$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/7A42D8C8DD3C11EA8C68452FC4F9AE02.roa File: 7A42D8C8DD3C11EA8C68452FC4F9AE02.roa (raw, json) Hash identifier: DhlrL6zHl9QmuuWPTGOqHQVWE9R1KKjeYbDMioancRo= Subject key identifier: E8:21:09:94:6E:5F:1B:53:05:8C:B3:99:A0:27:48:66:7C:80:A1:A6 Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Certificate serial: 334C Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/7A42D8C8DD3C11EA8C68452FC4F9AE02.roa Signing time: Mon 28 Aug 2023 14:50:45 +0000 ROA not before: Mon 28 Aug 2023 14:50:45 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 7700 IP address blocks: 103.30.32.0/22 maxlen: 22 202.63.224.0/20 maxlen: 20 202.63.224.0/24 maxlen: 24 202.63.225.0/24 maxlen: 24 202.63.226.0/24 maxlen: 24 202.63.227.0/24 maxlen: 24 202.63.228.0/24 maxlen: 24 202.63.229.0/24 maxlen: 24 202.63.230.0/24 maxlen: 24 202.63.231.0/24 maxlen: 24 202.63.232.0/24 maxlen: 24 202.63.233.0/24 maxlen: 24 202.63.234.0/24 maxlen: 24 202.63.235.0/24 maxlen: 24 202.63.236.0/24 maxlen: 24 202.63.237.0/24 maxlen: 24 202.63.238.0/24 maxlen: 24 202.63.239.0/24 maxlen: 24 221.120.112.0/21 maxlen: 21 221.120.120.0/21 maxlen: 21 2402:ce00::/32 maxlen: 32 2402:ce01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13132 (0x334c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Validity Not Before: Aug 28 14:50:45 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ecb444-58d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:35:d2:03:5b:3f:d6:31:d2:48:d8:1c:d5: b3:f4:93:54:43:96:d1:31:20:50:f4:b0:1c:ed:76: 5b:20:29:92:f9:a4:46:b5:08:e2:c2:11:32:3a:9d: 29:2d:1f:36:52:19:a4:de:bb:96:9e:5e:40:d5:86: 6d:79:26:56:2f:ef:c1:8f:d4:f1:c4:24:92:42:40: d8:3f:8e:69:de:b0:96:61:6e:9d:d3:85:8a:07:59: 81:29:98:aa:56:f8:91:30:be:b8:dd:6c:86:f2:be: 78:8f:b5:97:f4:11:3f:c5:6c:8c:f4:f6:c2:72:29: b6:1b:7e:05:46:02:a0:6a:46:04:a0:66:4b:c9:7d: 10:1d:ec:af:c1:ac:44:36:68:e6:e6:b4:b9:5c:b9: 62:1b:fd:84:44:b0:ca:dd:56:3f:01:1a:11:72:e0: 0f:98:a8:e2:2b:2c:af:2d:c7:20:72:02:96:e9:09: 58:b4:24:e0:7d:1c:e1:1b:be:56:f3:b1:28:36:c8: 13:f1:a0:28:e5:9d:41:7b:88:26:74:c9:15:9c:e6: 7f:c3:62:36:d4:51:50:47:78:03:0f:e3:86:93:cc: 56:73:ba:f7:3e:e3:3d:d3:a2:d5:4d:c6:c3:75:f2: 35:05:c2:81:06:8c:22:fe:d3:bf:82:e0:3f:a2:d4: ec:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:21:09:94:6E:5F:1B:53:05:8C:B3:99:A0:27:48:66:7C:80:A1:A6 X509v3 Authority Key Identifier: keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/7A42D8C8DD3C11EA8C68452FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.30.32.0/22 202.63.224.0/20 221.120.112.0/20 IPv6: 2402:ce00::/31 Signature Algorithm: sha256WithRSAEncryption 11:5f:0d:cd:07:22:de:26:aa:5a:c6:10:8a:ec:1e:2a:11:b0: 56:05:03:16:d1:86:e6:f5:a3:a3:28:5c:b3:2e:f1:81:a8:32: 31:4f:64:79:f3:94:50:94:65:be:14:8f:6c:f9:fd:a6:61:29: 98:ff:ec:43:cf:78:a0:4f:bb:0d:e2:fd:c6:0b:b3:5c:ad:cf: d5:ba:9b:92:81:9d:74:06:b2:3a:3c:71:96:e7:e3:6c:e2:c9: f2:97:07:55:1c:7a:f1:a8:5d:a1:77:ab:2d:0c:bd:19:0b:55: 5a:e8:1e:f0:61:28:21:ed:df:f1:48:4d:21:46:8d:55:48:18: 26:51:56:6d:d1:be:b0:45:e1:83:88:0f:af:95:df:ef:fb:30: 5e:cd:dd:4a:2e:61:6d:14:a4:60:f1:21:e7:66:70:06:c1:c3: 67:fb:3b:4a:5e:31:6c:d2:6e:be:7b:54:0c:66:49:4d:88:73: ef:0d:c4:cb:88:75:a0:b2:8b:ab:23:3a:e7:bb:f8:19:36:58: 2d:a6:72:54:7e:22:8f:94:b8:68:42:18:8a:83:fe:9b:12:80: 5e:fa:4f:1f:a5:79:a6:70:8b:24:6f:f7:03:fd:c9:46:6c:ec: a5:c4:18:83:45:08:6d:37:5a:6c:cc:9e:eb:8c:bc:a2:95:a3: d5:f2:f3:04 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICM0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG OEYyMzhCMzEwHhcNMjMwODI4MTQ1MDQ1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVjYjQ0NC01OGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdY10gNbP9Yx0kjYHNWz9JNUQ5bRMSBQ9LAc7XZbICmS+aRGtQjiwhEyOp0p LR82Uhmk3ruWnl5A1YZteSZWL+/Bj9TxxCSSQkDYP45p3rCWYW6d04WKB1mBKZiq VviRML643WyG8r54j7WX9BE/xWyM9PbCcim2G34FRgKgakYEoGZLyX0QHeyvwaxE Nmjm5rS5XLliG/2ERLDK3VY/ARoRcuAPmKjiKyyvLccgcgKW6QlYtCTgfRzhG75W 87EoNsgT8aAo5Z1Be4gmdMkVnOZ/w2I21FFQR3gDD+OGk8xWc7r3PuM906LVTcbD dfI1BcKBBowi/tO/guA/otTsRwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOghCZRu XxtTBYyzmaAnSGZ8gKGmMB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQzMDYvQkNCRDgwMUMxRDhEMTFFMkI0MjlCN0VCMDhCMDJDRDIvN0E0MkQ4QzhE RDNDMTFFQThDNjg0NTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnHiADBATKP+ADBATdeHAwDQQCAAIwBwMFASQCzgAwDQYJ KoZIhvcNAQELBQADggEBABFfDc0HIt4mqlrGEIrsHioRsFYFAxbRhub1o6MoXLMu 8YGoMjFPZHnzlFCUZb4Uj2z5/aZhKZj/7EPPeKBPuw3i/cYLs1ytz9W6m5KBnXQG sjo8cZbn42ziyfKXB1UcevGoXaF3qy0MvRkLVVroHvBhKCHt3/FITSFGjVVIGCZR Vm3RvrBF4YOID6+V3+/7MF7N3UouYW0UpGDxIedmcAbBw2f7O0peMWzSbr57VAxm SU2Ic+8NxMuIdaCyi6sjOue7+Bk2WC2mclR+Io+UuGhCGIqD/psSgF76Tx+leaZw iyRv9wP9yUZs7KXEGINFCG03WmzMnuuMvKKVo9Xy8wQ= -----END CERTIFICATE-----Generated at Fri May 31 16:40:54 2024 by rpki-client on console-ams.rpki-client.org