$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/E3272FE036B911E99F4D9A5CC4F9AE02.roa File: E3272FE036B911E99F4D9A5CC4F9AE02.roa (raw, json) Hash identifier: 6FqgiZMUxa33Dx66ztigBXPwvboVUKr0rBQAO7+tpXA= Subject key identifier: CA:F0:DA:9A:EF:2B:39:AB:84:C2:AE:DA:A8:78:20:A3:54:C3:D4:C4 Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 0F80 Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/E3272FE036B911E99F4D9A5CC4F9AE02.roa Signing time: Mon 18 Mar 2024 18:26:01 +0000 ROA not before: Mon 18 Mar 2024 18:26:01 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 132129 IP address blocks: 103.134.192.0/22 maxlen: 22 103.134.192.0/24 maxlen: 24 103.134.193.0/24 maxlen: 24 103.134.194.0/24 maxlen: 24 103.134.195.0/24 maxlen: 24 2404:69c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 18:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3968 (0xf80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Validity Not Before: Mar 18 18:26:01 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f88739-761c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:62:e0:f4:5d:2d:74:64:2a:e8:7f:58:a5: 85:84:98:6f:4c:9b:1c:87:23:de:df:e4:89:d9:4e: f5:6c:dd:54:8b:0a:af:ad:fd:72:12:c5:4d:2a:10: b9:27:b6:39:38:74:87:ee:e1:d3:70:9d:81:e0:2a: e3:b3:89:c6:e3:a7:d3:10:8a:75:0b:da:b6:d0:08: 76:03:83:a9:bc:8e:a7:9d:5f:47:64:42:cd:b5:f1: e4:51:60:80:ed:bd:1d:d6:c5:dd:68:27:47:fd:db: 49:aa:8b:c5:52:d7:b8:43:ea:44:6d:58:41:5d:59: 91:d1:07:6f:21:57:29:86:2b:6c:11:95:a3:01:08: 49:1a:74:9e:37:f3:90:ff:25:7a:50:2a:71:77:87: db:3a:23:76:48:d6:67:d1:ed:e6:38:70:c8:1f:2f: b7:93:de:91:62:9d:c0:59:3e:97:e8:29:bd:e5:8d: 4b:ff:90:22:b1:79:e0:d8:ba:d7:fd:d7:f6:ab:f5: b8:6a:56:69:a5:83:90:22:ff:39:9a:22:bc:ce:d8: 75:3e:ec:d9:cc:f3:ed:dc:94:f9:47:7a:0a:fa:01: 4f:43:3c:f2:ee:00:a3:26:c7:27:24:d4:27:0d:4e: e5:8f:55:b4:02:ec:b3:3a:33:a5:76:e5:75:be:0c: 7e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F0:DA:9A:EF:2B:39:AB:84:C2:AE:DA:A8:78:20:A3:54:C3:D4:C4 X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/E3272FE036B911E99F4D9A5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.192.0/22 IPv6: 2404:69c0::/32 Signature Algorithm: sha256WithRSAEncryption 65:be:4b:71:d1:a0:c8:30:f7:08:d5:3c:59:7a:12:15:cf:35: 24:85:ce:34:04:c0:55:4a:37:51:72:66:26:ca:8a:84:18:2d: 6c:e3:c0:a8:38:39:92:1b:71:7f:d5:b1:c5:f1:43:75:b0:b5: d1:3a:7b:e6:ba:59:e6:cd:4e:76:bf:fc:db:01:19:62:d5:49: 7c:59:ec:12:b8:b5:08:54:0e:4d:db:b5:de:8f:0b:58:5a:c5: a7:da:bb:49:c2:05:15:fa:74:dc:85:d7:13:76:c1:3d:97:aa: ee:bd:89:ab:1b:f0:d2:38:37:fe:6d:2f:03:f5:15:cd:23:e2: 19:a9:82:34:82:90:59:9f:eb:7b:72:0c:68:b4:0a:af:97:81: 84:cd:06:09:fc:43:ff:e6:ee:c6:d8:47:9c:86:72:03:9b:47: f7:77:15:22:c2:a1:55:4e:80:7f:58:95:3e:c2:ac:90:a3:58: 76:96:6e:42:69:7b:5c:62:2b:ee:f0:b9:96:93:e2:5f:d6:7a: 73:47:c6:98:5c:23:1c:28:ac:6b:72:7e:65:39:9e:b5:7a:87: 87:7e:36:5c:ea:ae:c0:72:12:fb:bd:af:b4:01:08:21:36:40: 87:f9:30:f1:d2:a8:c7:ee:8f:a8:65:88:91:75:ef:2f:1d:68: 55:1a:21:1c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICD4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjQwMzE4MTgyNjAxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWY4ODczOS03NjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbxi4PRdLXRkKuh/WKWFhJhvTJschyPe3+SJ2U71bN1Uiwqvrf1yEsVNKhC5 J7Y5OHSH7uHTcJ2B4Crjs4nG46fTEIp1C9q20Ah2A4OpvI6nnV9HZELNtfHkUWCA 7b0d1sXdaCdH/dtJqovFUte4Q+pEbVhBXVmR0QdvIVcphitsEZWjAQhJGnSeN/OQ /yV6UCpxd4fbOiN2SNZn0e3mOHDIHy+3k96RYp3AWT6X6Cm95Y1L/5AisXng2LrX /df2q/W4alZppYOQIv85miK8zth1PuzZzPPt3JT5R3oK+gFPQzzy7gCjJscnJNQn DU7lj1W0AuyzOjOlduV1vgx+EQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMrw2prv KzmrhMKu2qh4IKNUw9TEMB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE5NDQvNzk2QzlENzQzNkI5MTFFOTk4NEI3NjVDQzRGOUFFMDIvRTMyNzJGRTAz NkI5MTFFOTlGNEQ5QTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhsAwDQQCAAIwBwMFACQEacAwDQYJKoZIhvcNAQELBQAD ggEBAGW+S3HRoMgw9wjVPFl6EhXPNSSFzjQEwFVKN1FyZibKioQYLWzjwKg4OZIb cX/VscXxQ3WwtdE6e+a6WebNTna//NsBGWLVSXxZ7BK4tQhUDk3btd6PC1haxafa u0nCBRX6dNyF1xN2wT2Xqu69iasb8NI4N/5tLwP1Fc0j4hmpgjSCkFmf63tyDGi0 Cq+XgYTNBgn8Q//m7sbYR5yGcgObR/d3FSLCoVVOgH9YlT7CrJCjWHaWbkJpe1xi K+7wuZaT4l/WenNHxphcIxworGtyfmU5nrV6h4d+NlzqrsByEvu9r7QBCCE2QIf5 MPHSqMfuj6hliJF17y8daFUaIRw= -----END CERTIFICATE-----Generated at Wed May 22 20:09:16 2024 by rpki-client on console-ams.rpki-client.org