$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/2F840DD2740911EDA7146F2DC4F9AE02.roa File: 2F840DD2740911EDA7146F2DC4F9AE02.roa (raw, json) Hash identifier: PKyy2enQZwJAPAGB65CItDAb1Yve/y7L5I1YK7Ph1yU= Subject key identifier: 26:E1:93:71:DE:AD:FF:DB:AE:53:9E:E8:A5:6A:9B:E2:2B:1E:E1:59 Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Certificate serial: 170A Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/2F840DD2740911EDA7146F2DC4F9AE02.roa Signing time: Sun 04 Aug 2024 16:54:12 +0000 ROA not before: Sun 04 Aug 2024 16:54:12 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 132092 IP address blocks: 103.70.140.0/22 maxlen: 24 182.54.152.0/22 maxlen: 24 2406:c80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5898 (0x170a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Validity Not Before: Aug 4 16:54:12 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66afb233-05f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ef:cd:fa:8b:0d:56:21:fa:89:ba:62:62:0e: 8d:6c:51:35:c6:fc:af:05:27:6a:e0:d1:38:d5:bd: 52:0b:57:5a:a3:49:54:9e:8c:7d:ed:c0:bd:21:91: 23:31:8a:33:af:a8:52:54:9f:10:8f:a6:7c:ec:fd: fd:a5:6d:92:cb:52:50:64:9c:99:d9:b7:e8:74:8c: e4:43:24:65:46:98:fa:82:16:cf:93:cb:f6:f0:72: 2f:5d:79:70:cf:38:8e:33:4f:56:ac:90:3b:8d:24: 43:3b:35:0a:76:6c:fb:8f:5a:29:b1:65:c6:d7:8e: 7d:91:e3:f2:d6:35:35:85:34:2a:22:3f:5e:9b:91: 0c:2d:8b:0d:d4:30:4b:58:e0:52:61:c4:b8:48:a5: 0e:c5:84:a7:a4:cf:54:cf:44:f6:f0:a8:45:0b:74: 22:bf:6e:76:6d:05:c6:cb:72:6e:c0:4b:9e:0c:d3: 39:9b:6c:0d:a1:0e:6d:4a:38:2a:9f:5a:11:75:67: 0b:9f:87:af:b8:e2:de:bd:33:94:0c:29:26:cd:e9: 3b:c1:4b:64:0c:3d:74:dd:86:ec:31:02:53:3e:42: 2d:b5:6c:05:90:b3:11:00:3c:97:d8:ca:e2:ef:9a: 63:25:e1:7d:36:35:0c:15:1d:d4:b3:33:b1:30:6d: c3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E1:93:71:DE:AD:FF:DB:AE:53:9E:E8:A5:6A:9B:E2:2B:1E:E1:59 X509v3 Authority Key Identifier: keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/2F840DD2740911EDA7146F2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.70.140.0/22 182.54.152.0/22 IPv6: 2406:c80::/32 Signature Algorithm: sha256WithRSAEncryption 2a:59:f4:ae:a8:0b:8f:92:b4:0f:28:7b:2c:da:77:4c:2b:e8: 90:20:60:98:9b:84:a5:e3:be:e7:e3:9f:74:c3:6f:ef:5d:9e: 52:5c:e0:17:ca:53:95:38:97:3e:3b:9c:6d:3f:c6:b5:e7:2d: df:fe:dd:d9:a8:4e:07:85:c2:70:75:07:38:f1:8b:18:b2:33: 72:28:7a:66:cf:8e:14:05:c6:4f:57:92:bb:50:bb:a3:35:7e: 35:a9:e5:f0:9c:d1:f2:36:b4:44:c6:66:cb:3b:a5:5f:5a:39: ae:36:5c:1b:14:a6:d0:2d:5e:3f:79:0c:b2:7e:63:d1:41:16: 4f:60:0d:c7:c1:6b:8c:34:7c:d9:1f:ff:db:26:60:9a:4e:48: 32:35:74:3c:b6:c1:d9:64:ac:05:74:fd:77:33:3f:9c:48:1a: 28:b1:69:7f:41:82:cd:27:d8:99:0d:b9:4b:83:3e:4f:fc:75: 46:4c:27:ca:cf:1d:f8:11:94:e4:01:a9:5b:93:55:41:45:eb: 8a:c5:1c:1e:53:e6:3b:ab:57:31:b4:49:c0:9b:2a:d8:a8:6f: 79:92:e9:88:48:14:e8:98:0b:77:35:c9:dd:87:f2:1e:50:35: 8e:06:fa:77:6f:86:eb:c0:4a:9f:50:48:0b:00:84:3f:3f:31: 18:de:51:b2 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICFwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxN0QxMTAvBgNVBAUTKDM0NEE3NzVFMjQ1Q0NFRDA4MEM3OTUyMTU5NkUzMkM4 RjA2RDg4QzgwHhcNMjQwODA0MTY1NDEyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFmYjIzMy0wNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzu/N+osNViH6ibpiYg6NbFE1xvyvBSdq4NE41b1SC1dao0lUnox97cC9IZEj MYozr6hSVJ8Qj6Z87P39pW2Sy1JQZJyZ2bfodIzkQyRlRpj6ghbPk8v28HIvXXlw zziOM09WrJA7jSRDOzUKdmz7j1opsWXG1459kePy1jU1hTQqIj9em5EMLYsN1DBL WOBSYcS4SKUOxYSnpM9Uz0T28KhFC3Qiv252bQXGy3JuwEueDNM5m2wNoQ5tSjgq n1oRdWcLn4evuOLevTOUDCkmzek7wUtkDD103YbsMQJTPkIttWwFkLMRADyX2Mri 75pjJeF9NjUMFR3UszOxMG3DnwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCbhk3He rf/brlOe6KVqm+IrHuFZMB8GA1UdIwQYMBaAFDRKd14kXM7QgMeVIVluMsjwbYjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE3RC8zRDdBNjI4NkNG NTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0Q0F4NVVoV1c0eXlQQnRp TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FcDNYaVJjenRDQXg1VWhXVzR5eVBCdGlNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTUxN0QvM0Q3QTYyODZDRjU2MTFFN0JGNjk1NTEwQzRGOUFFMDIvMkY4NDBERDI3 NDA5MTFFREE3MTQ2RjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnRowDBAK2NpgwDQQCAAIwBwMFACQGDIAwDQYJKoZIhvcN AQELBQADggEBACpZ9K6oC4+StA8oeyzad0wr6JAgYJibhKXjvufjn3TDb+9dnlJc 4BfKU5U4lz47nG0/xrXnLd/+3dmoTgeFwnB1BzjxixiyM3IoembPjhQFxk9XkrtQ u6M1fjWp5fCc0fI2tETGZss7pV9aOa42XBsUptAtXj95DLJ+Y9FBFk9gDcfBa4w0 fNkf/9smYJpOSDI1dDy2wdlkrAV0/XczP5xIGiixaX9Bgs0n2JkNuUuDPk/8dUZM J8rPHfgRlOQBqVuTVUFF64rFHB5T5jurVzG0ScCbKtiob3mS6YhIFOiYC3c1yd2H 8h5QNY4G+ndvhuvASp9QSAsAhD8/MRjeUbI= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:46 2024 by rpki-client on console-fra.rpki-client.org