$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/2B2C31BE3B8B11EB8D76362DC4F9AE02.roa File: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (raw, json) Hash identifier: EjYfF7OUsi1m/NUaj/yuG72bh8shIim1EGJED8rB8hA= Subject key identifier: 71:E6:39:60:E9:3D:3D:E4:1E:43:7F:F9:72:63:6E:AA:E1:A5:F2:29 Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Certificate serial: 3394 Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/2B2C31BE3B8B11EB8D76362DC4F9AE02.roa Signing time: Tue 16 Jan 2024 15:31:01 +0000 ROA not before: Tue 16 Jan 2024 15:31:01 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 55344 IP address blocks: 124.109.104.0/22 maxlen: 22 124.109.104.0/23 maxlen: 23 124.109.104.0/24 maxlen: 24 124.109.105.0/24 maxlen: 24 124.109.106.0/23 maxlen: 23 124.109.106.0/24 maxlen: 24 124.109.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13204 (0x3394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Validity Not Before: Jan 16 15:31:01 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65a6a134-dc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:7e:1a:09:50:00:eb:ba:2a:0f:09:89:3e: c5:a0:9a:1a:81:15:1b:ab:68:82:d9:e8:33:ab:b0: d8:5b:00:ef:4a:b4:5e:06:e2:2f:ec:d0:7a:92:aa: 85:53:cd:53:fd:fd:7f:61:09:60:9d:67:7d:70:2b: b4:03:9c:3f:eb:00:0d:63:f7:85:80:d4:32:73:56: 29:45:69:0b:b6:98:ea:dc:18:0a:f3:20:3f:cb:94: 7f:fa:89:70:7d:64:a0:5d:ce:6f:5a:e1:5e:27:80: d4:fd:c7:b8:72:f4:3d:44:1d:95:54:98:89:8e:44: 92:e4:a6:0f:e0:1a:5f:ba:5f:fd:d2:64:ca:57:e7: 20:6b:02:7b:f2:6b:6b:14:1c:2d:79:cc:e4:06:1f: 73:d8:8c:c5:c4:43:19:5e:c4:88:e5:7e:a6:26:ef: 12:e9:17:01:8d:cd:55:30:8b:46:88:53:2b:d3:cc: de:d3:13:15:64:2c:c4:54:70:e8:ba:71:ff:be:ca: 45:b1:10:c2:78:24:c9:30:40:b4:a0:d4:30:37:4a: 2e:88:89:e5:8e:34:41:9b:40:ac:40:56:90:f7:e2: 9e:ce:1c:b2:4e:90:81:00:9d:63:4a:3c:f9:06:d0: 39:d9:4b:a8:3d:1f:ae:f2:37:89:3c:53:46:8d:af: 03:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E6:39:60:E9:3D:3D:E4:1E:43:7F:F9:72:63:6E:AA:E1:A5:F2:29 X509v3 Authority Key Identifier: keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/2B2C31BE3B8B11EB8D76362DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.109.104.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:de:2b:88:b1:8d:7f:28:4e:90:0e:e3:82:da:94:d1:e6:5b: 5e:0b:b8:a7:a7:5a:1e:63:55:40:82:66:a0:ce:69:87:82:ec: 48:b9:fd:ca:6a:2a:6d:86:d0:1b:89:4c:40:b6:9a:4f:cc:b2: 6d:8c:88:bc:01:69:72:61:8c:ba:5e:33:91:08:89:c0:fd:d5: ee:1a:55:02:7b:4f:3c:22:9f:54:c5:2f:e6:75:47:97:8f:25: fc:6a:1c:7d:7e:9e:a8:bb:d2:bb:d2:f0:17:32:a9:56:a8:3e: 8f:5a:b5:7c:0e:9d:64:6f:9d:7f:ee:6b:42:da:59:ba:e2:89: 66:93:64:c9:f2:a1:22:ce:6a:df:b8:82:8c:61:28:25:7e:3a: fb:e1:34:63:94:08:43:2f:79:db:e2:7e:91:91:f7:b1:ed:bb: 3f:da:60:bd:31:fa:36:8e:a4:7c:df:e3:de:04:fa:d6:ba:6f: da:4a:64:5b:c4:16:c6:16:02:42:d3:ae:61:a6:72:3d:36:3e: e0:8f:41:8e:21:c7:53:af:2e:33:68:7c:7c:1e:48:24:5f:23: ec:ac:82:57:c9:08:87:ec:69:ec:b3:c3:3b:45:ce:ce:70:fe: 15:b2:26:2e:e6:66:dc:71:a8:f6:54:30:c4:35:58:fe:8f:e6: 1d:e2:6a:07 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICM5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCQTMxMTAvBgNVBAUTKDhERjY5QjhDRjAyRDQ0NzJBMEUyRDJGNEVFNkU0OTMy NkQzREIwQzUwHhcNMjQwMTE2MTUzMTAxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWE2YTEzNC1kYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrh+GglQAOu6Kg8JiT7FoJoagRUbq2iC2egzq7DYWwDvSrReBuIv7NB6kqqF U81T/f1/YQlgnWd9cCu0A5w/6wANY/eFgNQyc1YpRWkLtpjq3BgK8yA/y5R/+olw fWSgXc5vWuFeJ4DU/ce4cvQ9RB2VVJiJjkSS5KYP4Bpful/90mTKV+cgawJ78mtr FBwteczkBh9z2IzFxEMZXsSI5X6mJu8S6RcBjc1VMItGiFMr08ze0xMVZCzEVHDo unH/vspFsRDCeCTJMEC0oNQwN0ouiInljjRBm0CsQFaQ9+KezhyyTpCBAJ1jSjz5 BtA52UuoPR+u8jeJPFNGja8DcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHHmOWDp PT3kHkN/+XJjbqrhpfIpMB8GA1UdIwQYMBaAFI32m4zwLURyoOLS9O5uSTJtPbDF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JBMy83N0VBN0EyNDFE QTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJIS2c0dEwwN201Sk1tMDlz TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYWJqUEF0UkhLZzR0TDA3bTVKTW0wOXNNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdCQTMvNzdFQTdBMjQxREEzMTFFMjkyRTVDQTk4MDhCMDJDRDIvMkIyQzMxQkUz QjhCMTFFQjhENzYzNjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJ8bWgwDQYJKoZIhvcNAQELBQADggEBAEveK4ixjX8oTpAO 44LalNHmW14LuKenWh5jVUCCZqDOaYeC7Ei5/cpqKm2G0BuJTEC2mk/Msm2MiLwB aXJhjLpeM5EIicD91e4aVQJ7Tzwin1TFL+Z1R5ePJfxqHH1+nqi70rvS8BcyqVao Po9atXwOnWRvnX/ua0LaWbriiWaTZMnyoSLOat+4goxhKCV+OvvhNGOUCEMvedvi fpGR97Htuz/aYL0x+jaOpHzf494E+ta6b9pKZFvEFsYWAkLTrmGmcj02PuCPQY4h x1OvLjNofHweSCRfI+ysglfJCIfsaeyzwztFzs5w/hWyJi7mZtxxqPZUMMQ1WP6P 5h3iagc= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:43 2024 by rpki-client on console-fra.rpki-client.org