$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/2DCC2988982711ED9D75C85AC4F9AE02.roa File: 2DCC2988982711ED9D75C85AC4F9AE02.roa (raw, json) Hash identifier: T7wBB0Q/OxACrFHdpRUHNW4aCrfVBO0wryHpyaFwA8M= Subject key identifier: 7A:4D:3D:40:73:9B:74:3E:08:6E:A4:6F:26:7E:18:CA:0F:6B:0C:41 Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Certificate serial: 0717 Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/2DCC2988982711ED9D75C85AC4F9AE02.roa Signing time: Tue 02 Apr 2024 23:01:38 +0000 ROA not before: Tue 02 Apr 2024 23:01:38 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9829 IP address blocks: 103.149.58.0/24 maxlen: 24 103.149.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9 Validity Not Before: Apr 2 23:01:38 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=660c8e52-8718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:d4:c5:6d:9b:46:81:ba:d6:c5:f7:01:0b: 1b:cf:ad:c0:2b:fa:45:6e:76:70:28:4f:bd:86:89: 54:da:4b:75:ce:8c:c6:ac:da:11:63:56:9e:56:b1: 77:60:99:aa:89:e1:d7:d3:51:78:f9:4d:7a:e2:34: f1:16:70:eb:0e:0e:1b:58:4c:4b:26:33:c4:e9:65: b6:d2:70:df:bf:b4:37:20:f2:8d:fc:c0:9f:d7:7e: b7:c0:10:e4:2c:66:93:bc:fd:9c:60:c0:f7:a5:7a: 7a:66:15:3e:a0:0a:cc:07:6a:05:0a:ad:20:0b:00: 71:2b:b5:a6:81:d6:ce:65:d3:8e:d0:78:ce:da:95: b8:89:27:3f:67:ce:54:b3:88:d8:ec:dc:a7:b1:00: 72:da:19:40:f2:bd:5b:9a:06:86:81:08:d6:ad:c3: 68:97:43:c9:ee:2c:13:1d:4b:b3:49:fc:40:51:dc: 04:7f:42:6d:93:e5:2b:10:ed:fa:cb:df:50:45:76: a6:61:7e:49:3c:1e:65:e8:e6:1e:be:4e:8f:94:ba: b3:01:c2:4f:42:d4:b7:fa:a5:30:3f:90:76:cc:4d: ad:79:d4:ec:78:0c:87:1a:df:92:a5:54:85:79:10: c6:82:d8:c3:7e:35:50:ad:1d:88:7f:65:af:2f:db: 76:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4D:3D:40:73:9B:74:3E:08:6E:A4:6F:26:7E:18:CA:0F:6B:0C:41 X509v3 Authority Key Identifier: keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/2DCC2988982711ED9D75C85AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.58.0/23 Signature Algorithm: sha256WithRSAEncryption 49:10:91:5b:fd:e8:a0:ac:93:8e:d0:d9:ad:c5:52:83:a6:0c: 31:e0:d4:06:2e:c4:cc:26:ef:d1:29:7c:9c:d7:ae:c3:35:1a: 44:ca:98:12:a4:f3:f3:6b:5b:b7:bd:87:1c:b9:fa:44:a6:68: ce:a8:b8:93:7c:9a:2d:03:b0:56:22:26:e8:f8:0f:f5:a4:f0: 7f:94:5f:2a:d9:d1:41:63:e1:e0:8f:fb:6f:f9:0e:21:56:c5: d4:c6:b9:0f:08:0a:94:78:1f:1b:f6:20:ec:8b:e0:40:32:d7: 19:6f:f5:08:ec:bb:bc:ee:4c:05:94:08:bb:e2:b2:10:ef:90: 47:b1:10:67:7d:36:ac:fe:37:6f:73:2d:39:96:ba:33:5b:a8: 8d:9b:66:cd:68:19:e8:a8:43:e6:b7:7a:8d:64:59:92:2f:3e: 43:42:3b:b4:59:89:3a:cd:12:89:6d:7b:b0:09:05:87:a2:08: bb:5d:40:7f:7b:39:83:18:8f:14:9d:59:0d:46:8b:60:48:3b: 18:9d:02:ef:1b:84:1e:f7:5a:dd:0c:ca:13:d6:c3:d9:d9:c4: 98:86:83:0e:a1:3b:60:f4:78:3b:01:54:aa:08:98:8c:20:10: 79:7c:9f:55:73:e5:44:78:2e:73:e7:39:f7:f2:68:b6:fb:09: 49:7d:2d:83 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU4M0IxMTAvBgNVBAUTKEI4QTYyQ0YxREU4QjI2MkUxNDczN0Q5M0VFM0U2RjM2 QzNBMEUxQzkwHhcNMjQwNDAyMjMwMTM4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjOGU1Mi04NzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOnUxW2bRoG61sX3AQsbz63AK/pFbnZwKE+9holU2kt1zozGrNoRY1aeVrF3 YJmqieHX01F4+U164jTxFnDrDg4bWExLJjPE6WW20nDfv7Q3IPKN/MCf1363wBDk LGaTvP2cYMD3pXp6ZhU+oArMB2oFCq0gCwBxK7WmgdbOZdOO0HjO2pW4iSc/Z85U s4jY7NynsQBy2hlA8r1bmgaGgQjWrcNol0PJ7iwTHUuzSfxAUdwEf0Jtk+UrEO36 y99QRXamYX5JPB5l6OYevk6PlLqzAcJPQtS3+qUwP5B2zE2tedTseAyHGt+SpVSF eRDGgtjDfjVQrR2If2WvL9t2iwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHpNPUBz m3Q+CG6kbyZ+GMoPawxBMB8GA1UdIwQYMBaAFLimLPHeiyYuFHN9k+4+bzbDoOHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzQi83OTJEMTQ4QUYy ODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEppNFVjMzJUN2o1dk5zT2c0 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLWXM4ZDZMSmk0VWMzMlQ3ajV2TnNPZzRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUU4M0IvNzkyRDE0OEFGMjgxMTFFQThBNkZDNjZEQzRGOUFFMDIvMkRDQzI5ODg5 ODI3MTFFRDlENzVDODVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlTowDQYJKoZIhvcNAQELBQADggEBAEkQkVv96KCsk47Q 2a3FUoOmDDHg1AYuxMwm79EpfJzXrsM1GkTKmBKk8/NrW7e9hxy5+kSmaM6ouJN8 mi0DsFYiJuj4D/Wk8H+UXyrZ0UFj4eCP+2/5DiFWxdTGuQ8ICpR4Hxv2IOyL4EAy 1xlv9Qjsu7zuTAWUCLvishDvkEexEGd9Nqz+N29zLTmWujNbqI2bZs1oGeioQ+a3 eo1kWZIvPkNCO7RZiTrNEolte7AJBYeiCLtdQH97OYMYjxSdWQ1Gi2BIOxidAu8b hB73Wt0MyhPWw9nZxJiGgw6hO2D0eDsBVKoImIwgEHl8n1Vz5UR4LnPnOffyaLb7 CUl9LYM= -----END CERTIFICATE-----Generated at Thu May 16 23:48:42 2024 by rpki-client on console-fra.rpki-client.org