$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/E0207030F13611EE869F9E34C4F9AE02.roa File: E0207030F13611EE869F9E34C4F9AE02.roa (raw, json) Hash identifier: OsYm03YOb1sFS9q082zuXs6miPfh1tqBo5SwMn83UWQ= Subject key identifier: B0:BE:C4:93:1E:22:2A:02:C8:75:DB:BC:C2:93:88:B0:4E:03:73:48 Certificate issuer: /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707 Certificate serial: 02 Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/E0207030F13611EE869F9E34C4F9AE02.roa Signing time: Tue 02 Apr 2024 21:20:49 +0000 ROA not before: Tue 02 Apr 2024 21:20:49 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135142 IP address blocks: 103.210.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707 Validity Not Before: Apr 2 21:20:49 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=660c76b0-f9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:c2:a8:a1:2a:b8:11:c9:e4:a3:48:3e:33: 90:c3:0c:3d:c8:85:ae:fc:b7:32:17:e5:d0:ce:bf: 7b:d4:cf:a3:75:72:ac:12:87:f2:3e:ac:1b:06:42: 83:47:92:8d:8d:70:29:69:d7:f6:e3:c0:0d:a1:0e: e0:8d:a9:3b:f1:2c:5e:80:29:75:b9:39:fc:83:87: 63:fc:34:44:7c:1f:46:6c:90:ba:64:7d:71:70:c5: e7:eb:ba:21:83:d1:0d:f5:29:be:52:7c:ae:b3:fc: 41:fa:93:02:23:d4:dd:13:9f:1a:dd:f2:1d:a9:67: b5:4a:40:b6:05:7d:6b:5e:97:3c:65:54:50:0f:f1: 15:64:be:25:f4:33:30:85:bf:1d:ab:14:24:6c:f3: 59:b6:1f:3d:52:3e:4c:d6:1d:dc:b6:f7:9d:d1:a2: af:fa:f3:e5:17:70:2f:c4:cc:39:15:40:bd:6f:c5: 9d:94:53:10:7f:db:5e:39:80:7b:d0:5a:e2:5c:dd: e2:90:d4:c7:70:41:d3:f3:34:38:77:80:ff:73:38: 13:42:0a:ab:c5:2b:12:37:6d:d2:a1:67:0c:8c:5a: 75:29:47:50:46:5d:66:e3:01:16:66:b1:7c:30:ac: 03:15:3e:06:34:da:54:ed:a9:86:89:bd:13:cc:6e: c1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BE:C4:93:1E:22:2A:02:C8:75:DB:BC:C2:93:88:B0:4E:03:73:48 X509v3 Authority Key Identifier: keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/E0207030F13611EE869F9E34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.210.208.0/24 Signature Algorithm: sha256WithRSAEncryption c4:5e:18:35:74:1f:fc:a3:e5:38:2b:75:4e:7f:c2:38:fc:62: 2e:ca:eb:83:89:f4:c0:d5:97:00:e6:91:0e:c2:30:fc:a8:11: 5f:99:97:d4:a4:8d:98:ea:6f:b2:41:d6:0e:90:63:3c:b9:75: bc:eb:6e:98:01:5b:f0:66:ed:38:02:e9:75:9a:7e:0c:a9:37: 8c:ae:4f:8d:4a:f5:7c:26:86:fe:7f:40:c1:ed:27:6b:c9:5b: 89:a1:34:2a:92:68:d1:c4:07:7b:31:c1:8b:ec:68:f4:71:de: 93:ae:f6:a4:7f:c6:5a:be:68:23:f0:d9:10:64:6d:77:f7:77: 5a:e0:4d:77:fd:8c:25:55:a5:0a:64:44:ef:53:3e:f1:ad:d2: 78:bf:87:74:b4:d0:5b:01:3b:98:1d:1e:20:dc:0d:3a:0b:20: 1d:73:8c:99:e5:24:e4:de:0d:50:17:11:8c:e5:69:8c:45:86: 3b:e7:42:cf:66:26:8c:ba:fe:b0:b4:9f:61:75:7d:ea:d6:27: 99:40:81:61:61:da:27:9b:78:45:bb:76:b2:17:77:e1:5d:e7: cd:1f:15:12:fe:1b:6b:fd:55:86:00:01:03:36:69:9e:47:d9: 9a:5a:8e:cf:c2:2d:7a:ed:20:e6:58:40:a8:74:19:68:89:d6: 34:14:22:d8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjRCNTExMC8GA1UEBRMoRjVGMUUyREVCMzI1NTYyQjIyODVGRjhCNURFMjVERjJD QURGNzcwNzAeFw0yNDA0MDIyMTIwNDlaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MGM3NmIwLWY5YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFscKooSq4Ecnko0g+M5DDDD3Iha78tzIX5dDOv3vUz6N1cqwSh/I+rBsGQoNH ko2NcClp1/bjwA2hDuCNqTvxLF6AKXW5OfyDh2P8NER8H0ZskLpkfXFwxefruiGD 0Q31Kb5SfK6z/EH6kwIj1N0Tnxrd8h2pZ7VKQLYFfWtelzxlVFAP8RVkviX0MzCF vx2rFCRs81m2Hz1SPkzWHdy2953Roq/68+UXcC/EzDkVQL1vxZ2UUxB/2145gHvQ WuJc3eKQ1MdwQdPzNDh3gP9zOBNCCqvFKxI3bdKhZwyMWnUpR1BGXWbjARZmsXww rAMVPgY02lTtqYaJvRPMbsFDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUsL7Ekx4i KgLIddu8wpOIsE4Dc0gwHwYDVR0jBBgwFoAU9fHi3rMlVisihf+LXeJd8srfdwcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCNEI1LzQwQ0U5RjJBRjEz NjExRUU5MDhCRjAzMkM0RjlBRTAyLzlmSGkzck1sVmlzaWhmLUxYZUpkOHNyZmR3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWZIaTNyTWxWaXNpaGYtTFhlSmQ4c3JmZHdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjRCNS80MENFOUYyQUYxMzYxMUVFOTA4QkYwMzJDNEY5QUUwMi9FMDIwNzAzMEYx MzYxMUVFODY5RjlFMzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfS0DANBgkqhkiG9w0BAQsFAAOCAQEAxF4YNXQf/KPlOCt1 Tn/COPxiLsrrg4n0wNWXAOaRDsIw/KgRX5mX1KSNmOpvskHWDpBjPLl1vOtumAFb 8GbtOALpdZp+DKk3jK5PjUr1fCaG/n9Awe0na8lbiaE0KpJo0cQHezHBi+xo9HHe k672pH/GWr5oI/DZEGRtd/d3WuBNd/2MJVWlCmRE71M+8a3SeL+HdLTQWwE7mB0e INwNOgsgHXOMmeUk5N4NUBcRjOVpjEWGO+dCz2YmjLr+sLSfYXV96tYnmUCBYWHa J5t4Rbt2shd34V3nzR8VEv4ba/1VhgABAzZpnkfZmlqOz8Iteu0g5lhAqHQZaInW NBQi2A== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org