$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/2E809260BFC511EBAD79ED25C4F9AE02.roa File: 2E809260BFC511EBAD79ED25C4F9AE02.roa (raw, json) Hash identifier: kP9B9Apke28RlHv6p4FMMVLBhFiruagPm8D1uCysx10= Subject key identifier: B5:F3:68:F7:56:28:18:9C:39:31:04:D1:7F:F1:C0:DB:63:8A:1D:7B Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Certificate serial: 0536 Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/2E809260BFC511EBAD79ED25C4F9AE02.roa Signing time: Fri 05 Jul 2024 00:22:46 +0000 ROA not before: Fri 05 Jul 2024 00:22:46 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 135345 IP address blocks: 103.166.248.0/24 maxlen: 24 103.166.249.0/24 maxlen: 24 2407:5dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Sep 2024 23:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Validity Not Before: Jul 5 00:22:46 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66873cd6-c96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ff:0a:df:3b:62:b4:c8:d7:fb:c8:dc:16:a1: 03:bc:c4:69:55:b3:38:a1:1a:65:e8:8d:25:cc:20: 8d:31:bd:e3:e4:e0:6f:ec:f7:29:26:4a:da:4e:3b: 08:ff:6e:3f:35:37:31:ef:6f:6f:d4:5d:34:c9:d5: 95:fd:c5:f2:b3:5c:86:2b:b3:c6:61:05:63:0d:46: 88:b6:36:40:3c:71:a4:15:83:6a:b6:43:cb:6c:f0: ce:9d:65:23:97:fc:7a:1a:ca:25:3c:c7:5d:8e:4b: 0c:10:09:3c:9e:2e:7a:87:be:9c:cf:f2:8f:ca:52: 3f:6a:88:9d:04:b8:94:a1:fe:9d:21:96:23:aa:ab: 47:99:b2:40:eb:6b:f1:d0:91:f3:ce:70:56:e0:60: 9f:a2:75:22:6e:16:25:d5:7c:ac:f1:37:d7:df:00: 4c:68:f0:cd:24:30:12:67:d6:58:f8:2d:60:fd:a6: 88:12:ba:0f:ef:52:33:e1:9e:e3:76:e9:5f:b7:fb: a5:6a:52:7d:82:18:84:0e:1c:ad:86:83:93:0b:6f: 47:4b:4d:69:71:4f:a1:19:f4:67:8b:8d:2d:1e:53: 64:ff:12:3c:80:46:88:02:a9:46:d4:5b:1a:03:bc: 79:9c:a8:95:df:4d:40:b0:88:b3:86:a4:96:48:36: 58:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F3:68:F7:56:28:18:9C:39:31:04:D1:7F:F1:C0:DB:63:8A:1D:7B X509v3 Authority Key Identifier: keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/2E809260BFC511EBAD79ED25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.248.0/23 IPv6: 2407:5dc0::/32 Signature Algorithm: sha256WithRSAEncryption 35:c3:e0:08:51:9d:a9:4f:e7:dd:31:8e:09:81:c4:b2:9b:29: f1:06:e8:69:61:9c:f6:dc:15:e3:76:c9:03:a0:a1:08:0f:74: da:f7:1c:3a:89:27:40:ef:a9:0d:de:83:a2:d3:0b:9e:e6:ce: 93:b2:ec:b1:1b:b3:04:cb:e0:24:26:8f:ac:04:a0:ac:a8:8a: ef:da:7f:94:7b:07:1b:49:94:4a:6f:5f:a2:4c:33:b5:81:95: 44:d7:e3:f4:83:1e:56:67:01:31:4b:04:ab:25:fb:50:3f:14: 1a:1b:b6:f7:af:f4:39:c1:d2:67:dd:86:e1:7e:bf:67:92:8f: b7:3e:d1:28:b2:7c:1b:17:a7:4b:2b:2b:d4:0c:40:9d:0b:78: 22:ba:10:4b:4b:84:d2:a2:c4:58:df:d3:33:d8:da:ba:2e:f1: e6:48:e0:0a:2e:b1:e6:41:6d:3d:45:20:da:67:97:b3:a9:51: 86:31:1a:eb:f6:82:8a:02:54:9c:21:c4:0f:93:c1:98:bc:d3: a5:6c:92:78:5a:6a:d6:8e:7a:dd:6b:9e:7d:ef:79:da:13:93: 9f:7d:04:0c:2b:c1:75:59:d9:81:ea:0c:51:4e:cd:e1:df:0a: 59:e7:66:d1:5b:1e:43:55:2f:bb:a7:98:7f:56:97:52:e9:f6: dc:7c:11:24 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1 QkVGQjg0NTIwHhcNMjQwNzA1MDAyMjQ2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg3M2NkNi1jOTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuv8K3ztitMjX+8jcFqEDvMRpVbM4oRpl6I0lzCCNMb3j5OBv7PcpJkraTjsI /24/NTcx729v1F00ydWV/cXys1yGK7PGYQVjDUaItjZAPHGkFYNqtkPLbPDOnWUj l/x6GsolPMddjksMEAk8ni56h76cz/KPylI/aoidBLiUof6dIZYjqqtHmbJA62vx 0JHzznBW4GCfonUibhYl1Xys8TfX3wBMaPDNJDASZ9ZY+C1g/aaIEroP71Iz4Z7j dulft/ulalJ9ghiEDhythoOTC29HS01pcU+hGfRni40tHlNk/xI8gEaIAqlG1Fsa A7x5nKiV301AsIizhqSWSDZYiwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLXzaPdW KBicOTEE0X/xwNtjih17MB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjYwQTcvNEUwMEZFOUFCRDFEMTFFQjlBRDg1RDQ1QzRGOUFFMDIvMkU4MDkyNjBC RkM1MTFFQkFENzlFRDI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnpvgwDQQCAAIwBwMFACQHXcAwDQYJKoZIhvcNAQELBQAD ggEBADXD4AhRnalP590xjgmBxLKbKfEG6GlhnPbcFeN2yQOgoQgPdNr3HDqJJ0Dv qQ3eg6LTC57mzpOy7LEbswTL4CQmj6wEoKyoiu/af5R7BxtJlEpvX6JMM7WBlUTX 4/SDHlZnATFLBKsl+1A/FBobtvev9DnB0mfdhuF+v2eSj7c+0SiyfBsXp0srK9QM QJ0LeCK6EEtLhNKixFjf0zPY2rou8eZI4AouseZBbT1FINpnl7OpUYYxGuv2gooC VJwhxA+TwZi806VsknhaataOet1rnn3vedoTk599BAwrwXVZ2YHqDFFOzeHfClnn ZtFbHkNVL7unmH9Wl1Lp9tx8ESQ= -----END CERTIFICATE-----Generated at Thu Sep 19 01:13:09 2024 by rpki-client on console-fra.rpki-client.org