$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/2B219CDC1FE811EF96F54D5AC4F9AE02.roa File: 2B219CDC1FE811EF96F54D5AC4F9AE02.roa (raw, json) Hash identifier: KIN1tbUq4dppWJoCfbdzOmrfveInGP54V3tT2sZ6M0A= Subject key identifier: B4:79:E7:61:AF:B5:90:FA:F4:ED:50:06:FF:D1:62:FD:E3:30:AA:EA Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E Certificate serial: 0750 Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/2B219CDC1FE811EF96F54D5AC4F9AE02.roa Signing time: Thu 24 Oct 2024 21:40:39 +0000 ROA not before: Thu 24 Oct 2024 21:40:39 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 141217 IP address blocks: 103.156.176.0/23 maxlen: 23 103.156.177.0/24 maxlen: 24 2001:df4:f180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1872 (0x750) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E Validity Not Before: Oct 24 21:40:39 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671abed7-560a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dc:38:d3:2d:26:15:73:d5:07:83:dd:b1:8c: 9c:36:8b:8c:d0:12:84:60:b1:20:c0:3a:22:bc:eb: 01:b5:af:e5:45:e9:fa:77:de:64:08:d9:6a:99:fe: ae:46:c2:4e:0c:5a:86:17:1b:9c:28:09:d1:eb:11: 42:ae:99:ac:22:36:4b:cf:94:93:92:b6:c3:0a:15: 40:af:61:2a:aa:1f:b4:6a:7b:02:da:2e:33:fc:8f: 4f:d1:15:b2:0c:13:f3:4e:d5:27:01:65:be:0e:da: a1:4a:5d:7a:10:49:42:5d:5d:59:0d:3e:e3:05:e2: 8f:3f:7d:aa:a6:50:cb:35:f7:25:46:79:36:b4:52: 53:53:e0:34:24:ed:51:76:30:f8:27:3a:93:6d:a4: 46:be:71:8d:21:fa:f8:b2:08:e5:cb:d2:b7:63:ca: 72:5f:35:fb:3f:a7:30:32:6c:59:0b:6d:5d:40:58: 23:b3:04:9b:80:48:84:48:93:12:b8:91:63:72:fc: 50:80:fe:bc:a9:f9:b1:fc:41:94:b6:cc:66:ed:dd: 28:1b:95:37:95:f2:bf:41:c8:c4:f9:f6:65:5b:8c: ff:8d:9f:10:a5:ff:1a:53:38:6e:9d:61:0b:3d:3f: ac:89:51:94:94:4b:e6:d2:57:8e:1a:1e:94:ad:bc: b6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:79:E7:61:AF:B5:90:FA:F4:ED:50:06:FF:D1:62:FD:E3:30:AA:EA X509v3 Authority Key Identifier: keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/2B219CDC1FE811EF96F54D5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.176.0/23 IPv6: 2001:df4:f180::/48 Signature Algorithm: sha256WithRSAEncryption 1f:1d:88:c6:0d:fc:a7:ef:ab:d5:4a:85:ca:cf:6d:2d:8d:af: c3:46:26:92:e2:81:f2:15:90:b2:1b:4a:a6:0c:02:af:b9:88: fc:fe:2f:75:43:66:28:e8:79:e7:96:f7:08:5d:0d:9a:9e:e4: 9c:3c:fe:b6:33:7c:12:f4:e0:fc:03:af:b6:25:e2:fe:7e:64: 19:64:ab:23:52:1a:0b:c1:fe:b0:a9:df:22:89:dc:54:cf:e2: 27:9c:ab:bb:bc:df:d5:0c:d5:89:76:35:95:1c:c3:5a:7c:82: 45:0a:33:1f:43:66:59:62:ab:a0:0e:01:5d:ce:5a:c3:87:48: 65:7d:bc:38:5f:87:a3:7b:fe:0f:d1:c0:7d:ea:dc:96:5e:d2: e7:e9:fa:4a:d7:3c:04:7d:42:af:92:20:e2:67:88:55:51:9c: cd:b0:4e:96:31:f1:2b:20:86:fd:8a:4b:6b:84:76:3c:2b:dd: 41:5f:f4:8d:e0:55:a2:bc:db:d8:db:af:83:1a:aa:fb:59:b3: f6:ba:a0:31:e0:62:13:e3:d9:53:d2:d4:6e:0c:c1:51:cf:93: f1:fb:54:25:a2:36:46:ce:08:da:9e:0b:61:2d:ee:92:db:62: d5:ad:e2:a8:e9:23:71:ae:a6:6a:8c:e4:23:60:e0:9f:61:4b: 27:4c:39:af -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5QzgxMTAvBgNVBAUTKEZFRUE2MTQzOUEzMDk4Qjg1Q0NCMTgzQjVBNDFBQTEy QUY0NUNBMUUwHhcNMjQxMDI0MjE0MDM5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhYmVkNy01NjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49w40y0mFXPVB4PdsYycNouM0BKEYLEgwDoivOsBta/lRen6d95kCNlqmf6u RsJODFqGFxucKAnR6xFCrpmsIjZLz5STkrbDChVAr2Eqqh+0ansC2i4z/I9P0RWy DBPzTtUnAWW+DtqhSl16EElCXV1ZDT7jBeKPP32qplDLNfclRnk2tFJTU+A0JO1R djD4JzqTbaRGvnGNIfr4sgjly9K3Y8pyXzX7P6cwMmxZC21dQFgjswSbgEiESJMS uJFjcvxQgP68qfmx/EGUtsxm7d0oG5U3lfK/QcjE+fZlW4z/jZ8Qpf8aUzhunWEL PT+siVGUlEvm0leOGh6Urby2SwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLR552Gv tZD69O1QBv/RYv3jMKrqMB8GA1UdIwQYMBaAFP7qYUOaMJi4XMsYO1pBqhKvRcoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTlDOC9GNUE1RUVBQTAx NDExMUVCQTMzRjhFMTFDNEY5QUUwMi9fdXBoUTVvd21MaGN5eGc3V2tHcUVxOUZ5 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191cGhRNW93bUxoY3l4ZzdXa0dxRXE5RnloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTE5QzgvRjVBNUVFQUEwMTQxMTFFQkEzM0Y4RTExQzRGOUFFMDIvMkIyMTlDREMx RkU4MTFFRjk2RjU0RDVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnLAwDwQCAAIwCQMHACABDfTxgDANBgkqhkiG9w0BAQsF AAOCAQEAHx2Ixg38p++r1UqFys9tLY2vw0YmkuKB8hWQshtKpgwCr7mI/P4vdUNm KOh555b3CF0Nmp7knDz+tjN8EvTg/AOvtiXi/n5kGWSrI1IaC8H+sKnfIoncVM/i J5yru7zf1QzViXY1lRzDWnyCRQozH0NmWWKroA4BXc5aw4dIZX28OF+Ho3v+D9HA fercll7S5+n6Stc8BH1Cr5Ig4meIVVGczbBOljHxKyCG/YpLa4R2PCvdQV/0jeBV orzb2Nuvgxqq+1mz9rqgMeBiE+PZU9LUbgzBUc+T8ftUJaI2Rs4I2p4LYS3uktti 1a3iqOkjca6maozkI2Dgn2FLJ0w5rw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:36 2024 by rpki-client on console-ams.rpki-client.org