$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/2FD106D2B92711E99D48BA23C4F9AE02.roa File: 2FD106D2B92711E99D48BA23C4F9AE02.roa (raw, json) Hash identifier: yxTidIFVAK1Xt0kWWO33LdfZQBwy5DfkOK/lacH9eUo= Subject key identifier: 80:66:E3:87:98:6F:FD:2F:E4:85:47:B1:D7:10:DA:4F:6E:D8:CD:2B Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0D2E Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/2FD106D2B92711E99D48BA23C4F9AE02.roa Signing time: Fri 02 Aug 2024 18:56:36 +0000 ROA not before: Fri 02 Aug 2024 18:56:36 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 133936 IP address blocks: 103.140.138.0/24 maxlen: 24 103.140.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3374 (0xd2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Validity Not Before: Aug 2 18:56:36 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66ad2be4-3335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f0:76:54:c7:b2:37:1f:b4:fd:0d:7c:a2:c6: 0b:20:e0:1b:a4:f5:91:bf:8e:37:17:03:18:33:35: e1:d3:60:bd:da:0b:d9:47:16:ce:95:86:59:c1:eb: d0:ef:3d:31:0a:59:16:eb:a6:fd:0c:a2:80:c9:64: 53:0f:26:35:57:63:76:51:48:bc:ee:d7:cf:b9:0e: 09:f6:b5:04:10:31:ad:98:9b:c6:11:8f:ef:4d:51: 56:e9:8f:38:47:f2:b7:82:5d:5e:3d:5a:a6:3b:43: 75:9e:9a:82:4d:2e:fe:33:4e:2d:b1:75:42:f8:31: 00:79:b2:3e:2d:90:a5:d4:50:0c:89:0c:2b:a3:bc: dc:47:7e:a6:9e:d7:12:bb:ea:57:21:a9:17:75:c2: 1a:71:c7:a3:8f:99:3f:04:fc:7b:89:b1:60:03:4c: a6:5c:4b:6c:0e:b2:14:50:12:c0:0a:92:b8:8d:4c: 7f:50:f9:be:5c:4c:fa:9d:93:59:e1:0b:ea:3c:f1: 1e:8b:43:57:ad:62:85:9b:3f:c9:06:22:61:7f:5f: 14:b4:9d:59:f3:87:cb:51:db:1b:e8:7c:ec:e7:56: 8d:2e:ee:87:1d:67:de:2d:ef:de:68:e4:c6:3c:f7: cb:ba:d4:33:0b:65:81:90:b6:e9:53:7e:29:68:33: 34:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:66:E3:87:98:6F:FD:2F:E4:85:47:B1:D7:10:DA:4F:6E:D8:CD:2B X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/2FD106D2B92711E99D48BA23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.138.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:79:b8:bc:8a:db:cc:be:9c:a8:a0:34:d5:7e:bb:ac:39:e3: db:f1:8f:10:11:da:4a:fb:7e:56:ea:ab:b9:b2:01:4f:05:ee: a7:dd:e9:95:39:3d:5b:cb:8b:73:bb:e2:de:46:8b:7d:c1:88: a8:6c:64:07:d8:d1:c0:dd:e5:df:34:37:59:f6:e3:1e:7d:ce: 70:81:bb:b6:82:3c:b1:cf:18:7a:21:38:94:c1:e4:db:47:a5: ef:4a:b7:cb:cd:0c:b4:58:db:28:c7:9d:ab:ac:e5:ac:00:7f: de:35:29:ed:85:5e:df:57:55:87:50:75:f7:aa:16:4b:7c:bf: a7:49:7e:5e:f8:34:07:64:c8:fc:1b:78:b7:1d:59:b5:2c:cd: 9b:fd:15:6c:5f:a2:cc:f2:41:9d:ef:0c:79:12:0c:d7:0c:33: 6b:fe:28:c3:0c:df:d3:ad:57:f8:fe:11:d3:60:ba:5d:f4:6b: 82:e8:f2:dd:db:95:cd:37:51:29:e4:83:41:11:7e:ba:f1:0c: 33:5c:85:4d:f5:92:9b:c2:1b:1c:ed:fd:40:22:c7:f1:29:c7: 00:f6:e0:b1:96:22:57:e5:80:b4:f3:b3:5f:8c:0f:eb:d1:d6: 53:4a:af:59:9b:63:01:61:f4:c8:6f:cf:3a:a0:e9:dd:d6:0e: e1:8f:9e:8d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjQwODAyMTg1NjM2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFkMmJlNC0zMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/B2VMeyNx+0/Q18osYLIOAbpPWRv443FwMYMzXh02C92gvZRxbOlYZZwevQ 7z0xClkW66b9DKKAyWRTDyY1V2N2UUi87tfPuQ4J9rUEEDGtmJvGEY/vTVFW6Y84 R/K3gl1ePVqmO0N1npqCTS7+M04tsXVC+DEAebI+LZCl1FAMiQwro7zcR36mntcS u+pXIakXdcIaccejj5k/BPx7ibFgA0ymXEtsDrIUUBLACpK4jUx/UPm+XEz6nZNZ 4QvqPPEei0NXrWKFmz/JBiJhf18UtJ1Z84fLUdsb6Hzs51aNLu6HHWfeLe/eaOTG PPfLutQzC2WBkLbpU34paDM0CQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIBm44eY b/0v5IVHsdcQ2k9u2M0rMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkE5QjEvNUNBQ0Y2QThCOTI2MTFFOTk3NTI4OTIyQzRGOUFFMDIvMkZEMTA2RDJC OTI3MTFFOTlENDhCQTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjIowDQYJKoZIhvcNAQELBQADggEBAEx5uLyK28y+nKig NNV+u6w549vxjxAR2kr7flbqq7myAU8F7qfd6ZU5PVvLi3O74t5Gi33BiKhsZAfY 0cDd5d80N1n24x59znCBu7aCPLHPGHohOJTB5NtHpe9Kt8vNDLRY2yjHnaus5awA f941Ke2FXt9XVYdQdfeqFkt8v6dJfl74NAdkyPwbeLcdWbUszZv9FWxfoszyQZ3v DHkSDNcMM2v+KMMM39OtV/j+EdNgul30a4Lo8t3blc03USnkg0ERfrrxDDNchU31 kpvCGxzt/UAix/EpxwD24LGWIlflgLTzs1+MD+vR1lNKr1mbYwFh9Mhvzzqg6d3W DuGPno0= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org