$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/ECCDCA04809A11EB9093216EC4F9AE02.roa File: ECCDCA04809A11EB9093216EC4F9AE02.roa (raw, json) Hash identifier: fB9P3KH/a3CnkgreCt0I7vz1IwmZUbQHhZFouAVH5UY= Subject key identifier: 60:26:5F:B7:E3:72:C4:19:6A:88:41:5F:D5:5D:E5:EA:1E:6D:14:78 Certificate issuer: /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Certificate serial: 0500 Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/ECCDCA04809A11EB9093216EC4F9AE02.roa Signing time: Sat 03 Jun 2023 01:38:47 +0000 ROA not before: Sat 03 Jun 2023 01:38:47 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 136187 IP address blocks: 103.215.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 00:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Validity Not Before: Jun 3 01:38:47 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647a99a7-4918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ab:ef:f4:f7:8b:2a:4d:42:43:85:f1:16:ac: 10:be:40:8d:4a:c3:10:95:5e:87:13:34:2a:53:7d: 79:ad:60:c5:80:f4:93:28:b4:4d:ba:76:d0:85:e8: ef:c4:9c:87:fc:4f:66:06:79:d2:15:ef:91:a4:cd: 5c:82:d3:cb:cd:c1:17:16:9d:27:75:3c:c1:fa:00: a8:b8:49:66:bd:bd:3f:cf:f5:85:5a:10:45:25:a4: ca:5a:c3:fe:9a:bc:40:be:3b:78:b9:8f:d2:5c:f9: d0:2a:c9:f7:2e:ac:80:50:04:79:06:f3:98:ab:ef: 58:eb:cc:14:bd:54:2c:4e:e1:be:f6:56:36:0b:16: 93:d1:3c:c8:5b:c6:c1:e3:64:5b:b4:58:d7:a1:06: 58:33:c7:1b:eb:5f:be:8e:7e:3d:1d:28:c3:4c:6e: 80:d2:ac:3f:df:5c:5c:ba:db:06:64:6f:6d:14:b9: 6c:2e:b1:f8:0b:3b:38:d1:bf:ac:7b:9d:31:73:d8: 61:cf:ef:df:7f:d0:7c:19:46:d2:d1:89:4e:95:6a: 3f:6d:64:e7:56:a8:6b:9b:e2:7f:53:8a:1c:d5:35: f5:66:79:f4:69:47:99:f1:c2:3a:3e:25:eb:6e:13: 94:19:0e:23:f5:c1:f5:eb:2f:82:e1:96:bb:1a:4b: e9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:26:5F:B7:E3:72:C4:19:6A:88:41:5F:D5:5D:E5:EA:1E:6D:14:78 X509v3 Authority Key Identifier: keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/ECCDCA04809A11EB9093216EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.215.67.0/24 Signature Algorithm: sha256WithRSAEncryption c1:28:5b:be:26:58:d6:3c:59:12:db:c8:6e:44:53:4c:74:83: b1:1f:33:7c:30:42:0f:78:87:1a:12:0a:45:4d:49:42:63:41: 58:5e:05:cb:29:2c:a0:ce:d2:d5:cd:22:20:95:f6:2c:40:2c: bc:a6:3b:55:75:d7:2d:c7:ad:8c:f2:f7:43:6a:86:3a:27:a1: 97:90:2b:36:fd:00:50:88:5e:03:3d:42:a2:47:8b:a2:ba:99: fc:67:d5:c3:2d:c3:2f:e2:3a:d1:7a:a0:59:5d:ab:1e:9a:8b: e0:8d:b2:8d:ab:7e:bb:64:38:f1:83:42:41:ff:70:15:51:0c: 8b:70:2e:de:6c:4f:c1:8a:19:75:55:ea:5f:f1:c5:39:83:06: 68:43:41:28:32:21:49:5d:4f:83:86:bd:0e:58:f8:43:4e:68: 79:32:f9:ae:14:a8:0f:bb:81:5b:14:a1:66:ef:a9:54:f3:78: f8:af:ab:e4:51:4d:4b:bf:73:f9:d6:02:f1:a8:85:3b:08:e9: 9d:3d:cf:fb:66:f5:75:63:8b:f4:56:4c:27:37:89:5c:dd:11: 83:77:95:3a:4b:39:51:9c:52:d5:19:55:94:d9:32:bb:c9:cc: a5:a8:d9:dd:6a:ee:1b:13:d6:0e:a4:f4:fb:34:16:d1:9f:e7: 5d:3c:f0:04 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyRTExMTAvBgNVBAUTKDZDMTk3REE0OTIyQ0ZEREM0RTk4Qzg4NDZFMDNBN0Q3 RDBFNDBCNzEwHhcNMjMwNjAzMDEzODQ3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhOTlhNy00OTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Kvv9PeLKk1CQ4XxFqwQvkCNSsMQlV6HEzQqU315rWDFgPSTKLRNunbQhejv xJyH/E9mBnnSFe+RpM1cgtPLzcEXFp0ndTzB+gCouElmvb0/z/WFWhBFJaTKWsP+ mrxAvjt4uY/SXPnQKsn3LqyAUAR5BvOYq+9Y68wUvVQsTuG+9lY2CxaT0TzIW8bB 42RbtFjXoQZYM8cb61++jn49HSjDTG6A0qw/31xcutsGZG9tFLlsLrH4Czs40b+s e50xc9hhz+/ff9B8GUbS0YlOlWo/bWTnVqhrm+J/U4oc1TX1Znn0aUeZ8cI6PiXr bhOUGQ4j9cH16y+C4Za7GkvprQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGAmX7fj csQZaohBX9Vd5eoebRR4MB8GA1UdIwQYMBaAFGwZfaSSLP3cTpjIhG4Dp9fQ5Atx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjJFMS8zRjY5Q0M2NjdG MDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19keE9tTWlFYmdPbjE5RGtD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbDlwSklzX2R4T21NaUViZ09uMTlEa0MzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUYyRTEvM0Y2OUNDNjY3RjAzMTFFQkEwODFBMDJCQzRGOUFFMDIvRUNDRENBMDQ4 MDlBMTFFQjkwOTMyMTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn10MwDQYJKoZIhvcNAQELBQADggEBAMEoW74mWNY8WRLb yG5EU0x0g7EfM3wwQg94hxoSCkVNSUJjQVheBcspLKDO0tXNIiCV9ixALLymO1V1 1y3HrYzy90NqhjonoZeQKzb9AFCIXgM9QqJHi6K6mfxn1cMtwy/iOtF6oFldqx6a i+CNso2rfrtkOPGDQkH/cBVRDItwLt5sT8GKGXVV6l/xxTmDBmhDQSgyIUldT4OG vQ5Y+ENOaHky+a4UqA+7gVsUoWbvqVTzePivq+RRTUu/c/nWAvGohTsI6Z09z/tm 9XVji/RWTCc3iVzdEYN3lTpLOVGcUtUZVZTZMrvJzKWo2d1q7hsT1g6k9Ps0FtGf 51088AQ= -----END CERTIFICATE-----Generated at Tue May 21 01:47:05 2024 by rpki-client on console-fra.rpki-client.org