$ rpki-client -vvf rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/4221CE240EC211EB9F6B1914C4F9AE02.roa File: 4221CE240EC211EB9F6B1914C4F9AE02.roa (raw, json) Hash identifier: ezooYl/c+wjopILKX1z5agSeWOeibdAC4+U9dh0uw1M= Subject key identifier: F7:48:C8:3E:34:FB:F2:C9:32:34:89:F0:EE:3B:86:0F:72:12:7D:A5 Certificate issuer: /CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Certificate serial: 2C30 Authority key identifier: 8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/4221CE240EC211EB9F6B1914C4F9AE02.roa Signing time: Thu 24 Aug 2023 15:51:53 +0000 ROA not before: Thu 24 Aug 2023 15:51:53 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 58656 IP address blocks: 103.12.176.0/22 maxlen: 24 118.179.8.0/21 maxlen: 21 118.179.9.0/24 maxlen: 24 118.179.12.0/24 maxlen: 24 118.179.14.0/24 maxlen: 24 118.179.15.0/24 maxlen: 24 118.179.16.0/20 maxlen: 20 118.179.16.0/24 maxlen: 24 118.179.17.0/24 maxlen: 24 118.179.18.0/24 maxlen: 24 118.179.19.0/24 maxlen: 24 118.179.20.0/23 maxlen: 24 118.179.22.0/24 maxlen: 24 118.179.23.0/24 maxlen: 24 118.179.24.0/23 maxlen: 23 118.179.24.0/24 maxlen: 24 118.179.25.0/24 maxlen: 24 118.179.26.0/24 maxlen: 24 118.179.27.0/24 maxlen: 24 118.179.28.0/24 maxlen: 24 118.179.29.0/24 maxlen: 24 118.179.30.0/23 maxlen: 23 118.179.30.0/24 maxlen: 24 118.179.31.0/24 maxlen: 24 2404:d900::/32 maxlen: 32 2404:d900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 15:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11312 (0x2c30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Validity Not Before: Aug 24 15:51:53 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64e77c99-196f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:00:b8:b5:8a:4e:bf:da:5e:49:f8:0d:59: 6a:ee:58:3b:e8:2a:44:5c:9e:f4:76:02:4d:91:6f: 61:35:39:bd:92:df:aa:89:7f:00:16:53:a9:d1:8d: d9:38:98:2a:de:f2:e2:23:09:26:cc:72:89:5a:86: 51:47:78:b0:3c:26:07:5d:7e:56:aa:9e:02:08:a3: bb:71:58:39:9f:f0:86:6d:bb:e3:49:ec:4e:ef:d8: 40:1f:37:00:dd:91:cd:3f:0a:b0:a8:83:b1:bd:d3: 66:37:7e:e8:ae:16:f0:04:4e:a9:9c:c4:b3:65:e7: e9:14:de:b3:df:e3:a1:7a:b4:cd:e3:21:30:fa:af: 0c:6d:8a:96:3f:3a:b5:40:48:9f:ed:c8:cd:b8:1a: a9:54:a7:f2:cf:b0:c8:c1:3c:71:62:89:24:cb:0a: d1:b2:9f:09:c8:ba:da:44:a1:34:fe:ab:15:0e:c9: cb:35:a3:dc:45:ba:56:2a:c0:a4:56:00:0d:e1:94: 0a:cc:11:a1:8c:10:60:de:30:ef:f8:b0:04:19:a1: 8c:5e:2b:c1:e0:be:5f:8d:10:8e:6f:b8:1e:cd:81: 2f:a0:76:5e:a6:c1:8d:e3:e5:f8:aa:85:e7:5a:30: 6b:37:ec:4f:cb:aa:21:da:c9:eb:cc:07:c4:25:52: af:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:48:C8:3E:34:FB:F2:C9:32:34:89:F0:EE:3B:86:0F:72:12:7D:A5 X509v3 Authority Key Identifier: keyid:8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/4221CE240EC211EB9F6B1914C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.176.0/22 118.179.8.0-118.179.31.255 IPv6: 2404:d900::/32 Signature Algorithm: sha256WithRSAEncryption 0d:2f:e6:5e:ea:4f:66:b7:cc:98:3c:26:c6:e5:66:e9:2f:d3: 49:9e:f7:4c:25:1f:7c:42:42:67:d2:6f:6b:e8:39:f4:90:8b: e9:29:e8:70:08:26:4b:e4:db:00:51:04:40:67:0e:e6:ef:d4: 26:43:cf:33:2b:35:77:d9:c8:e5:22:6f:ad:0f:4f:ca:0d:82: 53:15:b9:34:57:c3:22:5e:c1:e5:45:69:25:ba:28:7d:77:12: da:2e:e2:38:d5:ba:ca:a5:72:ad:a7:d4:4d:dc:8e:d5:2a:0e: ff:bd:80:cd:72:ab:86:a0:3e:62:65:d7:06:63:1e:1b:43:35: 6f:fc:a2:4d:53:f3:0b:e2:a4:4f:de:83:fe:07:14:76:bd:73: ce:ac:e1:2b:78:e1:e1:68:42:58:95:02:79:b0:dd:8f:2d:c8: f9:8e:2b:bf:f6:8d:db:44:a1:5b:c6:80:77:d6:19:23:92:2d: 73:0c:9c:22:6c:0a:6f:1b:de:92:7a:79:fc:a4:51:1f:bb:b4: f4:df:83:ac:fc:a4:e1:84:3b:34:f3:7a:d1:60:a7:bb:34:4d: ac:49:36:8f:99:a5:e3:c1:59:b0:7b:a7:77:ae:fd:b0:02:be: d0:20:5b:f9:b4:e9:0c:87:03:94:cd:0c:d3:25:06:59:04:7f: f6:8f:2d:fa -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICLDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1MjMxMTAvBgNVBAUTKDhBNjgxREQwQzQzNzMxRDBGNDc2M0E0REJERDVENEND MDFGRDY0QzIwHhcNMjMwODI0MTU1MTUzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGU3N2M5OS0xOTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoUAuLWKTr/aXkn4DVlq7lg76CpEXJ70dgJNkW9hNTm9kt+qiX8AFlOp0Y3Z OJgq3vLiIwkmzHKJWoZRR3iwPCYHXX5Wqp4CCKO7cVg5n/CGbbvjSexO79hAHzcA 3ZHNPwqwqIOxvdNmN37orhbwBE6pnMSzZefpFN6z3+OherTN4yEw+q8MbYqWPzq1 QEif7cjNuBqpVKfyz7DIwTxxYokkywrRsp8JyLraRKE0/qsVDsnLNaPcRbpWKsCk VgAN4ZQKzBGhjBBg3jDv+LAEGaGMXivB4L5fjRCOb7gezYEvoHZepsGN4+X4qoXn WjBrN+xPy6oh2snrzAfEJVKvkQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFPdIyD40 +/LJMjSJ8O47hg9yEn2lMB8GA1UdIwQYMBaAFIpoHdDENzHQ9HY6Tb3V1MwB/WTC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzUyMy8xMkI5OTdFODlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01kRDBkanBOdmRYVXpBSDla TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ltZ2QwTVEzTWREMGRqcE52ZFhVekFIOVpNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc1MjMvMTJCOTk3RTg5QUUzMTFFM0E1QTI1N0E3NTkxMUVBMzIvNDIyMUNFMjQw RUMyMTFFQjlGNkIxOTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBoEAgABMBQDBAJnDLAwDAMEA3azCAMEBXazADANBAIAAjAHAwUAJATZADAN BgkqhkiG9w0BAQsFAAOCAQEADS/mXupPZrfMmDwmxuVm6S/TSZ73TCUffEJCZ9Jv a+g59JCL6SnocAgmS+TbAFEEQGcO5u/UJkPPMys1d9nI5SJvrQ9Pyg2CUxW5NFfD Il7B5UVpJboofXcS2i7iONW6yqVyrafUTdyO1SoO/72AzXKrhqA+YmXXBmMeG0M1 b/yiTVPzC+KkT96D/gcUdr1zzqzhK3jh4WhCWJUCebDdjy3I+Y4rv/aN20ShW8aA d9YZI5ItcwycImwKbxveknp5/KRRH7u09N+DrPyk4YQ7NPN60WCnuzRNrEk2j5ml 48FZsHund679sAK+0CBb+bTpDIcDlM0M0yUGWQR/9o8t+g== -----END CERTIFICATE-----Generated at Sun Jun 2 16:37:14 2024 by rpki-client on console-fra.rpki-client.org