$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa File: 2F903356A40311EFBD995535C4F9AE02.roa (raw, json) Hash identifier: 8kVZW0GyfJDlWmsEt026mIsD13+J7zvPKeiZ0LGUFpU= Subject key identifier: AA:D7:0C:76:98:4A:43:6D:DC:C6:C2:D0:60:C0:7B:96:6F:02:00:2D Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Certificate serial: 17F4 Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa Signing time: Sat 16 Nov 2024 10:34:13 +0000 ROA not before: Sat 16 Nov 2024 10:34:13 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 147302 IP address blocks: 122.129.65.0/24 maxlen: 24 122.129.67.0/24 maxlen: 24 122.129.68.0/24 maxlen: 24 122.129.70.0/24 maxlen: 24 122.129.71.0/24 maxlen: 24 122.129.83.0/24 maxlen: 24 122.129.87.0/24 maxlen: 24 122.129.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6132 (0x17f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Validity Not Before: Nov 16 10:34:13 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=67387525-9b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:27:e5:77:f7:c4:87:f7:c8:38:f3:cc:95:b8: b5:67:97:0a:16:a7:0a:b4:f5:9e:86:3a:2a:e2:d8: 00:48:c6:8c:19:50:b2:d6:2b:2a:d9:36:07:bb:98: 91:89:ef:bb:93:db:b2:d8:17:41:47:d1:58:3b:d9: 8d:e1:a0:26:ae:00:a9:b1:de:99:bd:d6:f5:f5:d5: cb:75:f2:07:f0:6e:fb:16:5e:86:b4:91:a7:7d:9e: 22:e6:72:44:b2:eb:1c:51:ee:9d:cd:23:e4:4b:00: ec:2d:55:b8:90:14:19:35:18:16:26:91:dc:e7:0f: 52:ff:d7:3e:0f:43:02:a4:d7:29:d5:9a:07:c0:fa: 8d:62:28:dc:6f:0f:ca:02:ff:36:b9:40:54:41:ee: 35:f5:2f:b7:09:c7:e9:05:9c:3a:5d:b6:64:42:5f: d1:7d:77:99:4d:3b:4c:0b:64:84:83:a0:27:35:fe: c0:b6:3e:38:d5:6b:02:28:da:ad:95:d2:cd:e6:96: f3:e6:7c:a8:e7:18:01:7b:0a:e6:0e:90:e1:2e:6d: 93:61:7f:3b:07:4c:1c:46:d7:8b:42:f7:4f:ea:90: 0a:d4:2f:ef:96:8b:44:fc:3a:6d:2c:e9:3f:74:01: 03:4a:d7:a2:f8:a2:4f:8f:fb:2b:bb:25:aa:11:f8: 8a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D7:0C:76:98:4A:43:6D:DC:C6:C2:D0:60:C0:7B:96:6F:02:00:2D X509v3 Authority Key Identifier: keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.129.65.0/24 122.129.67.0-122.129.68.255 122.129.70.0/23 122.129.83.0/24 122.129.87.0/24 122.129.95.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:11:bc:ea:d1:1e:c2:2b:e1:ce:e3:58:6d:e6:2d:65:86:cf: 5c:80:04:63:19:d9:98:62:a9:88:fa:d5:0e:0c:13:0c:5f:68: b2:82:42:b5:53:39:fb:1e:80:3f:26:5f:3b:fd:d4:fb:19:72: ba:7e:7c:7b:5d:28:e0:47:ff:78:09:1e:aa:18:06:23:60:b5: 48:0f:fe:a8:24:0a:50:73:71:bd:6d:f2:69:ea:34:d5:d6:3f: a3:61:53:55:a5:4e:30:ec:5e:66:f6:da:1e:9d:2e:a9:89:16: 62:ea:86:92:a0:7b:0f:7f:7b:9f:85:cc:e4:b9:4e:25:af:cc: 09:4c:63:a3:66:67:3f:dd:a0:05:5c:19:4b:57:56:92:9d:dc: cd:ea:84:4a:b5:eb:60:21:58:00:3a:bf:a4:05:b4:0b:07:de: 44:39:68:e8:7e:a5:bc:86:b8:bc:e4:80:0e:ce:7b:ca:d9:99: 03:f9:af:dd:5f:eb:0e:7d:45:dc:70:38:db:cf:ce:5a:1e:d4: 28:04:a1:17:47:d2:d6:ff:e0:74:3f:54:5e:c7:5c:70:72:c9: 47:4f:a4:2f:8f:41:65:11:76:bc:36:8e:ec:e0:65:87:80:33: 3a:8c:9b:2a:24:6e:b6:37:de:8e:41:b1:bb:10:ee:35:51:ed: 91:8d:7e:ad -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICF/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC MEZCOTQ1QkUwHhcNMjQxMTE2MTAzNDEzWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM4NzUyNS05Yjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Cfld/fEh/fIOPPMlbi1Z5cKFqcKtPWehjoq4tgASMaMGVCy1isq2TYHu5iR ie+7k9uy2BdBR9FYO9mN4aAmrgCpsd6Zvdb19dXLdfIH8G77Fl6GtJGnfZ4i5nJE suscUe6dzSPkSwDsLVW4kBQZNRgWJpHc5w9S/9c+D0MCpNcp1ZoHwPqNYijcbw/K Av82uUBUQe419S+3CcfpBZw6XbZkQl/RfXeZTTtMC2SEg6AnNf7Atj441WsCKNqt ldLN5pbz5nyo5xgBewrmDpDhLm2TYX87B0wcRteLQvdP6pAK1C/vlotE/DptLOk/ dAEDStei+KJPj/sruyWqEfiKAQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFKrXDHaY SkNt3MbC0GDAe5ZvAgAtMB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5 RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzlCNDkvMDc4MEI5OTBDOUY4MTFFNzlFRjEyMDA5QzRGOUFFMDIvMkY5MDMzNTZB NDAzMTFFRkJEOTk1NTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwDBAB6gUEwDAMEAHqBQwMEAHqBRAMEAXqBRgMEAHqBUwMEAHqB VwMEAHqBXzANBgkqhkiG9w0BAQsFAAOCAQEAXBG86tEewivhzuNYbeYtZYbPXIAE YxnZmGKpiPrVDgwTDF9osoJCtVM5+x6APyZfO/3U+xlyun58e10o4Ef/eAkeqhgG I2C1SA/+qCQKUHNxvW3yaeo01dY/o2FTVaVOMOxeZvbaHp0uqYkWYuqGkqB7D397 n4XM5LlOJa/MCUxjo2ZnP92gBVwZS1dWkp3czeqESrXrYCFYADq/pAW0CwfeRDlo 6H6lvIa4vOSADs57ytmZA/mv3V/rDn1F3HA428/OWh7UKAShF0fS1v/gdD9UXsdc cHLJR0+kL49BZRF2vDaO7OBlh4AzOoybKiRutjfejkGxuxDuNVHtkY1+rQ== -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org