$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/EF2B0AA49C4411EFA8A3C05DC4F9AE02.roa File: EF2B0AA49C4411EFA8A3C05DC4F9AE02.roa (raw, json) Hash identifier: uXJr5zTD8spV75eT1ICuwYAkIPJwXhBi4e+ElgFKrkY= Subject key identifier: B7:19:14:17:C9:5C:BF:45:FC:FD:4A:B5:91:D9:51:E1:BD:A0:0D:36 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0B7A Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/EF2B0AA49C4411EFA8A3C05DC4F9AE02.roa Signing time: Fri 15 Nov 2024 14:27:22 +0000 ROA not before: Fri 15 Nov 2024 14:27:22 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 55154 IP address blocks: 14.192.134.0/24 maxlen: 24 103.20.134.0/24 maxlen: 24 103.20.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2938 (0xb7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Nov 15 14:27:22 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67375a4a-285a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:d7:1b:c0:fb:b0:9a:7f:48:d8:bd:ae:45: 32:56:fb:37:0f:ee:23:58:0a:dc:17:68:97:9e:75: 4c:ed:ca:27:9f:65:d2:d8:11:b0:82:ff:c7:21:a2: 64:cc:37:37:7a:5a:b7:28:8b:0f:4f:59:01:5d:69: 1e:31:a8:2b:48:b2:85:b8:7d:e5:e2:47:ec:1e:df: 79:cd:f1:b9:c4:73:de:f6:10:df:13:35:d8:73:18: 77:97:61:df:85:db:15:03:4f:63:87:f7:26:4c:81: 70:06:a7:4c:64:e2:d7:4e:67:52:ac:46:e4:db:b9: 6c:41:2c:a1:3d:f0:96:2c:e7:1e:52:77:ef:ff:60: e2:a4:5b:60:72:6c:a0:9e:3c:62:fa:65:02:98:52: 2a:73:b6:2c:24:ab:ff:1f:4b:87:a6:12:6d:ee:bd: 88:71:4a:ee:3a:9d:0c:ab:85:5a:2c:36:72:a6:9c: c2:d3:29:8d:42:39:ca:90:cc:5f:f5:dc:06:91:d5: ef:8f:e6:cf:fe:cb:13:e6:bc:dd:91:a7:1c:9c:dc: d3:d0:24:86:41:f6:14:31:b3:5a:9c:27:fe:a7:4e: 4b:67:71:ed:fd:d0:30:73:83:6b:3d:29:bd:22:21: 65:37:05:ed:51:d9:6f:08:26:d6:65:31:d4:ed:7d: 32:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:19:14:17:C9:5C:BF:45:FC:FD:4A:B5:91:D9:51:E1:BD:A0:0D:36 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/EF2B0AA49C4411EFA8A3C05DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.134.0/24 103.20.134.0/23 Signature Algorithm: sha256WithRSAEncryption 16:40:e5:2e:5b:37:c7:a5:e7:ee:0f:31:19:33:a9:a7:72:07: bd:be:24:07:9b:b2:83:6e:ec:95:af:e2:1e:3c:2b:6f:98:ac: 91:f3:50:86:ea:9f:ef:c4:ad:77:b2:6f:f1:f7:ec:57:9e:44: a6:cb:0c:76:3f:14:bf:40:39:bb:c5:9e:06:10:19:89:c8:94: 7d:34:8f:a5:1e:20:d0:88:35:11:c7:e8:1e:4c:40:6e:94:3e: e9:53:6a:9d:77:9f:dd:8f:f7:ce:d3:6e:be:27:00:04:1f:7f: e6:d9:65:e3:6c:b4:74:29:4b:77:75:80:d3:f1:d8:ab:59:03: ec:0c:f3:5c:f2:05:97:83:87:a7:f0:74:fb:bd:5c:43:b5:2e: 86:d0:36:a2:53:ca:3e:f0:d5:1b:8f:5c:5d:16:48:6c:98:00: 87:24:b6:42:e7:15:3d:29:25:87:f1:aa:98:7b:67:90:97:e8: d1:b4:b7:cf:9b:06:0f:36:cc:cd:93:6e:52:5c:c9:43:9b:60: 8d:f3:b0:b6:ed:af:2b:4d:3c:28:3b:9c:f7:6f:71:cf:fa:22: 6a:34:d3:6c:1b:6e:f8:ea:e8:cf:0c:a6:55:0d:df:25:36:90: 7e:d0:e8:85:ca:9c:e0:d9:65:f0:20:e2:dd:e6:ab:04:dd:ca: 9e:fb:1f:bb -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICC3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjQxMTE1MTQyNzIyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM3NWE0YS0yODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb7XG8D7sJp/SNi9rkUyVvs3D+4jWArcF2iXnnVM7conn2XS2BGwgv/HIaJk zDc3elq3KIsPT1kBXWkeMagrSLKFuH3l4kfsHt95zfG5xHPe9hDfEzXYcxh3l2Hf hdsVA09jh/cmTIFwBqdMZOLXTmdSrEbk27lsQSyhPfCWLOceUnfv/2DipFtgcmyg njxi+mUCmFIqc7YsJKv/H0uHphJt7r2IcUruOp0Mq4VaLDZyppzC0ymNQjnKkMxf 9dwGkdXvj+bP/ssT5rzdkaccnNzT0CSGQfYUMbNanCf+p05LZ3Ht/dAwc4NrPSm9 IiFlNwXtUdlvCCbWZTHU7X0y4QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLcZFBfJ XL9F/P1KtZHZUeG9oA02MB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvRUYyQjBBQTQ5 QzQ0MTFFRkE4QTNDMDVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAOwIYDBAFnFIYwDQYJKoZIhvcNAQELBQADggEBABZA5S5b N8el5+4PMRkzqadyB72+JAebsoNu7JWv4h48K2+YrJHzUIbqn+/ErXeyb/H37Fee RKbLDHY/FL9AObvFngYQGYnIlH00j6UeINCINRHH6B5MQG6UPulTap13n92P987T br4nAAQff+bZZeNstHQpS3d1gNPx2KtZA+wM81zyBZeDh6fwdPu9XEO1LobQNqJT yj7w1RuPXF0WSGyYAIcktkLnFT0pJYfxqph7Z5CX6NG0t8+bBg82zM2TblJcyUOb YI3zsLbtrytNPCg7nPdvcc/6Imo002wbbvjq6M8MplUN3yU2kH7Q6IXKnODZZfAg 4t3mqwTdyp77H7s= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:03 2024 by rpki-client on console-ams.rpki-client.org