$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/2AFC632E458511EE8566F97AC4F9AE02.roa File: 2AFC632E458511EE8566F97AC4F9AE02.roa (raw, json) Hash identifier: zgXXZljhhxSC5ZsL/rE5JAt6ilVqvNtdy6C36VBeUYM= Subject key identifier: E1:BF:83:A5:16:70:2B:58:62:0F:A9:89:FB:1E:B8:9C:26:2E:EB:3F Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 0932 Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/2AFC632E458511EE8566F97AC4F9AE02.roa Signing time: Thu 22 Feb 2024 20:59:04 +0000 ROA not before: Thu 22 Feb 2024 20:59:04 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 140100 IP address blocks: 103.148.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2354 (0x932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Validity Not Before: Feb 22 20:59:04 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65d7b597-2d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7f:4b:31:51:15:8a:a8:50:04:80:5b:70:49: fa:5a:14:c6:b1:48:de:02:9c:98:cf:b5:91:63:35: 18:e6:98:35:c2:f3:62:9f:ba:63:85:71:bd:be:eb: b9:73:49:22:d8:8a:90:0d:6c:7d:d8:4a:3d:07:91: ea:72:22:af:7a:40:48:27:33:b3:4c:ce:00:65:d0: 3e:76:62:3b:05:a3:53:b6:28:51:53:01:82:b7:6a: ae:4f:75:f4:d3:1a:14:34:04:d4:96:21:cd:c6:5d: ed:a4:f7:d9:18:07:b7:cb:1b:02:23:4e:b4:ec:e2: fc:fd:ab:6c:66:53:7d:31:d8:b9:0f:59:88:80:31: f5:4a:32:1d:a6:da:66:39:42:a6:d3:7c:4d:e3:d1: 40:17:cc:a6:b8:22:a7:a8:2b:4a:d1:bc:d6:ca:f1: 34:dc:cf:d7:96:de:43:7e:dd:cc:54:2c:6a:ec:68: d3:a1:03:a7:0c:3f:7c:0d:8e:22:67:f8:89:be:b0: 79:2c:cc:29:4a:28:33:4d:b3:57:0e:5f:26:5a:18: 8b:f6:55:29:fb:f1:d0:5e:fa:ab:c5:6d:54:28:4f: e0:e7:7c:f8:ad:4b:ee:90:d6:a2:2c:9d:48:fb:40: ce:11:b5:0a:6d:1d:f0:2d:e5:3b:99:a7:5c:b8:58: 21:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BF:83:A5:16:70:2B:58:62:0F:A9:89:FB:1E:B8:9C:26:2E:EB:3F X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/2AFC632E458511EE8566F97AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.129.0/24 Signature Algorithm: sha256WithRSAEncryption 22:0b:c1:dc:89:75:1f:19:83:cf:d9:e5:c6:cf:7d:3d:34:2c: 31:ad:2f:d0:35:5e:d7:30:3c:11:3d:dc:ff:96:50:78:79:b2: 02:39:2f:71:8a:d5:2a:35:34:e9:ed:3b:f3:ea:c0:e3:fc:d2: 0f:42:d4:97:76:63:ba:ac:ae:58:29:a1:0a:f1:b6:a4:3a:ff: c0:1b:9c:2a:c4:2c:cb:d7:77:99:c2:8d:28:18:87:3a:ba:0a: cd:7e:c7:61:4a:31:9f:69:20:5b:6f:05:79:83:4d:83:33:0e: 9c:28:0a:d7:81:9a:50:47:ec:69:92:6c:a2:47:0c:98:d5:0b: c8:6c:b7:06:57:48:cc:02:f6:b4:7a:b4:2a:0e:b8:26:e9:08: 4c:1d:5e:0a:ea:63:1e:e9:94:29:e3:a8:ef:df:9c:8d:6f:16: 85:06:c9:f8:1b:a1:84:db:5c:41:b0:bd:b9:b0:c9:d6:9f:da: a3:d2:0b:95:f3:7e:a7:fb:59:31:d6:69:2b:36:8b:68:1f:e0: f0:ce:7e:db:95:79:c3:39:8a:3b:b2:b5:b5:f1:3f:65:d6:f8: c3:83:fc:31:cd:2b:0d:59:17:b2:d6:a7:48:6a:8a:7c:13:02: 31:b3:0c:ac:ec:13:a0:51:26:9a:67:60:47:86:3e:67:0e:f6: 8a:9d:59:05 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjQwMjIyMjA1OTA0WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ3YjU5Ny0yZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmX9LMVEViqhQBIBbcEn6WhTGsUjeApyYz7WRYzUY5pg1wvNin7pjhXG9vuu5 c0ki2IqQDWx92Eo9B5HqciKvekBIJzOzTM4AZdA+dmI7BaNTtihRUwGCt2quT3X0 0xoUNATUliHNxl3tpPfZGAe3yxsCI0607OL8/atsZlN9Mdi5D1mIgDH1SjIdptpm OUKm03xN49FAF8ymuCKnqCtK0bzWyvE03M/Xlt5Dft3MVCxq7GjToQOnDD98DY4i Z/iJvrB5LMwpSigzTbNXDl8mWhiL9lUp+/HQXvqrxW1UKE/g53z4rUvukNaiLJ1I +0DOEbUKbR3wLeU7madcuFghfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOG/g6UW cCtYYg+pifseuJwmLus/MB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBCQTYvMEYzREY0Mjg3MTU3MTFFQTg2NTU5RDJEQzRGOUFFMDIvMkFGQzYzMkU0 NTg1MTFFRTg1NjZGOTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnlIEwDQYJKoZIhvcNAQELBQADggEBACILwdyJdR8Zg8/Z 5cbPfT00LDGtL9A1XtcwPBE93P+WUHh5sgI5L3GK1So1NOntO/PqwOP80g9C1Jd2 Y7qsrlgpoQrxtqQ6/8AbnCrELMvXd5nCjSgYhzq6Cs1+x2FKMZ9pIFtvBXmDTYMz DpwoCteBmlBH7GmSbKJHDJjVC8hstwZXSMwC9rR6tCoOuCbpCEwdXgrqYx7plCnj qO/fnI1vFoUGyfgboYTbXEGwvbmwydaf2qPSC5Xzfqf7WTHWaSs2i2gf4PDOftuV ecM5ijuytbXxP2XW+MOD/DHNKw1ZF7LWp0hqinwTAjGzDKzsE6BRJppnYEeGPmcO 9oqdWQU= -----END CERTIFICATE-----Generated at Sat May 18 22:14:02 2024 by rpki-client on console-fra.rpki-client.org