$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2CE57E8636DD11EC88BBAC6EC4F9AE02.roa File: 2CE57E8636DD11EC88BBAC6EC4F9AE02.roa (raw, json) Hash identifier: tyJywmuqaNysWkyfGGqNZWf0znWgPJg6jgr0qsmu7ZA= Subject key identifier: 00:8E:13:5C:CE:C3:92:0E:E9:A5:6F:B9:9A:0D:3C:A7:A4:F1:71:93 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 388E Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2CE57E8636DD11EC88BBAC6EC4F9AE02.roa Signing time: Tue 16 Jul 2024 14:30:41 +0000 ROA not before: Tue 16 Jul 2024 14:30:41 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 138685 IP address blocks: 110.170.134.0/24 maxlen: 24 2001:fb0:10b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14478 (0x388e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 16 14:30:41 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66968411-7fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c3:2e:c4:06:55:74:19:59:d4:29:c7:9f:1b: ad:51:56:52:33:fa:90:04:63:0d:21:c2:ba:f6:4c: 7b:d8:be:d3:b9:99:88:b3:30:21:dd:1f:f6:fb:2b: a7:26:c1:81:72:b4:bb:80:66:f0:3a:5a:76:96:7d: 71:76:50:d4:5d:fd:31:3b:0d:c0:5c:e5:b9:02:cd: 50:36:60:af:36:cc:79:a1:d2:e1:2d:ee:96:77:fd: 53:4e:e8:40:82:0d:7f:2b:a7:30:56:33:3f:b7:8c: f8:f3:f1:95:51:d3:59:99:b0:44:e4:c4:fa:c3:16: 2d:90:14:5d:76:63:5a:8e:da:4e:e5:a7:29:5a:18: 8a:bd:12:c4:f7:52:49:88:3e:17:66:f6:61:a6:ce: c7:0d:f8:72:14:e4:4f:91:52:5e:d0:86:60:4d:45: d9:b7:f7:35:7f:b0:01:cf:31:1e:40:13:c5:bb:24: 7f:8f:e2:f9:d8:96:25:5c:a6:6d:ac:45:8e:bb:f5: 86:00:7f:c6:a9:85:f6:75:53:37:ae:6b:0a:57:17: 4a:fa:48:57:57:36:a5:33:45:37:c4:a2:8a:ac:89: e8:bf:7a:3b:3d:d8:3f:b4:05:0b:32:94:46:11:0b: 7f:cd:7b:31:86:32:21:9c:a4:48:5d:7b:ce:35:c0: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8E:13:5C:CE:C3:92:0E:E9:A5:6F:B9:9A:0D:3C:A7:A4:F1:71:93 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2CE57E8636DD11EC88BBAC6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.170.134.0/24 IPv6: 2001:fb0:10b5::/48 Signature Algorithm: sha256WithRSAEncryption 8e:8a:8e:e3:d8:d4:01:42:72:42:b2:2f:42:14:71:1d:53:5f: 38:4c:21:fe:a9:2b:b4:3d:0f:41:43:57:0d:23:c4:77:d5:86: 92:29:a9:57:59:90:64:67:dd:16:c7:1d:d6:30:49:a4:be:8f: d2:0d:63:b3:48:54:a2:c3:14:55:c4:8c:3c:c4:51:f8:6a:79: 84:d8:85:d5:e3:f7:0e:5d:62:81:e6:1c:3a:a4:ec:a9:cd:2d: 89:30:51:76:7d:ce:2d:3b:a9:cb:06:ca:8f:a6:3f:fd:33:d2: 62:4b:ad:19:35:a8:8b:3a:19:8b:12:0e:27:1e:1b:5c:54:dc: ed:41:d6:96:6f:64:8b:de:ee:49:79:de:22:e5:1d:e8:58:fe: 44:a8:ec:5e:10:1f:c4:21:0f:b2:dc:9b:a2:fd:5e:eb:4c:59: ac:5e:1e:c9:11:90:f6:81:5a:19:68:52:74:0a:cf:86:fa:b7: a3:49:e3:7e:2e:94:e7:86:21:2a:3c:81:f7:74:b6:ec:53:47: 99:0c:b4:e9:ed:a5:88:77:e1:7b:5d:e5:1f:e7:e2:f3:1a:fc: 44:a5:eb:bc:c6:9d:2b:16:f7:d3:ac:c0:60:ab:9c:b8:2f:da: 5e:66:16:32:28:d7:83:a2:ff:c3:65:7e:61:4c:f8:8a:4f:f1: a9:9a:3e:c2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICOI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjQwNzE2MTQzMDQxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ODQxMS03ZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA98MuxAZVdBlZ1CnHnxutUVZSM/qQBGMNIcK69kx72L7TuZmIszAh3R/2+yun JsGBcrS7gGbwOlp2ln1xdlDUXf0xOw3AXOW5As1QNmCvNsx5odLhLe6Wd/1TTuhA gg1/K6cwVjM/t4z48/GVUdNZmbBE5MT6wxYtkBRddmNajtpO5acpWhiKvRLE91JJ iD4XZvZhps7HDfhyFORPkVJe0IZgTUXZt/c1f7ABzzEeQBPFuyR/j+L52JYlXKZt rEWOu/WGAH/GqYX2dVM3rmsKVxdK+khXVzalM0U3xKKKrInov3o7Pdg/tAULMpRG EQt/zXsxhjIhnKRIXXvONcB/HwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFACOE1zO w5IO6aVvuZoNPKek8XGTMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMkNFNTdFODYz NkREMTFFQzg4QkJBQzZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABuqoYwDwQCAAIwCQMHACABD7AQtTANBgkqhkiG9w0BAQsF AAOCAQEAjoqO49jUAUJyQrIvQhRxHVNfOEwh/qkrtD0PQUNXDSPEd9WGkimpV1mQ ZGfdFscd1jBJpL6P0g1js0hUosMUVcSMPMRR+Gp5hNiF1eP3Dl1igeYcOqTsqc0t iTBRdn3OLTupywbKj6Y//TPSYkutGTWoizoZixIOJx4bXFTc7UHWlm9ki97uSXne IuUd6Fj+RKjsXhAfxCEPstybov1e60xZrF4eyRGQ9oFaGWhSdArPhvq3o0njfi6U 54YhKjyB93S27FNHmQy06e2liHfhe13lH+fi8xr8RKXrvMadKxb306zAYKucuC/a XmYWMijXg6L/w2V+YUz4ik/xqZo+wg== -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:24 2024 by rpki-client on console-fra.rpki-client.org