$ rpki-client -vvf rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/E84DCBC422D211EDAF1F924EC4F9AE02.roa File: E84DCBC422D211EDAF1F924EC4F9AE02.roa (raw, json) Hash identifier: DqKegEQq33FWYGcDqufZzlTnvwGNieGMgxqg05/Ivxg= Subject key identifier: 66:F0:2F:97:CF:FA:3C:40:3A:95:55:8F:9D:9E:FD:23:74:AC:48:48 Certificate issuer: /CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E Certificate serial: 0548 Authority key identifier: A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/E84DCBC422D211EDAF1F924EC4F9AE02.roa Signing time: Mon 02 Oct 2023 23:40:56 +0000 ROA not before: Mon 02 Oct 2023 23:40:56 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 132382 IP address blocks: 103.14.172.0/24 maxlen: 24 103.14.173.0/24 maxlen: 24 103.14.174.0/24 maxlen: 24 103.14.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1352 (0x548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E Validity Not Before: Oct 2 23:40:56 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651b5508-01e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:b5:a6:fa:ef:7b:fd:26:d8:fa:db:b1:09: ef:63:bc:43:12:36:28:a5:49:21:01:53:68:78:69: 32:91:53:93:7f:d6:9c:d0:03:0e:e7:eb:19:2a:c3: 44:4e:0a:e8:65:96:63:e0:4b:93:f1:fe:dc:e1:6b: ac:1c:1f:b5:8c:87:4a:f6:47:ca:56:2d:08:ce:96: d7:6a:69:e3:da:97:a8:8b:d5:51:d2:5e:be:02:44: c7:b5:fb:28:2a:3d:f1:c9:a8:54:c5:b6:c2:d7:86: 66:74:37:b6:e9:03:8f:cf:b2:66:4f:3e:f4:6d:ab: b3:3c:8b:34:2a:7b:38:5f:46:d2:52:1a:21:98:93: 23:30:e7:f5:d8:d6:c0:de:c9:50:09:91:e7:89:f9: db:9a:e6:ac:fe:cd:63:a9:20:10:1f:7b:e4:ee:9a: 34:bb:be:49:dc:7b:f0:06:f0:33:a1:15:23:1e:5f: e9:18:b2:f9:13:1d:7d:39:81:10:3e:2a:53:cb:8b: 98:c6:cf:8b:64:68:fc:7b:f4:a6:95:a8:8c:ca:f7: c9:1c:58:05:bf:48:26:8a:ce:ec:41:3f:b0:30:3a: f7:74:16:4f:27:e2:f1:5a:de:7a:76:6a:6a:d7:76: c5:4c:31:5a:d2:ab:24:06:ed:d4:08:8c:ec:f8:1c: 2b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F0:2F:97:CF:FA:3C:40:3A:95:55:8F:9D:9E:FD:23:74:AC:48:48 X509v3 Authority Key Identifier: keyid:A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/E84DCBC422D211EDAF1F924EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.172.0/22 Signature Algorithm: sha256WithRSAEncryption 84:95:24:aa:df:29:ae:2b:53:be:b6:a0:5e:93:2f:a3:90:f3: 21:36:6f:e1:6b:63:b3:bf:1b:0a:74:fb:9d:a6:a1:df:c4:34: 92:7f:20:8f:0e:78:19:62:96:df:c7:5f:87:50:84:33:b9:1c: b9:d7:49:cd:f8:46:5a:98:41:92:1a:bf:47:99:55:29:0a:4e: b0:54:18:8e:d5:3b:e1:60:fd:fd:e5:bf:27:2f:86:d9:ad:ab: af:d0:14:6d:0c:a9:48:a8:ed:73:21:5c:ba:0b:fe:ec:07:85: 1d:58:17:c3:ee:7d:a9:95:25:d3:1e:33:b9:e1:9b:31:8c:2a: 49:ad:4d:a4:59:69:5d:ad:63:5a:c7:fa:f2:ee:09:86:32:c9: aa:e5:d8:aa:e2:a5:59:d7:55:b6:f3:0e:ff:f9:2b:fe:d4:b3: ed:c4:cd:4c:a5:d8:d6:d9:54:7e:38:8f:e7:09:1c:e6:bc:37: 00:3c:bc:d5:b9:f4:26:2c:e6:77:21:92:08:bb:a8:44:ff:38: d5:53:f7:43:74:b4:be:53:e0:b8:1a:1f:30:5e:2d:04:95:f8: d1:f1:f4:92:47:b8:ae:1a:a9:b9:e3:46:e7:f9:09:05:c6:a5: 61:20:48:6b:5d:ce:3d:9b:7c:4d:d7:cc:35:72:fa:95:dd:c8: 91:f7:a2:3f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFFREQxMTAvBgNVBAUTKEE0Njk0QkU0N0M0RjNCQzk0ODA1RDRBMzY2QTAwN0M2 OTA3MDUxMkUwHhcNMjMxMDAyMjM0MDU2WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFiNTUwOC0wMWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXS1pvrve/0m2PrbsQnvY7xDEjYopUkhAVNoeGkykVOTf9ac0AMO5+sZKsNE TgroZZZj4EuT8f7c4WusHB+1jIdK9kfKVi0IzpbXamnj2peoi9VR0l6+AkTHtfso Kj3xyahUxbbC14ZmdDe26QOPz7JmTz70bauzPIs0Kns4X0bSUhohmJMjMOf12NbA 3slQCZHnifnbmuas/s1jqSAQH3vk7po0u75J3HvwBvAzoRUjHl/pGLL5Ex19OYEQ PipTy4uYxs+LZGj8e/SmlaiMyvfJHFgFv0gmis7sQT+wMDr3dBZPJ+LxWt56dmpq 13bFTDFa0qskBu3UCIzs+BwrrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGbwL5fP +jxAOpVVj52e/SN0rEhIMB8GA1UdIwQYMBaAFKRpS+R8TzvJSAXUo2agB8aQcFEu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUVERC8yMTBCNDMwNDdC QkYxMUVCQTAyQTQzMzlDNEY5QUUwMi9wR2xMNUh4UE84bElCZFNqWnFBSHhwQndV UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHbEw1SHhQTzhsSUJkU2pacUFIeHBCd1VTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzFFREQvMjEwQjQzMDQ3QkJGMTFFQkEwMkE0MzM5QzRGOUFFMDIvRTg0RENCQzQy MkQyMTFFREFGMUY5MjRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnDqwwDQYJKoZIhvcNAQELBQADggEBAISVJKrfKa4rU762 oF6TL6OQ8yE2b+FrY7O/Gwp0+52mod/ENJJ/II8OeBlilt/HX4dQhDO5HLnXSc34 RlqYQZIav0eZVSkKTrBUGI7VO+Fg/f3lvycvhtmtq6/QFG0MqUio7XMhXLoL/uwH hR1YF8PufamVJdMeM7nhmzGMKkmtTaRZaV2tY1rH+vLuCYYyyarl2KripVnXVbbz Dv/5K/7Us+3EzUyl2NbZVH44j+cJHOa8NwA8vNW59CYs5nchkgi7qET/ONVT90N0 tL5T4LgaHzBeLQSV+NHx9JJHuK4aqbnjRuf5CQXGpWEgSGtdzj2bfE3XzDVy+pXd yJH3oj8= -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:43 2024 by rpki-client on console-fra.rpki-client.org