$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa File: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (raw, json) Hash identifier: Ppkzsr60oRdN5wiOLOk9zEX5+OsQNQur5z6iE1GywgI= Subject key identifier: E3:B2:CC:D1:B9:32:8E:86:C8:1D:EC:36:2C:F0:6E:09:72:A7:F6:55 Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Certificate serial: 092C Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa Signing time: Thu 28 Mar 2024 21:29:48 +0000 ROA not before: Thu 28 Mar 2024 21:29:48 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 18109 IP address blocks: 103.86.196.0/22 maxlen: 24 119.148.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2348 (0x92c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Validity Not Before: Mar 28 21:29:48 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6605e14b-1a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:f5:15:a5:ce:18:e8:3f:1a:96:4e:c9:76: 0a:27:b1:e9:eb:56:37:c7:d5:7d:0c:e6:6a:8c:f8: 48:48:29:f7:d1:6b:67:49:01:3e:96:c1:a4:f5:db: 0f:8d:80:84:70:6d:3b:4e:a0:d5:a2:6c:04:7e:f1: 08:85:20:9c:e2:37:e2:60:4c:5d:51:09:c2:11:ea: bb:46:73:86:b8:89:57:ad:25:48:d5:c0:6f:d3:32: 7e:f6:d4:9d:6a:99:43:3b:51:8a:97:f1:c5:ff:eb: 71:c9:fc:a2:f8:82:a8:92:13:24:0d:26:9f:ef:eb: cc:03:8e:06:0a:9b:c0:25:48:47:db:f4:2a:6e:85: 19:84:7d:31:6b:1f:bb:c6:a6:47:3c:33:a0:52:2b: 77:e9:56:2a:53:aa:9c:17:51:65:32:09:4a:50:5e: c5:1e:9d:fb:61:e7:38:0c:6e:68:80:fc:03:3b:98: 1b:c6:83:c7:4d:82:1d:ef:b2:d9:27:b8:e4:d3:69: 74:0b:84:07:2a:1d:7f:0f:aa:85:d9:6b:00:76:6b: 58:06:41:a7:74:47:0d:32:0b:b0:e2:99:c6:8d:70: be:53:55:62:e8:1b:e5:d2:66:77:f0:2d:57:6a:d2: de:0f:c1:08:fb:fd:0b:ae:1e:9e:d8:42:c8:7d:1e: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B2:CC:D1:B9:32:8E:86:C8:1D:EC:36:2C:F0:6E:09:72:A7:F6:55 X509v3 Authority Key Identifier: keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.196.0/22 119.148.100.0/22 Signature Algorithm: sha256WithRSAEncryption ab:8e:eb:ce:2c:72:c3:f2:50:78:7f:95:5b:00:19:4c:e4:fd: 10:60:79:fc:81:6c:de:f2:3a:a1:25:a5:cf:b9:f5:c0:9d:44: 5f:b1:48:f5:6f:55:66:3a:69:97:43:3a:93:c8:66:7d:95:fc: 09:be:70:dc:ac:4d:11:d2:72:c8:37:eb:e4:93:3b:f9:38:cb: 14:88:dc:e0:10:c3:ef:2c:1b:27:a0:86:eb:67:44:ff:8d:6d: 26:3a:7f:8d:27:db:bb:40:6f:d8:cb:0b:ae:f1:23:3b:44:db: 97:25:a0:54:9e:d5:3e:d8:a5:fa:85:ec:04:d6:13:da:97:76: 64:cd:e4:7f:5b:5a:24:e5:ba:e7:05:83:0f:51:cc:7c:8b:95: 36:4d:df:6f:d4:74:c6:76:01:6f:46:a5:cc:25:23:d6:10:c2: 37:e4:9f:29:95:a7:a6:e4:57:7a:28:1a:3a:fc:5f:25:5b:ae: 65:09:d8:ab:fd:96:30:42:81:28:df:38:83:2f:40:e0:51:f8: 8c:75:07:f7:a6:27:0c:83:0a:ec:51:ad:de:05:a3:88:3e:bb: c9:30:d9:f4:a8:0b:4c:26:2f:54:db:9b:39:35:f3:08:4e:e2: 0d:98:a4:47:88:dc:18:b6:d3:08:a3:0d:10:11:1f:e5:f1:3e: 01:ab:8f:8f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyNjcxMTAvBgNVBAUTKDM4RkIwNkFGNjQ5RjQwMEY1MTM5OTQ5MzVCRURGN0U0 OTI3MEM4QUEwHhcNMjQwMzI4MjEyOTQ4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjA1ZTE0Yi0xYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFD1FaXOGOg/GpZOyXYKJ7Hp61Y3x9V9DOZqjPhISCn30WtnSQE+lsGk9dsP jYCEcG07TqDVomwEfvEIhSCc4jfiYExdUQnCEeq7RnOGuIlXrSVI1cBv0zJ+9tSd aplDO1GKl/HF/+txyfyi+IKokhMkDSaf7+vMA44GCpvAJUhH2/QqboUZhH0xax+7 xqZHPDOgUit36VYqU6qcF1FlMglKUF7FHp37Yec4DG5ogPwDO5gbxoPHTYId77LZ J7jk02l0C4QHKh1/D6qF2WsAdmtYBkGndEcNMguw4pnGjXC+U1Vi6Bvl0mZ38C1X atLeD8EI+/0Lrh6e2ELIfR5E+QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOOyzNG5 Mo6GyB3sNizwbglyp/ZVMB8GA1UdIwQYMBaAFDj7Bq9kn0APUTmUk1vt9+SScMiq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODI2Ny8wMkM4NkVBQTc4 Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFBOVJPWlNUVy0zMzVKSnd5 S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Qc0dyMlNmUUE5Uk9aU1RXLTMzNUpKd3lLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTgyNjcvMDJDODZFQUE3OENCMTFFQTgyMEQ3Mjc0QzRGOUFFMDIvMkY0M0VFNzI3 OENDMTFFQUI2OURBQzc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnVsQDBAJ3lGQwDQYJKoZIhvcNAQELBQADggEBAKuO684s csPyUHh/lVsAGUzk/RBgefyBbN7yOqElpc+59cCdRF+xSPVvVWY6aZdDOpPIZn2V /Am+cNysTRHScsg36+STO/k4yxSI3OAQw+8sGyeghutnRP+NbSY6f40n27tAb9jL C67xIztE25cloFSe1T7YpfqF7ATWE9qXdmTN5H9bWiTluucFgw9RzHyLlTZN32/U dMZ2AW9GpcwlI9YQwjfknymVp6bkV3ooGjr8XyVbrmUJ2Kv9ljBCgSjfOIMvQOBR +Ix1B/emJwyDCuxRrd4Fo4g+u8kw2fSoC0wmL1Tbmzk18whO4g2YpEeI3Bi20wij DRARH+XxPgGrj48= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org