$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/E10C2796B42D11EEBCE04D61C4F9AE02.roa File: E10C2796B42D11EEBCE04D61C4F9AE02.roa (raw, json) Hash identifier: hB4Cn6tue3TITcEXLx2sCFa+W/8M2+iMSwYC8PB4Q+E= Subject key identifier: 2E:C4:4E:1E:6D:C4:98:DD:ED:43:8A:B8:30:85:49:59:3F:F1:E7:BF Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Certificate serial: 02 Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/E10C2796B42D11EEBCE04D61C4F9AE02.roa Signing time: Tue 16 Jan 2024 05:12:44 +0000 ROA not before: Tue 16 Jan 2024 05:12:44 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 142577 IP address blocks: 103.169.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Validity Not Before: Jan 16 05:12:44 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65a6104b-51db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:63:5f:87:f7:ab:fc:28:d9:b5:09:ff:95: 24:83:8b:c2:4d:e3:f1:2e:47:39:cd:f5:5d:50:c9: e7:0a:03:03:c3:b9:b2:c7:bf:ee:0f:3f:42:2f:ea: 26:d1:8c:42:61:45:82:ad:2d:c6:7a:40:ab:cd:28: bb:d8:2d:1b:97:91:5d:30:fa:a0:c3:59:c1:56:f0: 80:83:8a:31:7c:85:c2:cb:56:f1:96:68:a3:23:cb: e2:93:df:75:f6:f2:d6:d0:5d:68:65:b4:87:0e:9f: 72:35:d3:9c:80:14:dd:ce:8e:61:81:36:38:a0:16: 56:82:90:9d:bf:90:21:80:0b:fd:9d:b5:31:dc:92: e9:47:f8:56:51:3f:9a:05:1a:e8:6b:11:ca:b6:3e: b9:b9:c3:17:37:fa:5b:b7:eb:23:37:e9:8c:28:ec: f4:a3:7a:e2:b9:25:8b:02:4d:f6:b8:97:92:38:17: ae:31:c9:cd:e1:50:6b:14:13:2b:3c:e5:73:49:76: 44:9e:7e:d0:dc:d8:1a:79:2d:11:82:b4:16:16:6f: 50:0b:f5:d8:82:82:78:74:30:b2:a5:03:ed:97:fd: e2:f2:7f:50:56:ab:be:f0:da:14:80:6b:3b:88:0b: 9b:98:64:0c:69:a5:e9:2b:1f:e6:83:74:6b:69:3b: ca:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C4:4E:1E:6D:C4:98:DD:ED:43:8A:B8:30:85:49:59:3F:F1:E7:BF X509v3 Authority Key Identifier: keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/E10C2796B42D11EEBCE04D61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.169.209.0/24 Signature Algorithm: sha256WithRSAEncryption 96:be:b1:c5:8d:00:7e:6c:5e:21:76:34:de:30:ea:90:44:3a: 7c:61:9e:a3:7b:58:de:43:b1:ad:a1:a2:d9:e6:10:1f:d1:d6: be:17:76:67:f6:0d:6b:2d:a6:bc:13:fd:a7:41:b8:2e:82:c9: 7c:7c:be:32:0a:72:99:dc:a9:0c:5f:9f:35:b8:c5:ad:cb:9b: e3:1c:c1:42:c8:27:80:05:a3:20:da:41:dc:5f:a5:9a:89:f6: 73:9c:ba:d0:01:75:2a:d9:94:80:f1:33:37:96:a7:b9:fa:6d: 47:15:2d:11:9e:22:c6:35:87:58:8b:81:d0:2a:56:52:d1:25: 0a:cb:4d:53:5f:56:53:08:74:95:d6:49:9c:3b:5a:d1:6b:ec: 41:7b:92:2f:a6:7f:65:e6:73:8c:a6:e2:a0:c4:a5:6e:e9:62: af:62:8d:b5:6c:d7:6f:30:a1:05:18:31:31:8f:eb:04:57:e6: ab:d0:2d:d2:ec:3f:cb:48:c3:98:51:59:bf:2e:e9:2b:a3:95: 45:18:22:37:b4:5b:ca:dc:5a:c5:00:e0:9b:84:8d:92:35:80: 75:2c:ec:75:4e:af:4b:3e:58:de:cc:ee:9f:04:21:3b:de:1f: e4:13:73:6f:4f:bc:3d:f5:a0:0e:df:9a:3c:6c:21:ba:fc:8d: 9a:85:e3:da -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTAwRjExMC8GA1UEBRMoMTJDNDg5NzJGMjZEMDY3QTlGMjFCNEM0RkEwQzg2NjMz RTAyQzAxOTAeFw0yNDAxMTYwNTEyNDRaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YTYxMDRiLTUxZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7R2Nfh/er/CjZtQn/lSSDi8JN4/EuRznN9V1QyecKAwPDubLHv+4PP0Iv6ibR jEJhRYKtLcZ6QKvNKLvYLRuXkV0w+qDDWcFW8ICDijF8hcLLVvGWaKMjy+KT33X2 8tbQXWhltIcOn3I105yAFN3OjmGBNjigFlaCkJ2/kCGAC/2dtTHckulH+FZRP5oF GuhrEcq2Prm5wxc3+lu36yM36Ywo7PSjeuK5JYsCTfa4l5I4F64xyc3hUGsUEys8 5XNJdkSeftDc2Bp5LRGCtBYWb1AL9diCgnh0MLKlA+2X/eLyf1BWq77w2hSAazuI C5uYZAxppekrH+aDdGtpO8rjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQULsROHm3E mN3tQ4q4MIVJWT/x578wHwYDVR0jBBgwFoAUEsSJcvJtBnqfIbTE+gyGYz4CwBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMDBGL0VERTQ4QjlDRUUy OTExRUI4MDg0QjYzOEM0RjlBRTAyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXNTSmN2SnRCbnFmSWJURS1neUdZejRDd0JrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9FMTBDMjc5NkI0 MkQxMUVFQkNFMDRENjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGep0TANBgkqhkiG9w0BAQsFAAOCAQEAlr6xxY0AfmxeIXY0 3jDqkEQ6fGGeo3tY3kOxraGi2eYQH9HWvhd2Z/YNay2mvBP9p0G4LoLJfHy+Mgpy mdypDF+fNbjFrcub4xzBQsgngAWjINpB3F+lmon2c5y60AF1KtmUgPEzN5anufpt RxUtEZ4ixjWHWIuB0CpWUtElCstNU19WUwh0ldZJnDta0WvsQXuSL6Z/ZeZzjKbi oMSlbulir2KNtWzXbzChBRgxMY/rBFfmq9At0uw/y0jDmFFZvy7pK6OVRRgiN7Rb ytxaxQDgm4SNkjWAdSzsdU6vSz5Y3szunwQhO94f5BNzb0+8PfWgDt+aPGwhuvyN moXj2g== -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org