$ rpki-client -vvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/32F44056DB1911EC87E56C0DC4F9AE02.roa File: 32F44056DB1911EC87E56C0DC4F9AE02.roa (raw, json) Hash identifier: dQViwk1iBrJGr2fBwaPfSS5giTEUliECggf7nT0Erg4= Subject key identifier: 0C:D9:BC:FB:A4:8F:5D:B8:E4:8A:8B:B0:82:01:A8:99:DE:25:4C:D6 Certificate issuer: /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Certificate serial: 0272 Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/32F44056DB1911EC87E56C0DC4F9AE02.roa Signing time: Wed 21 Aug 2024 02:46:17 +0000 ROA not before: Wed 21 Aug 2024 02:46:17 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 17976 IP address blocks: 103.193.204.0/24 maxlen: 24 203.144.64.0/20 maxlen: 24 203.144.80.0/24 maxlen: 24 203.144.81.0/24 maxlen: 24 203.144.82.0/24 maxlen: 24 203.144.83.0/24 maxlen: 24 203.144.84.0/24 maxlen: 24 203.144.85.0/24 maxlen: 24 203.144.86.0/24 maxlen: 24 203.144.87.0/24 maxlen: 24 203.144.88.0/24 maxlen: 24 203.144.89.0/24 maxlen: 24 203.144.90.0/24 maxlen: 24 203.144.91.0/24 maxlen: 24 203.144.92.0/24 maxlen: 24 203.144.93.0/24 maxlen: 24 203.144.94.0/24 maxlen: 24 203.144.95.0/24 maxlen: 24 2401:4d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Validity Not Before: Aug 21 02:46:17 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c554f9-e676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:59:32:54:6c:42:07:d8:0d:22:f3:85:ea:5c: f5:5e:7f:93:d9:38:a9:47:71:92:9c:8e:14:1e:7b: 75:80:0e:1d:7e:63:5a:57:7e:f2:e9:2f:48:61:e7: b7:d7:9a:84:9b:c7:9f:6e:98:47:36:b0:a6:f1:37: e3:ad:53:d9:5a:01:26:ab:da:ac:15:04:3d:4a:3d: e1:b0:45:62:3c:e3:c1:59:1f:83:cd:c8:32:94:b9: c8:d9:d5:ca:d3:a8:a2:1e:f9:6a:6b:f4:4b:b7:2d: 49:33:d3:d8:ed:8b:39:0d:a7:f0:e1:04:8e:8a:07: ae:a5:81:67:34:51:fc:7a:cb:b2:a1:3a:4a:ff:c8: a7:df:1f:68:54:01:c3:c4:a8:2a:d4:8f:e0:4a:04: d7:a9:9e:0b:f9:4b:9e:bb:72:1c:ee:73:bd:d2:14: 6f:5a:70:73:49:74:17:74:8a:e6:b9:ae:be:b8:83: c0:2b:f9:3e:3b:04:27:8f:ee:70:08:b9:6d:9f:12: 21:4d:2f:4b:aa:41:bf:e0:5b:49:6e:9d:b3:50:ba: 6c:3a:b1:d4:56:3e:ce:76:93:2b:94:81:92:d9:6e: ce:93:34:9e:d5:a9:4b:e8:64:07:16:1d:cb:e6:86: 20:f3:df:f3:78:61:17:3b:c1:ce:75:2c:0a:5c:d0: 78:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D9:BC:FB:A4:8F:5D:B8:E4:8A:8B:B0:82:01:A8:99:DE:25:4C:D6 X509v3 Authority Key Identifier: keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/32F44056DB1911EC87E56C0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.193.204.0/24 203.144.64.0/19 IPv6: 2401:4d80::/32 Signature Algorithm: sha256WithRSAEncryption 99:be:cc:34:8a:56:cf:37:c8:24:66:37:42:60:1a:9e:3f:08: 46:ee:a3:72:ef:74:c5:61:cf:e4:31:41:e7:6e:a2:d3:0c:20: 9a:2a:3e:a6:83:40:8c:55:4d:a0:49:64:31:7a:a8:c8:bf:03: b8:6e:e4:02:cd:1b:e2:1f:d7:4e:76:c7:6c:a2:8c:9b:ec:72: aa:c5:6a:b1:0a:8d:d6:8c:18:10:22:14:4a:ad:f9:41:5e:85: 5a:cf:2a:0d:11:28:3e:9a:d4:e3:d5:3d:a0:1f:46:44:e6:b6: e1:00:dc:b7:f3:d4:88:98:da:0b:98:91:c9:a0:90:22:41:9a: 6b:9a:e1:2f:55:de:88:6d:9f:4e:c9:96:ef:a4:f7:e5:3c:dc: 4d:c9:19:66:a7:7f:58:e8:21:be:d9:b5:08:23:67:d9:ba:f1: 22:96:06:9d:71:a7:7e:bb:e6:07:2a:f7:c8:e6:f7:42:aa:6b: 0a:bb:f2:5a:cc:16:cb:72:da:ce:f1:2e:f6:1d:cd:dc:34:93: ea:cd:da:36:f0:54:c7:59:b7:56:02:e6:04:46:55:8c:74:b9: 03:80:99:0a:19:6e:70:34:3b:ad:ee:b0:6b:44:49:fe:5e:1f: 7e:43:74:7f:84:f3:9c:c7:77:33:96:86:8a:08:44:e1:2c:c1: be:08:84:6f -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QTQxMTAvBgNVBAUTKDBDMDk5RUI3N0I2OEQxQTJERjU0OTJDNzMxQjY0RDU0 MUY1NTlCMDIwHhcNMjQwODIxMDI0NjE3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM1NTRmOS1lNjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lkyVGxCB9gNIvOF6lz1Xn+T2TipR3GSnI4UHnt1gA4dfmNaV37y6S9IYee3 15qEm8efbphHNrCm8TfjrVPZWgEmq9qsFQQ9Sj3hsEViPOPBWR+DzcgylLnI2dXK 06iiHvlqa/RLty1JM9PY7Ys5Dafw4QSOigeupYFnNFH8esuyoTpK/8in3x9oVAHD xKgq1I/gSgTXqZ4L+Uueu3Ic7nO90hRvWnBzSXQXdIrmua6+uIPAK/k+OwQnj+5w CLltnxIhTS9LqkG/4FtJbp2zULpsOrHUVj7OdpMrlIGS2W7OkzSe1alL6GQHFh3L 5oYg89/zeGEXO8HOdSwKXNB4pQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAzZvPuk j1245IqLsIIBqJneJUzWMB8GA1UdIwQYMBaAFAwJnrd7aNGi31SSxzG2TVQfVZsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlBNC9EQkFCOTM2RURB NzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBhTGZWSkxITWJaTlZCOVZt d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBbWV0M3RvMGFMZlZKTEhNYlpOVkI5Vm13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA5QTQvREJBQjkzNkVEQTc2MTFFQ0E0OEZGQzZDQzRGOUFFMDIvMzJGNDQwNTZE QjE5MTFFQzg3RTU2QzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnwcwDBAXLkEAwDQQCAAIwBwMFACQBTYAwDQYJKoZIhvcN AQELBQADggEBAJm+zDSKVs83yCRmN0JgGp4/CEbuo3LvdMVhz+QxQeduotMMIJoq PqaDQIxVTaBJZDF6qMi/A7hu5ALNG+If1052x2yijJvscqrFarEKjdaMGBAiFEqt +UFehVrPKg0RKD6a1OPVPaAfRkTmtuEA3Lfz1IiY2guYkcmgkCJBmmua4S9V3oht n07Jlu+k9+U83E3JGWanf1joIb7ZtQgjZ9m68SKWBp1xp3675gcq98jm90Kqawq7 8lrMFsty2s7xLvYdzdw0k+rN2jbwVMdZt1YC5gRGVYx0uQOAmQoZbnA0O63usGtE Sf5eH35DdH+E85zHdzOWhooIROEswb4IhG8= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:36 2024 by rpki-client on console-fra.rpki-client.org