$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/E32E2F000EE811EE90BBC818C4F9AE02.roa File: E32E2F000EE811EE90BBC818C4F9AE02.roa (raw, json) Hash identifier: rZTxgnVXWMDQsg0oTYE7f4kyKGpDxh1zgyaFzYbZkqY= Subject key identifier: CA:CB:CC:A3:39:B8:8C:83:A3:D1:7B:C2:BB:35:7E:69:49:BE:8C:DC Certificate issuer: /CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC Certificate serial: 08A7 Authority key identifier: 4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/E32E2F000EE811EE90BBC818C4F9AE02.roa Signing time: Fri 28 Jun 2024 21:25:08 +0000 ROA not before: Fri 28 Jun 2024 21:25:08 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 134160 IP address blocks: 45.115.232.0/22 maxlen: 24 103.56.12.0/22 maxlen: 24 103.225.216.0/23 maxlen: 23 2402:4880::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2215 (0x8a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC Validity Not Before: Jun 28 21:25:08 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667f2a34-902e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:c4:06:49:50:ca:26:f8:25:2d:90:2a:25: 02:7a:56:1e:c9:82:d8:ea:5b:7b:6b:14:fe:c3:1b: 09:25:a8:b8:e8:22:5f:f7:0d:66:c1:9e:fb:77:8b: df:42:b1:84:de:1b:e6:68:92:27:93:61:09:8e:89: 6f:19:f6:d1:15:de:4f:3f:e2:0b:e3:f9:b0:8b:71: 98:1d:0b:71:52:f7:3b:58:53:56:22:13:9d:1c:ed: 7f:fb:8f:b3:1d:3a:ee:60:ed:4e:98:4f:ee:31:b2: b0:75:73:9a:0a:27:99:2e:ba:45:c8:c2:0d:a2:67: 22:41:b0:5a:64:ca:7b:78:02:90:1e:44:3b:9a:09: bd:ca:6d:2d:46:e4:66:a4:1d:00:ec:63:99:27:14: 70:71:70:5c:7b:44:9a:a9:0a:a2:e6:32:46:af:e5: 5f:29:24:4b:01:d9:67:71:76:4a:22:fb:25:fe:dc: a8:52:53:d8:bd:58:fd:04:b5:85:9e:2a:e4:d6:86: c7:67:82:aa:c5:c5:bc:a5:30:06:08:90:c1:35:ee: 98:92:d8:32:32:c7:71:5d:e0:33:f2:b5:60:c4:b1: d7:19:68:2c:1b:08:d1:01:b2:6e:1c:b6:73:b6:9f: 47:cc:cb:bc:63:a4:99:74:e3:37:f6:10:15:c0:74: d6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CB:CC:A3:39:B8:8C:83:A3:D1:7B:C2:BB:35:7E:69:49:BE:8C:DC X509v3 Authority Key Identifier: keyid:4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/E32E2F000EE811EE90BBC818C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.232.0/22 103.56.12.0/22 103.225.216.0/23 IPv6: 2402:4880::/32 Signature Algorithm: sha256WithRSAEncryption 91:c2:a2:94:ea:25:9c:06:dd:09:d3:3d:b6:40:64:64:b4:b0: b0:0a:84:e8:d4:a7:8b:6a:ae:4d:53:a4:4d:7a:9f:2c:c2:37: 32:47:af:a8:5c:a3:65:42:4a:30:eb:94:ed:5b:52:a3:bd:e5: 72:ac:89:be:b4:11:9c:5c:65:f9:6a:f8:0a:90:74:37:0f:73: 1e:8c:93:0d:b7:0c:4b:d7:ba:9d:b2:41:a8:e7:42:a1:e7:58: e5:50:9e:67:1e:3e:75:fb:48:4b:a9:2b:c9:a8:2e:eb:6e:2f: 41:45:d4:85:71:3a:08:f9:5b:1d:eb:d0:9a:db:33:72:76:73: df:8e:75:7c:d8:89:9c:29:d5:7e:b2:7d:ba:8e:31:52:67:40: 83:a1:ce:b2:d5:65:ff:b7:c3:54:7e:e8:f4:f6:0a:b2:cb:9f: ba:df:50:e3:c6:9c:c9:7b:3e:3d:bd:3c:35:f0:a6:4d:61:f0: 87:82:8a:0f:5a:57:00:e6:58:da:93:11:0e:e3:f1:aa:b7:ab: 3d:8f:41:c1:c2:f3:6a:4c:f6:57:51:bc:90:8e:09:29:41:c2: 5f:13:30:50:9a:76:eb:9e:14:ae:b6:d7:de:37:02:6f:4e:46: 5a:a4:fc:09:1e:b1:6f:58:22:7e:e4:49:98:a5:a6:93:39:42: ba:6e:bc:fa -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICCKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0QzMxMTAvBgNVBAUTKDRFRjk0NzNCNTU0QUUxQTcyQkEwOTgxRkZFRkUxMzhF MkQ0ODBFQ0MwHhcNMjQwNjI4MjEyNTA4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdmMmEzNC05MDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2/EBklQyib4JS2QKiUCelYeyYLY6lt7axT+wxsJJai46CJf9w1mwZ77d4vf QrGE3hvmaJInk2EJjolvGfbRFd5PP+IL4/mwi3GYHQtxUvc7WFNWIhOdHO1/+4+z HTruYO1OmE/uMbKwdXOaCieZLrpFyMINomciQbBaZMp7eAKQHkQ7mgm9ym0tRuRm pB0A7GOZJxRwcXBce0SaqQqi5jJGr+VfKSRLAdlncXZKIvsl/tyoUlPYvVj9BLWF nirk1obHZ4KqxcW8pTAGCJDBNe6YktgyMsdxXeAz8rVgxLHXGWgsGwjRAbJuHLZz tp9HzMu8Y6SZdOM39hAVwHTW5QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMrLzKM5 uIyDo9F7wrs1fmlJvozcMB8GA1UdIwQYMBaAFE75RztVSuGnK6CYH/7+E44tSA7M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRDMy9DMjNGNzY3Qzk5 ODAxMUVBQjMzNzNFNkZDNEY5QUUwMi9UdmxITzFWSzRhY3JvSmdmX3Y0VGppMUlE c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R2bEhPMVZLNGFjcm9KZ2ZfdjRUamkxSURzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI0QzMvQzIzRjc2N0M5OTgwMTFFQUIzMzczRTZGQzRGOUFFMDIvRTMyRTJGMDAw RUU4MTFFRTkwQkJDODE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAItc+gDBAJnOAwDBAFn4dgwDQQCAAIwBwMFACQCSIAwDQYJ KoZIhvcNAQELBQADggEBAJHCopTqJZwG3QnTPbZAZGS0sLAKhOjUp4tqrk1TpE16 nyzCNzJHr6hco2VCSjDrlO1bUqO95XKsib60EZxcZflq+AqQdDcPcx6Mkw23DEvX up2yQajnQqHnWOVQnmcePnX7SEupK8moLutuL0FF1IVxOgj5Wx3r0JrbM3J2c9+O dXzYiZwp1X6yfbqOMVJnQIOhzrLVZf+3w1R+6PT2CrLLn7rfUOPGnMl7Pj29PDXw pk1h8IeCig9aVwDmWNqTEQ7j8aq3qz2PQcHC82pM9ldRvJCOCSlBwl8TMFCaduue FK621943Am9ORlqk/AkesW9YIn7kSZilppM5QrpuvPo= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org