$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E50E6E14B63411EDB4416786C4F9AE02.roa File: E50E6E14B63411EDB4416786C4F9AE02.roa (raw, json) Hash identifier: Tziz2C2qn61onOhQ/7eEcg4qDtF40KkoiHOBMO6jD30= Subject key identifier: E9:30:94:76:DB:94:8F:33:9F:32:8B:28:A7:1E:90:1C:5B:F3:CE:AC Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Certificate serial: 20AE Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E50E6E14B63411EDB4416786C4F9AE02.roa Signing time: Tue 12 Mar 2024 01:03:37 +0000 ROA not before: Tue 12 Mar 2024 01:03:37 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 38330 IP address blocks: 103.232.252.0/22 maxlen: 22 125.214.80.0/21 maxlen: 21 203.83.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8366 (0x20ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Validity Not Before: Mar 12 01:03:37 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65efa9e9-e932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:62:89:34:9b:56:c6:43:36:91:42:0e:6a: fc:ec:3b:18:ac:e1:89:db:94:db:36:43:9b:d0:92: a8:43:ac:6c:5d:a5:a1:40:f9:9c:9d:89:47:65:7c: 33:01:54:63:3c:b5:df:21:29:e3:c9:00:37:27:dd: 5c:00:98:48:87:bd:59:96:35:4d:c9:a7:9d:f9:be: 8b:c5:5e:1d:52:ee:64:2d:47:b2:d1:81:0d:7a:11: 80:2a:de:42:fd:22:56:1c:82:58:01:27:c6:02:b7: da:b9:f8:39:d4:48:22:88:96:0d:ce:7e:1d:19:2d: e1:c6:14:c4:b6:0c:5f:92:64:23:ca:d5:c4:4d:cf: 96:ad:5c:63:d0:29:e0:a7:96:ff:3e:ad:37:df:08: 12:bc:59:51:91:c8:f7:fc:50:4a:3c:4d:5e:e5:2e: 26:ee:46:fa:bc:3e:a7:9c:75:57:79:fa:28:13:66: 02:7d:ff:cb:9c:bf:6b:76:c4:c8:1b:40:c2:d2:80: 0e:33:c1:56:ac:85:68:d7:50:0a:0e:48:52:58:e5: e5:64:cb:ff:c1:f0:81:1e:ca:72:eb:76:fd:07:f1: 96:87:94:79:4a:02:02:6b:77:68:ad:e4:54:69:e7: 45:44:cb:67:2f:3a:50:75:66:d3:9f:0b:3f:fc:f3: 51:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:30:94:76:DB:94:8F:33:9F:32:8B:28:A7:1E:90:1C:5B:F3:CE:AC X509v3 Authority Key Identifier: keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E50E6E14B63411EDB4416786C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.232.252.0/22 125.214.80.0/21 203.83.4.0/22 Signature Algorithm: sha256WithRSAEncryption 56:58:40:c8:fe:34:6b:df:4f:dd:b8:fc:a1:25:22:fa:45:86: a7:60:74:da:89:d2:5f:c2:b2:76:60:2f:c8:6a:d8:bc:9a:a0: d6:a3:c1:60:a5:b2:a9:9a:4d:1b:ae:47:5c:9c:17:f9:dc:4f: 6a:44:c6:4a:13:82:13:c9:ff:98:4a:b8:0a:21:3e:3f:cb:12: 8f:61:d3:5f:3b:6e:0a:07:da:0b:bc:af:6d:6d:3b:74:5f:df: 83:4c:e7:df:89:1d:c5:a7:2b:7e:29:bf:97:d7:ab:da:c0:46: 30:be:70:84:d9:78:29:c8:10:98:f5:ca:fa:16:a9:06:52:08: e4:aa:17:35:fc:54:2c:be:19:dc:a7:8b:d1:1c:8d:a4:9f:9a: 09:f1:2c:8b:a7:b5:20:c1:11:6c:0b:82:c3:52:ea:72:ca:50: 79:ec:7f:4c:e9:88:9c:d0:82:7c:66:cc:ad:b6:08:29:97:9b: 87:65:fc:ad:22:48:6a:e4:ca:6d:b8:ba:6f:d4:15:1d:97:1e: 03:10:72:4a:44:c7:d8:a6:dc:66:18:a3:63:d5:e3:9c:97:43: b8:7a:b5:69:17:05:ea:ce:03:89:f0:a3:9a:e5:af:24:ff:87: 59:bb:7b:43:6d:b9:5e:13:46:3c:40:ba:62:d6:3a:79:80:d2: cc:6d:2e:f9 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICIK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF QTNFNDFFNjAwHhcNMjQwMzEyMDEwMzM3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWVmYTllOS1lOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7JiiTSbVsZDNpFCDmr87DsYrOGJ25TbNkOb0JKoQ6xsXaWhQPmcnYlHZXwz AVRjPLXfISnjyQA3J91cAJhIh71ZljVNyaed+b6LxV4dUu5kLUey0YENehGAKt5C /SJWHIJYASfGArfaufg51EgiiJYNzn4dGS3hxhTEtgxfkmQjytXETc+WrVxj0Cng p5b/Pq033wgSvFlRkcj3/FBKPE1e5S4m7kb6vD6nnHVXefooE2YCff/LnL9rdsTI G0DC0oAOM8FWrIVo11AKDkhSWOXlZMv/wfCBHspy63b9B/GWh5R5SgICa3doreRU aedFRMtnLzpQdWbTnws//PNR8wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFOkwlHbb lI8znzKLKKcekBxb886sMB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRENEQvQkFFMTA4QzRFQTYwMTFFNTg4MTU3NzBDQzRGOUFFMDIvRTUwRTZFMTRC NjM0MTFFREI0NDE2Nzg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJn6PwDBAN91lADBALLUwQwDQYJKoZIhvcNAQELBQADggEB AFZYQMj+NGvfT924/KElIvpFhqdgdNqJ0l/CsnZgL8hq2LyaoNajwWClsqmaTRuu R1ycF/ncT2pExkoTghPJ/5hKuAohPj/LEo9h0187bgoH2gu8r21tO3Rf34NM59+J HcWnK34pv5fXq9rARjC+cITZeCnIEJj1yvoWqQZSCOSqFzX8VCy+Gdyni9EcjaSf mgnxLIuntSDBEWwLgsNS6nLKUHnsf0zpiJzQgnxmzK22CCmXm4dl/K0iSGrkym24 um/UFR2XHgMQckpEx9im3GYYo2PV45yXQ7h6tWkXBerOA4nwo5rlryT/h1m7e0Nt uV4TRjxAumLWOnmA0sxtLvk= -----END CERTIFICATE-----Generated at Thu May 16 18:26:11 2024 by rpki-client on console-fra.rpki-client.org