$ rpki-client -vvf rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/CE042A841E5611EFBEDD1F39C4F9AE02.roa File: CE042A841E5611EFBEDD1F39C4F9AE02.roa (raw, json) Hash identifier: JB0KjJ0CYggpPTh2yx0KHgkWZKP0lJUbgO7Q4giWozY= Subject key identifier: E2:18:48:BA:D4:30:B3:2E:F1:16:EB:62:7C:94:40:0B:A4:3E:DD:B9 Certificate issuer: /CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Certificate serial: 37 Authority key identifier: DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/CE042A841E5611EFBEDD1F39C4F9AE02.roa Signing time: Sat 31 Aug 2024 08:28:57 +0000 ROA not before: Sat 31 Aug 2024 08:28:57 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 17893 IP address blocks: 103.159.28.0/23 maxlen: 24 202.124.224.0/20 maxlen: 24 2404:7800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Validity Not Before: Aug 31 08:28:57 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d2d449-08aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:de:63:48:50:e4:56:a4:f5:ee:e8:bb:48: b1:31:e8:b9:8f:91:ca:88:26:79:c0:a7:ea:50:a8: b1:27:d5:c3:17:c5:da:71:16:4b:45:96:46:65:09: 2c:59:80:bb:0b:ae:ec:dd:97:50:c6:7a:46:fd:6c: 28:a2:56:bc:e6:ed:d4:4b:1a:8c:b0:7a:08:85:3d: d6:98:ab:d8:e8:c5:75:51:6b:2d:84:a6:0c:41:12: 8f:fd:15:6d:72:89:1a:d1:95:47:e4:de:ce:11:e0: c1:82:72:e1:f5:a8:94:c4:94:11:0f:da:32:3a:92: db:f8:b0:33:ef:40:27:14:40:98:7b:2a:20:e2:91: 05:d0:b4:9b:3a:c2:5c:41:38:42:7b:90:fa:84:2a: d6:c9:62:c4:cd:3d:f8:83:46:8a:ca:26:3d:56:1a: e7:5a:18:62:ec:1f:1a:ac:37:3e:9d:f3:9d:66:7f: 2c:56:6e:25:80:97:e2:50:50:da:b9:25:2c:63:7f: 52:22:fa:f7:26:87:12:6d:88:fe:82:49:a4:f0:b1: 53:d5:e1:b3:79:53:39:3a:aa:b0:c7:7d:aa:b7:2b: 07:da:f7:aa:81:81:54:be:be:1a:2f:8b:65:dc:d8: 40:06:c1:03:c0:f3:61:c9:d3:25:69:7a:a9:86:5b: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:18:48:BA:D4:30:B3:2E:F1:16:EB:62:7C:94:40:0B:A4:3E:DD:B9 X509v3 Authority Key Identifier: keyid:DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/CE042A841E5611EFBEDD1F39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.28.0/23 202.124.224.0/20 IPv6: 2404:7800::/32 Signature Algorithm: sha256WithRSAEncryption 9a:6c:ad:97:88:5a:43:19:b3:72:74:b4:62:aa:3a:ee:71:fb: 24:42:9f:6b:af:82:bb:c8:76:f3:00:9b:6d:a4:8e:3b:33:cc: 2e:da:f9:30:38:c1:d9:77:00:e3:99:df:fe:da:ad:a1:6e:93: 68:d9:e2:94:85:c5:a3:92:58:f5:73:db:5f:41:c4:ac:f6:14: 2f:21:7d:09:5d:21:39:93:00:d8:ab:30:a7:6e:70:7f:39:60: e2:9b:c7:94:24:b7:4e:bd:68:a3:0d:0c:88:dc:db:be:59:5b: 0c:d6:e9:ee:09:f4:9a:c1:6f:7c:56:99:a4:5d:54:7d:af:c6: 59:00:2a:a5:02:09:71:ef:0b:17:44:49:7e:fa:db:82:51:e5: 7e:4f:a0:64:65:02:4b:8a:fd:3e:c7:60:f2:07:81:8a:5b:8a: 2b:4a:a0:4a:e5:11:df:93:d1:66:04:a1:6a:2a:cc:74:63:93: 20:77:dc:1a:77:3d:08:1b:f2:e8:c9:bb:df:a0:d0:40:78:23: 5b:cd:fc:16:73:12:2c:dd:04:86:15:a4:76:bf:f8:0c:0e:93: ae:c3:6d:20:b9:af:8c:62:43:de:73:db:9e:28:e4:c9:9a:eb: b8:6e:5a:f8:28:b1:61:52:4a:4d:92:46:a7:d2:4d:1b:5f:59: 50:e6:4f:0a -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjY5ODExMC8GA1UEBRMoREIwNjMwNzhGN0I5Nzc1MkZCODFEMDBGQTlCRDdDNTIz QjFDOTcwMzAeFw0yNDA4MzEwODI4NTdaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZDJkNDQ5LTA4YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBi95jSFDkVqT17ui7SLEx6LmPkcqIJnnAp+pQqLEn1cMXxdpxFktFlkZlCSxZ gLsLruzdl1DGekb9bCiiVrzm7dRLGoywegiFPdaYq9joxXVRay2EpgxBEo/9FW1y iRrRlUfk3s4R4MGCcuH1qJTElBEP2jI6ktv4sDPvQCcUQJh7KiDikQXQtJs6wlxB OEJ7kPqEKtbJYsTNPfiDRorKJj1WGudaGGLsHxqsNz6d851mfyxWbiWAl+JQUNq5 JSxjf1Ii+vcmhxJtiP6CSaTwsVPV4bN5Uzk6qrDHfaq3Kwfa96qBgVS+vhovi2Xc 2EAGwQPA82HJ0yVpeqmGW1g3AgMBAAGjggKqMIICpjAdBgNVHQ4EFgQU4hhIutQw sy7xFutifJRAC6Q+3bkwHwYDVR0jBBgwFoAU2wYwePe5d1L7gdAPqb18UjsclwMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyNjk4L0QzQzBFQ0UyMUU1 NTExRUZBQzk1OUYxOUM0RjlBRTAyLzJ3WXdlUGU1ZDFMN2dkQVBxYjE4VWpzY2x3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMndZd2VQZTVkMUw3Z2RBUHFiMThVanNjbHdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjY5OC9EM0MwRUNFMjFFNTUxMUVGQUM5NTlGMTlDNEY5QUUwMi9DRTA0MkE4NDFF NTYxMUVGQkVERDFGMzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAWefHAMEBMp84DANBAIAAjAHAwUAJAR4ADANBgkqhkiG9w0B AQsFAAOCAQEAmmytl4haQxmzcnS0Yqo67nH7JEKfa6+Cu8h28wCbbaSOOzPMLtr5 MDjB2XcA45nf/tqtoW6TaNnilIXFo5JY9XPbX0HErPYULyF9CV0hOZMA2Kswp25w fzlg4pvHlCS3Tr1oow0MiNzbvllbDNbp7gn0msFvfFaZpF1Ufa/GWQAqpQIJce8L F0RJfvrbglHlfk+gZGUCS4r9Psdg8geBiluKK0qgSuUR35PRZgShairMdGOTIHfc Gnc9CBvy6Mm736DQQHgjW838FnMSLN0EhhWkdr/4DA6TrsNtILmvjGJD3nPbnijk yZrruG5a+CixYVJKTZJGp9JNG19ZUOZPCg== -----END CERTIFICATE-----Generated at Tue Sep 17 08:12:26 2024 by rpki-client on console-ams.rpki-client.org