$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/8BD42F1CDEB111EA971A1721C4F9AE02.roa File: 8BD42F1CDEB111EA971A1721C4F9AE02.roa (raw, json) Hash identifier: zYzRPHKgSeX768eROJRNf9tX7Mow08v94Ny1/BRKK1Q= Subject key identifier: 60:CB:19:A3:44:3F:FE:AB:6A:3F:58:C5:F4:D6:02:04:8E:37:19:2D Certificate issuer: /CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Certificate serial: 2774 Authority key identifier: 24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/8BD42F1CDEB111EA971A1721C4F9AE02.roa Signing time: Mon 30 Sep 2024 15:52:38 +0000 ROA not before: Mon 30 Sep 2024 15:52:38 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 45356 IP address blocks: 43.250.240.0/22 maxlen: 24 61.245.160.0/20 maxlen: 24 103.2.152.0/22 maxlen: 24 124.6.240.0/20 maxlen: 24 202.129.232.0/22 maxlen: 24 2407:c00::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10100 (0x2774) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Validity Not Before: Sep 30 15:52:38 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fac945-620f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:01:b7:50:e1:54:2a:5a:61:ca:a8:71:9b: 97:2e:4c:42:08:a4:2c:7d:95:81:e2:28:93:3b:26: f2:85:f2:15:0d:e2:16:5b:5d:34:7a:67:99:e2:af: 7c:b6:a2:4e:26:4a:e3:f7:b5:1a:1d:15:fd:ec:21: 47:95:68:ef:a0:8b:de:91:bf:c3:f3:35:09:52:17: a6:01:47:72:89:c9:64:ae:c3:39:25:2b:c2:f6:e6: f2:ef:12:b4:f6:c7:52:f9:ec:b7:b9:d5:e1:13:1b: 38:a1:84:d3:d5:11:59:af:70:6e:70:15:09:c0:af: ca:49:25:2b:59:c5:ad:f8:43:c0:db:5d:9d:55:0c: a1:76:26:3b:07:d9:7b:5b:24:ef:a6:34:ef:24:21: b6:4a:74:f6:73:74:3f:d1:89:f7:25:e8:23:42:0a: 5f:0a:96:c6:59:80:8e:3b:d3:36:af:9c:b6:c5:58: cb:aa:1c:ab:84:2f:7c:be:da:d7:43:5d:d6:42:80: 3f:68:77:bb:67:99:ca:f2:0d:41:63:ab:2a:09:c3: dd:a3:75:6c:45:69:49:80:33:86:81:f3:29:7e:a7: 41:7e:0d:ea:71:69:19:5d:f1:77:d5:e5:ad:a6:7a: 75:72:b7:03:2f:9b:a5:59:6e:cb:87:5c:65:37:09: c2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CB:19:A3:44:3F:FE:AB:6A:3F:58:C5:F4:D6:02:04:8E:37:19:2D X509v3 Authority Key Identifier: keyid:24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/8BD42F1CDEB111EA971A1721C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.240.0/22 61.245.160.0/20 103.2.152.0/22 124.6.240.0/20 202.129.232.0/22 IPv6: 2407:c00::/32 Signature Algorithm: sha256WithRSAEncryption 9a:fe:d0:83:05:e4:fa:52:4d:b4:54:04:64:0e:9a:91:f2:d2: 49:23:b8:ad:06:f4:f8:f4:2c:59:6a:1e:09:27:65:72:97:44: 79:cf:a0:76:0c:71:8d:e3:5e:75:2e:d7:bd:e0:e0:01:54:11: 30:e1:c4:d6:55:b4:2f:15:e2:9f:b3:1b:68:04:db:91:ec:18: 28:aa:4b:1c:60:61:0b:70:78:2d:bb:cd:b3:7c:fd:49:89:a3: f6:76:7d:f6:15:79:94:d0:0a:4b:9e:4e:19:bf:f3:e6:15:c1: d1:8a:0a:47:ef:5d:fe:bc:0b:fb:65:92:d4:99:1f:3c:58:24: 1a:1a:fa:5c:37:d9:fd:5f:9e:b2:5a:86:21:f3:40:8b:10:90: 33:65:c1:12:13:ab:6b:31:b5:e2:f5:6f:a4:f6:bc:3c:50:4c: a9:f5:d7:db:4b:a3:fc:08:0d:c6:c4:36:72:d8:02:6e:9f:91: fd:6e:4f:a6:59:98:81:e0:c4:d6:b5:e7:ee:a7:60:e0:c2:9f: 6b:ab:14:35:70:0d:51:e2:bc:6e:f1:39:da:d9:d4:ea:05:8b: 4d:10:a6:34:f2:c2:7e:fc:21:aa:f4:d5:db:db:5f:32:1d:9e: 52:46:9d:73:50:4b:e6:0c:09:79:7e:de:1a:fb:4f:98:c2:d4: d5:2c:5e:05 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICJ3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDI0RjBDMUQ4RTNGNEEyOTZGRENERUIyMzVBNkM0ODNC NkIyREM5N0EwHhcNMjQwOTMwMTU1MjM4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZhYzk0NS02MjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnMBt1DhVCpaYcqocZuXLkxCCKQsfZWB4iiTOybyhfIVDeIWW100emeZ4q98 tqJOJkrj97UaHRX97CFHlWjvoIvekb/D8zUJUhemAUdyiclkrsM5JSvC9uby7xK0 9sdS+ey3udXhExs4oYTT1RFZr3BucBUJwK/KSSUrWcWt+EPA212dVQyhdiY7B9l7 WyTvpjTvJCG2SnT2c3Q/0Yn3JegjQgpfCpbGWYCOO9M2r5y2xVjLqhyrhC98vtrX Q13WQoA/aHe7Z5nK8g1BY6sqCcPdo3VsRWlJgDOGgfMpfqdBfg3qcWkZXfF31eWt pnp1crcDL5ulWW7Lh1xlNwnCNQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFGDLGaNE P/6raj9YxfTWAgSONxktMB8GA1UdIwQYMBaAFCTwwdjj9KKW/c3rI1psSDtrLcl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi8zMjg4QzMxMkEy RTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9wYjl6ZXNqV214SU8yc3R5 WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQREIyT1Awb3BiOXplc2pXbXhJTzJzdHlYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJDNjIvMzI4OEMzMTJBMkU2MTFFNEEwODFDNDZEQzRGOUFFMDIvOEJENDJGMUNE RUIxMTFFQTk3MUExNzIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAIr+vADBAQ99aADBAJnApgDBAR8BvADBALKgegwDQQCAAIw BwMFACQHDAAwDQYJKoZIhvcNAQELBQADggEBAJr+0IMF5PpSTbRUBGQOmpHy0kkj uK0G9Pj0LFlqHgknZXKXRHnPoHYMcY3jXnUu173g4AFUETDhxNZVtC8V4p+zG2gE 25HsGCiqSxxgYQtweC27zbN8/UmJo/Z2ffYVeZTQCkueThm/8+YVwdGKCkfvXf68 C/tlktSZHzxYJBoa+lw32f1fnrJahiHzQIsQkDNlwRITq2sxteL1b6T2vDxQTKn1 19tLo/wIDcbENnLYAm6fkf1uT6ZZmIHgxNa15+6nYODCn2urFDVwDVHivG7xOdrZ 1OoFi00QpjTywn78Iar01dvbXzIdnlJGnXNQS+YMCXl+3hr7T5jC1NUsXgU= -----END CERTIFICATE-----Generated at Sun Nov 24 17:19:57 2024 by rpki-client on console-fra.rpki-client.org