$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/2B67707C449911EC873EEE33C4F9AE02.roa File: 2B67707C449911EC873EEE33C4F9AE02.roa (raw, json) Hash identifier: 6HPhe6Mqcy8zvn3PyYr+WXYOKr+HZQdXUKUmMkUnV5E= Subject key identifier: 10:66:DF:06:80:DB:D1:D9:97:16:CF:38:DA:64:BF:05:C0:67:30:17 Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 06A9 Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/2B67707C449911EC873EEE33C4F9AE02.roa Signing time: Fri 20 Oct 2023 22:10:39 +0000 ROA not before: Fri 20 Oct 2023 22:10:39 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 21859 IP address blocks: 103.155.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 22:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: Oct 20 22:10:39 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6532fadf-510b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:93:fb:4e:f2:11:dd:f3:7c:82:56:e5:5c: 1c:7a:e8:96:31:3e:a1:9f:1e:9c:09:1e:c5:5f:b4: 89:52:c0:08:6a:81:8c:70:78:fb:28:a6:ec:40:af: 0d:4f:01:49:a4:5b:96:78:e0:3b:03:c5:5f:f4:7d: 88:0b:a1:0f:92:20:34:04:b6:18:82:f5:74:b6:b1: d8:80:a3:85:59:93:06:75:30:12:86:8f:f1:69:ac: d6:e5:e9:16:77:53:48:f7:f7:01:97:62:1e:94:ae: 3e:bf:33:dc:7b:1d:c7:6f:48:6d:71:41:75:05:fe: c8:4a:57:38:2e:0c:a1:49:9e:a6:de:66:06:69:1d: 63:bc:03:74:3d:43:d1:01:53:00:b6:98:b0:84:49: 42:22:fb:ce:91:a2:c9:36:14:2d:02:e9:a1:44:15: 1e:51:2f:e8:0e:a3:2a:fb:10:dd:16:28:f6:aa:64: 06:24:be:ec:c0:99:c2:f5:a6:c2:36:85:9f:d5:bd: bd:c0:f1:a5:b5:7f:47:5f:d6:4c:9c:f9:61:0d:e9: bf:e6:56:9b:eb:e3:5e:e6:ce:a0:f9:99:29:cb:20: 81:94:d9:1a:4e:5e:80:23:fd:41:40:79:84:12:7b: 02:59:9d:a8:03:f4:6d:63:51:10:1c:8c:f4:37:6a: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:66:DF:06:80:DB:D1:D9:97:16:CF:38:DA:64:BF:05:C0:67:30:17 X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/2B67707C449911EC873EEE33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.120.0/23 Signature Algorithm: sha256WithRSAEncryption a2:8d:c4:98:58:f6:ab:3e:1a:83:67:47:04:2c:5e:64:c9:9b: d3:9b:eb:b9:1e:af:30:29:29:f0:7b:6f:d4:3f:e4:ba:e4:3d: 39:23:f0:55:a4:00:cc:55:26:c1:73:58:4b:7b:bc:7f:7f:b6: 20:93:c7:0f:95:e6:ce:74:ad:e9:d2:45:09:78:e4:0b:81:a5: f8:8c:c9:d2:c5:56:61:75:09:d5:97:a7:30:08:12:7f:aa:a0: b4:55:8e:65:4e:2d:3b:94:a5:e7:d9:79:03:9a:a7:8c:b4:f8: a4:55:bd:e5:74:d8:7d:26:be:6b:09:f0:e1:cd:26:2c:56:83: a2:6b:99:6c:72:17:55:5c:32:7f:cb:48:49:b4:e3:c0:fe:85: 3a:2d:44:4b:7f:97:87:23:81:2d:6f:e5:d7:37:17:02:d6:54: 11:02:ca:a9:b0:ae:e2:64:4a:41:d9:44:be:b6:bf:52:44:ff: 51:e5:b8:87:3d:c2:9b:0d:5e:2c:9f:f7:5a:54:8c:36:12:46: be:b0:96:3d:55:57:e8:1d:fd:7a:fa:c0:36:c3:00:d0:38:f2: 13:0d:e6:8e:d9:a2:e1:29:b3:23:4e:9b:e5:25:e5:15:94:15: 1c:b4:4d:da:28:9f:6d:35:ef:9a:69:91:90:0d:dc:0d:a2:ce: 7b:c4:67:7e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjMxMDIwMjIxMDM5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMyZmFkZi01MTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYmT+07yEd3zfIJW5VwceuiWMT6hnx6cCR7FX7SJUsAIaoGMcHj7KKbsQK8N TwFJpFuWeOA7A8Vf9H2IC6EPkiA0BLYYgvV0trHYgKOFWZMGdTASho/xaazW5ekW d1NI9/cBl2IelK4+vzPcex3Hb0htcUF1Bf7ISlc4LgyhSZ6m3mYGaR1jvAN0PUPR AVMAtpiwhElCIvvOkaLJNhQtAumhRBUeUS/oDqMq+xDdFij2qmQGJL7swJnC9abC NoWf1b29wPGltX9HX9ZMnPlhDem/5lab6+Ne5s6g+ZkpyyCBlNkaTl6AI/1BQHmE EnsCWZ2oA/RtY1EQHIz0N2q0wQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBBm3waA 29HZlxbPONpkvwXAZzAXMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdCRjcvQUQyQUM3MkVGQkVBMTFFQUEwQUMzMzFBQzRGOUFFMDIvMkI2NzcwN0M0 NDk5MTFFQzg3M0VFRTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnm3gwDQYJKoZIhvcNAQELBQADggEBAKKNxJhY9qs+GoNn RwQsXmTJm9Ob67kerzApKfB7b9Q/5LrkPTkj8FWkAMxVJsFzWEt7vH9/tiCTxw+V 5s50renSRQl45AuBpfiMydLFVmF1CdWXpzAIEn+qoLRVjmVOLTuUpefZeQOap4y0 +KRVveV02H0mvmsJ8OHNJixWg6JrmWxyF1VcMn/LSEm048D+hTotREt/l4cjgS1v 5dc3FwLWVBECyqmwruJkSkHZRL62v1JE/1HluIc9wpsNXiyf91pUjDYSRr6wlj1V V+gd/Xr6wDbDANA48hMN5o7ZouEpsyNOm+Ul5RWUFRy0Tdoon20175ppkZAN3A2i znvEZ34= -----END CERTIFICATE-----Generated at Thu Apr 18 23:21:42 2024 by rpki-client on console-fra.rpki-client.org