$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/E0A2D2B040C811EE90859140C4F9AE02.roa File: E0A2D2B040C811EE90859140C4F9AE02.roa (raw, json) Hash identifier: SzaVt51qpMlgOXonKR5CNB88VlUM6jEUlR77/PeLcks= Subject key identifier: 86:51:2B:7E:A7:2F:04:7A:D7:69:4B:50:AA:D0:D1:2D:9A:99:1D:F7 Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Certificate serial: 1017 Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/E0A2D2B040C811EE90859140C4F9AE02.roa Signing time: Fri 02 Feb 2024 18:06:31 +0000 ROA not before: Fri 02 Feb 2024 18:06:31 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 135628 IP address blocks: 103.132.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4119 (0x1017) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Validity Not Before: Feb 2 18:06:31 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65bd2f27-61cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:2d:74:6c:27:06:fa:5c:86:69:61:41:18: eb:0f:f2:4e:e8:67:de:1c:e5:3b:d4:03:c0:28:5c: a1:15:a3:ac:9c:6e:8e:1d:8d:43:21:c5:49:0f:6a: 17:f6:d3:9d:e4:85:77:5f:82:30:ec:c2:8e:32:bc: 51:1f:39:0b:5c:71:41:da:77:67:8a:f2:3b:be:4e: 5c:8f:34:cd:8d:52:70:e8:fc:38:37:d8:6c:b3:1f: c9:2c:b6:04:e7:79:6e:25:cc:82:4d:71:bf:97:c5: 02:4d:a5:fe:88:4a:55:82:7c:25:fc:ba:54:c7:c0: e0:57:b9:05:da:ed:44:04:c5:f7:46:d7:79:6d:53: 04:35:9a:c2:94:67:aa:c1:4c:a0:a4:df:31:60:3e: 81:e1:f7:48:eb:77:42:33:f5:18:4b:e7:ef:74:e1: 3e:7a:35:b5:5e:a2:04:65:e2:81:25:1c:44:7b:ea: cf:0f:e8:53:4d:be:a1:e6:ec:60:8c:da:90:24:5c: b9:ca:9e:19:31:88:ab:81:9d:17:1a:35:c0:3e:a0: f6:1a:ac:43:3e:13:32:10:fa:15:70:78:07:43:69: 64:98:64:1c:ac:de:c8:07:39:1f:8a:3e:a1:91:ad: 66:3d:ed:e6:7f:05:ab:67:66:51:0c:2b:ba:26:fc: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:51:2B:7E:A7:2F:04:7A:D7:69:4B:50:AA:D0:D1:2D:9A:99:1D:F7 X509v3 Authority Key Identifier: keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/E0A2D2B040C811EE90859140C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.250.0/24 Signature Algorithm: sha256WithRSAEncryption 42:c8:da:b4:9a:ca:d7:86:77:c2:dd:90:8d:1c:bc:d4:cb:3f: 8e:e6:8d:aa:aa:e1:bb:db:2b:52:7c:c2:2f:32:d0:f2:55:39: 83:c8:f7:49:22:25:9c:81:5a:62:e8:29:b2:ca:73:76:b3:d3: c9:35:81:7a:a8:25:0e:d2:7e:85:06:0d:f5:89:a9:8f:1e:4e: 6b:aa:64:68:9f:a8:29:cd:9c:18:08:57:f2:00:0e:1a:dd:4d: 62:9d:97:a3:c8:8c:05:9a:95:94:c4:ca:f1:54:75:94:27:b7: d0:53:9d:26:aa:39:df:f6:a4:1c:50:14:20:bd:51:47:40:e3: e9:29:c3:e8:5c:45:56:f0:40:d1:ff:c7:cb:91:30:f6:1b:70: f7:8a:53:22:48:0c:02:cb:da:51:2f:0a:a8:b9:cb:6f:b4:3f: 94:d6:ed:8b:b4:ee:b0:fc:23:3f:bc:3e:ab:ea:0a:c3:dd:57: f2:37:a3:fa:5a:bb:fc:15:ed:38:74:c1:ba:4d:60:cd:21:b3: af:97:93:4e:66:61:4d:da:41:19:4d:7c:d7:68:ee:9c:e2:43: 05:8d:bb:70:6b:13:83:3b:c8:63:d7:07:f9:cd:27:71:f9:0b: ab:e5:34:f3:63:32:c6:cd:c6:69:13:66:16:0a:a3:8a:49:62: 63:10:f0:53 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OTcxMTAvBgNVBAUTKDcwQkQxQTVEOTUxMkJGNkRFMEJBNjkyNTNEQkJGMDEx MDNFNTNBNDMwHhcNMjQwMjAyMTgwNjMxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJkMmYyNy02MWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0YtdGwnBvpchmlhQRjrD/JO6GfeHOU71APAKFyhFaOsnG6OHY1DIcVJD2oX 9tOd5IV3X4Iw7MKOMrxRHzkLXHFB2ndnivI7vk5cjzTNjVJw6Pw4N9hssx/JLLYE 53luJcyCTXG/l8UCTaX+iEpVgnwl/LpUx8DgV7kF2u1EBMX3Rtd5bVMENZrClGeq wUygpN8xYD6B4fdI63dCM/UYS+fvdOE+ejW1XqIEZeKBJRxEe+rPD+hTTb6h5uxg jNqQJFy5yp4ZMYirgZ0XGjXAPqD2GqxDPhMyEPoVcHgHQ2lkmGQcrN7IBzkfij6h ka1mPe3mfwWrZ2ZRDCu6JvwWbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIZRK36n LwR612lLUKrQ0S2amR33MB8GA1UdIwQYMBaAFHC9Gl2VEr9t4LppJT278BED5TpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc5Ny8wOUYyRDk5NDFB MjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3YyM2d1bWtsUGJ2d0VRUGxP a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGFYWlVTdjIzZ3Vta2xQYnZ3RVFQbE9rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk3OTcvMDlGMkQ5OTQxQTIyMTFFOUJDMDZEMzBBQzRGOUFFMDIvRTBBMkQyQjA0 MEM4MTFFRTkwODU5MTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnhPowDQYJKoZIhvcNAQELBQADggEBAELI2rSayteGd8Ld kI0cvNTLP47mjaqq4bvbK1J8wi8y0PJVOYPI90kiJZyBWmLoKbLKc3az08k1gXqo JQ7SfoUGDfWJqY8eTmuqZGifqCnNnBgIV/IADhrdTWKdl6PIjAWalZTEyvFUdZQn t9BTnSaqOd/2pBxQFCC9UUdA4+kpw+hcRVbwQNH/x8uRMPYbcPeKUyJIDALL2lEv Cqi5y2+0P5TW7Yu07rD8Iz+8PqvqCsPdV/I3o/pau/wV7Th0wbpNYM0hs6+Xk05m YU3aQRlNfNdo7pziQwWNu3BrE4M7yGPXB/nNJ3H5C6vlNPNjMsbNxmkTZhYKo4pJ YmMQ8FM= -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org