$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/2E9F8D4A08F911ED8F90BA78C4F9AE02.roa File: 2E9F8D4A08F911ED8F90BA78C4F9AE02.roa (raw, json) Hash identifier: qQOIJ0lcwqmCJOnDFoB5aMDri/0+odCLlhKVJ/uxcsQ= Subject key identifier: D3:AD:53:43:57:9F:42:DE:B3:C4:41:46:79:CB:62:C6:53:84:A5:F4 Certificate issuer: /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3 Certificate serial: 0605 Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/2E9F8D4A08F911ED8F90BA78C4F9AE02.roa Signing time: Mon 30 Sep 2024 22:42:09 +0000 ROA not before: Mon 30 Sep 2024 22:42:09 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 141004 IP address blocks: 103.120.176.0/24 maxlen: 24 103.120.177.0/24 maxlen: 24 103.120.178.0/24 maxlen: 24 103.120.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3 Validity Not Before: Sep 30 22:42:09 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fb2940-90c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a8:32:59:9a:f2:4b:a7:29:83:29:43:54:9a: de:ea:96:8c:4c:11:1d:d3:b6:46:ef:81:cd:2b:a5: e2:41:cd:39:01:a8:95:94:e7:e2:f8:36:5f:32:2b: 08:a8:ac:b8:7e:ad:ca:49:4a:ca:cb:6a:e1:2d:8e: 65:d4:56:11:70:01:5a:4c:b2:4c:1c:46:e0:1a:b6: d8:63:1a:c1:77:93:f3:b9:91:b0:57:9a:ba:00:8f: 34:d3:ce:db:06:2b:b0:91:d9:2c:9d:84:67:c5:fc: 03:5f:11:68:bd:42:31:c6:0d:d0:02:e5:d1:61:0e: 04:20:a1:61:1a:9e:df:b1:1a:cd:41:ed:ee:50:5e: 81:f1:e7:7b:9f:6a:c4:f5:bb:33:f5:c0:51:4b:42: 98:6e:8d:ac:88:a1:30:ab:fe:96:35:43:e0:34:96: 82:ce:ee:57:44:ab:18:b0:9f:0e:6c:94:a9:4e:22: 5c:74:e8:16:a6:4c:4d:6e:4f:26:df:e4:83:72:d9: 0f:99:6a:3a:9c:56:fa:aa:c8:7b:d9:30:cc:41:32: 0d:a2:55:7f:fa:93:e1:a7:3a:11:2b:da:9b:2c:5e: 53:63:c5:4c:fa:7b:88:62:7a:8c:b6:b8:52:8d:d8: 6a:82:00:86:41:93:f5:18:b2:9e:3d:d5:1f:d4:23: 0f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AD:53:43:57:9F:42:DE:B3:C4:41:46:79:CB:62:C6:53:84:A5:F4 X509v3 Authority Key Identifier: keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/2E9F8D4A08F911ED8F90BA78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.176.0/22 Signature Algorithm: sha256WithRSAEncryption a6:d6:f7:12:66:45:6f:77:41:6f:00:2b:86:b6:dd:d0:fc:66: ae:51:5a:33:6f:49:94:ae:b6:b0:18:8f:df:50:de:05:2c:91: 99:97:c7:39:09:c7:5f:9c:f6:43:63:49:3b:dd:8b:8a:cc:96: 9b:07:f5:66:07:7d:7a:3f:1b:8f:b9:8a:86:ad:3c:03:40:a6: 3e:84:e9:8e:0a:37:6e:bc:8b:34:1f:e8:ab:67:25:5c:08:78: a3:ef:d9:00:41:a0:f8:3f:9e:6a:29:5e:f2:d8:be:3b:60:e6: 9f:8f:6a:65:f0:94:2e:6e:fe:17:ac:1f:3d:d5:32:ba:7e:6e: 48:44:5c:11:16:0e:37:9d:14:53:28:3d:00:df:1f:fc:a9:61: 94:56:1a:43:39:7e:8e:9b:f7:7f:92:95:71:80:02:90:52:4b: 51:c2:48:dc:23:9b:06:fb:41:b5:ac:fa:4c:fb:d4:69:2e:35: e1:95:e5:48:96:d1:df:f3:06:79:e0:12:5e:3b:f1:41:1e:a8: 53:fc:12:03:b6:49:70:db:ea:ac:ec:72:08:43:be:51:2f:4f: 82:45:b2:68:fe:e2:9a:5f:8b:bf:ad:a9:69:45:15:e1:da:db: 1e:90:d0:2d:0b:ab:73:83:a3:6b:e3:5b:4e:08:82:dd:13:5e: ed:54:3e:ac -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczRkQxMTAvBgNVBAUTKEIwNEJCQTFGMThDMEU3MDgzMUYzNTRGNzQ1NUVFMTVE MzIyOTQxQjMwHhcNMjQwOTMwMjI0MjA5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZiMjk0MC05MGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KgyWZryS6cpgylDVJre6paMTBEd07ZG74HNK6XiQc05AaiVlOfi+DZfMisI qKy4fq3KSUrKy2rhLY5l1FYRcAFaTLJMHEbgGrbYYxrBd5PzuZGwV5q6AI80087b BiuwkdksnYRnxfwDXxFovUIxxg3QAuXRYQ4EIKFhGp7fsRrNQe3uUF6B8ed7n2rE 9bsz9cBRS0KYbo2siKEwq/6WNUPgNJaCzu5XRKsYsJ8ObJSpTiJcdOgWpkxNbk8m 3+SDctkPmWo6nFb6qsh72TDMQTINolV/+pPhpzoRK9qbLF5TY8VM+nuIYnqMtrhS jdhqggCGQZP1GLKePdUf1CMPdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNOtU0NX n0Les8RBRnnLYsZThKX0MB8GA1UdIwQYMBaAFLBLuh8YwOcIMfNU90Ve4V0yKUGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNGRC9EQ0IyNUI5NjdC NDMxMUVCODM1MzM2NjZDNEY5QUUwMi9zRXU2SHhqQTV3Z3g4MVQzUlY3aFhUSXBR Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NFdTZIeGpBNXdneDgxVDNSVjdoWFRJcFFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDczRkQvRENCMjVCOTY3QjQzMTFFQjgzNTMzNjY2QzRGOUFFMDIvMkU5RjhENEEw OEY5MTFFRDhGOTBCQTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJneLAwDQYJKoZIhvcNAQELBQADggEBAKbW9xJmRW93QW8A K4a23dD8Zq5RWjNvSZSutrAYj99Q3gUskZmXxzkJx1+c9kNjSTvdi4rMlpsH9WYH fXo/G4+5ioatPANApj6E6Y4KN268izQf6KtnJVwIeKPv2QBBoPg/nmopXvLYvjtg 5p+PamXwlC5u/hesHz3VMrp+bkhEXBEWDjedFFMoPQDfH/ypYZRWGkM5fo6b93+S lXGAApBSS1HCSNwjmwb7QbWs+kz71GkuNeGV5UiW0d/zBnngEl478UEeqFP8EgO2 SXDb6qzscghDvlEvT4JFsmj+4ppfi7+tqWlFFeHa2x6Q0C0Lq3ODo2vjW04Igt0T Xu1UPqw= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:51 2024 by rpki-client on console-ams.rpki-client.org