$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa File: 862720F4031611EB9086351AC4F9AE02.roa (raw, json) Hash identifier: ErpHKuDI9+rV11qWd8vi0WWQUq+2/B16GYuYdN9yvgc= Subject key identifier: 7C:EB:C3:D8:B5:D5:DC:D9:C4:43:4E:6B:DF:58:B0:5A:5F:77:66:9C Certificate issuer: /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F Certificate serial: 0769 Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa Signing time: Sat 26 Oct 2024 21:32:37 +0000 ROA not before: Sat 26 Oct 2024 21:32:37 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 63931 IP address blocks: 103.47.246.0/23 maxlen: 24 103.204.104.0/23 maxlen: 24 192.140.248.0/22 maxlen: 24 2402:1280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F Validity Not Before: Oct 26 21:32:37 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=671d5ff5-f46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:70:ac:de:f2:39:2e:c3:f8:2c:ec:0b:29:d2: 79:78:5e:b5:40:e0:7d:6b:e2:9a:8e:6b:92:3d:7a: af:09:9d:1b:f3:d4:b1:81:c0:dd:fb:4d:ca:87:98: 73:b0:29:48:35:1c:75:7d:59:47:b2:42:61:3b:a4: 46:64:85:ab:7f:d3:42:d0:11:03:0c:57:6e:5a:0e: 3e:fe:8b:f0:68:61:27:f0:18:34:1d:b1:c0:d2:8b: 45:d7:60:12:ca:6a:fc:f6:04:d9:fc:a6:76:f2:fa: f1:07:91:ac:80:ee:f3:fc:b0:e1:0e:c5:8e:52:62: 68:16:c8:e4:ba:2b:e7:44:b6:b7:52:76:46:1c:7e: e1:6a:13:7a:90:69:61:92:40:bc:c8:3b:60:43:eb: ad:53:3f:27:48:e9:f5:ef:5f:27:09:4d:6b:76:b6: 5c:dc:db:15:e6:b7:9c:21:09:8f:b2:56:60:9d:21: 71:cc:91:b5:88:43:b7:c9:05:95:44:61:ac:16:d5: e8:9a:9e:2e:07:35:48:81:5a:3a:4f:f2:88:8b:3a: c3:cb:86:30:94:87:d9:01:91:73:27:33:c7:eb:e8: fe:1d:84:cf:b5:57:10:de:1e:38:28:8c:9b:20:e9: ac:ad:24:cd:32:28:24:01:38:db:47:39:a1:91:d4: 9f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EB:C3:D8:B5:D5:DC:D9:C4:43:4E:6B:DF:58:B0:5A:5F:77:66:9C X509v3 Authority Key Identifier: keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.47.246.0/23 103.204.104.0/23 192.140.248.0/22 IPv6: 2402:1280::/32 Signature Algorithm: sha256WithRSAEncryption 29:c8:18:ab:60:08:45:57:fb:b0:e8:43:f5:a2:28:7b:7c:cc: 60:8d:5e:33:1b:f6:2e:48:30:14:69:5d:0f:20:a8:2f:41:f1: 67:70:13:26:7f:c1:0a:ac:a5:ff:0c:30:3e:e4:65:9d:e7:2a: 52:d3:fb:86:9a:4b:11:e6:da:41:5e:64:9a:af:47:4a:b7:51: 9f:06:d7:5c:ce:c8:e8:69:c3:c8:28:0c:03:5f:2b:fa:18:9e: b9:47:10:69:0a:92:bf:1c:e3:eb:28:38:15:98:ae:c5:74:fc: 7f:f1:32:a1:83:c7:e7:53:44:cb:1c:8f:4b:7c:8b:e3:be:e1: a3:e1:fa:9d:84:cc:36:e7:25:e7:6a:92:4a:d6:2a:24:59:fc: db:bb:9f:2f:7f:45:50:3e:16:68:9c:69:fe:2f:30:82:35:a7: a3:3f:29:a9:aa:80:75:c2:aa:51:ca:47:b3:fd:43:4a:bc:6f: 32:b1:4b:e4:89:6e:d9:64:b6:b6:76:a8:c8:f0:9c:8b:4b:eb: 17:05:ee:cf:91:71:0f:56:71:6f:ea:7d:9f:fd:02:39:6f:4b: 23:a0:71:d5:80:94:4b:a6:77:97:6d:ed:56:af:79:2d:bb:24: da:4d:b5:10:7a:f6:ba:28:57:74:8d:f2:fd:5d:95:55:de:48: ad:b2:dc:6f -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RENkExMTAvBgNVBAUTKEJCOUQ1RDUwRjc1NTgxOTcyRkMzQUYxQzZDRTZBRkNG NTdDRkI5M0YwHhcNMjQxMDI2MjEzMjM3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFkNWZmNS1mNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3Cs3vI5LsP4LOwLKdJ5eF61QOB9a+KajmuSPXqvCZ0b89SxgcDd+03Kh5hz sClINRx1fVlHskJhO6RGZIWrf9NC0BEDDFduWg4+/ovwaGEn8Bg0HbHA0otF12AS ymr89gTZ/KZ28vrxB5GsgO7z/LDhDsWOUmJoFsjkuivnRLa3UnZGHH7hahN6kGlh kkC8yDtgQ+utUz8nSOn1718nCU1rdrZc3NsV5recIQmPslZgnSFxzJG1iEO3yQWV RGGsFtXomp4uBzVIgVo6T/KIizrDy4YwlIfZAZFzJzPH6+j+HYTPtVcQ3h44KIyb IOmsrSTNMigkATjbRzmhkdSfWwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHzrw9i1 1dzZxENOa99YsFpfd2acMB8GA1UdIwQYMBaAFLudXVD3VYGXL8OvHGzmr89Xz7k/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ2QS8zOUY0OEExMDAz MTUxMUVCQjU1RDIyMTlDNEY5QUUwMi91NTFkVVBkVmdaY3Z3NjhjYk9hdnoxZlB1 VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1MWRVUGRWZ1pjdnc2OGNiT2F2ejFmUHVUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0RENkEvMzlGNDhBMTAwMzE1MTFFQkI1NUQyMjE5QzRGOUFFMDIvODYyNzIwRjQw MzE2MTFFQjkwODYzNTFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAFnL/YDBAFnzGgDBALAjPgwDQQCAAIwBwMFACQCEoAwDQYJ KoZIhvcNAQELBQADggEBACnIGKtgCEVX+7DoQ/WiKHt8zGCNXjMb9i5IMBRpXQ8g qC9B8WdwEyZ/wQqspf8MMD7kZZ3nKlLT+4aaSxHm2kFeZJqvR0q3UZ8G11zOyOhp w8goDANfK/oYnrlHEGkKkr8c4+soOBWYrsV0/H/xMqGDx+dTRMscj0t8i+O+4aPh +p2EzDbnJedqkkrWKiRZ/Nu7ny9/RVA+Fmicaf4vMII1p6M/KamqgHXCqlHKR7P9 Q0q8bzKxS+SJbtlktrZ2qMjwnItL6xcF7s+RcQ9WcW/qfZ/9AjlvSyOgcdWAlEum d5dt7VaveS27JNpNtRB69rooV3SN8v1dlVXeSK2y3G8= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:25 2024 by rpki-client on console-ams.rpki-client.org