$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/E0C5B7148F2C11EEA361B22FC4F9AE02.roa File: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (raw, json) Hash identifier: aB1vZOko5LuCPFaMLMMYKE7YXbi5h8lQp7z82oAmSsI= Subject key identifier: B0:0C:5F:A4:0C:5E:50:89:21:0D:D6:78:77:09:EB:C7:53:CE:08:97 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 0326 Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/E0C5B7148F2C11EEA361B22FC4F9AE02.roa Signing time: Wed 27 Dec 2023 02:14:36 +0000 ROA not before: Wed 27 Dec 2023 02:14:36 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 136038 IP address blocks: 103.254.72.0/24 maxlen: 24 103.254.73.0/24 maxlen: 24 103.254.74.0/24 maxlen: 24 103.254.75.0/24 maxlen: 24 192.51.188.0/24 maxlen: 24 192.197.113.0/24 maxlen: 24 199.212.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 806 (0x326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Dec 27 02:14:36 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658b888c-d5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:4c:b5:45:2b:a6:b0:a8:e7:3b:9c:54:50: 24:16:d5:c8:2d:a0:12:1c:3e:c7:b3:9e:2a:f7:1a: a1:4f:cf:92:69:df:08:5a:30:bc:b3:cb:c1:b7:8b: ed:80:8c:a5:77:f4:0e:ec:16:8c:57:b0:3a:17:a1: ae:34:3b:7b:81:bf:0d:46:a0:38:dc:e6:bc:1f:89: 2a:34:49:8b:ab:90:44:14:57:57:61:a6:c1:c4:19: 5a:e5:18:f4:cd:9d:aa:84:e4:b7:6b:27:19:44:fe: ad:97:c2:a8:cd:9d:8c:25:2a:ce:5b:52:09:65:35: aa:63:00:a8:9b:a6:c3:67:44:db:46:ec:93:4d:2e: 25:a2:0a:31:dd:c9:4c:86:26:e5:fc:48:a5:88:34: df:bd:85:6a:dc:2e:4c:a8:c1:f1:0d:63:d4:51:4b: 46:ed:df:27:49:2a:39:5e:1e:46:40:b0:83:20:68: 98:4f:d2:1c:b9:40:f9:84:c3:a6:01:4c:86:9c:01: 94:19:f8:2c:1d:54:78:21:c9:36:57:7a:4e:28:80: 15:07:2e:0a:f2:06:18:10:3d:ad:5d:00:ed:d8:43: 95:ef:b8:8c:07:f7:7e:f9:c7:d1:67:55:f6:4a:20: 3b:ec:22:ad:fb:1b:3f:04:0a:c9:8b:f1:45:86:71: 6e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0C:5F:A4:0C:5E:50:89:21:0D:D6:78:77:09:EB:C7:53:CE:08:97 X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/E0C5B7148F2C11EEA361B22FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.254.72.0/22 192.51.188.0/24 192.197.113.0/24 199.212.57.0/24 Signature Algorithm: sha256WithRSAEncryption 69:b7:07:4e:ed:04:4b:de:7a:c5:4b:83:30:e1:87:5d:a0:75: de:e4:1e:58:24:f1:5e:88:45:33:70:50:21:5f:41:95:4a:bc: 56:c0:26:c2:1a:5e:b4:c4:31:1e:27:cd:e1:07:ae:82:37:1d: ab:0a:61:e5:a7:28:05:c5:2f:8a:f9:99:33:0a:6d:0b:24:3d: e4:d2:61:ac:86:ab:57:81:3b:1b:7d:40:ff:e3:ad:a5:e1:3a: 2c:ad:5f:9d:98:58:0b:f8:37:1d:83:c2:8b:6c:be:d5:fc:62: b1:22:c8:b9:d2:b0:fa:c4:ca:69:ed:82:de:d3:f3:ad:85:57: 68:d4:ee:c7:ec:82:bc:2b:6d:0f:d7:90:82:83:95:c9:f0:aa: 36:11:42:f2:cf:3e:4d:c2:53:33:9d:4d:80:af:d2:3a:7f:a2: 54:d6:2b:83:bc:6d:03:68:5a:66:ab:4c:d8:0f:6e:e5:c0:6f: d6:ef:83:e2:98:66:b0:99:d9:42:e1:61:b2:09:69:2b:43:4f: 46:53:3a:43:93:b8:3d:96:f9:cf:69:fe:ef:ae:28:e3:3f:15: 4f:d2:6a:b1:ac:2b:e2:cd:81:13:fa:df:d9:4a:59:66:40:98: c6:02:3b:f1:89:1e:b5:55:65:2b:43:8e:81:b3:25:b8:b1:4b: 92:e7:7e:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjMxMjI3MDIxNDM2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThiODg4Yy1kNWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYZMtUUrprCo5zucVFAkFtXILaASHD7Hs54q9xqhT8+Sad8IWjC8s8vBt4vt gIyld/QO7BaMV7A6F6GuNDt7gb8NRqA43Oa8H4kqNEmLq5BEFFdXYabBxBla5Rj0 zZ2qhOS3aycZRP6tl8KozZ2MJSrOW1IJZTWqYwCom6bDZ0TbRuyTTS4logox3clM hibl/EiliDTfvYVq3C5MqMHxDWPUUUtG7d8nSSo5Xh5GQLCDIGiYT9IcuUD5hMOm AUyGnAGUGfgsHVR4Ick2V3pOKIAVBy4K8gYYED2tXQDt2EOV77iMB/d++cfRZ1X2 SiA77CKt+xs/BArJi/FFhnFuIQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFLAMX6QM XlCJIQ3WeHcJ68dTzgiXMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVCODEvQ0Y5NjYzQzY3MEY3MTFFQ0IzMThFNDNBQzRGOUFFMDIvRTBDNUI3MTQ4 RjJDMTFFRUEzNjFCMjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJn/kgDBADAM7wDBADAxXEDBADH1DkwDQYJKoZIhvcNAQEL BQADggEBAGm3B07tBEveesVLgzDhh12gdd7kHlgk8V6IRTNwUCFfQZVKvFbAJsIa XrTEMR4nzeEHroI3HasKYeWnKAXFL4r5mTMKbQskPeTSYayGq1eBOxt9QP/jraXh OiytX52YWAv4Nx2DwotsvtX8YrEiyLnSsPrEymntgt7T862FV2jU7sfsgrwrbQ/X kIKDlcnwqjYRQvLPPk3CUzOdTYCv0jp/olTWK4O8bQNoWmarTNgPbuXAb9bvg+KY ZrCZ2ULhYbIJaStDT0ZTOkOTuD2W+c9p/u+uKOM/FU/SarGsK+LNgRP639lKWWZA mMYCO/GJHrVVZStDjoGzJbixS5Lnfn0= -----END CERTIFICATE-----Generated at Wed May 15 03:50:00 2024 by rpki-client on console-fra.rpki-client.org