$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/74F3F11098BB11EA9B1BD75CC4F9AE02.roa File: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (raw, json) Hash identifier: BczHzIbLkzNL4updWdbsFHqnEhXAUmCVG50paNnAJDQ= Subject key identifier: 5B:6F:10:73:AA:69:64:F9:71:EB:5B:DA:02:7C:B1:D9:87:3E:E0:82 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 1E97 Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/74F3F11098BB11EA9B1BD75CC4F9AE02.roa Signing time: Mon 30 Sep 2024 16:23:40 +0000 ROA not before: Mon 30 Sep 2024 16:23:40 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 132123 IP address blocks: 103.70.228.0/22 maxlen: 22 103.70.228.0/24 maxlen: 24 103.70.229.0/24 maxlen: 24 103.70.230.0/24 maxlen: 24 103.70.231.0/24 maxlen: 24 2001:df3:be00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7831 (0x1e97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: Sep 30 16:23:40 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fad08b-86a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:73:ea:d0:3f:ca:dd:a4:f0:ea:e6:cf:6d:2e: ac:46:4c:fb:cc:eb:89:ca:b2:3c:cb:73:53:52:b9: 8a:9c:21:8a:4a:94:2e:8c:1a:e3:b8:6d:4f:fc:12: 42:7d:ac:23:48:a9:9c:86:43:7b:d6:b2:04:2b:3a: f9:89:6e:0c:eb:98:1c:26:d7:02:79:e3:14:3d:c1: 80:84:4d:3a:de:ec:c8:83:71:55:b7:08:68:97:c4: 80:3b:1c:46:02:e1:36:82:c3:b9:36:4b:9a:f5:82: f8:fb:31:ae:87:54:fd:0f:bb:30:13:6f:13:66:94: 71:64:78:b4:d4:71:32:4d:e0:c5:81:d9:55:ed:48: ed:dc:8d:44:d6:0b:af:d3:f4:97:8f:3e:63:37:a5: bd:cb:10:38:e5:aa:82:fe:fa:c8:e5:22:7a:52:11: 1b:57:6e:45:d2:a6:b5:88:e0:f8:9e:93:7c:f7:16: 4c:4a:45:d6:a2:1a:33:22:30:c9:43:d5:bf:65:ef: 79:69:ab:92:a7:2e:d0:f2:8a:5b:8d:5c:ce:e8:18: c3:65:d5:7c:14:34:8e:f6:31:ff:a4:01:52:a9:32: 83:ab:69:d8:43:3c:91:71:b2:78:12:02:1d:1f:23: 4d:dd:04:5e:5d:fd:02:eb:32:68:47:00:09:b7:e8: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6F:10:73:AA:69:64:F9:71:EB:5B:DA:02:7C:B1:D9:87:3E:E0:82 X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/74F3F11098BB11EA9B1BD75CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.70.228.0/22 IPv6: 2001:df3:be00::/48 Signature Algorithm: sha256WithRSAEncryption 75:d7:6f:ee:a8:7a:27:d8:ff:0f:5d:d9:2c:98:63:ac:39:d2: ec:e6:de:7a:2b:cb:64:54:9c:71:5c:3c:fe:04:f5:7a:77:94: cc:df:bd:a7:5f:46:b1:33:b0:53:57:4c:6b:b5:81:d7:37:f9: da:8f:9f:13:2b:3c:08:9e:c7:56:9b:fc:d6:55:07:c6:00:5d: 31:d9:7b:47:9c:8a:a9:ea:e9:40:69:0f:8f:2f:12:28:d6:b0: 82:c7:b8:78:5b:48:f5:80:dd:bc:a4:7c:62:70:17:3f:b7:e3: 9f:b5:64:a1:c2:2d:47:ff:8c:3c:29:bf:0b:d5:c9:63:85:49: 42:8d:d2:d7:02:a5:d6:d3:57:38:64:e4:82:45:22:c2:a2:6c: 61:43:cb:82:00:83:e8:77:33:a8:e5:ee:3c:00:3c:05:01:21: b1:5e:de:aa:39:7e:17:a5:ad:2e:5a:fe:6b:3b:a9:e7:5a:ea: e5:44:56:13:ff:40:2c:e8:85:05:f3:a3:1a:1d:4b:ec:d4:21: 8c:ab:53:54:ce:e9:f3:de:0a:b3:bf:4d:ee:25:32:df:04:3d: 3f:73:1a:2c:1d:dc:5c:3d:f5:69:bc:ce:f6:7d:18:96:51:3a: 89:fa:40:16:6f:21:0d:47:3a:5f:ed:ed:f8:45:60:2b:74:c6: cc:19:3c:84 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICHpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjQwOTMwMTYyMzQwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZhZDA4Yi04NmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nPq0D/K3aTw6ubPbS6sRkz7zOuJyrI8y3NTUrmKnCGKSpQujBrjuG1P/BJC fawjSKmchkN71rIEKzr5iW4M65gcJtcCeeMUPcGAhE063uzIg3FVtwhol8SAOxxG AuE2gsO5Nkua9YL4+zGuh1T9D7swE28TZpRxZHi01HEyTeDFgdlV7Ujt3I1E1guv 0/SXjz5jN6W9yxA45aqC/vrI5SJ6UhEbV25F0qa1iOD4npN89xZMSkXWohozIjDJ Q9W/Ze95aauSpy7Q8opbjVzO6BjDZdV8FDSO9jH/pAFSqTKDq2nYQzyRcbJ4EgId HyNN3QReXf0C6zJoRwAJt+hFKwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFtvEHOq aWT5cetb2gJ8sdmHPuCCMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIyMDkvQTZCNTY3ODQ1ODlGMTFFNkJEREZGMTIxQzRGOUFFMDIvNzRGM0YxMTA5 OEJCMTFFQTlCMUJENzVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnRuQwDwQCAAIwCQMHACABDfO+ADANBgkqhkiG9w0BAQsF AAOCAQEAdddv7qh6J9j/D13ZLJhjrDnS7ObeeivLZFSccVw8/gT1eneUzN+9p19G sTOwU1dMa7WB1zf52o+fEys8CJ7HVpv81lUHxgBdMdl7R5yKqerpQGkPjy8SKNaw gse4eFtI9YDdvKR8YnAXP7fjn7VkocItR/+MPCm/C9XJY4VJQo3S1wKl1tNXOGTk gkUiwqJsYUPLggCD6HczqOXuPAA8BQEhsV7eqjl+F6WtLlr+azup51rq5URWE/9A LOiFBfOjGh1L7NQhjKtTVM7p894Ks79N7iUy3wQ9P3MaLB3cXD31abzO9n0YllE6 ifpAFm8hDUc6X+3t+EVgK3TGzBk8hA== -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:42 2024 by rpki-client on console-fra.rpki-client.org