$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/2B70BBE889E111EEB5E86A0EC4F9AE02.roa File: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (raw, json) Hash identifier: t8vQxa/52rqt/b8S2ZS30M2W7RkkG9Y+HmsuhsTC7MQ= Subject key identifier: 3E:8D:EB:CC:19:3C:9E:1B:8F:FE:1E:22:C6:E9:8A:53:98:99:60:5E Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Certificate serial: 034C Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/2B70BBE889E111EEB5E86A0EC4F9AE02.roa Signing time: Sun 03 Dec 2023 02:14:05 +0000 ROA not before: Sun 03 Dec 2023 02:14:05 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 149032 IP address blocks: 103.177.48.0/24 maxlen: 24 103.177.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Validity Not Before: Dec 3 02:14:05 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656be46d-a8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:0a:0b:3a:ea:b6:0b:e0:b9:66:a5:aa:b9: c6:5f:19:23:f1:0e:f6:7e:39:8f:96:3f:0d:f5:70: b2:62:39:19:9a:47:0e:fa:8c:1c:92:90:b7:29:26: 9b:94:f6:41:1b:1c:fb:f8:a1:68:69:27:12:7a:6f: d6:47:f9:ec:45:1d:a6:04:03:9b:1a:d9:13:fc:62: 44:cc:58:c2:6c:41:27:4a:16:b1:cc:fe:09:ec:f3: c4:07:8b:45:6b:b1:4b:a4:b6:86:c4:4e:13:32:3d: 51:4b:08:c1:8b:09:6e:1a:f8:81:fe:73:d2:ea:a2: e8:ad:85:29:f5:1e:02:9e:8e:06:1e:12:3a:fc:45: e1:e6:a8:d5:dd:b2:9e:d3:11:c1:73:8e:1f:df:bc: 22:51:ca:fd:24:f9:20:0c:78:6c:d1:f3:b0:16:db: 82:89:e0:15:3e:b1:42:7d:0f:17:54:25:c9:88:45: fd:60:25:23:cc:88:d7:01:2c:bc:4c:8b:aa:9f:2d: 26:1f:d5:33:44:a7:a5:d3:57:b4:42:86:a9:98:81: b4:27:a7:bf:5d:86:6d:5c:07:99:40:9d:8a:39:22: a2:ac:9e:59:08:b1:b4:ed:20:12:60:98:bf:55:c4: d9:05:7b:c6:99:2c:89:5c:1c:08:ae:8a:5f:fd:33: 91:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8D:EB:CC:19:3C:9E:1B:8F:FE:1E:22:C6:E9:8A:53:98:99:60:5E X509v3 Authority Key Identifier: keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/2B70BBE889E111EEB5E86A0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.48.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:4e:92:56:e4:b2:11:75:46:d0:41:80:90:02:cd:e1:08:ad: 7f:db:63:23:cd:a7:dd:d5:49:7e:79:20:9b:54:06:d8:67:ad: 21:1e:ad:5a:18:99:d6:21:3d:48:9d:fd:db:86:3c:34:81:b1: 9f:12:66:9a:ec:e5:4b:3d:0c:e3:83:22:f3:83:13:23:7f:9e: 61:d1:00:99:a0:79:20:cd:21:2a:35:4f:9a:c9:a5:cc:b6:3f: 92:c4:5c:91:43:47:ab:d5:78:51:63:95:87:c0:d1:e3:80:84: ad:98:bc:d2:b9:d8:c8:89:4d:73:bb:a2:f4:e5:62:32:f1:7f: 7f:7f:e9:6b:f5:86:42:63:51:b9:3e:7f:6f:d1:70:a8:70:62: b0:0e:9c:a3:f6:94:5e:66:56:85:df:f4:31:76:41:d1:21:4b: 9c:fb:34:bd:61:7b:33:22:e8:c6:72:81:38:ce:60:7f:8e:c9: aa:0d:ef:87:49:b8:80:53:b1:85:98:13:db:f3:52:9d:8c:ef: 7e:66:bc:a1:6d:ef:ea:03:af:1e:f8:80:6b:cb:d8:48:66:50: 27:e4:85:2b:eb:3a:1e:08:d9:14:cf:87:5a:2a:a5:e4:85:00: 9a:17:39:59:91:a2:58:ec:cc:5a:2b:d9:b9:ea:78:92:1b:ca: 91:ef:12:4e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGOUUxMTAvBgNVBAUTKEU2NzU3QkUxRDIxODlBREU4RDc3MkM5Qzk0ODY0MzEw QkUzOTJENzAwHhcNMjMxMjAzMDIxNDA1WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiZTQ2ZC1hOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzg0KCzrqtgvguWalqrnGXxkj8Q72fjmPlj8N9XCyYjkZmkcO+owckpC3KSab lPZBGxz7+KFoaScSem/WR/nsRR2mBAObGtkT/GJEzFjCbEEnShaxzP4J7PPEB4tF a7FLpLaGxE4TMj1RSwjBiwluGviB/nPS6qLorYUp9R4Cno4GHhI6/EXh5qjV3bKe 0xHBc44f37wiUcr9JPkgDHhs0fOwFtuCieAVPrFCfQ8XVCXJiEX9YCUjzIjXASy8 TIuqny0mH9UzRKel01e0QoapmIG0J6e/XYZtXAeZQJ2KOSKirJ5ZCLG07SASYJi/ VcTZBXvGmSyJXBwIropf/TORcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD6N68wZ PJ4bj/4eIsbpilOYmWBeMB8GA1UdIwQYMBaAFOZ1e+HSGJrejXcsnJSGQxC+OS1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY5RS8wMDZDRTk5QzUw MDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10Nk5keXljbElaREVMNDVM WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuVjc0ZElZbXQ2TmR5eWNsSVpERUw0NUxYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFGOUUvMDA2Q0U5OUM1MDA2MTFFQzkwNTZDRDQ1QzRGOUFFMDIvMkI3MEJCRTg4 OUUxMTFFRUI1RTg2QTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnsTAwDQYJKoZIhvcNAQELBQADggEBAIxOklbkshF1RtBB gJACzeEIrX/bYyPNp93VSX55IJtUBthnrSEerVoYmdYhPUid/duGPDSBsZ8SZprs 5Us9DOODIvODEyN/nmHRAJmgeSDNISo1T5rJpcy2P5LEXJFDR6vVeFFjlYfA0eOA hK2YvNK52MiJTXO7ovTlYjLxf39/6Wv1hkJjUbk+f2/RcKhwYrAOnKP2lF5mVoXf 9DF2QdEhS5z7NL1hezMi6MZygTjOYH+OyaoN74dJuIBTsYWYE9vzUp2M735mvKFt 7+oDrx74gGvL2EhmUCfkhSvrOh4I2RTPh1oqpeSFAJoXOVmRoljszFor2bnqeJIb ypHvEk4= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:31 2024 by rpki-client on console-fra.rpki-client.org