$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/EECBCEBE6E3511EABDE26D73C4F9AE02.roa File: EECBCEBE6E3511EABDE26D73C4F9AE02.roa (raw, json) Hash identifier: LPVTnB/0GHrJCLpXZVzzn+Fi+J75+p11hdRea2Hs9CM= Subject key identifier: E7:71:FA:8D:16:0E:C0:04:73:3F:A2:75:A4:20:44:2D:23:D4:1D:91 Certificate issuer: /CN=A9111A27/serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0 Certificate serial: 098E Authority key identifier: CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/EECBCEBE6E3511EABDE26D73C4F9AE02.roa Signing time: Tue 02 Jul 2024 20:47:42 +0000 ROA not before: Tue 02 Jul 2024 20:47:42 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 9268 IP address blocks: 103.110.176.0/22 maxlen: 22 202.9.16.0/20 maxlen: 20 202.9.26.0/24 maxlen: 24 202.9.27.0/24 maxlen: 24 2405:db00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2446 (0x98e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111A27/serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0 Validity Not Before: Jul 2 20:47:42 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6684676d-23f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:d2:f1:de:af:4f:5f:35:48:64:41:b4:cb: 1d:2a:c6:af:f5:2d:99:57:0c:ba:0b:6b:86:09:a3: 80:fe:e3:31:cc:63:86:69:53:85:8a:d8:8b:b7:db: ec:fb:d6:24:5e:f8:72:cb:94:9a:be:51:01:06:6f: d9:5c:3f:18:98:02:42:65:00:68:40:31:d7:d3:a7: a7:d9:f7:a4:61:59:f1:22:2a:c0:f7:fa:33:ff:09: b2:f1:38:fc:e3:d9:ad:57:a5:ba:e9:7d:0f:81:60: f0:7b:9e:3b:b0:9b:0a:a6:fc:14:51:1b:f8:53:99: bb:e0:b5:e6:e7:2c:d8:5d:b4:20:cb:98:52:c7:a5: 70:8d:38:6c:9e:7b:d6:c7:0a:10:a7:94:47:1a:2c: 29:4c:2c:94:44:7c:b2:7a:7a:e6:b1:98:52:f8:ca: 76:4d:13:59:a1:a3:81:05:49:5f:84:cc:eb:5d:9c: 66:44:31:7a:b3:94:90:c4:5f:20:de:12:31:74:c2: be:6c:e9:2c:8e:c3:43:ea:31:99:82:a0:80:7f:05: b3:e1:bf:3d:6d:2e:21:95:da:11:a6:91:42:b7:54: e0:2c:41:53:6e:01:bd:45:48:7c:47:6b:d9:45:a5: 0a:90:d2:fb:d6:af:f4:5b:11:db:06:2e:7a:74:61: 27:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:71:FA:8D:16:0E:C0:04:73:3F:A2:75:A4:20:44:2D:23:D4:1D:91 X509v3 Authority Key Identifier: keyid:CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/EECBCEBE6E3511EABDE26D73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.176.0/22 202.9.16.0/20 IPv6: 2405:db00::/32 Signature Algorithm: sha256WithRSAEncryption ae:25:ec:f8:6d:f3:3c:09:05:a8:a9:8d:24:7c:d1:39:22:a1: 69:93:12:af:a9:80:e2:c6:83:72:45:3c:71:0c:0e:c2:c1:b0: 13:2a:e6:d8:a6:42:aa:56:0d:14:60:93:8d:29:a4:d3:0a:55: 17:ef:df:bb:b0:a7:47:0c:03:ec:f2:d8:1b:ab:78:30:9d:73: 67:05:34:c4:40:40:b6:97:f9:39:b5:46:00:66:dd:18:44:10: de:ba:22:3f:1c:48:cf:5d:4e:dd:e7:85:34:bb:fd:ff:35:ef: 9a:c2:7d:ea:ee:a6:16:48:d8:42:51:0a:85:2b:8c:cf:30:a4: e9:1c:ce:8d:c5:af:3a:34:4b:eb:97:ed:14:94:9d:0e:96:a9: 5c:6c:2f:c8:aa:a8:be:8f:66:a9:be:1d:50:d0:33:12:51:b8: d7:32:b1:1c:2e:3d:85:5f:d7:a4:f4:04:71:8b:99:ae:90:55: 70:2d:65:f0:ff:36:98:d0:ca:2c:90:22:54:b2:ae:22:23:e5: 63:04:8c:34:35:4b:24:83:39:eb:a4:4d:95:53:da:35:3b:16: 47:c2:34:28:15:1f:80:a0:b4:1c:e5:4e:6c:fc:20:1c:f4:3e: fb:45:c6:f0:cf:5b:e7:a5:ee:ec:20:1b:02:b8:48:b5:cc:2a: ae:66:8e:13 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFBMjcxMTAvBgNVBAUTKENDRjU4MUY0QzMzQ0E0NDQxRTE4MDdFMzk2QzVFRkU3 NUZBODJERDAwHhcNMjQwNzAyMjA0NzQyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0Njc2ZC0yM2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMfS8d6vT181SGRBtMsdKsav9S2ZVwy6C2uGCaOA/uMxzGOGaVOFitiLt9vs +9YkXvhyy5SavlEBBm/ZXD8YmAJCZQBoQDHX06en2fekYVnxIirA9/oz/wmy8Tj8 49mtV6W66X0PgWDwe547sJsKpvwUURv4U5m74LXm5yzYXbQgy5hSx6VwjThsnnvW xwoQp5RHGiwpTCyURHyyenrmsZhS+Mp2TRNZoaOBBUlfhMzrXZxmRDF6s5SQxF8g 3hIxdMK+bOksjsND6jGZgqCAfwWz4b89bS4hldoRppFCt1TgLEFTbgG9RUh8R2vZ RaUKkNL71q/0WxHbBi56dGEnaQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOdx+o0W DsAEcz+idaQgRC0j1B2RMB8GA1UdIwQYMBaAFMz1gfTDPKREHhgH45bF7+dfqC3Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUEyNy82NjI1MThCRTZF MzQxMUVBODQxRDQyNkVDNEY5QUUwMi96UFdCOU1NOHBFUWVHQWZqbHNYdjUxLW9M ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQV0I5TU04cEVRZUdBZmpsc1h2NTEtb0xkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFBMjcvNjYyNTE4QkU2RTM0MTFFQTg0MUQ0MjZFQzRGOUFFMDIvRUVDQkNFQkU2 RTM1MTFFQUJERTI2RDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnbrADBATKCRAwDQQCAAIwBwMFACQF2wAwDQYJKoZIhvcN AQELBQADggEBAK4l7Pht8zwJBaipjSR80TkioWmTEq+pgOLGg3JFPHEMDsLBsBMq 5timQqpWDRRgk40ppNMKVRfv37uwp0cMA+zy2BureDCdc2cFNMRAQLaX+Tm1RgBm 3RhEEN66Ij8cSM9dTt3nhTS7/f8175rCferuphZI2EJRCoUrjM8wpOkczo3Frzo0 S+uX7RSUnQ6WqVxsL8iqqL6PZqm+HVDQMxJRuNcysRwuPYVf16T0BHGLma6QVXAt ZfD/NpjQyiyQIlSyriIj5WMEjDQ1SySDOeukTZVT2jU7FkfCNCgVH4CgtBzlTmz8 IBz0PvtFxvDPW+el7uwgGwK4SLXMKq5mjhM= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org