$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/EA4E0296BAA611EE8FED5E46C4F9AE02.roa File: EA4E0296BAA611EE8FED5E46C4F9AE02.roa (raw, json) Hash identifier: KR+X2/UthPZWVAO3A33zrjEQdx61vxG6ONH1XD4gDMg= Subject key identifier: 22:85:AA:61:85:5A:12:B3:E6:F7:F6:BF:7D:A9:60:DC:E5:3B:E9:79 Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E Certificate serial: 0121 Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/EA4E0296BAA611EE8FED5E46C4F9AE02.roa Signing time: Thu 25 Jan 2024 04:46:01 +0000 ROA not before: Thu 25 Jan 2024 04:46:01 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 150311 IP address blocks: 103.250.28.0/24 maxlen: 24 103.250.29.0/24 maxlen: 24 2001:df1:4540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E Validity Not Before: Jan 25 04:46:01 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65b1e788-1947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:65:9e:92:85:0b:9d:af:14:70:2f:5a:81:4a: 7c:a3:dd:c6:25:e1:4e:91:ab:4e:63:ef:22:c6:ce: c6:e7:d6:a9:9b:3b:45:14:12:66:45:2f:b8:44:ff: 7c:c4:0b:0a:e9:bb:aa:b8:01:28:b6:9d:cb:6f:42: 9b:98:84:9b:5a:f6:1e:bd:00:29:eb:da:cb:4d:ad: 0e:40:ff:d5:92:4a:ec:37:56:05:2f:b4:d9:2f:98: 3c:5f:4d:6e:f6:44:9b:09:7f:fb:37:98:4e:6c:c2: 73:66:a3:77:1a:21:fa:bb:a7:f5:7d:77:b7:2c:53: 1b:28:09:81:d4:45:01:b1:f8:10:72:37:d2:06:42: 41:26:27:b4:67:9a:4a:23:20:f4:24:dc:8a:58:28: 8e:51:87:78:3c:a9:0a:e8:bb:dd:a3:c7:45:1a:27: 6d:7f:f9:8a:77:8f:b8:c1:0f:a5:c7:ef:cc:da:30: 71:4b:49:6c:b2:89:fd:5d:91:3a:cf:2c:e9:c6:af: fd:f2:0f:c0:69:a1:11:58:d1:d4:0c:b4:d5:84:59: 6b:a8:50:3d:0e:1f:b7:97:5c:e0:ea:04:5f:0f:9d: e9:c4:96:f3:bd:22:87:f2:9d:60:bc:11:bc:e7:e7: 88:a9:c0:f6:55:af:d0:a1:66:b9:17:38:bb:6c:27: ab:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:85:AA:61:85:5A:12:B3:E6:F7:F6:BF:7D:A9:60:DC:E5:3B:E9:79 X509v3 Authority Key Identifier: keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/EA4E0296BAA611EE8FED5E46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.250.28.0/23 IPv6: 2001:df1:4540::/48 Signature Algorithm: sha256WithRSAEncryption a1:0b:43:30:51:b3:35:16:97:24:d5:12:81:fd:e7:3e:90:ab: 98:66:51:68:24:fb:a8:37:f7:ae:a6:06:e4:2d:1a:b5:07:b7: 72:62:d4:11:cb:f4:44:e1:5d:ad:dc:fc:53:46:ba:08:fe:b8: 84:6b:3b:70:1f:b9:bb:84:f4:d8:5e:06:e0:59:77:26:25:3c: e1:e3:7b:05:14:b2:cb:50:02:d5:87:01:eb:5f:ff:fd:a5:ac: ee:9c:5b:df:9e:21:98:fd:2c:69:69:05:b9:dd:00:22:5a:08: e3:8e:1f:fc:66:f0:ef:93:0b:bd:36:e0:7b:bb:a2:b5:2f:70: 28:60:64:98:48:2d:e6:96:f0:65:05:b1:a6:33:0d:56:53:85: 38:fc:88:4b:2e:b8:82:9e:70:00:f4:39:96:2d:5c:ff:77:54: 46:38:2e:e5:1f:3c:99:7e:3a:df:fe:6a:50:2c:72:8b:a7:22: 62:f3:31:e1:9d:bf:3b:d4:b5:28:c4:c7:45:b4:0f:21:fb:d5: a3:15:c6:1c:cf:6e:c4:df:2e:07:03:7a:b5:af:1e:d9:08:b1: e3:75:46:29:dc:56:e9:3c:53:7c:23:ec:4a:b3:98:bb:2b:e7: 7d:91:20:a5:4a:ba:c5:97:77:2e:d6:7d:f7:d1:95:43:c7:db: 26:16:9c:4c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFERjgxMTAvBgNVBAUTKDNGQkMzQUY0MzEwMkNFREE0RkEwRjdGQTlCRDkxQjJE NjUzNDZENkUwHhcNMjQwMTI1MDQ0NjAxWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWIxZTc4OC0xOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GWekoULna8UcC9agUp8o93GJeFOkatOY+8ixs7G59apmztFFBJmRS+4RP98 xAsK6buquAEotp3Lb0KbmISbWvYevQAp69rLTa0OQP/VkkrsN1YFL7TZL5g8X01u 9kSbCX/7N5hObMJzZqN3GiH6u6f1fXe3LFMbKAmB1EUBsfgQcjfSBkJBJie0Z5pK IyD0JNyKWCiOUYd4PKkK6Lvdo8dFGidtf/mKd4+4wQ+lx+/M2jBxS0lsson9XZE6 zyzpxq/98g/AaaERWNHUDLTVhFlrqFA9Dh+3l1zg6gRfD53pxJbzvSKH8p1gvBG8 5+eIqcD2Va/QoWa5Fzi7bCerYwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCKFqmGF WhKz5vf2v32pYNzlO+l5MB8GA1UdIwQYMBaAFD+8OvQxAs7aT6D3+pvZGy1lNG1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MURGOC8yNkU1MzExNDU1 MDYxMUVEOTUwNkMwNDVDNEY5QUUwMi9QN3c2OURFQ3p0cFBvUGY2bTlrYkxXVTBi VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3dzY5REVDenRwUG9QZjZtOWtiTFdVMGJXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFERjgvMjZFNTMxMTQ1NTA2MTFFRDk1MDZDMDQ1QzRGOUFFMDIvRUE0RTAyOTZC QUE2MTFFRThGRUQ1RTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn+hwwDwQCAAIwCQMHACABDfFFQDANBgkqhkiG9w0BAQsF AAOCAQEAoQtDMFGzNRaXJNUSgf3nPpCrmGZRaCT7qDf3rqYG5C0atQe3cmLUEcv0 ROFdrdz8U0a6CP64hGs7cB+5u4T02F4G4Fl3JiU84eN7BRSyy1AC1YcB61///aWs 7pxb354hmP0saWkFud0AIloI444f/Gbw75MLvTbge7uitS9wKGBkmEgt5pbwZQWx pjMNVlOFOPyISy64gp5wAPQ5li1c/3dURjgu5R88mX463/5qUCxyi6ciYvMx4Z2/ O9S1KMTHRbQPIfvVoxXGHM9uxN8uBwN6ta8e2Qix43VGKdxW6TxTfCPsSrOYuyvn fZEgpUq6xZd3LtZ999GVQ8fbJhacTA== -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org