$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/4625A21A68B511EA9EF7951AC4F9AE02.roa File: 4625A21A68B511EA9EF7951AC4F9AE02.roa (raw, json) Hash identifier: RwfQrmvNnRQyIUXieZHGYDJzOJ942Gv6AiVFyJelDe0= Subject key identifier: 5A:C6:39:3A:91:1C:6E:04:6A:02:A1:1B:94:59:97:EB:AB:56:CA:AA Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 33FF Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/4625A21A68B511EA9EF7951AC4F9AE02.roa Signing time: Fri 12 Jul 2024 15:20:50 +0000 ROA not before: Fri 12 Jul 2024 15:20:50 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 38229 IP address blocks: 103.77.64.0/22 maxlen: 22 2401:dd00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13311 (0x33ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Jul 12 15:20:50 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=669149d1-ddb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:b7:09:5c:6b:39:5c:3d:a0:c0:33:29:65: 5c:6f:8e:c6:53:aa:cf:7b:02:e9:0f:c0:a5:e0:73: 52:80:fe:a0:1a:3a:0d:de:6e:4b:22:97:f7:bd:74: 7c:ba:2c:63:85:8a:15:5f:fe:3c:07:09:3a:55:4f: ab:28:6c:a1:aa:2e:ab:f1:53:5c:84:e7:ea:e6:6b: 99:cf:fe:c9:12:4d:ee:88:75:b0:7c:ef:db:15:ce: 32:1a:f7:ff:9e:0d:ed:9a:d3:5a:c5:42:d8:7d:70: 96:fa:e8:07:aa:37:2a:ed:54:19:9e:ef:98:d8:75: 30:56:80:b6:2b:0c:0f:73:47:96:eb:d4:7a:02:7c: a2:20:c5:f7:2f:5a:18:6f:5e:a5:39:92:5c:89:bb: c8:40:6d:08:d0:d2:25:7d:4d:68:08:6e:87:51:66: c6:d5:89:ee:f1:f8:4d:09:7a:f0:01:25:4c:c7:b9: d1:e2:c8:fe:06:0c:75:71:0b:8f:0b:a7:40:6c:a9: 81:76:d0:80:f4:bb:d7:a3:12:46:19:13:c7:4a:f0: 65:f3:26:f5:16:0c:0a:e5:08:fd:8f:4a:26:cf:88: 62:fb:86:27:72:2c:90:bd:72:1f:1a:ca:1a:4f:c5: f7:63:9f:51:38:99:dd:fa:93:ea:f3:b5:8f:b1:a5: 1c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C6:39:3A:91:1C:6E:04:6A:02:A1:1B:94:59:97:EB:AB:56:CA:AA X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/4625A21A68B511EA9EF7951AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.77.64.0/22 IPv6: 2401:dd00::/32 Signature Algorithm: sha256WithRSAEncryption 57:ea:bf:48:4e:f1:9c:93:09:7f:ed:64:2d:7b:27:88:e2:52: af:82:44:cf:36:6a:ab:d9:0d:5e:30:4f:9e:26:54:00:4d:03: 3b:8e:fa:0b:fc:c1:59:3f:34:4f:f6:65:a4:f8:08:c2:1b:54: a3:61:ee:df:60:1e:4f:56:ab:90:1d:4f:00:5f:0d:7c:5e:19: 6d:6f:95:95:28:fa:9b:d7:17:5b:90:8e:1e:e3:f8:01:98:d7: 47:dc:e0:d1:96:96:6e:91:cf:ec:f6:18:c1:af:3b:40:69:9c: 89:83:16:55:a1:b9:25:13:55:37:e4:43:54:23:ea:fd:87:dd: 3c:26:46:fc:bb:38:86:14:04:67:70:b5:1c:95:55:30:5a:ba: 40:c7:3b:ab:f6:d1:96:af:c6:00:92:4a:78:b0:cb:c2:71:71: 17:46:4d:ff:82:21:a6:00:17:48:4e:f3:60:9f:03:d0:8e:6c: 5b:9b:95:f4:ac:90:27:7a:54:06:1f:0b:b8:d9:77:3f:ee:39: 9c:33:be:59:1d:8a:f8:34:cc:8e:d5:4e:5f:3e:9b:9a:c8:b8: ce:b2:88:6c:7d:20:de:16:7f:a0:01:f4:9c:3b:2d:ee:d4:c0: 7d:aa:4c:63:26:13:16:b2:06:66:37:89:c4:2d:40:2c:f9:cd: 6c:02:cf:c8 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICM/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjQwNzEyMTUyMDUwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjkxNDlkMS1kZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLq3CVxrOVw9oMAzKWVcb47GU6rPewLpD8Cl4HNSgP6gGjoN3m5LIpf3vXR8 uixjhYoVX/48Bwk6VU+rKGyhqi6r8VNchOfq5muZz/7JEk3uiHWwfO/bFc4yGvf/ ng3tmtNaxULYfXCW+ugHqjcq7VQZnu+Y2HUwVoC2KwwPc0eW69R6AnyiIMX3L1oY b16lOZJcibvIQG0I0NIlfU1oCG6HUWbG1Ynu8fhNCXrwASVMx7nR4sj+Bgx1cQuP C6dAbKmBdtCA9LvXoxJGGRPHSvBl8yb1FgwK5Qj9j0omz4hi+4YnciyQvXIfGsoa T8X3Y59ROJnd+pPq87WPsaUcfwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFrGOTqR HG4EagKhG5RZl+urVsqqMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBDMkYvNzA1RjUyRkMxRDk5MTFFMjg1QzlFRDg1MDhCMDJDRDIvNDYyNUEyMUE2 OEI1MTFFQTlFRjc5NTFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnTUAwDQQCAAIwBwMFACQB3QAwDQYJKoZIhvcNAQELBQAD ggEBAFfqv0hO8ZyTCX/tZC17J4jiUq+CRM82aqvZDV4wT54mVABNAzuO+gv8wVk/ NE/2ZaT4CMIbVKNh7t9gHk9Wq5AdTwBfDXxeGW1vlZUo+pvXF1uQjh7j+AGY10fc 4NGWlm6Rz+z2GMGvO0BpnImDFlWhuSUTVTfkQ1Qj6v2H3TwmRvy7OIYUBGdwtRyV VTBaukDHO6v20ZavxgCSSniwy8JxcRdGTf+CIaYAF0hO82CfA9CObFublfSskCd6 VAYfC7jZdz/uOZwzvlkdivg0zI7VTl8+m5rIuM6yiGx9IN4Wf6AB9Jw7Le7UwH2q TGMmExayBmY3icQtQCz5zWwCz8g= -----END CERTIFICATE-----Generated at Sun Nov 24 17:19:55 2024 by rpki-client on console-fra.rpki-client.org