$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/B2E74042602811EF90548827C4F9AE02.roa File: B2E74042602811EF90548827C4F9AE02.roa (raw, json) Hash identifier: 5CfU6Ey+EqR6j3v3qr6f+yrfJbdI9IE9e5KRkCXxOtY= Subject key identifier: 65:B0:BD:35:17:02:75:09:B1:FA:F8:3C:F2:1B:E0:2F:BC:6A:A8:62 Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Certificate serial: 079A Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/B2E74042602811EF90548827C4F9AE02.roa Signing time: Wed 04 Sep 2024 21:49:35 +0000 ROA not before: Wed 04 Sep 2024 21:49:35 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 141002 IP address blocks: 103.154.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1946 (0x79a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Validity Not Before: Sep 4 21:49:35 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d8d5ee-ee7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:e5:9c:c8:68:5a:c8:20:e8:3c:0a:69:d8: 7a:d4:8a:5a:95:3b:d5:57:a2:2e:e2:c5:34:c3:3b: 93:f0:26:36:8a:da:36:7c:2e:a2:4e:d0:9f:c4:48: ad:d5:7e:27:80:d5:72:d9:83:6d:6e:30:9e:76:dd: a1:a3:d7:72:fd:31:a5:c0:54:03:74:d8:31:5a:fe: 18:f8:a3:6f:36:5e:1a:95:d3:7d:a0:c4:e8:6e:39: 5f:8c:50:60:3e:20:37:85:ca:91:cf:70:c7:e8:d8: cd:f4:0b:2c:8a:0b:3c:07:b9:e0:98:79:c6:53:15: 4f:23:d1:a6:03:ab:16:96:7a:4a:b3:2e:d5:e8:99: b6:17:44:86:12:df:30:ec:5e:74:d2:c0:8a:bd:ff: 8d:be:c8:b9:38:54:a8:c8:62:d6:7e:3b:c7:c0:d5: e3:8c:05:80:f3:f6:38:9f:b2:c7:05:4e:f1:83:b4: 7d:7d:e8:44:8a:94:ef:d1:65:6c:44:51:81:87:28: f6:42:70:1b:a0:9c:93:4a:91:12:21:83:86:0c:30: d7:8b:2e:f7:c7:f4:ac:ba:f9:12:68:f9:17:38:38: 32:4a:d1:78:04:9e:a2:bc:39:3e:bb:ec:9b:bc:9c: ca:f3:4d:16:56:78:b2:b1:88:d7:6a:70:ec:1f:9d: cb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B0:BD:35:17:02:75:09:B1:FA:F8:3C:F2:1B:E0:2F:BC:6A:A8:62 X509v3 Authority Key Identifier: keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/B2E74042602811EF90548827C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.29.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:01:df:3b:11:72:14:2d:1c:81:8e:44:e2:ca:08:26:52:0f: 5a:10:3a:34:b1:cc:06:d3:c2:c3:81:e2:ab:37:12:11:86:97: aa:a9:e2:5c:33:c8:c2:69:7c:9b:dd:e5:ca:5e:44:e2:1b:5e: e6:fc:56:9b:56:3a:dd:0b:e2:49:11:0f:7c:a1:44:f8:61:e9: 6f:21:4e:f3:2b:41:57:2b:a7:0f:f1:f3:c3:ee:57:bc:05:4c: 05:ca:60:83:02:c7:1e:eb:e3:92:76:99:07:b4:91:dd:a5:70: 75:58:a9:4c:f4:98:cf:68:97:dc:8e:75:b8:f6:11:17:61:85: 5a:dd:3c:11:8c:03:9c:81:8b:0b:1d:6a:59:81:a9:79:45:7f: 9f:68:54:d3:98:de:77:c0:74:55:28:69:42:45:bc:51:78:07: 95:94:ff:0c:8e:08:e9:1f:8f:8e:eb:2d:5f:cd:d1:af:cd:aa: 66:74:1a:af:ab:90:a7:45:23:53:2f:14:31:c7:30:f3:3c:df: 28:e0:52:57:1f:43:1d:14:18:a1:df:a7:20:18:7c:2a:74:96: 73:fc:cd:f2:c9:8a:a2:ce:16:c9:f7:13:a7:bb:1f:d3:ba:c0: 3b:f6:3a:e5:14:c9:f2:6f:35:d2:27:e8:fc:53:bf:83:29:26: 80:29:ac:05 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MzMxMTAvBgNVBAUTKDFBMUEyREI2MjI3MDQ5ODYwRDFDQjZGQjM4MUQwMzVG N0NEREZFNzkwHhcNMjQwOTA0MjE0OTM1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4ZDVlZS1lZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoTlnMhoWsgg6DwKadh61IpalTvVV6Iu4sU0wzuT8CY2ito2fC6iTtCfxEit 1X4ngNVy2YNtbjCedt2ho9dy/TGlwFQDdNgxWv4Y+KNvNl4aldN9oMTobjlfjFBg PiA3hcqRz3DH6NjN9Assigs8B7ngmHnGUxVPI9GmA6sWlnpKsy7V6Jm2F0SGEt8w 7F500sCKvf+Nvsi5OFSoyGLWfjvHwNXjjAWA8/Y4n7LHBU7xg7R9fehEipTv0WVs RFGBhyj2QnAboJyTSpESIYOGDDDXiy73x/SsuvkSaPkXODgyStF4BJ6ivDk+u+yb vJzK800WVniysYjXanDsH53LzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGWwvTUX AnUJsfr4PPIb4C+8aqhiMB8GA1UdIwQYMBaAFBoaLbYicEmGDRy2+zgdA1983f55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkzMy9GRDk1MjFCMkRD NTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZWU5ITGI3T0IwRFgzemRf bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dob3R0aUp3U1lZTkhMYjdPQjBEWDN6ZF9uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M5MzMvRkQ5NTIxQjJEQzU3MTFFQTgzRThFQzY3QzRGOUFFMDIvQjJFNzQwNDI2 MDI4MTFFRjkwNTQ4ODI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnmh0wDQYJKoZIhvcNAQELBQADggEBAHwB3zsRchQtHIGO ROLKCCZSD1oQOjSxzAbTwsOB4qs3EhGGl6qp4lwzyMJpfJvd5cpeROIbXub8VptW Ot0L4kkRD3yhRPhh6W8hTvMrQVcrpw/x88PuV7wFTAXKYIMCxx7r45J2mQe0kd2l cHVYqUz0mM9ol9yOdbj2ERdhhVrdPBGMA5yBiwsdalmBqXlFf59oVNOY3nfAdFUo aUJFvFF4B5WU/wyOCOkfj47rLV/N0a/NqmZ0Gq+rkKdFI1MvFDHHMPM83yjgUlcf Qx0UGKHfpyAYfCp0lnP8zfLJiqLOFsn3E6e7H9O6wDv2OuUUyfJvNdIn6PxTv4Mp JoAprAU= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org