$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/2C5C63329E5311EE8D49694BC4F9AE02.roa File: 2C5C63329E5311EE8D49694BC4F9AE02.roa (raw, json) Hash identifier: 9rCzWJoqB8zLTHBszI+xvdoV3LA827g7Jcq2ndkCo9A= Subject key identifier: 00:AA:3F:8B:6E:98:67:6E:D5:E2:3B:7C:D2:5E:A3:0F:16:47:18:4C Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: BD Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/2C5C63329E5311EE8D49694BC4F9AE02.roa Signing time: Tue 19 Dec 2023 09:44:16 +0000 ROA not before: Tue 19 Dec 2023 09:44:16 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 32402 IP address blocks: 103.71.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: Dec 19 09:44:16 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=658165f0-ccef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4b:7b:0a:35:a9:69:4d:89:ee:65:03:6b:18: 19:e2:33:5b:ed:e3:a8:a0:4e:6e:a4:3d:60:7a:ad: 3f:5e:7a:b5:e8:3d:05:c6:26:61:33:73:ce:8e:a7: 32:4e:e4:6f:bd:df:44:08:33:4b:ad:b8:49:73:9c: 62:ba:29:2d:35:59:9a:75:43:ae:5f:c6:7a:9f:2a: 68:03:92:df:0e:2d:48:d7:6b:51:42:5c:54:30:71: 51:cd:4a:07:be:a4:db:97:a4:65:67:45:3e:b2:2f: 10:59:10:6e:4c:4f:d7:3b:05:da:d8:53:6e:2e:e5: a3:d9:19:65:3b:e1:33:f5:97:da:74:57:cc:61:00: 25:53:84:bf:f1:cf:90:9f:35:48:2b:3b:06:6f:a0: 24:f0:2f:0d:18:a5:ab:73:d5:b0:0f:17:9b:06:1e: cc:d0:67:52:71:fc:28:55:a1:8d:73:a0:de:ed:da: 4b:ce:9a:0b:2b:ad:dd:33:b6:27:09:12:e2:5b:4c: bb:7d:ce:96:5f:84:4a:8c:f4:26:50:20:09:f4:ce: 33:e8:0f:25:06:39:a4:c5:8b:90:5a:5c:2b:b2:fd: 00:82:56:6e:4c:84:1c:0c:0f:95:dd:18:8f:5e:93: 2a:29:ba:63:bf:fa:ea:a9:34:2a:aa:15:d9:f8:e5: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AA:3F:8B:6E:98:67:6E:D5:E2:3B:7C:D2:5E:A3:0F:16:47:18:4C X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/2C5C63329E5311EE8D49694BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.71.92.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:48:7e:17:5f:a4:54:b6:79:84:89:ce:92:f3:ab:14:e0:4f: 58:0d:03:30:56:46:65:43:9f:7a:60:7c:1a:7b:84:27:01:fd: 08:00:8e:ad:0e:fe:39:9a:80:43:f5:bd:5c:1a:cd:a6:6a:b0: ab:f0:d5:00:48:50:6c:7e:92:08:e0:83:8b:d3:de:cb:00:b8: 94:88:d5:68:1c:73:8d:78:c0:0f:c2:4e:71:78:a7:d3:68:9a: 15:98:8f:a2:2d:db:ff:a2:99:f6:9f:b7:51:00:9f:14:a8:f0: 57:61:66:61:ad:fd:ca:54:a4:9f:27:31:e6:c4:e0:bc:de:88: 5f:94:d9:fd:d0:89:e0:77:6c:d0:37:bc:8a:df:85:34:e0:e1: ca:8f:9a:92:d0:da:32:dd:2b:3c:66:5f:fe:94:50:62:76:dd: d1:2d:e9:a4:cb:95:e3:6b:e0:b1:af:64:a2:6d:7d:16:eb:ea: 5e:71:6a:7c:65:ae:d5:4c:8c:60:ac:be:1e:a6:e2:01:ff:63: 54:7c:18:15:93:74:ee:1c:84:1f:89:30:b5:cc:1a:b3:b6:81: 3f:f7:00:ea:ab:32:14:20:64:07:8a:5b:95:80:bf:1c:f3:79: c8:06:40:cd:31:07:7f:51:ef:3f:92:74:c4:63:22:4e:4e:f6: 0f:0e:ae:ed -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjMxMjE5MDk0NDE2WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTgxNjVmMC1jY2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0t7CjWpaU2J7mUDaxgZ4jNb7eOooE5upD1geq0/Xnq16D0FxiZhM3POjqcy TuRvvd9ECDNLrbhJc5xiuiktNVmadUOuX8Z6nypoA5LfDi1I12tRQlxUMHFRzUoH vqTbl6RlZ0U+si8QWRBuTE/XOwXa2FNuLuWj2RllO+Ez9ZfadFfMYQAlU4S/8c+Q nzVIKzsGb6Ak8C8NGKWrc9WwDxebBh7M0GdScfwoVaGNc6De7dpLzpoLK63dM7Yn CRLiW0y7fc6WX4RKjPQmUCAJ9M4z6A8lBjmkxYuQWlwrsv0AglZuTIQcDA+V3RiP XpMqKbpjv/rqqTQqqhXZ+OVKfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFACqP4tu mGdu1eI7fNJeow8WRxhMMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTZEREIvRTFDRENERDJCRTFCMTFFREE2MUFDRDg0QzRGOUFFMDIvMkM1QzYzMzI5 RTUzMTFFRThENDk2OTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnR1wwDQYJKoZIhvcNAQELBQADggEBABxIfhdfpFS2eYSJ zpLzqxTgT1gNAzBWRmVDn3pgfBp7hCcB/QgAjq0O/jmagEP1vVwazaZqsKvw1QBI UGx+kgjgg4vT3ssAuJSI1Wgcc414wA/CTnF4p9NomhWYj6It2/+imfaft1EAnxSo 8FdhZmGt/cpUpJ8nMebE4LzeiF+U2f3QieB3bNA3vIrfhTTg4cqPmpLQ2jLdKzxm X/6UUGJ23dEt6aTLleNr4LGvZKJtfRbr6l5xanxlrtVMjGCsvh6m4gH/Y1R8GBWT dO4chB+JMLXMGrO2gT/3AOqrMhQgZAeKW5WAvxzzecgGQM0xB39R7z+SdMRjIk5O 9g8Oru0= -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:28 2024 by rpki-client on console-fra.rpki-client.org