$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/EC8B7E82450E11EB887ECF6FC4F9AE02.roa File: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (raw, json) Hash identifier: MChKj8CysBVpKBL1Yc5KnUgJyLD5UeDlW+DQqjWmTk8= Subject key identifier: B0:E6:33:EF:82:A1:8A:2D:3D:F4:B2:53:67:A9:99:D1:0F:30:3A:A4 Certificate issuer: /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Certificate serial: 0752 Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/EC8B7E82450E11EB887ECF6FC4F9AE02.roa Signing time: Sat 02 Nov 2024 21:11:20 +0000 ROA not before: Sat 02 Nov 2024 21:11:20 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 141191 IP address blocks: 103.156.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1874 (0x752) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0 Validity Not Before: Nov 2 21:11:20 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67269578-cea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0c:d8:b7:72:3d:47:07:b3:a6:16:26:b2:a6: f5:e9:ca:ea:8b:25:51:d4:af:64:59:b3:5b:c6:fd: dc:fe:92:3e:39:85:60:c2:b0:09:5d:ce:c5:b7:ef: dc:9e:9f:32:6d:68:af:22:6f:59:46:d6:ff:d8:41: 32:6c:f7:9e:d0:10:63:25:7e:86:6c:85:da:7d:01: 9b:69:76:6e:44:f2:e2:15:5e:a5:dd:85:73:b3:4e: 7a:e1:46:b4:34:e4:28:e2:ae:db:d7:5f:64:38:14: 6d:40:a2:a7:99:ef:e6:94:7a:14:e2:f0:84:24:5c: 5b:30:52:a8:8c:a4:52:c0:66:62:a2:b3:af:4a:d9: 3a:48:cd:44:0e:1f:5a:36:c1:0e:fb:32:54:63:6e: 35:c2:fb:80:44:6a:96:8c:16:53:82:cc:5d:14:04: 3d:b0:10:83:00:45:9f:37:54:18:0d:19:57:b3:fa: da:67:64:f3:ec:db:d4:6b:1f:79:3d:23:d1:89:f1: e6:7b:a1:49:57:36:24:db:2d:f0:bd:ea:17:de:05: 4e:9f:2d:0c:a2:e0:ad:44:44:03:af:b4:21:d1:35: 65:99:be:37:21:71:a7:8e:9a:bf:e4:06:ae:8b:c4: df:ce:76:51:f4:83:6c:98:ed:4d:df:01:3d:bd:4a: 27:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E6:33:EF:82:A1:8A:2D:3D:F4:B2:53:67:A9:99:D1:0F:30:3A:A4 X509v3 Authority Key Identifier: keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/EC8B7E82450E11EB887ECF6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.22.0/23 Signature Algorithm: sha256WithRSAEncryption c0:64:d0:91:6c:1d:d2:e9:31:bb:94:84:61:f1:62:ea:12:d7: a2:5f:7e:aa:29:7d:31:40:f1:ab:05:f3:ac:fa:7b:31:1c:90: 27:03:53:9b:7d:b3:66:02:ef:1e:a6:fa:7d:25:a2:55:06:7c: fd:f5:bd:d9:6c:31:86:b6:ce:77:fd:1d:50:41:bd:e6:84:58: e9:06:c6:82:98:7b:3b:a4:5c:fe:d8:5b:dc:37:94:14:ec:3f: 4f:bf:aa:77:1b:2d:be:54:ae:7f:75:2c:f6:be:30:18:d0:39: 16:e7:c4:ea:a4:33:14:fd:d5:ac:70:67:2d:4d:4f:84:a6:04: 27:9a:e1:58:a2:c7:3b:71:7d:46:24:a7:ae:d3:c2:b1:9a:a2: 5f:11:59:c1:41:44:4b:3b:c8:d4:47:cd:d1:ee:22:22:89:aa: 79:4e:2c:9c:38:b5:92:b8:44:fe:35:cf:25:cf:72:7c:a1:7f: 6c:04:97:6a:b9:ea:23:05:5d:08:82:5e:c8:3e:9f:53:4d:7c: 47:6f:b6:40:fc:b5:9a:93:34:d0:c0:bd:83:22:1d:7e:53:9a: 64:ea:34:f7:b4:7e:b1:6e:b0:2e:2b:5c:1c:79:15:c0:35:eb: 5d:09:dc:17:3f:de:ed:b8:e1:41:22:a0:96:51:3c:5a:54:8b: f0:73:1b:7c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVDOTI5Mzc5RUVG QUQ1QkNCQzAwHhcNMjQxMTAyMjExMTIwWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2OTU3OC1jZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QzYt3I9RwezphYmsqb16crqiyVR1K9kWbNbxv3c/pI+OYVgwrAJXc7Ft+/c np8ybWivIm9ZRtb/2EEybPee0BBjJX6GbIXafQGbaXZuRPLiFV6l3YVzs0564Ua0 NOQo4q7b119kOBRtQKKnme/mlHoU4vCEJFxbMFKojKRSwGZiorOvStk6SM1EDh9a NsEO+zJUY241wvuARGqWjBZTgsxdFAQ9sBCDAEWfN1QYDRlXs/raZ2Tz7NvUax95 PSPRifHme6FJVzYk2y3wveoX3gVOny0MouCtREQDr7Qh0TVlmb43IXGnjpq/5Aau i8TfznZR9INsmO1N3wE9vUonnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLDmM++C oYotPfSyU2epmdEPMDqkMB8GA1UdIwQYMBaAFDqF1EfhhnX+1a4FySk3nu+tW8vA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODM4Ri9BOUY3NzM5ODA2 RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2RmN1ZyZ1hKS1RlZTc2MWJ5 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vWFVSLUdHZGY3VnJnWEpLVGVlNzYxYnk4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTgzOEYvQTlGNzczOTgwNkUxMTFFQjlCMzM1QzZEQzRGOUFFMDIvRUM4QjdFODI0 NTBFMTFFQjg4N0VDRjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnBYwDQYJKoZIhvcNAQELBQADggEBAMBk0JFsHdLpMbuU hGHxYuoS16JffqopfTFA8asF86z6ezEckCcDU5t9s2YC7x6m+n0lolUGfP31vdls MYa2znf9HVBBveaEWOkGxoKYezukXP7YW9w3lBTsP0+/qncbLb5Urn91LPa+MBjQ ORbnxOqkMxT91axwZy1NT4SmBCea4ViixztxfUYkp67TwrGaol8RWcFBREs7yNRH zdHuIiKJqnlOLJw4tZK4RP41zyXPcnyhf2wEl2q56iMFXQiCXsg+n1NNfEdvtkD8 tZqTNNDAvYMiHX5TmmTqNPe0frFusC4rXBx5FcA1610J3Bc/3u244UEioJZRPFpU i/BzG3w= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:00 2024 by rpki-client on console-ams.rpki-client.org