$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa File: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (raw, json) Hash identifier: iW6YjMpstfMKbZY59Tg1WeEsakFUmD2BPmWINCFK44U= Subject key identifier: 8C:F3:97:AC:4B:72:B2:C9:9C:FB:F2:4B:E6:B1:4F:57:19:B3:0A:CB Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 110B Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa Signing time: Fri 16 Aug 2024 17:55:17 +0000 ROA not before: Fri 16 Aug 2024 17:55:17 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 24439 IP address blocks: 103.202.148.0/24 maxlen: 24 103.202.149.0/24 maxlen: 24 103.202.150.0/24 maxlen: 24 103.202.151.0/24 maxlen: 24 117.103.88.0/21 maxlen: 21 117.103.88.0/24 maxlen: 24 117.103.89.0/24 maxlen: 24 117.103.90.0/23 maxlen: 23 117.103.92.0/24 maxlen: 24 117.103.93.0/24 maxlen: 24 117.103.94.0/24 maxlen: 24 117.103.95.0/24 maxlen: 24 203.78.152.0/24 maxlen: 24 203.78.153.0/24 maxlen: 24 203.78.154.0/24 maxlen: 24 203.78.155.0/24 maxlen: 24 2405:400::/32 maxlen: 32 2405:400:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4363 (0x110b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Aug 16 17:55:17 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66bf9285-9df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:7f:7b:56:d7:2d:ff:06:51:fb:90:c4:88: db:0d:06:a2:8d:78:9c:7b:de:7e:51:05:7d:49:49: c4:19:10:17:a2:f8:be:a0:af:bf:45:1e:6e:85:3f: 21:4f:49:7a:6e:d8:11:20:48:e5:c2:9a:2a:7f:9a: 85:18:4b:4f:2e:8a:7d:60:78:87:99:6c:77:f9:e8: 84:a4:3c:83:11:c4:08:bd:89:2f:46:2c:ee:a8:fb: 1b:d3:7a:85:7b:b9:9b:6e:92:6d:91:72:76:75:04: a0:81:2f:19:0b:62:c2:93:fc:ce:61:9c:c6:50:66: 1d:94:ac:5b:41:4e:fe:22:ef:49:a4:7c:72:c2:ef: 3a:f0:f2:8b:b1:6a:aa:22:07:5c:fc:78:82:5d:ef: ad:52:21:81:57:40:0c:40:a9:59:99:32:63:34:c9: 30:f9:33:a7:36:74:94:1b:90:ac:19:a0:9b:d3:14: 9e:0b:b8:0f:26:e3:27:19:0c:26:41:95:6f:f2:6b: 74:1d:be:70:a5:fe:f4:9a:e7:70:8c:9b:f5:55:11: 37:b9:2e:17:9b:5a:21:d2:61:73:9a:26:f4:e2:1e: 06:e7:48:3c:b0:e7:05:e0:a0:d5:41:f2:08:ca:f1: da:ae:c7:96:51:76:45:04:68:0c:4b:2a:67:f8:ce: 97:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F3:97:AC:4B:72:B2:C9:9C:FB:F2:4B:E6:B1:4F:57:19:B3:0A:CB X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.202.148.0/22 117.103.88.0/21 203.78.152.0/22 IPv6: 2405:400::/32 Signature Algorithm: sha256WithRSAEncryption 12:40:5d:37:f8:17:6c:02:a3:1e:39:ee:52:61:b6:1b:d5:03: 0d:cd:74:15:bb:33:28:a8:36:f0:80:86:ca:20:9c:76:6f:3c: 9f:3d:2d:13:d1:74:2f:9c:f2:10:7e:77:49:90:e2:2f:18:ad: 53:82:cd:1e:a3:37:dc:2f:13:3c:ed:d2:1d:f1:9e:bf:7a:8a: c3:ba:27:34:b3:18:9b:51:82:9d:a6:8d:87:6a:4a:b1:78:a9: ed:c7:56:73:ab:e8:9e:c2:be:6e:0b:94:ca:22:37:30:24:72: c4:69:7f:9e:ec:8d:50:d8:7c:e6:85:d1:29:b6:6c:ad:a2:31: 98:1a:8a:28:de:05:9c:04:33:9d:2d:15:db:36:c2:d2:8d:53: d6:8e:90:d3:15:8f:3f:23:a4:f4:a8:a3:e3:c2:27:88:fe:7d: 4e:28:24:46:17:9a:9b:77:98:f3:4c:45:95:ea:40:67:65:5d: bb:87:bd:13:1a:20:bb:bd:a3:ad:e2:11:67:a9:73:8f:03:63: 9c:e5:02:db:dd:0d:e3:d3:0b:7e:78:f6:28:34:01:45:88:2d: 13:14:9e:de:2a:72:fc:72:99:61:e2:28:c6:11:5a:9b:13:87: 7c:e2:e5:b5:30:42:76:33:60:5f:de:8e:3d:3e:92:f6:fb:37: 91:41:fc:ba -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICEQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjQwODE2MTc1NTE3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmOTI4NS05ZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwop/e1bXLf8GUfuQxIjbDQaijXice95+UQV9SUnEGRAXovi+oK+/RR5uhT8h T0l6btgRIEjlwpoqf5qFGEtPLop9YHiHmWx3+eiEpDyDEcQIvYkvRizuqPsb03qF e7mbbpJtkXJ2dQSggS8ZC2LCk/zOYZzGUGYdlKxbQU7+Iu9JpHxywu868PKLsWqq Igdc/HiCXe+tUiGBV0AMQKlZmTJjNMkw+TOnNnSUG5CsGaCb0xSeC7gPJuMnGQwm QZVv8mt0Hb5wpf70mudwjJv1VRE3uS4Xm1oh0mFzmib04h4G50g8sOcF4KDVQfII yvHarseWUXZFBGgMSypn+M6XLwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIzzl6xL crLJnPvyS+axT1cZswrLMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzVCMjQvM0JBNjkxQThGODNEMTFFOEIwRUMzNDQ4QzRGOUFFMDIvNUFDN0Y5ODZG ODNFMTFFOEIxRkE4RjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnypQDBAN1Z1gDBALLTpgwDQQCAAIwBwMFACQFBAAwDQYJ KoZIhvcNAQELBQADggEBABJAXTf4F2wCox457lJhthvVAw3NdBW7MyioNvCAhsog nHZvPJ89LRPRdC+c8hB+d0mQ4i8YrVOCzR6jN9wvEzzt0h3xnr96isO6JzSzGJtR gp2mjYdqSrF4qe3HVnOr6J7Cvm4LlMoiNzAkcsRpf57sjVDYfOaF0Sm2bK2iMZga iijeBZwEM50tFds2wtKNU9aOkNMVjz8jpPSoo+PCJ4j+fU4oJEYXmpt3mPNMRZXq QGdlXbuHvRMaILu9o63iEWepc48DY5zlAtvdDePTC3549ig0AUWILRMUnt4qcvxy mWHiKMYRWpsTh3zi5bUwQnYzYF/ejj0+kvb7N5FB/Lo= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org