$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/E28D98DEC9EB11EDA0BE5C48C4F9AE02.roa File: E28D98DEC9EB11EDA0BE5C48C4F9AE02.roa (raw, json) Hash identifier: qYO1dP0PoVxIFCncGnO0BGsZ4PxYEcuuwkcZ+gPNpME= Subject key identifier: CC:52:4F:66:14:D3:3F:E4:18:F4:43:86:61:CB:27:7F:04:3B:2C:48 Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F Certificate serial: 06A0 Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/E28D98DEC9EB11EDA0BE5C48C4F9AE02.roa Signing time: Sat 02 Mar 2024 23:12:08 +0000 ROA not before: Sat 02 Mar 2024 23:12:08 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 55720 IP address blocks: 103.82.228.0/24 maxlen: 24 103.82.229.0/24 maxlen: 24 103.82.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 22:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F Validity Not Before: Mar 2 23:12:08 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65e3b248-0820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:8b:53:af:95:a2:2d:89:ec:9e:91:0d:93: e7:7f:44:68:12:ee:b4:7b:5c:53:9e:ea:16:a3:7d: fa:6b:ab:f0:17:bf:46:c8:cb:10:cd:c3:12:cf:9a: 20:b5:34:e0:7c:9a:7f:37:8c:c6:56:94:52:dc:eb: 79:27:1b:4c:54:b9:61:c2:ba:15:26:55:db:1c:75: 37:a1:ca:1f:36:8a:ec:2f:28:a3:72:ba:e6:43:b7: 00:ef:65:ba:16:c8:71:71:28:5e:6d:59:20:b7:59: f6:3b:cc:9f:49:7d:0a:ba:d3:30:5b:40:ba:c6:6e: 4f:c6:c5:87:50:3a:86:69:02:2b:a5:96:6b:03:b5: 03:73:b5:fd:f8:93:f7:22:81:64:b5:b5:18:93:f0: 8a:97:8d:0a:9d:ad:0f:89:c6:0b:1b:65:d6:d7:37: bb:48:e8:79:c6:50:0f:d9:b1:62:9c:11:ec:4f:c2: 63:de:4e:49:ec:73:dd:f5:76:6c:03:b3:42:0c:56: 2d:0f:05:bb:10:b0:83:d0:30:89:e7:f5:a4:b5:66: 03:f9:ec:9a:04:41:8d:67:45:9d:4d:d1:9b:88:3f: 82:c9:be:03:ff:67:b1:fb:d9:86:34:5d:6c:da:b7: 7d:35:2b:44:2b:71:49:b0:81:aa:85:ef:3d:8b:c8: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:52:4F:66:14:D3:3F:E4:18:F4:43:86:61:CB:27:7F:04:3B:2C:48 X509v3 Authority Key Identifier: keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/E28D98DEC9EB11EDA0BE5C48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.82.228.0/23 103.82.231.0/24 Signature Algorithm: sha256WithRSAEncryption 27:66:00:2a:77:26:07:d5:90:f1:f1:c0:5e:49:ca:98:5c:0f: 0f:d9:5b:d5:62:7a:5b:e3:4e:59:c9:6f:2b:55:da:e9:86:2f: 1a:20:59:0e:35:90:c5:18:13:9c:10:2b:73:25:97:76:69:0c: b4:f3:0b:c9:b4:c1:2b:59:5d:eb:09:0c:65:3c:23:d7:4f:19: 39:d9:64:c1:6e:50:2a:d3:7c:bd:60:64:09:4c:0a:5d:ca:f6: 44:f2:2a:07:f5:0a:f6:c1:ca:48:b2:c9:53:f0:2e:c2:61:a3: ac:a9:f3:99:df:c1:83:19:c3:25:48:9c:e3:25:8a:cc:f7:61: 1c:fb:d4:ee:14:09:b6:47:ae:9a:4b:5c:2d:c6:a2:8e:f1:cb: e9:a7:0a:c2:b7:c6:9d:f7:f9:49:15:06:18:93:cb:c5:35:87: ee:9b:70:f1:e9:bd:c1:c2:84:82:42:47:04:75:3a:56:b0:d4: c1:c3:40:89:1e:f6:a1:36:53:e1:80:75:f4:7f:08:31:3e:2b: c5:37:7a:46:88:1b:7b:9c:0e:7d:a4:f5:1d:af:e7:80:f4:cc: 97:83:04:cf:e8:45:74:80:98:5f:1c:d7:94:75:8a:7a:dc:3e: d8:dc:b4:74:3d:c8:55:79:35:1d:76:68:0b:f8:6b:dd:ea:76: 57:24:9e:84 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAzOTUxMTAvBgNVBAUTKDYyQ0Q2RTY1MEQyMDlFNTBFRUZENjZDMzUyODhCNjA2 RjM2MkU4MEYwHhcNMjQwMzAyMjMxMjA4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzYjI0OC0wODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7iLU6+Voi2J7J6RDZPnf0RoEu60e1xTnuoWo336a6vwF79GyMsQzcMSz5og tTTgfJp/N4zGVpRS3Ot5JxtMVLlhwroVJlXbHHU3ocofNorsLyijcrrmQ7cA72W6 FshxcShebVkgt1n2O8yfSX0KutMwW0C6xm5PxsWHUDqGaQIrpZZrA7UDc7X9+JP3 IoFktbUYk/CKl40Kna0PicYLG2XW1ze7SOh5xlAP2bFinBHsT8Jj3k5J7HPd9XZs A7NCDFYtDwW7ELCD0DCJ5/WktWYD+eyaBEGNZ0WdTdGbiD+Cyb4D/2ex+9mGNF1s 2rd9NStEK3FJsIGqhe89i8gMfQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMxST2YU 0z/kGPRDhmHLJ38EOyxIMB8GA1UdIwQYMBaAFGLNbmUNIJ5Q7v1mw1KItgbzYugP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDM5NS9FQjY3MjI2NDE0 Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25sRHVfV2JEVW9pMkJ2Tmk2 QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzMXVaUTBnbmxEdV9XYkRVb2kyQnZOaTZBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzAzOTUvRUI2NzIyNjQxNENBMTFFQjgxNjQzQjBGQzRGOUFFMDIvRTI4RDk4REVD OUVCMTFFREEwQkU1QzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnUuQDBABnUucwDQYJKoZIhvcNAQELBQADggEBACdmACp3 JgfVkPHxwF5JyphcDw/ZW9VielvjTlnJbytV2umGLxogWQ41kMUYE5wQK3Mll3Zp DLTzC8m0wStZXesJDGU8I9dPGTnZZMFuUCrTfL1gZAlMCl3K9kTyKgf1CvbBykiy yVPwLsJho6yp85nfwYMZwyVInOMlisz3YRz71O4UCbZHrppLXC3Goo7xy+mnCsK3 xp33+UkVBhiTy8U1h+6bcPHpvcHChIJCRwR1Olaw1MHDQIke9qE2U+GAdfR/CDE+ K8U3ekaIG3ucDn2k9R2v54D0zJeDBM/oRXSAmF8c15R1inrcPtjctHQ9yFV5NR12 aAv4a93qdlcknoQ= -----END CERTIFICATE-----Generated at Mon May 20 23:42:23 2024 by rpki-client on console-ams.rpki-client.org