$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/EC1244C40C0A11EF86081F2FC4F9AE02.roa File: EC1244C40C0A11EF86081F2FC4F9AE02.roa (raw, json) Hash identifier: XJ6Cl0k/r34t0UIzqumXdg3IJ/QU+9th/mHz4X1ySQs= Subject key identifier: 2A:96:30:5F:BE:C1:7D:F4:42:96:C9:15:22:C4:70:09:49:ED:DD:36 Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Certificate serial: 2D Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/EC1244C40C0A11EF86081F2FC4F9AE02.roa Signing time: Tue 23 Jul 2024 07:28:45 +0000 ROA not before: Tue 23 Jul 2024 07:28:45 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 151847 IP address blocks: 103.168.172.0/24 maxlen: 24 202.12.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Validity Not Before: Jul 23 07:28:45 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=669f5bad-be31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8c:17:b0:16:bf:d5:2f:5c:5c:6c:2e:27:8f: 0c:82:22:ec:09:23:0f:88:26:5d:6d:cc:47:ea:bd: e1:44:a2:6e:3f:fb:84:af:5c:5c:84:60:19:de:4f: c8:5f:04:13:88:15:e0:a7:6b:95:97:7c:ec:c3:d1: e2:17:85:6e:a5:3b:a2:5f:05:9a:dd:19:e9:1a:9a: bb:fb:da:f7:a8:9e:81:68:94:47:c3:39:48:cf:b5: 47:46:bd:1a:54:d8:39:6e:1b:07:07:9c:0c:8b:5b: 1a:e1:fa:b1:eb:1d:9a:cf:e9:39:8f:02:59:53:e9: 42:52:b1:2a:df:a2:ef:da:b7:83:e6:fb:af:f8:64: 07:88:b6:d1:a5:cf:47:71:83:26:70:e6:30:d8:21: ce:fd:d4:11:5a:c4:32:60:d8:b5:72:41:0f:55:b8: 0c:8a:a2:9b:04:f7:24:e5:11:42:2c:6c:fa:4c:33: 01:8c:8a:3c:03:e4:43:c4:db:b3:25:b9:06:43:7b: 32:9f:d6:fc:38:33:b0:cf:a5:92:87:80:2b:cd:d8: 66:85:88:55:f2:bd:0f:6c:a5:88:51:b3:ac:e2:c0: 30:24:0e:31:3c:79:32:6c:fc:96:f4:4f:ac:49:31: e0:9d:aa:d3:a6:27:ba:f9:0c:0b:e1:5b:26:8e:cc: 76:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:96:30:5F:BE:C1:7D:F4:42:96:C9:15:22:C4:70:09:49:ED:DD:36 X509v3 Authority Key Identifier: keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/EC1244C40C0A11EF86081F2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.172.0/24 202.12.124.0/24 Signature Algorithm: sha256WithRSAEncryption be:2f:6f:cf:66:41:a3:85:d1:9e:34:7f:1e:e0:05:c1:ac:34: a3:83:30:c9:91:50:af:b8:fe:f6:48:71:ac:c4:3d:17:9d:ee: 23:8e:1e:12:68:63:ba:aa:5c:74:ed:db:fe:6c:b2:09:35:49: 1e:cb:07:24:d7:5d:ab:6a:e8:bf:e3:b8:51:16:68:b1:aa:34: 52:4f:b5:92:cd:07:92:5f:9b:27:3d:f7:55:b7:54:c0:03:0c: e6:9d:0c:1d:90:49:67:e0:20:d3:b1:a5:73:e8:62:5f:e0:e9: b1:44:83:5c:21:52:99:f9:c3:7d:c2:b6:e7:5a:9d:43:28:29: ac:12:8e:21:c4:2b:0a:09:f4:f5:b7:b8:47:c2:0c:89:c2:76: 1d:9f:b0:5d:68:f5:0b:6e:da:7d:79:bf:71:c4:59:2b:9f:c5: 68:8f:2d:a0:2a:e0:36:5a:3b:7e:f2:11:36:a4:2a:c3:58:b0: e5:07:0c:77:93:8f:ff:2c:97:a1:46:c3:2a:c4:8c:26:5e:02: 53:8c:3b:25:45:2d:1c:3a:32:e1:0b:ca:ff:7a:12:fc:2f:a5: 3c:5b:9c:7b:38:5b:c1:06:30:44:96:61:82:6c:0e:a4:0d:d6: bc:9e:bb:e0:1f:ab:cf:69:49:e6:f3:37:4b:a5:9e:d5:4d:48: 6f:e4:d4:6e -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NEY2QzExMC8GA1UEBRMoRDlDREMwODk0ODJBNjc0OUI1MjAwNTFDMEYzODVGNjJE RThDQjQ5MzAeFw0yNDA3MjMwNzI4NDVaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2OWY1YmFkLWJlMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDijBewFr/VL1xcbC4njwyCIuwJIw+IJl1tzEfqveFEom4/+4SvXFyEYBneT8hf BBOIFeCna5WXfOzD0eIXhW6lO6JfBZrdGekamrv72veonoFolEfDOUjPtUdGvRpU 2DluGwcHnAyLWxrh+rHrHZrP6TmPAllT6UJSsSrfou/at4Pm+6/4ZAeIttGlz0dx gyZw5jDYIc791BFaxDJg2LVyQQ9VuAyKopsE9yTlEUIsbPpMMwGMijwD5EPE27Ml uQZDezKf1vw4M7DPpZKHgCvN2GaFiFXyvQ9spYhRs6ziwDAkDjE8eTJs/Jb0T6xJ MeCdqtOmJ7r5DAvhWyaOzHaJAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUKpYwX77B ffRClskVIsRwCUnt3TYwHwYDVR0jBBgwFoAU2c3AiUgqZ0m1IAUcDzhfYt6MtJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0RjZDL0I4ODIzNzI4MEMw OTExRUY5QkQ5MTMyQ0M0RjlBRTAyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRK TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmMzQWlVZ3FaMG0xSUFVY0R6aGZZdDZNdEpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEY2Qy9CODgyMzcyODBDMDkxMUVGOUJEOTEzMkNDNEY5QUUwMi9FQzEyNDRDNDBD MEExMUVGODYwODFGMkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAGeorAMEAMoMfDANBgkqhkiG9w0BAQsFAAOCAQEAvi9vz2ZB o4XRnjR/HuAFwaw0o4MwyZFQr7j+9khxrMQ9F53uI44eEmhjuqpcdO3b/myyCTVJ HssHJNddq2rov+O4URZosao0Uk+1ks0Hkl+bJz33VbdUwAMM5p0MHZBJZ+Ag07Gl c+hiX+DpsUSDXCFSmfnDfcK251qdQygprBKOIcQrCgn09be4R8IMicJ2HZ+wXWj1 C27afXm/ccRZK5/FaI8toCrgNlo7fvIRNqQqw1iw5QcMd5OP/yyXoUbDKsSMJl4C U4w7JUUtHDoy4QvK/3oS/C+lPFucezhbwQYwRJZhgmwOpA3WvJ674B+rz2lJ5vM3 S6We1U1Ib+TUbg== -----END CERTIFICATE-----Generated at Tue Sep 17 06:07:28 2024 by rpki-client on console-fra.rpki-client.org