$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa File: E52DE77630B611EC981BBF1CC4F9AE02.roa (raw, json) Hash identifier: Do6OgnR2E8Iy4DGGhWcszr7SeA/TupAI+DlFPIrWpNg= Subject key identifier: E6:CB:25:49:D3:30:9A:81:BD:A9:62:46:92:EE:92:89:75:B1:5A:8A Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Certificate serial: 03EF Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa Signing time: Tue 21 May 2024 02:36:13 +0000 ROA not before: Tue 21 May 2024 02:36:13 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 45753 IP address blocks: 103.89.72.0/24 maxlen: 24 103.133.72.0/23 maxlen: 24 103.133.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1007 (0x3ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7B3 Validity Not Before: May 21 02:36:13 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=664c089d-7bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:ad:61:6d:e4:2f:05:e7:e7:e1:23:95:e9: 5d:55:00:3b:af:aa:cc:f7:1d:ff:2f:04:bb:4f:c0: a3:b2:69:fd:cd:df:1d:cc:ac:08:af:c1:e7:1a:5c: 3b:d1:7e:df:a1:98:bb:fe:d4:e0:d3:7e:75:22:fb: 8e:40:0d:1a:ec:7c:44:3b:37:40:86:0b:5c:2f:bb: 51:a2:93:1c:44:26:af:ee:6e:98:27:c0:dd:59:a5: 47:cd:8a:10:09:bc:43:e0:ac:a4:66:fb:06:e4:34: 32:f9:78:d8:6f:89:9f:a4:0f:19:57:f3:d6:42:7b: 5c:56:6a:67:16:9c:5f:b8:34:06:0d:ba:6e:a8:af: cc:ba:78:ef:b4:4f:bc:41:6b:32:a8:f4:88:40:01: 4f:3b:d8:58:7d:9a:36:43:56:b4:13:f8:5e:0d:02: 1e:a0:67:e1:83:40:21:b5:63:49:61:92:a4:05:39: 71:4a:22:83:0b:e7:e1:cb:b8:c8:75:88:27:da:6d: 3a:e9:88:88:55:e3:44:23:6b:9b:ef:5d:b7:fd:fd: 56:f4:57:15:11:fa:20:ea:9f:53:af:34:e3:3a:0b: 6b:9d:bd:92:cc:17:47:0f:41:03:86:0e:ed:cf:1d: 09:6b:43:f1:78:4d:6e:9b:13:c5:27:0a:50:9b:28: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CB:25:49:D3:30:9A:81:BD:A9:62:46:92:EE:92:89:75:B1:5A:8A X509v3 Authority Key Identifier: keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.72.0/24 103.133.72.0-103.133.74.255 Signature Algorithm: sha256WithRSAEncryption 6f:b9:72:f7:b5:c5:d4:9c:49:9f:98:74:44:83:68:f9:ce:c8: c6:7b:bb:ec:4c:35:8a:47:ac:c3:3f:fe:9a:89:59:47:6b:4e: c7:bf:94:5e:0f:3c:19:0d:7f:07:7b:3b:22:ab:e5:4c:58:98: ac:42:84:03:02:47:c4:b0:14:69:68:ae:6f:8c:f2:71:8b:d1: 01:59:5d:4a:0c:f5:b8:79:10:31:f3:14:53:36:50:7e:5c:83: 28:eb:46:6b:5d:57:db:5f:95:a8:aa:9f:b9:7c:59:de:eb:cc: 95:ab:cb:1c:0f:12:df:13:7c:47:6a:f5:65:82:89:80:29:31: 65:9e:a6:47:35:18:9f:89:58:f2:33:4f:53:4c:9b:21:31:6e: a8:e6:b1:f4:97:2e:5d:eb:ce:4d:55:fc:b3:a9:4e:ca:53:b4: b3:96:b3:f8:fd:0a:15:3e:b2:f5:fc:30:a8:50:c4:9e:70:5f: 1f:93:e1:2e:b3:4a:a0:f8:6c:e1:37:93:3a:20:8a:0b:a9:6b: f6:e9:56:48:94:04:bc:92:5b:43:68:a0:8d:94:47:cd:10:86: b5:7a:a0:59:0b:d0:65:87:c4:fb:9b:1e:96:df:9b:f4:1d:ae: 53:35:46:68:10:fe:95:d6:84:d0:45:40:7b:6a:73:47:95:ed: 91:53:48:c5 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICA+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3QjMxMTAvBgNVBAUTKDFFRkU3NkQxQThEQzZDRDAyNENCM0NGNDA3OTBBNUYx NEEyQzIxMzgwHhcNMjQwNTIxMDIzNjEzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRjMDg5ZC03YmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHWtYW3kLwXn5+EjleldVQA7r6rM9x3/LwS7T8Cjsmn9zd8dzKwIr8HnGlw7 0X7foZi7/tTg0351IvuOQA0a7HxEOzdAhgtcL7tRopMcRCav7m6YJ8DdWaVHzYoQ CbxD4KykZvsG5DQy+XjYb4mfpA8ZV/PWQntcVmpnFpxfuDQGDbpuqK/MunjvtE+8 QWsyqPSIQAFPO9hYfZo2Q1a0E/heDQIeoGfhg0AhtWNJYZKkBTlxSiKDC+fhy7jI dYgn2m066YiIVeNEI2ub7123/f1W9FcVEfog6p9TrzTjOgtrnb2SzBdHD0EDhg7t zx0Ja0PxeE1umxPFJwpQmygxaQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFObLJUnT MJqBvaliRpLukol1sVqKMB8GA1UdIwQYMBaAFB7+dtGo3GzQJMs89AeQpfFKLCE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdCMy8yRkQ4MTVFQzMw QjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JOQWt5enowQjVDbDhVb3NJ VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NTIwYWpjYk5Ba3l6ejBCNUNsOFVvc0lUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI3QjMvMkZEODE1RUMzMEI0MTFFQzgwNjA5Mjc1QzRGOUFFMDIvRTUyREU3NzYz MEI2MTFFQzk4MUJCRjFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBABnWUgwDAMEA2eFSAMEAGeFSjANBgkqhkiG9w0BAQsFAAOC AQEAb7ly97XF1JxJn5h0RINo+c7Ixnu77Ew1ikeswz/+molZR2tOx7+UXg88GQ1/ B3s7IqvlTFiYrEKEAwJHxLAUaWiub4zycYvRAVldSgz1uHkQMfMUUzZQflyDKOtG a11X21+VqKqfuXxZ3uvMlavLHA8S3xN8R2r1ZYKJgCkxZZ6mRzUYn4lY8jNPU0yb ITFuqOax9JcuXevOTVX8s6lOylO0s5az+P0KFT6y9fwwqFDEnnBfH5PhLrNKoPhs 4TeTOiCKC6lr9ulWSJQEvJJbQ2igjZRHzRCGtXqgWQvQZYfE+5selt+b9B2uUzVG aBD+ldaE0EVAe2pzR5XtkVNIxQ== -----END CERTIFICATE-----Generated at Sun Feb 16 20:23:37 2025 by rpki-client