$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/29703A0645A911EF965B5A37C4F9AE02.roa File: 29703A0645A911EF965B5A37C4F9AE02.roa (raw, json) Hash identifier: sQnDZ28ShoG2UHrLE3jAaWJSXhAZi6W2QAWeAKQ2Dy8= Subject key identifier: AE:C4:08:A0:45:55:2A:7D:BD:8C:D7:93:92:C5:DE:A3:F7:6C:41:F7 Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: 02 Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/29703A0645A911EF965B5A37C4F9AE02.roa Signing time: Fri 19 Jul 2024 08:30:32 +0000 ROA not before: Fri 19 Jul 2024 08:30:32 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 140605 IP address blocks: 103.150.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Jul 19 08:30:32 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=669a2428-af4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:69:6e:54:2f:c5:0b:e7:ac:37:73:47:88: 1f:c5:8f:7b:88:c6:d3:bc:f7:48:fe:22:b6:f3:84: 7a:62:d1:d5:d4:41:00:14:f6:3b:61:70:0c:14:ae: 15:c2:a2:77:56:78:73:86:cc:24:e4:8f:12:81:d0: 9e:ec:64:e8:cf:89:0c:59:81:dd:43:83:96:e0:da: 00:69:50:9a:c2:be:78:bf:10:2d:a5:0b:a0:07:8b: cb:19:a0:77:6a:5e:d2:61:bd:55:c3:ff:4a:7e:23: 53:61:b6:f8:88:0d:5d:08:2c:59:4e:6a:c6:c1:f9: 8f:ad:72:55:41:f9:41:ea:19:96:5a:f8:66:14:4e: 4d:26:e6:48:97:90:34:8d:29:f8:1c:4f:64:99:fb: ae:8b:c0:6b:c7:61:0f:4d:ae:ae:72:05:3e:14:66: 64:c2:22:4b:03:20:c8:7c:54:a3:52:77:de:7c:ef: 3f:1e:1b:5f:0c:70:22:08:fb:fd:64:66:97:7f:13: e0:b0:ab:10:cc:76:53:11:4b:bf:89:16:ff:be:fc: a5:79:80:ff:86:12:85:9c:6e:25:5b:19:ed:ef:48: a3:8d:b3:08:a8:a8:04:ce:2c:76:40:8c:f7:64:d6: 6f:8a:07:54:42:9c:3a:18:32:2d:63:1d:21:c1:fa: f3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C4:08:A0:45:55:2A:7D:BD:8C:D7:93:92:C5:DE:A3:F7:6C:41:F7 X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/29703A0645A911EF965B5A37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.232.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:cc:72:0f:52:f5:7e:39:a2:a0:27:6f:01:2f:b6:27:2a:b1: 3b:72:e2:8d:b5:ea:73:ab:3a:23:d1:f8:f6:81:57:6f:ca:fd: 99:25:16:04:63:cd:59:d9:a4:dc:6c:cb:af:c0:eb:16:cb:08: 05:c9:ac:fb:68:b7:72:d9:ad:76:ea:99:0e:33:4d:ab:04:d1: 9f:38:eb:a7:ca:f0:a5:b8:ab:a3:46:a6:af:6a:7d:c4:e3:45: 35:12:87:d1:5f:9f:1e:d0:97:64:bc:21:f6:af:f8:79:2b:25: 9f:3c:41:76:64:b4:52:6b:a4:8e:de:88:cb:75:4b:09:64:33: 71:5a:0d:8a:96:b4:c0:8c:20:3b:fe:96:be:f0:8d:3d:45:09: 75:4e:da:f7:af:bd:70:c3:60:c2:60:d4:4f:12:d4:7f:e6:e0: 5a:8c:f9:93:27:72:1e:c6:d1:99:d7:ac:82:6e:e7:ca:9d:8c: 00:8c:28:2c:e1:3f:1d:bb:65:b4:0e:62:70:a9:d1:92:bc:8e: a1:91:ee:2d:e8:3d:5f:9d:19:67:81:43:51:d5:99:4b:ff:56: cf:ae:1e:89:d6:ee:43:4a:42:dd:f4:4d:b4:e2:3a:69:93:4d: 69:67:98:f3:89:d8:50:15:37:12:dc:8c:d5:c1:3d:bd:09:df: bc:73:52:64 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTJEMTExMC8GA1UEBRMoOEU1MjYxMjNFRjUyQ0Y4NDk1NTgyNkEyNzI4QTMzMDc1 N0YxRTgwQzAeFw0yNDA3MTkwODMwMzJaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2OWEyNDI4LWFmNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvf2luVC/FC+esN3NHiB/Fj3uIxtO890j+IrbzhHpi0dXUQQAU9jthcAwUrhXC ondWeHOGzCTkjxKB0J7sZOjPiQxZgd1Dg5bg2gBpUJrCvni/EC2lC6AHi8sZoHdq XtJhvVXD/0p+I1NhtviIDV0ILFlOasbB+Y+tclVB+UHqGZZa+GYUTk0m5kiXkDSN KfgcT2SZ+66LwGvHYQ9Nrq5yBT4UZmTCIksDIMh8VKNSd9587z8eG18McCII+/1k Zpd/E+CwqxDMdlMRS7+JFv++/KV5gP+GEoWcbiVbGe3vSKONswioqATOLHZAjPdk 1m+KB1RCnDoYMi1jHSHB+vMZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUrsQIoEVV Kn29jNeTksXeo/dsQfcwHwYDVR0jBBgwFoAUjlJhI+9Sz4SVWCaicoozB1fx6Aww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkQxL0NGRUI4REFBNDVB ODExRUY5NUM2RkQyREM0RjlBRTAyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamxKaEktOVN6NFNWV0NhaWNvb3pCMWZ4NkF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi8yOTcwM0EwNjQ1 QTkxMUVGOTY1QjVBMzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeW6DANBgkqhkiG9w0BAQsFAAOCAQEAnMxyD1L1fjmioCdv AS+2JyqxO3LijbXqc6s6I9H49oFXb8r9mSUWBGPNWdmk3GzLr8DrFssIBcms+2i3 ctmtduqZDjNNqwTRnzjrp8rwpbiro0amr2p9xONFNRKH0V+fHtCXZLwh9q/4eSsl nzxBdmS0Umukjt6Iy3VLCWQzcVoNipa0wIwgO/6WvvCNPUUJdU7a96+9cMNgwmDU TxLUf+bgWoz5kydyHsbRmdesgm7nyp2MAIwoLOE/HbtltA5icKnRkryOoZHuLeg9 X50ZZ4FDUdWZS/9Wz64eidbuQ0pC3fRNtOI6aZNNaWeY84nYUBU3EtyM1cE9vQnf vHNSZA== -----END CERTIFICATE-----Generated at Tue Sep 17 08:11:55 2024 by rpki-client on console-ams.rpki-client.org