$ rpki-client -vvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/F100A1207F9911EBAFB6C91BC4F9AE02.roa File: F100A1207F9911EBAFB6C91BC4F9AE02.roa (raw, json) Hash identifier: 33QQuphQRYqieH70NrggQ8h+UAAXFdTttYTtHGKfVsc= Subject key identifier: 1B:5A:EB:79:4F:A8:A2:B3:18:9F:E8:4C:EA:69:30:44:E0:F7:BD:57 Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Certificate serial: 05E1 Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/F100A1207F9911EBAFB6C91BC4F9AE02.roa Signing time: Tue 06 Aug 2024 23:32:00 +0000 ROA not before: Tue 06 Aug 2024 23:32:00 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131476 IP address blocks: 43.245.168.0/22 maxlen: 22 43.245.169.0/24 maxlen: 24 43.245.170.0/24 maxlen: 24 43.245.171.0/24 maxlen: 24 103.4.236.0/24 maxlen: 24 103.4.237.0/24 maxlen: 24 103.4.238.0/24 maxlen: 24 103.4.239.0/24 maxlen: 24 202.81.4.0/22 maxlen: 22 202.81.4.0/24 maxlen: 24 202.81.5.0/24 maxlen: 24 202.81.6.0/24 maxlen: 24 202.81.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1505 (0x5e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Validity Not Before: Aug 6 23:32:00 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66b2b270-c198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b7:f1:d4:39:01:69:83:71:b5:9c:36:f5:11: 0d:87:c1:cc:72:a0:9e:56:d4:63:1f:35:53:6c:9b: 39:0e:4e:34:84:d2:d1:d8:8c:bc:f7:2c:c5:d7:4f: dc:27:66:59:34:6f:48:3a:2b:9f:dc:d8:da:95:80: 03:55:03:59:20:eb:19:79:1f:4b:0c:8a:6e:28:28: 0e:40:8a:c8:ac:33:5f:2b:9a:6a:ae:91:84:bb:83: 25:a7:44:08:a9:35:8a:6b:1a:a7:90:27:08:49:f8: 4d:45:c3:b6:79:ae:4e:2e:68:c2:5d:b4:d4:04:1f: f7:c5:01:47:83:4a:3b:72:72:7f:af:48:2d:75:03: d6:7f:df:59:5e:f7:12:50:8d:f6:23:a1:f0:82:a4: 15:c2:c5:3d:55:97:95:03:98:c9:53:b5:6b:bb:5a: 57:5f:4a:c6:39:71:ba:2a:2e:3a:76:2d:9e:95:ce: e9:20:68:38:61:77:7f:23:7b:bb:50:ba:80:fd:74: ef:01:ca:e2:36:93:11:2a:82:58:ba:b6:7e:56:ff: d9:27:b8:e8:c3:70:2e:d3:50:7f:aa:13:88:3f:c3: 33:a3:2d:24:5a:70:7c:50:77:fc:e4:5a:e0:14:77: d9:f1:d5:db:c7:8a:25:6e:74:ba:c2:a8:41:12:2d: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5A:EB:79:4F:A8:A2:B3:18:9F:E8:4C:EA:69:30:44:E0:F7:BD:57 X509v3 Authority Key Identifier: keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/F100A1207F9911EBAFB6C91BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.168.0/22 103.4.236.0/22 202.81.4.0/22 Signature Algorithm: sha256WithRSAEncryption 79:88:54:04:de:be:66:b1:0a:e3:e8:12:ad:72:fa:3d:0b:65: fd:f4:10:14:b7:1f:8b:ca:92:07:94:8e:a6:90:94:15:af:24: 42:20:d5:1a:ac:a0:5f:3f:39:21:c7:94:2f:f6:0e:2e:7c:0f: a6:6c:76:26:dc:f9:fd:3a:bf:5e:6b:dd:3b:1d:e6:b8:29:a1: ad:21:ee:69:bb:bc:cb:50:e3:35:e2:ac:df:62:af:e2:3f:22: df:0f:f0:af:ea:aa:dd:88:02:6a:30:53:d2:dc:5b:df:4a:6f: ad:e4:a3:2b:a3:4c:69:29:21:2c:29:93:27:0b:c3:83:99:47: 1d:60:87:77:44:f3:1e:d5:c6:3c:dc:14:93:38:3e:dd:8b:69: dc:3b:43:85:09:57:a5:86:2b:62:44:7c:0a:83:9b:d1:4f:8a: 63:4b:d0:28:b8:32:46:ba:34:a4:60:ea:d7:a3:d7:0e:d1:57: fd:82:aa:d8:a3:4e:7d:a9:b0:df:58:b4:10:5f:7c:bc:eb:55: 66:5a:63:f7:e7:e5:b9:df:0b:4a:c1:39:54:74:85:ac:e8:df: 30:f5:43:33:2b:db:e6:14:91:c5:77:91:85:61:4c:9c:61:18: 29:44:a9:08:e2:ab:88:bf:ca:44:4d:51:81:70:42:2e:82:a3: 7d:fa:18:79 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdEQ0ExMTAvBgNVBAUTKDJDM0EyQTgxMjFDQ0Y4QTlCRkM3Q0I2NjkxODU0QUY1 RTREMjE5RjkwHhcNMjQwODA2MjMzMjAwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIyYjI3MC1jMTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bfx1DkBaYNxtZw29RENh8HMcqCeVtRjHzVTbJs5Dk40hNLR2Iy89yzF10/c J2ZZNG9IOiuf3NjalYADVQNZIOsZeR9LDIpuKCgOQIrIrDNfK5pqrpGEu4Mlp0QI qTWKaxqnkCcISfhNRcO2ea5OLmjCXbTUBB/3xQFHg0o7cnJ/r0gtdQPWf99ZXvcS UI32I6HwgqQVwsU9VZeVA5jJU7Vru1pXX0rGOXG6Ki46di2elc7pIGg4YXd/I3u7 ULqA/XTvAcriNpMRKoJYurZ+Vv/ZJ7jow3Au01B/qhOIP8Mzoy0kWnB8UHf85Frg FHfZ8dXbx4olbnS6wqhBEi0W9wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBta63lP qKKzGJ/oTOppMETg971XMB8GA1UdIwQYMBaAFCw6KoEhzPipv8fLZpGFSvXk0hn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0RDQS8xQzc1RURBNjdE NkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1LbV94OHRta1lWSzllVFNH ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEb3FnU0hNLUttX3g4dG1rWVZLOWVUU0dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdEQ0EvMUM3NUVEQTY3RDZBMTFFQkE0QTU5ODBDQzRGOUFFMDIvRjEwMEExMjA3 Rjk5MTFFQkFGQjZDOTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr9agDBAJnBOwDBALKUQQwDQYJKoZIhvcNAQELBQADggEB AHmIVATevmaxCuPoEq1y+j0LZf30EBS3H4vKkgeUjqaQlBWvJEIg1RqsoF8/OSHH lC/2Di58D6Zsdibc+f06v15r3Tsd5rgpoa0h7mm7vMtQ4zXirN9ir+I/It8P8K/q qt2IAmowU9LcW99Kb63koyujTGkpISwpkycLw4OZRx1gh3dE8x7VxjzcFJM4Pt2L adw7Q4UJV6WGK2JEfAqDm9FPimNL0Ci4Mka6NKRg6tej1w7RV/2CqtijTn2psN9Y tBBffLzrVWZaY/fn5bnfC0rBOVR0hazo3zD1QzMr2+YUkcV3kYVhTJxhGClEqQji q4i/ykRNUYFwQi6Co336GHk= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:24 2024 by rpki-client on console-fra.rpki-client.org