd:34:04:a4:ca:15:4b:11:5d:0d: f6:e5:57:f5:5a:84:ea:49:1e:24:1b:e9:08:19:35:03:af:49: 34:5b:6b:c6:49:87:fb:13:06:71:9f:ca:68:08:1c:5b:61:19: e5:a8:a3:fc:fe:6f:cb:37:c1:59:3d:ce:c5:fb:5d:37:c5:4a: 08:4a:80:79:4f:ba:a3:92:9a:1e:6c:4b:11:da:5f:8c:fa:03: a9:98:db:46:6a:9f:3c:da:67:7e:12:43:99:68:11:3d:94:6a: 99:3f:8b:8a:98:a4:36:94:ce:2c:df:cf:92:8b:d6:74:f0:be: 5a:f2:64:f6:02:ac:70:c8:88:0b:50:89:f4:77:cc:b9:1e:14: df:a0:27:03:4e:a4:45:10:f9:58:cc:68:e5:20:d8:8a:7e:c6: e9:c2:cb:41:e7:d3:ab:76:b1:4d:ac:ea:2e:f4:5e:c0:3e:92: a4:59:8c:85:77:6b:bd:20:4f:1c:55:da:aa:c9:ce:89:28:9f: 46:c4:a6:e9 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICC38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNENTAxMTAvBgNVBAUTKEY1MURDNjY5REI1OTYxODREMEJGOTRBQTFFNDFFNURF MTU5RThEQTUwHhcNMjQwNDEyMTkyNzU3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE5OGIzZC1iZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jMn1vkjXew+7xqeZuHkpmjdZZwhvuT0j/g/5980EgAdr5Qx+eZ6zCpNNPe1 yvmOukGiv7UZbfVcu5OTHudIN/CMvQzyTi43om4GENA7FFg1YddmB/B8E9ZFocz4 N68Gp2TZnv932knFf1vB7d5apdkR0lAJ3sGIig+sX648QR13D4dZMXn4iBz5tRKO OYgQHCgXPJjvi4tY5g9NIZ9ZJpXpH026Nsh48wwyOAUpMhefevYESaXPsSdkisVv eCBFEvd9zj7rrB+ffAGdh1LRveFnEYH7a2gbYlExFjUxTh9oMycCuc4Ht6swJM3O M8iEtKtCSYwFiywaoRMuRAlylQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFA//iGQh wYL9LyV6qkAUyTDYDCn3MB8GA1UdIwQYMBaAFPUdxmnbWWGE0L+Uqh5B5d4Vno2l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q1MC8xNTQ2NEZENjA1 MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZVFF2NVNxSGtIbDNoV2Vq YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSM0dhZHRaWVlUUXY1U3FIa0hsM2hXZWphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDNENTAvMTU0NjRGRDYwNTAxMTFFQUFEOTcyNTJDQzRGOUFFMDIvMkRFMTA2OUMw NTAzMTFFQTkzNjQ4RTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnEegDBABn3OEDBAJ0ztgwDQQCAAIwBwMFACQCQoAwDQYJ KoZIhvcNAQELBQADggEBAEs6KLmjmo21kY0vKUB3AKtq848iBBwO+jpF4jd7ouev 2/1lZJ4tuiDoPXznDh75ajZJGlvW05HALH+vrynF3TQEpMoVSxFdDfblV/VahOpJ HiQb6QgZNQOvSTRba8ZJh/sTBnGfymgIHFthGeWoo/z+b8s3wVk9zsX7XTfFSghK gHlPuqOSmh5sSxHaX4z6A6mY20ZqnzzaZ34SQ5loET2Uapk/i4qYpDaUzizfz5KL 1nTwvlryZPYCrHDIiAtQifR3zLkeFN+gJwNOpEUQ+VjMaOUg2Ip+xunCy0Hn06t2 sU2s6i70XsA+kqRZjIV3a70gTxxV2qrJzokon0bEpuk= -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org