$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/2860CF98A95211EE9BFC9A6DC4F9AE02.roa File: 2860CF98A95211EE9BFC9A6DC4F9AE02.roa (raw, json) Hash identifier: hpgyKQlhl0eDdnBiJkYNXt6Z9XF4BCCFSk6iTL/QH2Q= Subject key identifier: 34:AE:29:EE:26:76:59:00:98:22:51:C9:DE:8B:2C:98:8E:0F:EC:C0 Certificate issuer: /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365 Certificate serial: 011A Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/2860CF98A95211EE9BFC9A6DC4F9AE02.roa Signing time: Tue 03 Sep 2024 05:18:12 +0000 ROA not before: Tue 03 Sep 2024 05:18:12 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 135097 IP address blocks: 103.209.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365 Validity Not Before: Sep 3 05:18:12 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d69c14-9369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:0a:cf:01:83:9b:28:41:7d:d6:b5:f3:b5: 2e:b3:9f:e6:5b:95:2b:21:d0:4e:83:15:77:ec:00: a4:1d:e1:cc:34:df:19:17:f3:57:8f:74:9f:bf:0e: 52:4b:32:fa:82:7b:98:36:18:ba:44:45:68:a7:e4: 50:d3:62:44:b5:a5:d3:53:9a:b1:cc:a5:0a:4c:50: 88:7a:64:e5:c5:73:8d:34:43:c2:15:e1:f8:b6:39: a9:dd:a3:c0:ed:47:1e:c9:4d:f4:38:88:eb:c0:fe: 86:b7:47:b4:0b:08:bc:20:aa:a2:7e:49:a3:70:e7: 8d:59:69:ed:01:50:b6:8d:05:44:99:f6:35:09:31: b7:e7:70:6a:c4:81:6c:c3:98:ed:04:c4:58:c4:35: d9:1b:f2:93:80:32:72:3f:29:5a:85:e5:5b:e7:64: 6f:68:d3:e3:5f:92:1a:e3:d6:d6:8b:fa:63:0d:9a: 26:ad:c1:6e:a7:1a:6a:cc:ee:67:c8:74:95:ec:d0: 03:36:89:6a:1b:96:db:b3:35:68:c7:1d:a5:df:ca: 68:72:a7:c3:1a:b9:f3:68:a6:6b:16:12:00:fd:b3: 51:c9:49:81:58:8d:7e:38:97:59:c5:37:8b:fc:fc: 53:ff:c6:c9:91:13:37:64:cf:ad:6d:70:cd:04:15: 61:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AE:29:EE:26:76:59:00:98:22:51:C9:DE:8B:2C:98:8E:0F:EC:C0 X509v3 Authority Key Identifier: keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/2860CF98A95211EE9BFC9A6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.129.0/24 Signature Algorithm: sha256WithRSAEncryption 94:43:ab:aa:db:ec:0a:cc:f1:25:2d:13:a0:cd:91:2a:c4:7c: 8d:ae:ce:f0:ab:bf:66:19:e2:2c:1c:e4:7e:8f:a1:f9:db:23: 89:f2:38:5c:e7:6f:cd:d9:25:90:b3:f9:bc:a5:e7:4c:5e:10: 49:48:71:b2:35:b7:9b:d6:81:bc:9b:5e:42:06:d4:8d:10:02: bb:10:f8:f5:86:9b:9d:63:63:6c:68:7a:a4:fb:ed:6a:6e:3d: d2:83:11:e4:0a:70:31:5c:fa:fc:84:06:ac:d3:11:80:8a:79: c3:84:90:62:3c:91:b5:8d:16:97:10:8a:3b:15:e1:2c:22:51: 98:8f:30:1b:5e:bc:34:f5:2d:a0:cb:ef:95:57:e1:6a:9a:de: 56:e4:78:95:e6:34:86:97:c4:34:c7:17:e2:2c:4d:5e:ae:74: dc:49:80:01:56:b4:7c:60:e7:85:e9:7d:82:c7:01:fa:7e:af: 29:e9:84:4e:77:a1:57:ec:ae:0e:c8:b8:46:ab:0b:c9:e8:55: 2b:41:9d:ac:0b:9a:de:bd:33:b3:a4:77:82:0e:37:2d:f0:33: 7d:9f:cb:bd:c4:ea:0a:39:2c:f0:1a:02:51:ef:89:80:85:11: 0c:b7:ef:56:da:0e:5f:2d:4e:ca:68:cb:ca:64:ac:1d:78:67: cd:b0:19:5c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBDNjIxMTAvBgNVBAUTKDQ4QjFFOEUzRjJCQzU0MjlGOEM2Nzk5NTVENjREMjI0 OTQ0NUUzNjUwHhcNMjQwOTAzMDUxODEyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2OWMxNC05MzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3wKzwGDmyhBfda187Uus5/mW5UrIdBOgxV37ACkHeHMNN8ZF/NXj3Sfvw5S SzL6gnuYNhi6REVop+RQ02JEtaXTU5qxzKUKTFCIemTlxXONNEPCFeH4tjmp3aPA 7UceyU30OIjrwP6Gt0e0Cwi8IKqifkmjcOeNWWntAVC2jQVEmfY1CTG353BqxIFs w5jtBMRYxDXZG/KTgDJyPylaheVb52RvaNPjX5Ia49bWi/pjDZomrcFupxpqzO5n yHSV7NADNolqG5bbszVoxx2l38pocqfDGrnzaKZrFhIA/bNRyUmBWI1+OJdZxTeL /PxT/8bJkRM3ZM+tbXDNBBVhswIDAQABo4IClTCCApEwHQYDVR0OBBYEFDSuKe4m dlkAmCJRyd6LLJiOD+zAMB8GA1UdIwQYMBaAFEix6OPyvFQp+MZ5lV1k0iSUReNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEM2Mi82NDgyQzM3MEQ0 MkIxMUVEODQ3QTE5MzhDNEY5QUUwMi9TTEhvNF9LOFZDbjR4bm1WWFdUU0pKUkY0 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NMSG80X0s4VkNuNHhubVZYV1RTSkpSRjQyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDBDNjIvNjQ4MkMzNzBENDJCMTFFRDg0N0ExOTM4QzRGOUFFMDIvMjg2MENGOThB OTUyMTFFRTlCRkM5QTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn0YEwDQYJKoZIhvcNAQELBQADggEBAJRDq6rb7ArM8SUt E6DNkSrEfI2uzvCrv2YZ4iwc5H6PofnbI4nyOFznb83ZJZCz+byl50xeEElIcbI1 t5vWgbybXkIG1I0QArsQ+PWGm51jY2xoeqT77WpuPdKDEeQKcDFc+vyEBqzTEYCK ecOEkGI8kbWNFpcQijsV4SwiUZiPMBtevDT1LaDL75VX4Wqa3lbkeJXmNIaXxDTH F+IsTV6udNxJgAFWtHxg54XpfYLHAfp+rynphE53oVfsrg7IuEarC8noVStBnawL mt69M7Okd4IONy3wM32fy73E6go5LPAaAlHviYCFEQy371baDl8tTspoy8pkrB14 Z82wGVw= -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:55 2024 by rpki-client on console-fra.rpki-client.org