$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa File: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (raw, json) Hash identifier: DJGSwkZ0gnAwFVuSpr1DGFnHa6D3l7xSjCohDEJeEIY= Subject key identifier: E0:96:69:DF:DB:92:48:C2:64:44:5E:32:B5:F2:78:60:84:5E:A3:D0 Certificate issuer: /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Certificate serial: 07D2 Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa Signing time: Tue 28 Jan 2025 20:39:44 +0000 ROA not before: Tue 28 Jan 2025 20:39:44 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 132512 IP address blocks: 103.244.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189E7C, serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Validity Not Before: Jan 28 20:39:44 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6799408f-3167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:c2:a6:bb:29:4f:d9:ce:7f:b8:fd:47:93: 3e:04:82:54:07:34:e0:2f:35:76:4d:f0:da:68:1f: 69:4b:ba:62:a2:1a:c0:90:ae:bf:a7:c8:1e:35:48: e9:59:c5:36:90:ba:93:08:e0:d6:98:e5:c6:18:35: df:6e:b5:ee:34:2d:7d:19:3c:67:12:57:cb:8f:5b: 52:4c:9b:f4:5e:4c:9f:0f:2b:2a:ef:21:ea:57:e5: a9:ef:d3:cd:61:8f:2e:14:9e:86:32:cb:0e:47:f3: a5:17:fa:a2:17:7f:1c:85:9d:a7:de:4e:b3:05:73: 6f:fe:be:60:2f:4e:36:58:ed:31:05:7b:0c:b1:a9: 76:33:13:c7:3c:cc:c6:97:ac:67:7b:2e:2a:9b:fd: 08:57:17:24:49:33:09:a2:93:30:1c:0e:10:fc:49: 19:10:ea:72:c3:4e:c1:1f:d5:4d:da:19:a9:10:c2: db:5a:30:82:50:14:02:29:65:bc:99:f5:e9:9b:29: 41:2c:39:e6:1e:c7:24:3c:e4:82:cb:b8:d8:aa:25: 87:e1:81:46:a3:45:86:36:b1:56:30:0f:16:cc:da: 52:4e:b5:ec:80:a4:64:8c:7d:ea:a5:1b:e8:73:96: 7b:6d:cf:6d:ec:08:ed:00:31:85:46:2d:32:93:13: 92:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:96:69:DF:DB:92:48:C2:64:44:5E:32:B5:F2:78:60:84:5E:A3:D0 X509v3 Authority Key Identifier: keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.244.191.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:a0:95:c7:c2:a1:54:84:d9:8e:f2:89:92:f7:96:ce:be:19: 05:d3:1c:48:c3:09:09:9c:4c:cb:74:96:3f:ec:41:d5:79:34: 03:b4:93:bb:ca:a2:ff:02:13:c5:b8:f0:31:89:aa:78:a8:e1: 38:35:58:54:97:bd:28:3d:76:47:58:8f:e6:ec:2a:65:cb:e9: f4:0d:b0:73:85:55:e2:42:53:79:a7:dc:c7:18:5e:f5:a8:45: bd:8d:85:88:cc:9f:6d:dd:34:56:f5:40:01:f5:9e:5d:7c:cf: de:11:4a:91:d1:52:94:09:3a:94:b8:f8:e5:76:8a:1d:f6:cd: 64:11:fb:15:58:07:18:dc:ea:d1:7d:cf:cd:12:9f:96:8c:d3: f3:f8:03:6b:32:52:ee:d5:d9:ab:aa:ea:45:cb:e1:5e:ec:ed: d9:22:ea:cc:bf:5f:69:5f:1d:ee:83:84:ff:75:f1:b7:56:c9: 83:26:08:41:ce:2d:e1:87:db:72:7d:a6:cd:8f:98:53:a4:57: 5e:09:e3:e1:b1:39:7c:c5:b1:9e:2e:f0:47:65:99:d7:23:a7: d1:fd:69:5b:4b:f5:3a:9b:25:8e:fb:b8:c8:09:14:6b:3f:f8: cf:0c:af:25:94:93:18:1a:25:c2:75:4c:d9:8a:68:14:8e:fa: aa:9a:9a:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw OTlENTQ3Q0MwHhcNMjUwMTI4MjAzOTQ0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5NDA4Zi0zMTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFnCprspT9nOf7j9R5M+BIJUBzTgLzV2TfDaaB9pS7piohrAkK6/p8geNUjp WcU2kLqTCODWmOXGGDXfbrXuNC19GTxnElfLj1tSTJv0XkyfDysq7yHqV+Wp79PN YY8uFJ6GMssOR/OlF/qiF38chZ2n3k6zBXNv/r5gL042WO0xBXsMsal2MxPHPMzG l6xney4qm/0IVxckSTMJopMwHA4Q/EkZEOpyw07BH9VN2hmpEMLbWjCCUBQCKWW8 mfXpmylBLDnmHsckPOSCy7jYqiWH4YFGo0WGNrFWMA8WzNpSTrXsgKRkjH3qpRvo c5Z7bc9t7AjtADGFRi0ykxOSKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOCWad/b kkjCZEReMrXyeGCEXqPQMB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODlFN0MvRkMxRUI3MENEQkE5MTFFQThBMDE3MDdEQzRGOUFFMDIvMkVDMEM5NkFE QkFCMTFFQUJGQzFBQzdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn9L8wDQYJKoZIhvcNAQELBQADggEBAF+glcfCoVSE2Y7y iZL3ls6+GQXTHEjDCQmcTMt0lj/sQdV5NAO0k7vKov8CE8W48DGJqnio4Tg1WFSX vSg9dkdYj+bsKmXL6fQNsHOFVeJCU3mn3McYXvWoRb2NhYjMn23dNFb1QAH1nl18 z94RSpHRUpQJOpS4+OV2ih32zWQR+xVYBxjc6tF9z80Sn5aM0/P4A2syUu7V2auq 6kXL4V7s7dki6sy/X2lfHe6DhP918bdWyYMmCEHOLeGH23J9ps2PmFOkV14J4+Gx OXzFsZ4u8Edlmdcjp9H9aVtL9TqbJY77uMgJFGs/+M8MryWUkxgaJcJ1TNmKaBSO +qqamms= -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:51 2025 by rpki-client