$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/2860CF98A95211EE9BFC9A6DC4F9AE02.roa File: 2860CF98A95211EE9BFC9A6DC4F9AE02.roa (raw, json) Hash identifier: 87XXjllMXBTSd+DfbzrYd2dpJBC+yc24ROl12cosctQ= Subject key identifier: 22:E2:06:53:45:98:C4:95:3A:9C:F2:51:8C:85:19:34:29:50:3D:E8 Certificate issuer: /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365 Certificate serial: 99 Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/2860CF98A95211EE9BFC9A6DC4F9AE02.roa Signing time: Tue 02 Jan 2024 09:34:42 +0000 ROA not before: Tue 02 Jan 2024 09:34:42 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 135097 IP address blocks: 103.209.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365 Validity Not Before: Jan 2 09:34:42 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6593d8b2-cefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:26:d0:44:bc:3d:3e:14:ac:2c:2d:a6:c1: d3:41:3c:d0:0c:80:37:4d:59:7d:47:b5:6a:6b:4e: f9:a7:1a:95:4f:61:d7:f1:8a:b0:18:9b:2f:96:2f: ae:d3:17:fa:6d:3e:d8:60:9f:91:cd:cc:e2:b0:e9: 5c:86:f9:87:1d:5a:a8:e6:e6:07:ac:e6:d4:49:bf: 0a:d7:1f:c5:5a:45:1a:21:01:17:cc:6c:6a:36:c3: c2:27:c8:29:e0:b0:b9:a0:8e:6e:ee:85:35:0d:5b: 37:f1:23:7b:97:6f:e2:8c:c8:b0:46:27:24:78:90: 78:35:12:af:f1:d0:2c:a6:1b:3a:05:33:f5:4b:de: 0d:a4:d2:44:bf:14:cf:4d:ac:cf:cd:f6:69:16:c1: 3b:28:7b:a2:39:22:ed:aa:1f:1a:45:c0:1c:c4:88: ff:68:8c:c0:32:60:b7:81:6b:92:3f:86:0b:63:8f: 41:2e:1d:d5:1d:1b:b8:0d:e3:b8:05:60:c8:3f:39: 91:5a:ab:74:ad:4c:fa:92:3a:2f:18:a7:2f:3b:68: c2:ab:c9:e3:2d:c7:61:1c:0d:3b:96:f0:2f:67:bd: c9:97:25:eb:6f:28:3f:ff:78:84:fd:16:d8:1f:11: 52:d0:01:e0:91:94:00:48:87:f0:13:aa:87:6f:60: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E2:06:53:45:98:C4:95:3A:9C:F2:51:8C:85:19:34:29:50:3D:E8 X509v3 Authority Key Identifier: keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/2860CF98A95211EE9BFC9A6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.129.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:43:79:44:0e:41:79:1f:89:2f:2e:f0:2e:82:b3:f3:76:54: b4:87:f8:af:5d:57:d5:43:8f:bf:9a:5d:14:26:22:86:b3:b9: 31:73:82:86:ff:d7:d8:db:c8:66:ce:3c:36:73:6c:46:a7:3b: 4e:70:b5:12:15:b8:64:e4:87:01:71:ca:e3:f0:f4:f7:cc:4a: a7:fb:e2:9a:d9:00:21:21:12:84:16:7f:13:dd:6b:34:62:74: ec:79:aa:6c:11:a9:02:ad:31:de:e3:c0:90:6e:56:6b:23:e1: d1:38:5e:78:c4:a5:d8:1b:4a:5e:10:d2:e2:44:ad:68:bf:eb: df:3e:41:a0:03:a7:51:c6:51:b0:dd:2a:ec:c8:96:6f:97:61: 7b:8e:03:aa:ef:e5:8e:27:d3:c3:6b:09:7a:25:b8:38:cd:1b: 52:5b:d6:67:45:ee:79:1d:c9:1f:8f:6d:1f:74:23:b8:c1:df: f1:54:6e:3d:dd:95:b2:6a:35:a9:24:b3:1f:d9:2f:aa:59:a7: ae:52:7f:c0:2c:ad:a6:85:1c:12:b0:1a:68:4c:d2:1b:08:aa: eb:28:27:c5:57:bc:e8:a6:fc:4a:54:59:75:bf:b8:42:49:b0: fc:39:03:1f:23:49:53:ec:04:69:cd:8f:8d:ec:bc:23:08:6a: 33:c0:b7:31 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBDNjIxMTAvBgNVBAUTKDQ4QjFFOEUzRjJCQzU0MjlGOEM2Nzk5NTVENjREMjI0 OTQ0NUUzNjUwHhcNMjQwMTAyMDkzNDQyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTkzZDhiMi1jZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvt0m0ES8PT4UrCwtpsHTQTzQDIA3TVl9R7Vqa075pxqVT2HX8YqwGJsvli+u 0xf6bT7YYJ+RzczisOlchvmHHVqo5uYHrObUSb8K1x/FWkUaIQEXzGxqNsPCJ8gp 4LC5oI5u7oU1DVs38SN7l2/ijMiwRickeJB4NRKv8dAsphs6BTP1S94NpNJEvxTP TazPzfZpFsE7KHuiOSLtqh8aRcAcxIj/aIzAMmC3gWuSP4YLY49BLh3VHRu4DeO4 BWDIPzmRWqt0rUz6kjovGKcvO2jCq8njLcdhHA07lvAvZ73JlyXrbyg//3iE/RbY HxFS0AHgkZQASIfwE6qHb2Ac3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCLiBlNF mMSVOpzyUYyFGTQpUD3oMB8GA1UdIwQYMBaAFEix6OPyvFQp+MZ5lV1k0iSUReNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEM2Mi82NDgyQzM3MEQ0 MkIxMUVEODQ3QTE5MzhDNEY5QUUwMi9TTEhvNF9LOFZDbjR4bm1WWFdUU0pKUkY0 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NMSG80X0s4VkNuNHhubVZYV1RTSkpSRjQyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDBDNjIvNjQ4MkMzNzBENDJCMTFFRDg0N0ExOTM4QzRGOUFFMDIvMjg2MENGOThB OTUyMTFFRTlCRkM5QTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn0YEwDQYJKoZIhvcNAQELBQADggEBAH9DeUQOQXkfiS8u 8C6Cs/N2VLSH+K9dV9VDj7+aXRQmIoazuTFzgob/19jbyGbOPDZzbEanO05wtRIV uGTkhwFxyuPw9PfMSqf74prZACEhEoQWfxPdazRidOx5qmwRqQKtMd7jwJBuVmsj 4dE4XnjEpdgbSl4Q0uJErWi/698+QaADp1HGUbDdKuzIlm+XYXuOA6rv5Y4n08Nr CXoluDjNG1Jb1mdF7nkdyR+PbR90I7jB3/FUbj3dlbJqNakksx/ZL6pZp65Sf8As raaFHBKwGmhM0hsIqusoJ8VXvOim/EpUWXW/uEJJsPw5Ax8jSVPsBGnNj43svCMI ajPAtzE= -----END CERTIFICATE-----Generated at Sun May 5 08:39:01 2024 by rpki-client on console-fra.rpki-client.org