$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/72B84162E2A411E9A300492AC4F9AE02.roa File: 72B84162E2A411E9A300492AC4F9AE02.roa (raw, json) Hash identifier: 9L3gWw9Hsx9/SrakiEqghCLk1KXBZM6BGq74H64Gv+c= Subject key identifier: F0:38:6D:0D:3B:2A:45:88:04:02:72:1A:6F:5A:12:66:B6:DE:FE:A9 Certificate issuer: /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Certificate serial: 0BB1 Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/72B84162E2A411E9A300492AC4F9AE02.roa Signing time: Tue 22 Aug 2023 18:36:08 +0000 ROA not before: Tue 22 Aug 2023 18:36:08 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 38200 IP address blocks: 45.64.164.0/24 maxlen: 24 45.64.165.0/24 maxlen: 24 45.64.166.0/24 maxlen: 24 45.64.167.0/24 maxlen: 24 103.234.24.0/24 maxlen: 24 103.234.25.0/24 maxlen: 24 103.234.26.0/24 maxlen: 24 103.234.27.0/24 maxlen: 24 103.234.164.0/22 maxlen: 22 103.234.164.0/24 maxlen: 24 103.234.165.0/24 maxlen: 24 103.234.166.0/24 maxlen: 24 103.234.167.0/24 maxlen: 24 220.247.160.0/24 maxlen: 24 220.247.161.0/24 maxlen: 24 220.247.162.0/24 maxlen: 24 220.247.163.0/24 maxlen: 24 220.247.164.0/24 maxlen: 24 220.247.165.0/24 maxlen: 24 220.247.166.0/24 maxlen: 24 220.247.167.0/24 maxlen: 24 2401:580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 19:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2993 (0xbb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Validity Not Before: Aug 22 18:36:08 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64e50018-a52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:79:90:c1:ec:e3:70:94:de:d2:1b:37:95: f9:0a:04:47:d5:64:8b:b4:b1:0b:47:12:f5:91:1f: c7:23:d4:d0:8f:59:06:e5:5b:8e:db:ed:2d:ec:8d: 6a:04:ed:44:48:cc:26:42:ad:9a:f6:b0:82:33:1c: 29:e9:33:bc:c3:df:d8:3c:72:50:0b:dd:c4:3d:7d: 42:83:93:54:93:ae:55:1c:5d:7f:14:53:0d:c5:98: 7e:f6:47:c2:01:b9:af:2a:85:42:c4:48:21:09:76: 11:b1:b6:06:d3:56:96:de:fc:28:1e:98:42:83:9e: 90:39:f1:87:08:8b:7c:66:63:24:d8:50:e9:48:b1: 6e:6c:4f:40:fc:b6:10:8f:c6:79:40:9b:ea:7d:49: f6:9e:ca:75:85:fa:42:39:ef:60:a9:55:3a:8f:94: 02:f4:fe:61:ef:d3:57:45:d1:69:af:a0:d2:29:90: a5:df:23:e5:51:d5:60:45:08:6b:b6:fb:40:06:18: d8:aa:b7:07:76:36:02:09:0e:f8:a4:00:72:98:af: aa:e8:bc:4c:34:f5:a7:51:1d:56:6e:c0:af:72:d9: 3c:e7:dd:5e:20:f8:3c:76:a2:0b:76:22:8a:07:04: 58:f0:fc:c1:f9:87:e1:16:f0:4a:88:3c:16:36:c4: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:38:6D:0D:3B:2A:45:88:04:02:72:1A:6F:5A:12:66:B6:DE:FE:A9 X509v3 Authority Key Identifier: keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/72B84162E2A411E9A300492AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.164.0/22 103.234.24.0/22 103.234.164.0/22 220.247.160.0/21 IPv6: 2401:580::/32 Signature Algorithm: sha256WithRSAEncryption 7f:b5:ae:06:00:16:d0:db:b7:82:74:f3:7c:08:f3:40:be:d7: 14:f9:82:51:d3:e6:09:5b:2f:83:69:9c:a5:f3:d3:15:02:0e: df:f9:4f:87:94:20:dd:97:0b:96:db:83:e3:ab:d3:1c:de:fb: 7b:0d:c4:07:2e:b5:1e:8f:96:62:08:f7:4e:6b:d7:37:08:01: 7b:d3:4e:5e:d4:a1:73:da:d2:76:78:2d:e0:93:57:2a:f1:7f: 61:54:96:d4:cb:35:a2:bc:77:46:b6:c2:02:64:41:51:50:1e: 1f:a5:d8:0c:1b:61:88:fc:2b:21:09:c0:e0:a8:5a:a2:43:30: 05:ba:7d:03:19:13:c0:43:35:7b:0a:c6:32:fc:4f:f2:7c:ec: 63:16:49:e9:d4:45:8b:f2:91:da:0c:c9:7a:0a:53:8a:0d:18: 68:b7:58:31:24:97:af:a2:66:64:4a:46:90:ee:43:97:3a:26: 50:a3:89:15:ab:ea:68:4f:25:b1:08:ab:01:f9:21:ab:62:ce: 4c:89:be:81:7c:a3:c9:6a:0d:b0:1e:c7:8d:f7:7a:d5:5d:07: 16:a7:11:2c:51:e1:0e:95:8f:45:07:99:63:fe:48:66:79:7f: 1f:d2:1f:78:f6:35:cd:18:86:91:8e:90:f1:4a:d3:0f:d4:3d: e4:65:1e:7d -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICC7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgxRTAxMTAvBgNVBAUTKDhERTFEMEI1NjEzMDk4MEI4MzkwMEZCNzhGQURBNjcw REUyRTBBNjUwHhcNMjMwODIyMTgzNjA4WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGU1MDAxOC1hNTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxV5kMHs43CU3tIbN5X5CgRH1WSLtLELRxL1kR/HI9TQj1kG5VuO2+0t7I1q BO1ESMwmQq2a9rCCMxwp6TO8w9/YPHJQC93EPX1Cg5NUk65VHF1/FFMNxZh+9kfC AbmvKoVCxEghCXYRsbYG01aW3vwoHphCg56QOfGHCIt8ZmMk2FDpSLFubE9A/LYQ j8Z5QJvqfUn2nsp1hfpCOe9gqVU6j5QC9P5h79NXRdFpr6DSKZCl3yPlUdVgRQhr tvtABhjYqrcHdjYCCQ74pABymK+q6LxMNPWnUR1WbsCvctk8591eIPg8dqILdiKK BwRY8PzB+YfhFvBKiDwWNsRk2QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFPA4bQ07 KkWIBAJyGm9aEma23v6pMB8GA1UdIwQYMBaAFI3h0LVhMJgLg5APt4+tpnDeLgpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODFFMC83NjFBN0VBQ0Uy QTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21BdURrQS0zajYybWNONHVD bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plSFF0V0V3bUF1RGtBLTNqNjJtY040dUNtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjgxRTAvNzYxQTdFQUNFMkEzMTFFOUFFOEJCNTI4QzRGOUFFMDIvNzJCODQxNjJF MkE0MTFFOUEzMDA0OTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAItQKQDBAJn6hgDBAJn6qQDBAPc96AwDQQCAAIwBwMFACQB BYAwDQYJKoZIhvcNAQELBQADggEBAH+1rgYAFtDbt4J083wI80C+1xT5glHT5glb L4NpnKXz0xUCDt/5T4eUIN2XC5bbg+Or0xze+3sNxAcutR6PlmII905r1zcIAXvT Tl7UoXPa0nZ4LeCTVyrxf2FUltTLNaK8d0a2wgJkQVFQHh+l2AwbYYj8KyEJwOCo WqJDMAW6fQMZE8BDNXsKxjL8T/J87GMWSenURYvykdoMyXoKU4oNGGi3WDEkl6+i ZmRKRpDuQ5c6JlCjiRWr6mhPJbEIqwH5IatizkyJvoF8o8lqDbAex433etVdBxan ESxR4Q6Vj0UHmWP+SGZ5fx/SH3j2Nc0YhpGOkPFK0w/UPeRlHn0= -----END CERTIFICATE-----Generated at Fri Jun 14 20:34:02 2024 by rpki-client on console-fra.rpki-client.org