$ rpki-client -vvf rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/A2529A38F90611EBB8E0C27FC4F9AE02.roa File: A2529A38F90611EBB8E0C27FC4F9AE02.roa (raw, json) Hash identifier: lySgXIbTeI773mGGKtKXC8wJwgy1NnARqmSlG1Myyf8= Subject key identifier: EB:E2:AB:33:5C:D6:89:6B:FB:35:D4:E6:9A:1F:A5:37:1C:D0:14:FE Certificate issuer: /CN=A9158015/serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48 Certificate serial: 04B5 Authority key identifier: 06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/A2529A38F90611EBB8E0C27FC4F9AE02.roa Signing time: Tue 03 Sep 2024 01:14:35 +0000 ROA not before: Tue 03 Sep 2024 01:14:35 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 142571 IP address blocks: 103.169.181.0/24 maxlen: 24 103.172.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158015/serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48 Validity Not Before: Sep 3 01:14:35 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d662fb-e404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c5:05:a2:dc:2a:d7:57:ef:1a:fe:07:cc:e6: 5a:13:49:8b:e2:1e:8c:6d:55:85:08:45:40:08:ff: 00:0a:0a:d9:2e:22:46:f7:3e:63:e2:35:46:a7:de: 38:ad:fe:39:5b:fb:bf:e4:81:a8:f8:e7:15:13:bc: cd:3d:24:8f:f7:58:2a:3d:32:9d:bf:62:f5:9a:7e: 50:41:b3:63:e1:57:e7:24:9d:9f:b7:f8:be:68:60: ad:ca:78:a2:8f:ed:e8:0a:67:75:1a:f4:ff:8e:cd: 25:98:b9:2c:bc:ac:11:0d:79:43:cf:8a:7f:6e:7f: c7:42:b0:38:4e:ec:d6:e6:8d:02:9e:d5:45:f5:b5: 93:2d:1b:d2:82:d1:43:f7:b4:d9:8f:5a:14:74:db: 4a:db:e8:2f:e7:23:0f:b1:bd:0a:2f:82:21:b3:a8: 35:ba:bb:10:7d:b7:50:5c:f4:dc:e5:b4:7f:82:7b: 86:f3:53:1c:01:38:2f:2d:c7:64:17:84:88:f2:e3: 1d:93:bb:69:1d:a5:a6:b7:af:ba:92:25:7c:bb:fa: 78:78:f8:4d:2c:9c:f1:5b:42:12:b5:4c:78:23:f0: 36:e7:84:16:2c:18:5b:85:21:f2:f9:b9:ca:b0:cf: 03:67:c3:de:14:26:bb:a8:91:56:e6:7e:e4:dc:1b: 3f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E2:AB:33:5C:D6:89:6B:FB:35:D4:E6:9A:1F:A5:37:1C:D0:14:FE X509v3 Authority Key Identifier: keyid:06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/A2529A38F90611EBB8E0C27FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.169.181.0/24 103.172.190.0/24 Signature Algorithm: sha256WithRSAEncryption 33:5e:09:27:74:30:8f:bf:4a:26:af:59:1c:f9:88:89:95:66: e8:16:29:54:c6:6e:9e:8b:76:92:92:9e:70:01:d2:d2:e3:3a: 5b:31:4d:78:31:d2:8d:3b:9c:50:23:13:6e:36:78:3c:3f:46: 3a:7c:f3:98:8a:fb:45:55:26:46:a9:72:64:57:e2:51:64:27: 0d:ed:de:22:fd:6f:e4:3b:94:8d:a3:17:83:c8:ab:2b:72:90: 8d:e9:88:ce:18:71:6a:a5:2c:ed:d8:ce:26:0d:76:5c:88:f7: dc:3d:1c:9b:7e:fe:94:ab:73:b6:a6:9c:1f:49:7e:cd:c6:22: a1:77:b7:1c:ad:48:2f:34:4c:b2:5c:fe:a5:64:ce:cd:be:ee: e5:89:d7:a7:e6:0b:bb:91:cd:24:b3:83:d8:af:8b:40:b5:42: f4:98:96:d9:3f:09:a1:78:a8:7e:3f:43:f4:25:3f:19:68:2c: 9f:b0:35:f0:0b:e6:f5:a6:91:6a:e1:f1:32:41:2d:be:75:60: 5c:69:22:24:4e:3e:0e:02:87:55:0d:5b:6d:2d:ee:65:ba:bc: aa:65:de:cd:56:58:ea:5a:33:3b:e1:77:20:73:5a:31:c0:1e: 5c:51:ec:df:5e:61:78:e7:98:a0:e3:c1:b1:de:9c:ff:8f:f7: 8a:ec:6c:ca -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMTUxMTAvBgNVBAUTKDA2QkIxMUEzMjg0REUxRUVDRTI2RkJBRkJDRUIzQjRD RDIzNURDNDgwHhcNMjQwOTAzMDExNDM1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2NjJmYi1lNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cUFotwq11fvGv4HzOZaE0mL4h6MbVWFCEVACP8ACgrZLiJG9z5j4jVGp944 rf45W/u/5IGo+OcVE7zNPSSP91gqPTKdv2L1mn5QQbNj4VfnJJ2ft/i+aGCtynii j+3oCmd1GvT/js0lmLksvKwRDXlDz4p/bn/HQrA4TuzW5o0CntVF9bWTLRvSgtFD 97TZj1oUdNtK2+gv5yMPsb0KL4Ihs6g1ursQfbdQXPTc5bR/gnuG81McATgvLcdk F4SI8uMdk7tpHaWmt6+6kiV8u/p4ePhNLJzxW0IStUx4I/A254QWLBhbhSHy+bnK sM8DZ8PeFCa7qJFW5n7k3Bs/vwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOviqzNc 1olr+zXU5pofpTcc0BT+MB8GA1UdIwQYMBaAFAa7EaMoTeHuzib7r7zrO0zSNdxI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAxNS9GNkRBMEYxQ0Y5 MDMxMUVCOUUxMjJEN0FDNEY5QUUwMi9CcnNSb3loTjRlN09KdnV2dk9zN1ROSTEz RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Jyc1JveWhONGU3T0p2dXZ2T3M3VE5JMTNFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgwMTUvRjZEQTBGMUNGOTAzMTFFQjlFMTIyRDdBQzRGOUFFMDIvQTI1MjlBMzhG OTA2MTFFQkI4RTBDMjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnqbUDBABnrL4wDQYJKoZIhvcNAQELBQADggEBADNeCSd0 MI+/SiavWRz5iImVZugWKVTGbp6LdpKSnnAB0tLjOlsxTXgx0o07nFAjE242eDw/ Rjp885iK+0VVJkapcmRX4lFkJw3t3iL9b+Q7lI2jF4PIqytykI3piM4YcWqlLO3Y ziYNdlyI99w9HJt+/pSrc7amnB9Jfs3GIqF3txytSC80TLJc/qVkzs2+7uWJ16fm C7uRzSSzg9ivi0C1QvSYltk/CaF4qH4/Q/QlPxloLJ+wNfAL5vWmkWrh8TJBLb51 YFxpIiROPg4Ch1UNW20t7mW6vKpl3s1WWOpaMzvhdyBzWjHAHlxR7N9eYXjnmKDj wbHenP+P94rsbMo= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org