$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/AE2B714A72E911EEA3EFD34AC4F9AE02.roa File: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (raw, json) Hash identifier: qqj7UCGnWQlkIFv4nnOfekkdwebohncfHRfjEEZBUBI= Subject key identifier: 34:FD:61:25:AA:5E:41:49:5C:33:7E:92:E8:33:D8:1E:50:DF:3B:6E Certificate issuer: /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Certificate serial: 05EC Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/AE2B714A72E911EEA3EFD34AC4F9AE02.roa Signing time: Fri 07 Jun 2024 00:45:26 +0000 ROA not before: Fri 07 Jun 2024 00:45:26 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 17635 IP address blocks: 203.14.105.0/24 maxlen: 24 203.57.128.0/20 maxlen: 24 2406:9680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Validity Not Before: Jun 7 00:45:26 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66625826-cb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b4:6a:e7:92:8d:8a:d8:43:b1:c3:44:ef:45: 02:c9:98:4c:34:df:7b:bc:06:0e:62:af:3c:d2:1b: d7:3b:b4:3b:da:52:c0:a8:96:ec:f8:bb:d4:16:60: 11:21:3a:0c:1c:a4:5b:6b:98:a9:1e:b3:68:01:74: fa:44:dd:cb:82:fa:f5:e1:d3:4e:7a:d0:cd:fb:30: 51:b2:30:1b:d5:16:0e:fc:45:d6:ba:a6:6c:9c:c0: 6d:e8:bf:f5:1c:24:3d:aa:d1:bf:89:04:75:f2:c7: 93:71:d7:64:b5:0e:62:b8:3d:e9:9e:99:73:fc:ac: 66:b7:01:96:48:27:c8:3f:ed:99:c1:95:86:b1:cb: 99:86:4b:63:35:2f:ce:6e:30:64:07:8d:29:ff:7d: c6:24:f3:6e:56:3d:36:ea:89:62:97:63:84:f2:ff: f8:05:2b:17:4b:d8:dc:c5:1f:66:9a:e1:1c:74:fd: fa:e7:da:40:26:5b:3d:0f:48:12:87:96:e0:93:67: ee:a5:0c:23:43:f5:47:be:29:9e:a8:12:c7:59:a0: dc:5c:d9:3c:e2:12:4c:c7:b6:f6:97:a7:f6:d8:90: bb:e5:16:7c:08:bc:13:82:0c:49:3a:03:95:43:9a: 78:b1:12:26:41:b4:5e:d7:d1:dc:3b:fa:e6:6c:61: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FD:61:25:AA:5E:41:49:5C:33:7E:92:E8:33:D8:1E:50:DF:3B:6E X509v3 Authority Key Identifier: keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/AE2B714A72E911EEA3EFD34AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.14.105.0/24 203.57.128.0/20 IPv6: 2406:9680::/32 Signature Algorithm: sha256WithRSAEncryption ae:af:69:51:72:b2:e7:0b:32:3d:84:8a:c6:2a:ca:b0:6d:33: 55:c6:1b:ef:48:18:77:08:df:08:ad:45:a0:1b:ec:f2:df:8b: eb:ba:d8:11:f0:79:e0:98:90:2a:e0:18:2d:a0:7b:f9:7f:87: 11:3c:aa:6f:da:df:c7:46:54:55:6a:53:35:0f:7f:ae:48:31: 0b:d4:ea:cf:45:dd:46:42:53:bd:a2:12:83:dc:f7:b6:7d:61: dd:58:04:36:ec:81:8e:ad:d5:8d:89:d5:13:72:5b:50:74:fc: 42:d1:ab:f3:b6:c7:6e:4c:7a:0c:51:8c:56:a7:15:11:85:5a: 49:46:d3:58:ba:91:88:da:0c:bf:6f:34:44:97:16:f5:86:0f: 45:7a:2b:b7:bf:9a:a7:3d:1d:96:03:e6:53:3f:e3:bd:72:37: 14:10:80:9a:92:46:bf:eb:5c:d7:51:d2:78:9f:b4:db:b2:1e: 95:c0:b9:be:4f:cc:ff:c3:c3:56:b6:1a:99:cb:e9:ed:f3:64: 2f:22:80:5f:5c:f2:4e:5b:dc:6f:85:2b:68:ef:a1:a2:9e:31: b8:f8:e4:00:93:1d:a6:1f:96:a8:7e:3a:3e:d6:fa:69:3e:72: 71:a2:de:be:62:37:94:3e:1a:ec:50:f4:11:0d:1e:c8:8b:b0: d1:d5:34:49 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyMjcxMTAvBgNVBAUTKDI2NTlDRUQxNTI3RDJDQUJEOEIyQzUzMDc1RUNDRDk0 RUQ3MUZFOTgwHhcNMjQwNjA3MDA0NTI2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjYyNTgyNi1jYjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6LRq55KNithDscNE70UCyZhMNN97vAYOYq880hvXO7Q72lLAqJbs+LvUFmAR IToMHKRba5ipHrNoAXT6RN3Lgvr14dNOetDN+zBRsjAb1RYO/EXWuqZsnMBt6L/1 HCQ9qtG/iQR18seTcddktQ5iuD3pnplz/KxmtwGWSCfIP+2ZwZWGscuZhktjNS/O bjBkB40p/33GJPNuVj026olil2OE8v/4BSsXS9jcxR9mmuEcdP3659pAJls9D0gS h5bgk2fupQwjQ/VHvimeqBLHWaDcXNk84hJMx7b2l6f22JC75RZ8CLwTggxJOgOV Q5p4sRImQbRe19HcO/rmbGGsdwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFDT9YSWq XkFJXDN+kugz2B5Q3ztuMB8GA1UdIwQYMBaAFCZZztFSfSyr2LLFMHXszZTtcf6Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIyNy80RkNGNTY4RTdC MDcxMUVCOUFGODQzODRDNEY5QUUwMi9KbG5PMFZKOUxLdllzc1V3ZGV6TmxPMXhf cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0psbk8wVko5TEt2WXNzVXdkZXpObE8xeF9wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTcyMjcvNEZDRjU2OEU3QjA3MTFFQjlBRjg0Mzg0QzRGOUFFMDIvQUUyQjcxNEE3 MkU5MTFFRUEzRUZEMzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBADLDmkDBATLOYAwDQQCAAIwBwMFACQGloAwDQYJKoZIhvcN AQELBQADggEBAK6vaVFysucLMj2EisYqyrBtM1XGG+9IGHcI3witRaAb7PLfi+u6 2BHweeCYkCrgGC2ge/l/hxE8qm/a38dGVFVqUzUPf65IMQvU6s9F3UZCU72iEoPc 97Z9Yd1YBDbsgY6t1Y2J1RNyW1B0/ELRq/O2x25MegxRjFanFRGFWklG01i6kYja DL9vNESXFvWGD0V6K7e/mqc9HZYD5lM/471yNxQQgJqSRr/rXNdR0niftNuyHpXA ub5PzP/Dw1a2GpnL6e3zZC8igF9c8k5b3G+FK2jvoaKeMbj45ACTHaYflqh+Oj7W +mk+cnGi3r5iN5Q+GuxQ9BENHsiLsNHVNEk= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:31 2024 by rpki-client on console-fra.rpki-client.org