$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/EE2B9106D95E11E7A5E2E166C4F9AE02.roa File: EE2B9106D95E11E7A5E2E166C4F9AE02.roa (raw, json) Hash identifier: 464b1biL/7a6FIAKPAceLOp0kJT6PQlnl7HNFihj0TA= Subject key identifier: C7:43:1A:14:B1:72:6B:AD:BE:6B:F0:01:A7:90:A3:4E:F5:BB:B2:53 Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Certificate serial: 16C8 Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/EE2B9106D95E11E7A5E2E166C4F9AE02.roa Signing time: Wed 24 Jan 2024 17:34:43 +0000 ROA not before: Wed 24 Jan 2024 17:34:43 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 136620 IP address blocks: 103.105.48.0/22 maxlen: 22 103.105.48.0/24 maxlen: 24 103.105.49.0/24 maxlen: 24 103.105.50.0/24 maxlen: 24 103.105.51.0/24 maxlen: 24 2402:28c0::/40 maxlen: 40 2402:28c0:2::/48 maxlen: 48 2402:28c0:3::/48 maxlen: 48 2402:28c0:4::/48 maxlen: 48 2402:28c0:100::/48 maxlen: 48 2402:28c0:101::/48 maxlen: 48 2402:28c0:102::/47 maxlen: 47 2402:28c0:104::/46 maxlen: 46 2402:28c0:108::/45 maxlen: 45 2402:28c0:110::/44 maxlen: 44 2402:28c0:120::/43 maxlen: 43 2402:28c0:140::/42 maxlen: 42 2402:28c0:180::/41 maxlen: 41 2402:28c0:200::/39 maxlen: 39 2402:28c0:400::/38 maxlen: 38 2402:28c0:800::/37 maxlen: 37 2402:28c0:1000::/36 maxlen: 36 2402:28c0:2000::/35 maxlen: 35 2402:28c0:4000::/34 maxlen: 34 2402:28c0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5832 (0x16c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Validity Not Before: Jan 24 17:34:43 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b14a33-5c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:70:7b:9e:71:55:d8:b0:11:e6:29:7f:b0:65: 9c:93:b0:9a:fd:ce:ad:66:a7:1c:45:3a:a8:e8:3d: 54:70:28:8e:fc:34:ed:47:8d:ff:82:9e:4c:ee:e4: 90:98:08:14:c9:01:e4:85:08:6a:15:04:f7:63:3f: 4a:04:c6:e2:a1:53:86:e6:95:f8:e8:70:a8:06:95: df:90:2f:fc:a4:ea:a2:e5:1c:e3:f8:1e:d1:d0:c1: 58:3c:7d:45:f8:b4:8b:06:a0:5e:86:cf:ac:10:0c: b3:f2:55:1e:72:22:e4:b4:d4:72:b1:d1:0f:c6:4b: e2:8b:33:5f:5b:71:f0:08:1c:9d:9d:75:ed:c5:8b: 2f:a2:92:e6:61:4b:19:1f:f3:16:12:b2:ff:d6:a7: 66:4d:60:c4:a3:5d:56:c7:50:d7:23:11:8a:c5:e3: d4:d2:e1:c8:4d:df:6a:ea:32:ff:ca:88:22:7f:7f: d0:83:73:20:f2:76:af:34:f2:0d:81:87:fa:bd:97: 22:b6:b5:d2:d8:54:1a:f5:b4:89:d6:16:a8:60:51: 73:aa:13:9c:42:e4:ab:f3:95:b7:90:5e:4e:41:97: 64:4d:46:88:fe:f3:ec:62:3a:29:f8:4a:5a:a6:8e: db:7e:d9:51:fc:f2:06:32:22:54:70:fe:9c:5e:6e: 18:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:43:1A:14:B1:72:6B:AD:BE:6B:F0:01:A7:90:A3:4E:F5:BB:B2:53 X509v3 Authority Key Identifier: keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/EE2B9106D95E11E7A5E2E166C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.105.48.0/22 IPv6: 2402:28c0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:2d:66:7f:09:9f:17:49:c6:04:ec:83:e8:c3:8b:d2:24:6e: dc:09:99:1a:41:3c:ae:bf:e2:a2:e1:c8:f7:c4:8d:de:cd:7c: 60:23:9d:c6:7c:f9:85:59:32:91:df:80:f8:b1:11:cd:4c:ac: c9:e9:17:45:19:6d:c5:d5:84:f5:ef:be:54:54:c5:41:c9:77: cd:38:66:75:63:26:26:b3:55:a6:02:1b:83:88:2c:92:8d:11: 6e:4f:57:c4:6a:62:05:b2:3d:01:12:32:26:7b:33:72:1c:a2: c2:f2:1d:34:e9:b0:97:e5:e7:a7:42:dd:d7:b0:0a:f8:53:e5: 1c:9e:33:95:95:d5:ed:f0:94:43:fd:20:e0:f9:b2:bc:02:b2: a3:44:c2:3f:77:22:7e:d2:82:e6:d8:4f:a3:39:39:0b:65:f1: b1:03:b1:30:ac:8e:19:28:1a:53:25:dd:58:bf:f2:87:86:49: 2e:a7:61:dd:3d:c6:45:fe:e5:9e:d1:a5:7d:b5:b2:79:d9:85: 8c:00:82:02:8c:68:a0:5e:95:ba:50:ba:b5:78:31:c5:f6:b2: fb:f2:48:fa:c9:1a:ed:67:1e:05:49:40:b6:e7:cc:b1:11:1c: cf:df:96:04:bd:51:7e:eb:17:1a:01:ca:d2:1a:a5:2c:83:00: 74:36:83:6f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICFsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMjUxMTAvBgNVBAUTKENFOTA1NkI0QzY1REUzODU3RDREMEUxREIwMDIzRDYw QjZGN0QzMEMwHhcNMjQwMTI0MTczNDQzWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWIxNGEzMy01YzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXB7nnFV2LAR5il/sGWck7Ca/c6tZqccRTqo6D1UcCiO/DTtR43/gp5M7uSQ mAgUyQHkhQhqFQT3Yz9KBMbioVOG5pX46HCoBpXfkC/8pOqi5Rzj+B7R0MFYPH1F +LSLBqBehs+sEAyz8lUeciLktNRysdEPxkviizNfW3HwCBydnXXtxYsvopLmYUsZ H/MWErL/1qdmTWDEo11Wx1DXIxGKxePU0uHITd9q6jL/yogif3/Qg3Mg8navNPIN gYf6vZcitrXS2FQa9bSJ1haoYFFzqhOcQuSr85W3kF5OQZdkTUaI/vPsYjop+Epa po7bftlR/PIGMiJUcP6cXm4Y7wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMdDGhSx cmutvmvwAaeQo071u7JTMB8GA1UdIwQYMBaAFM6QVrTGXeOFfU0OHbACPWC299MM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDEyNS83QTE0MkQwMEQ5 NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0VjlUUTRkc0FJOVlMYjMw d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pwQld0TVpkNDRWOVRRNGRzQUk5WUxiMzB3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REQxMjUvN0ExNDJEMDBEOTVFMTFFNzg3QTFBNzY2QzRGOUFFMDIvRUUyQjkxMDZE OTVFMTFFN0E1RTJFMTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnaTAwDQQCAAIwBwMFACQCKMAwDQYJKoZIhvcNAQELBQAD ggEBACotZn8JnxdJxgTsg+jDi9IkbtwJmRpBPK6/4qLhyPfEjd7NfGAjncZ8+YVZ MpHfgPixEc1MrMnpF0UZbcXVhPXvvlRUxUHJd804ZnVjJiazVaYCG4OILJKNEW5P V8RqYgWyPQESMiZ7M3IcosLyHTTpsJfl56dC3dewCvhT5RyeM5WV1e3wlEP9IOD5 srwCsqNEwj93In7SgubYT6M5OQtl8bEDsTCsjhkoGlMl3Vi/8oeGSS6nYd09xkX+ 5Z7RpX21snnZhYwAggKMaKBelbpQurV4McX2svvySPrJGu1nHgVJQLbnzLERHM/f lgS9UX7rFxoBytIapSyDAHQ2g28= -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:08 2024 by rpki-client on console-ams.rpki-client.org