$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E137AAE4914011EDABD5F778C4F9AE02.roa File: E137AAE4914011EDABD5F778C4F9AE02.roa (raw, json) Hash identifier: pq/apOOz1IhPtAtHKhRZyj8F3MjedPS9nKhqg3OZNL4= Subject key identifier: A6:0A:41:AD:64:0C:24:5F:74:5C:6B:6B:94:DB:52:2E:82:A8:C6:07 Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: D4 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E137AAE4914011EDABD5F778C4F9AE02.roa Signing time: Sat 09 Dec 2023 04:54:34 +0000 ROA not before: Sat 09 Dec 2023 04:54:34 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 139736 IP address blocks: 203.89.200.0/24 maxlen: 24 203.89.214.0/24 maxlen: 24 203.89.228.0/24 maxlen: 24 203.89.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Dec 9 04:54:34 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6573f30a-480f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7d:38:73:07:f4:a5:0a:97:7b:05:8f:b6:b7: 61:99:41:a5:9c:af:d7:7a:c2:e4:18:50:a0:0c:44: d8:74:62:67:3c:9c:46:91:31:15:6d:b1:04:14:74: f8:16:04:f1:4b:79:2f:db:e5:42:71:ee:b0:0b:67: 7d:8c:29:0f:4b:22:1d:ae:9e:68:bf:2e:59:80:5f: b0:86:5a:ef:d2:7f:f4:c4:d2:c3:78:bf:80:7f:b7: 70:5c:06:cb:98:9b:4f:e1:f3:c5:19:30:bd:89:95: 76:00:0d:51:a8:a2:09:a3:96:8b:f2:2e:2e:80:cc: e5:6a:16:4a:eb:78:8c:3d:6d:72:cc:4a:68:46:b5: 32:d2:d9:3d:ff:85:33:3e:5c:25:7c:2f:a4:6f:5d: 13:c7:66:83:c5:bd:80:eb:b4:a3:87:e2:dd:b2:e2: d8:54:1b:fa:57:c8:bc:04:74:8e:86:0b:1a:dd:6f: 16:ff:f8:8b:2f:f1:a0:72:30:0c:4d:d0:a2:17:64: 56:9a:be:bc:ec:73:22:ca:c5:8b:d6:5e:08:3a:59: ec:91:e3:cb:e8:59:c6:97:a3:01:a6:50:18:a0:e6: 46:d9:21:ae:54:00:f4:e7:24:d7:20:80:02:40:77: 01:ba:e4:ad:b1:5b:50:e7:57:94:c4:2a:a5:81:04: 69:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0A:41:AD:64:0C:24:5F:74:5C:6B:6B:94:DB:52:2E:82:A8:C6:07 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E137AAE4914011EDABD5F778C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.89.200.0/24 203.89.214.0/24 203.89.228.0/24 203.89.231.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:a8:58:05:0a:58:22:12:80:65:f1:47:bc:7c:e2:b8:56:e7: 80:21:4e:0b:63:22:75:78:a8:22:93:03:72:d0:c1:72:22:b0: a9:a4:03:02:24:d6:8a:09:12:07:dd:be:01:ce:35:66:ab:b2: 27:ff:9c:71:4b:5b:96:b3:f2:a7:62:9c:41:99:62:91:e7:f9: 5b:9c:b8:eb:9d:0f:72:31:5f:e5:cc:c2:f8:dd:6d:38:1b:9a: b5:85:74:f4:34:c8:83:6c:53:73:44:f9:c3:bd:b1:fd:73:70: 07:07:2e:0e:71:4e:8f:22:36:a1:05:59:26:5a:c3:89:0c:fb: 33:df:84:0b:53:3b:84:3d:4d:71:fe:ce:28:49:bb:0a:04:03: c1:d3:4f:e0:65:42:16:c0:86:04:1a:09:28:89:10:a8:89:03: 5a:33:7d:87:f1:cf:3d:8c:d0:e3:f7:73:20:1a:84:fb:37:d5: e3:32:ef:73:c3:9c:3d:ee:76:80:7f:3a:47:c3:0d:bf:04:f3: a9:3e:71:34:5e:d1:73:73:28:3f:a0:88:78:ca:82:93:f9:a8: af:aa:fa:e5:6d:6a:da:f3:52:e4:90:6f:40:d9:5b:bf:ed:80: 69:8d:80:a7:9c:4a:d8:75:0c:10:75:4e:11:47:c5:e4:d2:1a: bd:ad:a7:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjMxMjA5MDQ1NDM0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczZjMwYS00ODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2304cwf0pQqXewWPtrdhmUGlnK/XesLkGFCgDETYdGJnPJxGkTEVbbEEFHT4 FgTxS3kv2+VCce6wC2d9jCkPSyIdrp5ovy5ZgF+whlrv0n/0xNLDeL+Af7dwXAbL mJtP4fPFGTC9iZV2AA1RqKIJo5aL8i4ugMzlahZK63iMPW1yzEpoRrUy0tk9/4Uz PlwlfC+kb10Tx2aDxb2A67Sjh+LdsuLYVBv6V8i8BHSOhgsa3W8W//iLL/GgcjAM TdCiF2RWmr687HMiysWL1l4IOlnskePL6FnGl6MBplAYoOZG2SGuVAD05yTXIIAC QHcBuuStsVtQ51eUxCqlgQRpMQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFKYKQa1k DCRfdFxra5TbUi6CqMYHMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU5QjYvNzkxOENCMEM3RkY1MTFFRDlFRDQ2NDFEQzRGOUFFMDIvRTEzN0FBRTQ5 MTQwMTFFREFCRDVGNzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBADLWcgDBADLWdYDBADLWeQDBADLWecwDQYJKoZIhvcNAQEL BQADggEBAHuoWAUKWCISgGXxR7x84rhW54AhTgtjInV4qCKTA3LQwXIisKmkAwIk 1ooJEgfdvgHONWarsif/nHFLW5az8qdinEGZYpHn+VucuOudD3IxX+XMwvjdbTgb mrWFdPQ0yINsU3NE+cO9sf1zcAcHLg5xTo8iNqEFWSZaw4kM+zPfhAtTO4Q9TXH+ zihJuwoEA8HTT+BlQhbAhgQaCSiJEKiJA1ozfYfxzz2M0OP3cyAahPs31eMy73PD nD3udoB/OkfDDb8E86k+cTRe0XNzKD+giHjKgpP5qK+q+uVtatrzUuSQb0DZW7/t gGmNgKecSth1DBB1ThFHxeTSGr2tp84= -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:18 2024 by rpki-client on console-fra.rpki-client.org