$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa File: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (raw, json) Hash identifier: v8aWP509ac7x8DIQSPn3xKAEjUs+f81QtDGkCBfWoBI= Subject key identifier: 9E:75:B7:39:B9:44:1A:48:38:4E:55:69:A3:99:64:43:4D:C8:C0:AA Certificate issuer: /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Certificate serial: 071A Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa Signing time: Tue 06 Feb 2024 22:20:08 +0000 ROA not before: Tue 06 Feb 2024 22:20:08 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 132512 IP address blocks: 103.244.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1818 (0x71a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Validity Not Before: Feb 6 22:20:08 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65c2b098-e26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:f5:cf:9e:5c:a9:cc:c1:34:db:b2:b3:f6: fc:5e:32:25:ee:6d:10:ff:ad:e2:72:1d:40:8f:3e: f9:92:ec:9e:b3:af:52:48:cc:94:43:55:49:d2:68: 82:1f:d4:e4:8e:da:72:18:f5:99:ad:6f:6e:b4:c5: b2:1c:22:9e:2b:17:b4:d5:57:d9:62:6a:51:53:8e: 45:c4:92:21:48:91:01:c1:e4:a4:7d:7e:b0:e7:92: b9:79:01:f7:61:f0:6a:32:97:82:bd:9d:89:ac:a8: c2:a1:d7:4e:32:ab:9a:c6:69:59:e8:90:ae:20:8a: 95:dd:f2:67:6b:20:01:b3:62:f5:b5:c6:6e:7c:94: 35:26:20:5c:37:4a:4e:bd:2d:a9:ac:a9:6f:c8:60: c0:f6:64:86:85:36:ff:b3:ed:c4:e7:dd:40:92:a2: ef:2f:48:5e:28:25:81:e3:ef:cf:5e:a2:93:35:53: 36:fa:34:51:db:97:ee:33:50:29:3c:43:c8:e3:32: 03:30:9e:a4:b6:ee:63:91:dd:a7:1e:54:27:34:24: b6:19:71:e4:29:a6:a1:c8:6c:8e:01:a6:a3:07:42: a6:03:73:60:d7:f7:de:83:d4:69:90:32:2b:3e:ae: 39:3f:e7:fb:6a:26:c5:fd:bb:8d:5b:32:c7:cb:f3: 8f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:75:B7:39:B9:44:1A:48:38:4E:55:69:A3:99:64:43:4D:C8:C0:AA X509v3 Authority Key Identifier: keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.244.191.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:b6:8b:7d:22:a6:4e:2c:c0:49:d5:2c:6c:c6:1f:52:90:d1: c9:c9:83:06:df:6d:ab:ab:c1:5f:07:8b:e4:0a:83:44:f9:e8: 13:29:b4:ef:f2:6d:11:8b:20:d4:66:73:91:09:ec:4e:89:7e: 21:cf:48:c1:c7:19:a7:72:d4:ec:c1:de:1a:a9:02:51:b5:58: d5:a7:9b:00:1f:dc:75:8b:5d:79:d9:71:94:33:13:77:a1:54: bb:3d:42:8e:6f:26:30:ec:42:38:04:d1:bf:4c:99:17:f7:a6: b9:d2:cc:30:ac:3b:94:cb:0a:44:e9:0b:81:02:a3:87:ac:e8: ac:7d:ec:6f:f9:d1:cc:74:2b:a8:42:76:44:ae:6c:c9:3e:42: e4:a4:f0:cb:7d:4e:5c:7b:cb:0b:ff:83:0f:54:86:4d:11:e8: 05:51:35:0f:03:e7:60:72:e7:bb:82:a8:7b:3e:b0:c5:da:d8: f2:53:eb:12:93:de:d3:d3:2e:17:b3:a5:2d:5c:d0:56:52:a3: 22:31:43:ef:ca:db:86:3e:42:3b:98:07:9a:20:6d:40:6e:67: 7d:b6:91:b4:b0:1f:33:4e:e2:75:6d:e9:c9:96:e7:ae:5d:18: 6c:00:0b:34:5b:13:e3:13:9a:18:79:ef:45:b1:c8:6b:07:35: aa:9d:05:97 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw OTlENTQ3Q0MwHhcNMjQwMjA2MjIyMDA4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWMyYjA5OC1lMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+D1z55cqczBNNuys/b8XjIl7m0Q/63ich1Ajz75kuyes69SSMyUQ1VJ0miC H9TkjtpyGPWZrW9utMWyHCKeKxe01VfZYmpRU45FxJIhSJEBweSkfX6w55K5eQH3 YfBqMpeCvZ2JrKjCoddOMquaxmlZ6JCuIIqV3fJnayABs2L1tcZufJQ1JiBcN0pO vS2prKlvyGDA9mSGhTb/s+3E591AkqLvL0heKCWB4+/PXqKTNVM2+jRR25fuM1Ap PEPI4zIDMJ6ktu5jkd2nHlQnNCS2GXHkKaahyGyOAaajB0KmA3Ng1/feg9RpkDIr Pq45P+f7aibF/buNWzLHy/OPeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ51tzm5 RBpIOE5VaaOZZENNyMCqMB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODlFN0MvRkMxRUI3MENEQkE5MTFFQThBMDE3MDdEQzRGOUFFMDIvMkVDMEM5NkFE QkFCMTFFQUJGQzFBQzdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn9L8wDQYJKoZIhvcNAQELBQADggEBAF62i30ipk4swEnV LGzGH1KQ0cnJgwbfbaurwV8Hi+QKg0T56BMptO/ybRGLINRmc5EJ7E6JfiHPSMHH Gady1OzB3hqpAlG1WNWnmwAf3HWLXXnZcZQzE3ehVLs9Qo5vJjDsQjgE0b9MmRf3 prnSzDCsO5TLCkTpC4ECo4es6Kx97G/50cx0K6hCdkSubMk+QuSk8Mt9Tlx7ywv/ gw9Uhk0R6AVRNQ8D52By57uCqHs+sMXa2PJT6xKT3tPTLhezpS1c0FZSoyIxQ+/K 24Y+QjuYB5ogbUBuZ322kbSwHzNO4nVt6cmW565dGGwACzRbE+MTmhh570WxyGsH NaqdBZc= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org