$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/2A08F1A4369211EAA64E320BC4F9AE02.roa File: 2A08F1A4369211EAA64E320BC4F9AE02.roa (raw, json) Hash identifier: yecxmZJ2o707h7+hNgkkRsPn4agz7cxDO6ZHpKPANQY= Subject key identifier: 83:4D:C4:DE:35:9D:C7:2A:6D:AF:6B:D0:5B:9C:DD:50:31:92:00:18 Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0A0A Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/2A08F1A4369211EAA64E320BC4F9AE02.roa Signing time: Mon 04 Sep 2023 20:07:27 +0000 ROA not before: Mon 04 Sep 2023 20:07:27 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 58895 IP address blocks: 103.72.84.0/22 maxlen: 22 103.72.84.0/24 maxlen: 24 103.72.85.0/24 maxlen: 24 103.72.86.0/24 maxlen: 24 103.72.87.0/24 maxlen: 24 203.3.132.0/24 maxlen: 24 203.11.65.0/24 maxlen: 24 203.142.218.0/24 maxlen: 24 203.161.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 20:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2570 (0xa0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: Sep 4 20:07:27 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64f638ff-6748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:27:a5:9f:46:b3:4d:24:06:35:b7:e5:78:32: c2:80:a5:02:a1:14:af:48:a7:17:c0:f3:a9:9e:a3: 64:a2:77:9c:98:4c:d3:ca:93:a2:76:bf:d1:fb:91: 8e:a7:7f:59:a2:f6:18:37:0e:8d:1d:58:78:26:ce: f1:c5:49:65:20:ba:a2:7a:ee:36:30:c9:45:c5:af: fe:34:3f:01:88:b5:62:5a:20:8e:2d:3d:87:a7:e4: 9a:96:ae:0f:19:2b:5d:ef:87:12:2f:46:83:73:f4: 96:46:f5:1d:0f:61:0f:01:d7:f6:46:b4:6a:79:73: 13:b4:0a:33:43:70:f9:13:6f:fe:37:ac:1c:84:22: 25:31:dc:14:34:ae:72:92:bc:0c:4a:14:67:34:d4: e3:05:d7:9a:20:a0:59:90:c6:e9:ee:ae:73:f7:89: 13:ca:61:6d:41:99:6a:e7:df:7c:7b:cf:e4:1a:76: 6a:6e:85:9f:87:2b:49:6a:5e:21:a0:f5:c3:4d:1a: 4e:15:fd:8e:e2:de:a5:df:d1:3f:6a:1c:62:71:58: 39:a3:fc:51:7b:83:70:d9:f0:45:94:c2:c4:0c:26: bf:fe:80:b5:32:83:0b:0f:7f:e3:48:ff:57:b3:40: 40:42:d8:d3:b1:7f:a9:3e:00:5b:25:5e:bc:7a:33: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4D:C4:DE:35:9D:C7:2A:6D:AF:6B:D0:5B:9C:DD:50:31:92:00:18 X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/2A08F1A4369211EAA64E320BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.84.0/22 203.3.132.0/24 203.11.65.0/24 203.142.218.0/24 203.161.179.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:a6:4b:2d:1d:e8:97:09:29:e1:16:77:c8:0b:b4:19:66:51: c5:64:46:a1:31:f9:79:88:11:46:91:e6:aa:ae:3e:ab:cb:ec: f7:a8:72:32:f5:2d:24:3e:ac:ae:a2:86:56:4b:fd:ac:98:e9: 4f:1e:1f:bb:08:32:f3:5e:4f:ae:7f:89:a5:17:b8:a9:9e:d0: 02:29:75:8a:78:9c:e2:57:ae:2c:64:0b:ee:3b:f0:ea:95:c8: d8:db:05:ee:05:5d:bc:63:ad:ac:80:37:15:69:85:66:bf:35: 22:cd:6a:88:df:f5:3d:cd:9e:e3:54:6b:cd:c1:07:4a:38:a4: 05:7e:0b:46:c7:04:fd:21:ce:d1:96:49:61:98:ff:18:62:f9: 76:64:ac:7e:9b:b7:2c:ad:5c:dc:c1:ee:e2:49:10:48:ce:f2: d1:ab:b8:94:58:23:27:3b:88:b4:27:27:21:40:66:37:e2:5f: d8:39:fe:66:e1:8b:0b:70:cd:e9:02:74:80:4b:c7:34:f6:5a: 8d:49:a5:4e:6d:e7:08:aa:6d:44:9c:3d:73:d0:68:8e:54:93: e6:54:82:ba:be:64:ed:11:fe:93:b0:af:2d:a0:4a:cf:2e:c3: 95:70:ed:56:35:84:16:a8:c0:bd:b1:f9:63:a3:67:9c:bf:7e: db:30:18:1b -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICCgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjMwOTA0MjAwNzI3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY2MzhmZi02NzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Celn0azTSQGNbfleDLCgKUCoRSvSKcXwPOpnqNkonecmEzTypOidr/R+5GO p39ZovYYNw6NHVh4Js7xxUllILqieu42MMlFxa/+ND8BiLViWiCOLT2Hp+Salq4P GStd74cSL0aDc/SWRvUdD2EPAdf2RrRqeXMTtAozQ3D5E2/+N6wchCIlMdwUNK5y krwMShRnNNTjBdeaIKBZkMbp7q5z94kTymFtQZlq5998e8/kGnZqboWfhytJal4h oPXDTRpOFf2O4t6l39E/ahxicVg5o/xRe4Nw2fBFlMLEDCa//oC1MoMLD3/jSP9X s0BAQtjTsX+pPgBbJV68ejM6hwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFINNxN41 nccqba9r0Fuc3VAxkgAYMB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUwRkEvQUFBMEVCRTAzNjhFMTFFQUE3NjhGQzdFQzRGOUFFMDIvMkEwOEYxQTQz NjkyMTFFQUE2NEUzMjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAJnSFQDBADLA4QDBADLC0EDBADLjtoDBADLobMwDQYJKoZI hvcNAQELBQADggEBAFqmSy0d6JcJKeEWd8gLtBlmUcVkRqEx+XmIEUaR5qquPqvL 7PeocjL1LSQ+rK6ihlZL/ayY6U8eH7sIMvNeT65/iaUXuKme0AIpdYp4nOJXrixk C+478OqVyNjbBe4FXbxjrayANxVphWa/NSLNaojf9T3NnuNUa83BB0o4pAV+C0bH BP0hztGWSWGY/xhi+XZkrH6btyytXNzB7uJJEEjO8tGruJRYIyc7iLQnJyFAZjfi X9g5/mbhiwtwzekCdIBLxzT2Wo1JpU5t5wiqbUScPXPQaI5Uk+ZUgrq+ZO0R/pOw ry2gSs8uw5Vw7VY1hBaowL2x+WOjZ5y/ftswGBs= -----END CERTIFICATE-----Generated at Thu Apr 18 22:03:38 2024 by rpki-client on console-fra.rpki-client.org