$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/2B2EF1E0417511EE96ADB173C4F9AE02.roa File: 2B2EF1E0417511EE96ADB173C4F9AE02.roa (raw, json) Hash identifier: kJRhJDw76J4yZdZaQoYg7NxeSWYRtskAPrPxOGYA9Ag= Subject key identifier: 61:26:6D:C6:79:07:51:A3:F4:E4:DF:B5:CC:17:25:DC:05:3A:74:C2 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0875 Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/2B2EF1E0417511EE96ADB173C4F9AE02.roa Signing time: Wed 23 Aug 2023 05:23:19 +0000 ROA not before: Wed 23 Aug 2023 05:23:19 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 131340 IP address blocks: 45.250.229.0/24 maxlen: 24 103.202.220.0/24 maxlen: 24 103.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2165 (0x875) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: Aug 23 05:23:19 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64e597c6-9be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:9b:88:f5:a2:45:1b:64:06:6c:d9:24:73: c2:ec:de:cb:7b:0a:27:84:ec:3b:b7:75:a4:ff:09: 2a:54:b0:c8:51:f4:8a:43:a9:ae:59:70:ce:c3:47: f4:c8:1f:dd:57:bf:5d:a2:23:22:f1:d2:25:df:ff: d2:ba:d4:69:a7:c8:f2:95:11:37:11:38:97:45:40: 05:e8:50:e8:2d:5a:0c:63:12:c1:18:c4:2f:bb:ca: 08:05:7a:2d:86:32:a0:4d:e3:a9:2d:e8:69:14:b0: 14:1b:eb:af:ab:c2:38:1a:97:ee:68:e2:1e:a3:c0: f9:51:26:91:de:7b:86:80:b3:c6:4e:a5:a1:d5:8e: 9e:49:4e:c1:1b:42:09:80:ec:9c:83:78:75:7c:7a: ba:be:b4:f0:0f:36:00:fa:53:ef:87:3b:12:a1:a7: 79:09:ca:14:eb:3c:a8:26:c4:2c:18:b7:36:4a:a8: 5a:5f:24:d0:b6:9f:3e:d3:87:e9:f2:24:67:43:3e: 02:1c:ab:e5:9b:07:fc:78:22:f2:ea:ef:30:b3:c0: 4b:a5:14:e3:3e:af:50:34:5c:5c:67:b8:96:0a:0b: 70:bb:59:ce:5e:b6:92:78:a4:7a:71:57:7b:38:c1: 30:08:8f:97:ed:be:4a:e5:77:18:aa:03:e7:2b:7a: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:26:6D:C6:79:07:51:A3:F4:E4:DF:B5:CC:17:25:DC:05:3A:74:C2 X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/2B2EF1E0417511EE96ADB173C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.250.229.0/24 103.202.220.0/24 103.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:9c:4b:61:e4:48:f5:37:c4:c3:c6:29:de:c3:df:1c:95:78: 42:ae:6f:6a:99:62:ad:37:29:6a:1c:07:09:90:55:85:3d:25: 97:7c:27:99:68:05:41:56:27:0b:f5:94:b5:b0:b2:95:3a:c5: 81:51:dc:bd:ed:07:db:18:1d:56:20:ab:a9:0d:fa:f3:fc:0f: 3f:2a:2b:34:fa:6e:26:16:6c:a0:f8:6b:9d:dc:31:be:6a:dd: 7e:a2:1d:1e:92:6d:c1:0b:77:44:08:f7:91:fe:fc:32:3c:30: ea:df:2b:2a:72:a5:b5:88:ab:86:46:b6:0e:59:1f:a7:fb:15: f8:f8:0b:ce:31:10:52:57:f4:75:95:b0:5d:fb:f4:63:cf:69: 17:27:41:fb:a8:df:94:e2:c2:40:a0:31:f1:dc:d8:bf:ab:2c: f1:c3:11:78:6e:0b:ac:ce:0b:5a:61:5a:5a:53:fb:c0:11:06: d6:fd:0c:3d:9c:9e:64:f7:69:a4:a9:c5:4a:cd:73:b9:89:06: 8c:88:1e:87:da:2d:cc:23:05:c3:63:8a:f1:15:e7:82:de:93: e9:a6:b2:e9:a0:fc:9d:b4:69:31:a0:70:4c:c6:fb:ea:f6:98: cb:15:59:a0:1b:30:5c:14:d2:48:ea:e1:b7:33:59:3a:60:d9: 9f:40:b2:e0 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjMwODIzMDUyMzE5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGU1OTdjNi05YmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMabiPWiRRtkBmzZJHPC7N7LewonhOw7t3Wk/wkqVLDIUfSKQ6muWXDOw0f0 yB/dV79doiMi8dIl3//SutRpp8jylRE3ETiXRUAF6FDoLVoMYxLBGMQvu8oIBXot hjKgTeOpLehpFLAUG+uvq8I4GpfuaOIeo8D5USaR3nuGgLPGTqWh1Y6eSU7BG0IJ gOycg3h1fHq6vrTwDzYA+lPvhzsSoad5CcoU6zyoJsQsGLc2SqhaXyTQtp8+04fp 8iRnQz4CHKvlmwf8eCLy6u8ws8BLpRTjPq9QNFxcZ7iWCgtwu1nOXraSeKR6cVd7 OMEwCI+X7b5K5XcYqgPnK3pKfwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGEmbcZ5 B1Gj9OTftcwXJdwFOnTCMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDY5NDQvNDNCRDFDNkU4RTk1MTFFQUE5RDczQTJFQzRGOUFFMDIvMkIyRUYxRTA0 MTc1MTFFRTk2QURCMTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAAt+uUDBABnytwDBABn0cYwDQYJKoZIhvcNAQELBQADggEB AHycS2HkSPU3xMPGKd7D3xyVeEKub2qZYq03KWocBwmQVYU9JZd8J5loBUFWJwv1 lLWwspU6xYFR3L3tB9sYHVYgq6kN+vP8Dz8qKzT6biYWbKD4a53cMb5q3X6iHR6S bcELd0QI95H+/DI8MOrfKypypbWIq4ZGtg5ZH6f7Ffj4C84xEFJX9HWVsF379GPP aRcnQfuo35TiwkCgMfHc2L+rLPHDEXhuC6zOC1phWlpT+8ARBtb9DD2cnmT3aaSp xUrNc7mJBoyIHofaLcwjBcNjivEV54Lek+mmsumg/J20aTGgcEzG++r2mMsVWaAb MFwU0kjq4bczWTpg2Z9AsuA= -----END CERTIFICATE-----Generated at Thu May 16 22:34:45 2024 by rpki-client on console-ams.rpki-client.org