$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/2FC13F564ED511EA945E3314C4F9AE02.roa File: 2FC13F564ED511EA945E3314C4F9AE02.roa (raw, json) Hash identifier: sCxBbTPaAxo4ky7RFi9ioL8DjtsOBCB5CQvN1aJZ7Qc= Subject key identifier: 37:D4:C4:51:66:0E:77:37:B2:DE:17:02:A6:F0:F1:F0:33:2B:8C:7A Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 09AB Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/2FC13F564ED511EA945E3314C4F9AE02.roa Signing time: Mon 16 Oct 2023 04:57:38 +0000 ROA not before: Mon 16 Oct 2023 04:57:38 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 138965 IP address blocks: 103.137.204.0/22 maxlen: 22 103.137.204.0/24 maxlen: 24 103.137.205.0/24 maxlen: 24 103.137.206.0/24 maxlen: 24 103.137.207.0/24 maxlen: 24 2400:d3e0::/32 maxlen: 32 2400:d3e0::/35 maxlen: 35 2400:d3e0::/48 maxlen: 48 2400:d3e0:1::/48 maxlen: 48 2400:d3e0:2::/48 maxlen: 48 2400:d3e0:3::/48 maxlen: 48 2400:d3e0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: Oct 16 04:57:38 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=652cc2c2-9981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:6c:0b:e3:e6:88:75:8d:8b:e1:da:aa:00: ec:27:b5:90:f5:14:e9:25:60:6c:11:1f:1e:29:a6: 70:83:b9:b0:e7:6d:2b:07:67:56:52:91:9d:60:e5: 69:b3:f5:20:7d:7c:04:6a:52:27:7a:f5:9e:b7:82: b1:aa:b0:1d:db:ae:a1:09:d5:cd:a6:5b:75:50:eb: 8b:f6:02:34:bc:0a:28:a7:26:9d:b6:7c:8c:62:8d: 85:19:2c:84:f8:b1:07:da:92:50:b2:84:fa:6f:ff: dc:52:a4:38:6e:29:4c:e6:0b:6e:c9:72:d3:f1:a3: b1:07:1a:cd:10:32:20:b7:a0:3a:03:a0:b2:e5:49: 43:2c:4a:ac:84:69:aa:87:37:a9:4d:1f:45:0e:5c: 85:3a:97:c8:b8:ed:b1:42:07:39:b8:9d:6e:fa:9b: 00:d3:50:c8:8d:ba:f5:79:2f:13:36:79:56:f2:3f: 71:72:fd:40:04:61:8f:09:47:46:1b:27:3c:6d:f4: d2:7e:ab:f3:27:80:81:85:3f:07:b1:64:18:13:64: 5c:87:76:b4:db:9f:38:bd:48:0d:48:92:8d:25:35: 20:15:93:15:74:48:75:bc:c3:c1:51:0f:43:c7:4c: a5:79:1e:5b:1a:b1:64:d2:43:19:4b:59:21:b6:4a: fc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D4:C4:51:66:0E:77:37:B2:DE:17:02:A6:F0:F1:F0:33:2B:8C:7A X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/2FC13F564ED511EA945E3314C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.204.0/22 IPv6: 2400:d3e0::/32 Signature Algorithm: sha256WithRSAEncryption 96:52:41:8d:8c:d4:b5:68:68:54:eb:c3:64:36:16:64:11:29: 96:cc:f7:6b:ad:83:dc:9e:9c:9e:b5:ae:59:a3:e2:0e:dc:66: 6c:fc:d7:07:1d:38:ff:e4:40:0e:6e:33:b6:42:d9:54:b6:49: 51:dc:d4:5a:a8:1e:7b:26:0b:2f:fa:5f:7f:61:26:a5:db:28: 9e:9a:f8:6e:f2:a8:2b:1d:11:94:d1:43:e2:af:a3:d1:eb:16: f9:88:32:ba:a2:76:89:fe:38:b9:4f:7f:ef:4c:18:07:db:27: f9:51:20:43:cc:aa:b9:7e:93:c9:b8:46:9c:81:c3:bf:dc:35: 4c:c5:82:7b:83:17:9d:35:16:1e:9a:5e:c1:45:ca:0a:92:7a: 2c:47:d7:b6:f2:a4:b4:28:4c:79:4f:4f:0d:2a:7e:3e:93:98: 3f:21:21:04:fc:e7:bc:b8:83:22:8f:aa:bc:c7:1b:f7:7c:f3: 1f:d9:4b:74:61:5d:30:70:91:04:25:f7:29:73:e7:8a:36:7f: 93:15:9b:da:40:02:e9:f0:62:73:64:67:ac:17:53:ef:52:c5: 7b:02:98:e2:be:5f:1a:04:bf:b1:7b:8a:b4:d5:90:28:95:63: bf:70:82:a3:f3:f6:5d:6c:9a:76:79:e6:22:e9:32:27:98:30: 0d:9f:6d:48 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjMxMDE2MDQ1NzM4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTJjYzJjMi05OTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5dsC+PmiHWNi+HaqgDsJ7WQ9RTpJWBsER8eKaZwg7mw520rB2dWUpGdYOVp s/UgfXwEalInevWet4KxqrAd266hCdXNplt1UOuL9gI0vAoopyadtnyMYo2FGSyE +LEH2pJQsoT6b//cUqQ4bilM5gtuyXLT8aOxBxrNEDIgt6A6A6Cy5UlDLEqshGmq hzepTR9FDlyFOpfIuO2xQgc5uJ1u+psA01DIjbr1eS8TNnlW8j9xcv1ABGGPCUdG Gyc8bfTSfqvzJ4CBhT8HsWQYE2Rch3a02584vUgNSJKNJTUgFZMVdEh1vMPBUQ9D x0yleR5bGrFk0kMZS1khtkr8HQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDfUxFFm Dnc3st4XAqbw8fAzK4x6MB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFDODIvQ0JEODkzQTA0RUQzMTFFQUFEN0JBMjExQzRGOUFFMDIvMkZDMTNGNTY0 RUQ1MTFFQTk0NUUzMzE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnicwwDQQCAAIwBwMFACQA0+AwDQYJKoZIhvcNAQELBQAD ggEBAJZSQY2M1LVoaFTrw2Q2FmQRKZbM92utg9yenJ61rlmj4g7cZmz81wcdOP/k QA5uM7ZC2VS2SVHc1FqoHnsmCy/6X39hJqXbKJ6a+G7yqCsdEZTRQ+Kvo9HrFvmI Mrqidon+OLlPf+9MGAfbJ/lRIEPMqrl+k8m4RpyBw7/cNUzFgnuDF501Fh6aXsFF ygqSeixH17bypLQoTHlPTw0qfj6TmD8hIQT857y4gyKPqrzHG/d88x/ZS3RhXTBw kQQl9ylz54o2f5MVm9pAAunwYnNkZ6wXU+9SxXsCmOK+XxoEv7F7irTVkCiVY79w gqPz9l1smnZ55iLpMieYMA2fbUg= -----END CERTIFICATE-----Generated at Mon May 6 22:41:04 2024 by rpki-client on console-ams.rpki-client.org