$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/DBEED4E0B44911EEA11B100BC4F9AE02.roa File: DBEED4E0B44911EEA11B100BC4F9AE02.roa (raw, json) Hash identifier: bP0i0QbndVMqRZ4Mv5nqCwuWNS0FREH9OqWOj8GCqK8= Subject key identifier: A3:18:C4:5B:18:7A:82:BD:9F:93:3A:30:EA:22:90:48:D5:53:1B:EB Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 02BD Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/DBEED4E0B44911EEA11B100BC4F9AE02.roa Signing time: Mon 13 May 2024 04:08:51 +0000 ROA not before: Mon 13 May 2024 04:08:51 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9009 IP address blocks: 103.229.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 18:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 701 (0x2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 13 04:08:51 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66419252-6ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:02:f4:6d:99:45:72:51:67:e8:2f:11:88: 4d:50:26:e0:88:c8:de:61:88:f2:e8:fa:e7:d9:41: cd:72:49:0f:78:39:80:c6:e0:c9:3a:f5:00:68:ef: be:17:06:f4:3c:67:10:89:4e:fd:3f:4f:c5:66:c6: 59:42:97:e9:3d:cc:a8:46:9b:90:ce:20:39:80:1b: cd:d9:90:f8:af:b5:c6:e9:3b:23:15:49:88:85:0e: 42:54:62:65:af:fb:12:0c:b3:be:83:31:4f:30:0b: 54:d9:c7:ca:ff:a2:30:1c:91:b9:66:c7:5e:85:c1: 75:9d:a6:a8:f9:a6:75:07:47:6c:d0:50:00:1a:59: 92:95:54:a5:b9:39:58:27:1e:32:88:94:14:78:63: a0:bb:cb:ec:c6:cc:d0:51:e6:6c:5e:a5:86:ba:7b: 51:47:4b:03:3c:e9:8f:da:29:53:4d:75:be:92:1d: 15:38:b3:1e:61:a8:c6:a1:58:7e:37:e8:71:2f:94: 55:62:a9:c9:c1:c3:2e:5b:35:5d:1f:4b:e9:df:8a: 5b:cf:91:be:e3:93:83:f1:4c:a2:ea:d5:dc:95:df: b5:f1:6f:06:e2:13:58:39:1a:a8:cc:10:02:19:97: 90:28:22:9c:c3:81:c7:a4:29:06:3b:e0:2f:65:53: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:18:C4:5B:18:7A:82:BD:9F:93:3A:30:EA:22:90:48:D5:53:1B:EB X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/DBEED4E0B44911EEA11B100BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.116.0/24 Signature Algorithm: sha256WithRSAEncryption 56:c7:97:53:8b:fc:44:a2:05:1e:b7:d4:2d:36:3e:00:ec:f4: f0:4b:8d:8f:7b:e7:6e:5d:2b:1a:76:af:47:7a:0b:f8:d6:ff: c5:cb:19:fc:fa:e0:41:2f:3c:77:34:25:61:77:b4:83:3b:0b: b2:d6:37:98:14:ce:9f:ff:73:e1:d1:d0:40:c2:ac:74:f9:cc: ad:1a:42:0f:4c:05:f7:5f:e6:36:4a:ca:84:69:38:3b:0e:ba: f4:f3:4d:7a:c2:32:cd:05:35:35:6e:be:c9:13:a4:98:10:ee: 87:4a:1a:1b:e2:2d:ac:e5:76:c1:08:0b:90:dc:4e:b4:55:dd: a9:ba:80:f1:c3:98:7f:17:f1:01:00:87:17:cb:08:c7:ab:54: 13:df:75:86:c8:1a:8b:06:3a:20:1a:b5:b4:5b:88:33:88:4a: b7:99:43:39:ea:bf:00:83:c2:d7:45:cc:37:9d:c8:78:f4:58: 10:01:e4:98:93:fb:db:56:81:9a:a7:96:e7:d7:e4:c0:63:d5: 18:31:e8:30:ca:41:18:3b:bc:5e:0a:d5:51:d9:5a:56:cc:41: f3:3e:61:5b:7f:73:8f:43:a6:25:59:d5:5f:2c:87:30:49:f7: 53:a8:90:ea:a0:3a:f7:c3:f5:40:f2:70:67:a5:fb:93:8f:d2: 5b:ec:c1:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjQwNTEzMDQwODUxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQxOTI1Mi02Y2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv44C9G2ZRXJRZ+gvEYhNUCbgiMjeYYjy6Prn2UHNckkPeDmAxuDJOvUAaO++ Fwb0PGcQiU79P0/FZsZZQpfpPcyoRpuQziA5gBvN2ZD4r7XG6TsjFUmIhQ5CVGJl r/sSDLO+gzFPMAtU2cfK/6IwHJG5ZsdehcF1naao+aZ1B0ds0FAAGlmSlVSluTlY Jx4yiJQUeGOgu8vsxszQUeZsXqWGuntRR0sDPOmP2ilTTXW+kh0VOLMeYajGoVh+ N+hxL5RVYqnJwcMuWzVdH0vp34pbz5G+45OD8Uyi6tXcld+18W8G4hNYORqozBAC GZeQKCKcw4HHpCkGO+AvZVM9fwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKMYxFsY eoK9n5M6MOoikEjVUxvrMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvREJFRUQ0RTBC NDQ5MTFFRUExMUIxMDBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn5XQwDQYJKoZIhvcNAQELBQADggEBAFbHl1OL/ESiBR63 1C02PgDs9PBLjY97525dKxp2r0d6C/jW/8XLGfz64EEvPHc0JWF3tIM7C7LWN5gU zp//c+HR0EDCrHT5zK0aQg9MBfdf5jZKyoRpODsOuvTzTXrCMs0FNTVuvskTpJgQ 7odKGhviLazldsEIC5DcTrRV3am6gPHDmH8X8QEAhxfLCMerVBPfdYbIGosGOiAa tbRbiDOISreZQznqvwCDwtdFzDedyHj0WBAB5JiT+9tWgZqnlufX5MBj1Rgx6DDK QRg7vF4K1VHZWlbMQfM+YVt/c49DpiVZ1V8shzBJ91OokOqgOvfD9UDycGel+5OP 0lvswdg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:41:37 2024 by rpki-client on console-ams.rpki-client.org