$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2CE57E8636DD11EC88BBAC6EC4F9AE02.roa File: 2CE57E8636DD11EC88BBAC6EC4F9AE02.roa (raw, json) Hash identifier: 3ZYmuNgg3JY/HwUD5rinPKpoBQPiLD9XwAsvZy4lSL0= Subject key identifier: EB:21:22:61:91:8F:1B:DB:DC:F0:79:05:64:37:42:8E:8F:2F:C4:52 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3695 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2CE57E8636DD11EC88BBAC6EC4F9AE02.roa Signing time: Sat 08 Jul 2023 14:30:38 +0000 ROA not before: Sat 08 Jul 2023 14:30:38 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 138685 IP address blocks: 110.170.134.0/24 maxlen: 24 2001:fb0:10b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 14:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13973 (0x3695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 8 14:30:38 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a9730d-8a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:d3:05:67:a5:0d:44:55:6a:37:03:be:60: 1e:5c:42:d2:a3:80:55:81:be:5b:53:2e:68:1e:ca: 1c:49:48:15:d6:fb:a3:41:00:dd:b6:3c:f9:61:7e: e1:82:6f:25:d5:55:02:0e:a9:61:eb:36:60:3b:fd: 46:ea:ca:b8:53:7d:dd:43:7a:25:3a:32:cc:15:63: d7:2c:67:5e:a4:ec:8e:47:04:43:bb:48:67:d6:16: 74:66:3d:41:c4:ea:b5:b4:31:58:d3:fb:f2:0e:0e: 52:59:a1:69:21:4d:76:38:1d:f1:01:1e:bb:bd:28: f0:01:08:3f:aa:31:5c:c1:22:3e:af:e3:0e:ac:4e: 7e:3b:1f:e9:c5:db:a2:d1:0f:ff:db:0e:c7:3c:94: e6:81:b0:1c:fd:9a:b0:0c:15:d3:69:e3:14:31:5d: 54:21:ac:6a:df:1b:eb:ce:dd:10:1f:26:31:bd:7a: 8c:f7:91:ba:b1:10:19:b5:71:a4:df:8b:bd:2c:e1: 78:9c:23:d2:d4:49:64:f6:fa:36:61:82:c7:82:70: cb:99:c0:06:a6:81:75:be:2b:79:96:df:64:99:c5: 14:c0:3e:8d:3d:20:62:82:33:1e:40:3e:74:e7:cf: 89:e4:d8:ae:38:0f:1f:a4:16:65:bd:fa:d2:d5:cc: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:21:22:61:91:8F:1B:DB:DC:F0:79:05:64:37:42:8E:8F:2F:C4:52 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2CE57E8636DD11EC88BBAC6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.170.134.0/24 IPv6: 2001:fb0:10b5::/48 Signature Algorithm: sha256WithRSAEncryption 2a:eb:c4:bb:08:5a:f4:48:6a:4d:79:e5:1a:65:ec:51:8c:65: 95:f9:a5:0f:d9:34:00:ab:41:2a:c0:e8:8f:fb:e4:46:1d:15: d0:76:66:79:e6:ec:0e:e7:91:b7:78:ef:30:ba:64:66:3d:d4: 12:db:94:df:97:b3:3b:8a:35:a7:0b:3a:3d:18:44:1e:0c:e5: 7e:fe:38:31:e5:55:3a:c6:11:1e:1c:ec:51:3a:db:35:21:69: 93:cf:7f:cb:e9:f4:7e:6a:43:58:04:c8:e0:19:c1:4e:f4:37: 59:ea:be:d6:5a:c3:6e:b0:8e:ac:76:03:ba:3a:16:67:69:fb: fa:aa:39:ca:f5:87:19:0d:39:8f:b8:a3:75:54:40:8b:7f:fc: 92:f3:c8:2a:1e:6f:27:66:c5:d7:07:e8:f3:fe:a4:96:fc:9c: 4e:51:e3:c4:06:5a:3f:9a:f4:02:5f:9a:a0:49:e5:6d:25:00: 98:12:b5:d9:96:b1:e0:17:40:87:d4:71:79:59:3d:49:96:21: 3a:c4:7c:c9:0b:4c:a6:03:41:aa:bb:20:25:07:55:19:38:a8: 51:70:90:3c:f8:14:e0:4d:48:80:8d:e0:00:d3:61:b7:64:85: 2a:c8:bc:ec:de:2b:0c:37:2e:95:16:cd:46:9b:4c:30:2a:70: 6a:53:7f:fd -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjMwNzA4MTQzMDM4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE5NzMwZC04YTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswHTBWelDURVajcDvmAeXELSo4BVgb5bUy5oHsocSUgV1vujQQDdtjz5YX7h gm8l1VUCDqlh6zZgO/1G6sq4U33dQ3olOjLMFWPXLGdepOyORwRDu0hn1hZ0Zj1B xOq1tDFY0/vyDg5SWaFpIU12OB3xAR67vSjwAQg/qjFcwSI+r+MOrE5+Ox/pxdui 0Q//2w7HPJTmgbAc/ZqwDBXTaeMUMV1UIaxq3xvrzt0QHyYxvXqM95G6sRAZtXGk 34u9LOF4nCPS1Elk9vo2YYLHgnDLmcAGpoF1vit5lt9kmcUUwD6NPSBigjMeQD50 58+J5NiuOA8fpBZlvfrS1cwiawIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOshImGR jxvb3PB5BWQ3Qo6PL8RSMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMkNFNTdFODYz NkREMTFFQzg4QkJBQzZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABuqoYwDwQCAAIwCQMHACABD7AQtTANBgkqhkiG9w0BAQsF AAOCAQEAKuvEuwha9EhqTXnlGmXsUYxllfmlD9k0AKtBKsDoj/vkRh0V0HZmeebs DueRt3jvMLpkZj3UEtuU35ezO4o1pws6PRhEHgzlfv44MeVVOsYRHhzsUTrbNSFp k89/y+n0fmpDWATI4BnBTvQ3Weq+1lrDbrCOrHYDujoWZ2n7+qo5yvWHGQ05j7ij dVRAi3/8kvPIKh5vJ2bF1wfo8/6klvycTlHjxAZaP5r0Al+aoEnlbSUAmBK12Zax 4BdAh9RxeVk9SZYhOsR8yQtMpgNBqrsgJQdVGTioUXCQPPgU4E1IgI3gANNht2SF Ksi87N4rDDculRbNRptMMCpwalN//Q== -----END CERTIFICATE-----Generated at Fri May 24 15:43:20 2024 by rpki-client on console-fra.rpki-client.org