$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/2DF8B7F0E92A11EE8B025183C4F9AE02.roa File: 2DF8B7F0E92A11EE8B025183C4F9AE02.roa (raw, json) Hash identifier: IyR60yFdxsx1PoQvJow15o+Dw0cEIDxbeYXdCDFO7Dg= Subject key identifier: C9:97:B0:30:96:54:B5:2C:89:AB:45:5B:BE:4E:D1:07:86:39:C8:FC Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 05B8 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/2DF8B7F0E92A11EE8B025183C4F9AE02.roa Signing time: Sat 23 Mar 2024 15:29:46 +0000 ROA not before: Sat 23 Mar 2024 15:29:46 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 834 IP address blocks: 103.24.216.0/23 maxlen: 24 103.231.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1464 (0x5b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Mar 23 15:29:46 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65fef56a-fafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:36:27:de:2d:ef:cd:5b:05:20:83:3d:9b: 9a:e1:72:c8:01:c0:34:11:af:00:14:92:1f:cd:6e: b2:5d:d4:cb:00:fe:0b:90:fc:43:7e:ea:01:5f:01: 56:6c:f1:77:5e:23:5f:37:bf:b7:ca:9e:41:11:29: f5:1f:c5:3e:9c:a0:7d:a5:12:5f:19:bf:3e:78:98: 4f:4d:23:26:25:83:a6:fe:da:8f:43:0e:a1:a3:a3: a5:15:ca:d9:b5:92:40:c0:66:52:e5:70:36:4c:d4: 56:a9:6b:19:9f:5d:9f:48:30:3a:8a:26:ad:01:68: d9:a1:7a:9f:e8:63:05:d9:56:89:27:98:cb:d8:04: 65:c6:f8:8a:8a:47:fe:e9:f5:cf:3d:e4:17:59:c3: cf:14:dc:0c:53:1f:6e:f3:97:c6:01:6a:dd:b3:77: f1:50:b0:a2:c8:c3:d9:7b:49:1e:39:3d:00:89:9c: 65:56:6f:26:40:10:b9:2b:d1:ca:ad:2e:a3:f4:11: fd:c0:f7:16:3d:14:9d:22:9f:cb:76:fc:f5:ec:38: 32:0e:b1:a6:ad:f0:43:b5:e7:ed:0d:ac:93:e2:44: 01:f9:3d:fb:a4:12:be:be:40:a4:1e:45:17:64:ef: 94:3c:a2:3c:30:1e:ae:b9:5c:0c:bc:c1:99:00:76: 45:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:B0:30:96:54:B5:2C:89:AB:45:5B:BE:4E:D1:07:86:39:C8:FC X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/2DF8B7F0E92A11EE8B025183C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.216.0/23 103.231.58.0/23 Signature Algorithm: sha256WithRSAEncryption b7:37:9c:59:82:15:d7:1d:53:ca:42:d0:00:fa:9b:6e:36:25: 0c:b6:92:6d:00:83:18:77:83:ce:55:b2:3b:05:2c:5c:01:7d: f1:d7:51:e6:13:f6:c2:f2:5d:b1:37:21:2c:a3:67:4b:f0:55: f7:d5:24:52:6f:3e:ad:c7:ac:3f:75:af:bd:b3:34:1a:97:9d: e9:b2:a7:f8:15:24:a0:aa:aa:5c:19:1c:eb:ed:7f:7b:3c:76: a0:af:70:85:82:b6:a2:57:0c:62:4a:87:e2:db:dd:d2:a6:3c: 96:b3:99:35:b8:e9:67:80:45:32:20:12:c8:af:dd:2b:22:e8: fb:43:ce:96:cb:bc:3c:8c:1f:5d:bd:4a:39:cf:10:80:a9:4b: 34:69:39:62:4a:ad:22:8c:2d:ab:8c:2f:e1:c0:25:aa:29:ef: a0:b0:f3:1a:64:f9:07:4f:15:69:40:5f:da:e3:d7:87:29:ad: 74:4a:91:63:d8:8e:8d:fe:4c:2a:b6:5d:1d:0a:86:9f:cd:8f: 71:79:f3:58:6f:4b:8d:ce:b5:3a:eb:6c:28:da:ed:ca:d9:6b: 00:93:b1:e8:20:80:84:0d:a1:5a:4e:4c:44:46:eb:00:23:fa: 13:a2:97:43:2a:b8:b1:1a:57:37:57:50:31:70:03:56:21:fb: b9:86:82:a5 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjQwMzIzMTUyOTQ2WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWZlZjU2YS1mYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzc2J94t781bBSCDPZua4XLIAcA0Ea8AFJIfzW6yXdTLAP4LkPxDfuoBXwFW bPF3XiNfN7+3yp5BESn1H8U+nKB9pRJfGb8+eJhPTSMmJYOm/tqPQw6ho6OlFcrZ tZJAwGZS5XA2TNRWqWsZn12fSDA6iiatAWjZoXqf6GMF2VaJJ5jL2ARlxviKikf+ 6fXPPeQXWcPPFNwMUx9u85fGAWrds3fxULCiyMPZe0keOT0AiZxlVm8mQBC5K9HK rS6j9BH9wPcWPRSdIp/Ldvz17DgyDrGmrfBDteftDayT4kQB+T37pBK+vkCkHkUX ZO+UPKI8MB6uuVwMvMGZAHZFAwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMmXsDCW VLUsiatFW75O0QeGOcj8MB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvMkRGOEI3RjBF OTJBMTFFRThCMDI1MTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnGNgDBAFn5zowDQYJKoZIhvcNAQELBQADggEBALc3nFmC FdcdU8pC0AD6m242JQy2km0Agxh3g85VsjsFLFwBffHXUeYT9sLyXbE3ISyjZ0vw VffVJFJvPq3HrD91r72zNBqXnemyp/gVJKCqqlwZHOvtf3s8dqCvcIWCtqJXDGJK h+Lb3dKmPJazmTW46WeARTIgEsiv3Ssi6PtDzpbLvDyMH129SjnPEICpSzRpOWJK rSKMLauML+HAJaop76Cw8xpk+QdPFWlAX9rj14cprXRKkWPYjo3+TCq2XR0Khp/N j3F581hvS43OtTrrbCja7crZawCTsegggIQNoVpOTERG6wAj+hOil0MquLEaVzdX UDFwA1Yh+7mGgqU= -----END CERTIFICATE-----Generated at Wed May 1 03:20:30 2024 by rpki-client on console-fra.rpki-client.org