$ rpki-client -vvf rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/1AD373BAB85911EEAD35104FC4F9AE02.roa File: 1AD373BAB85911EEAD35104FC4F9AE02.roa (raw, json) Hash identifier: yhDhFNMn6OzfJ6zoaSwzG2e+cVk2z/6FA3i/9aS2LKA= Subject key identifier: 07:35:DE:18:72:4F:91:DB:15:B2:55:D8:66:1F:91:07:75:40:7E:DE Certificate issuer: /CN=A915802B/serialNumber=3A43780F6C432DEE474A8A9568590282DBEA5DB3 Certificate serial: 0A1B Authority key identifier: 3A:43:78:0F:6C:43:2D:EE:47:4A:8A:95:68:59:02:82:DB:EA:5D:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OkN4D2xDLe5HSoqVaFkCgtvqXbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/1AD373BAB85911EEAD35104FC4F9AE02.roa Signing time: Fri 22 Nov 2024 19:39:24 +0000 ROA not before: Fri 22 Nov 2024 19:39:24 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 137030 IP address blocks: 103.102.132.0/22 maxlen: 22 103.102.132.0/23 maxlen: 23 103.102.132.0/24 maxlen: 24 103.102.133.0/24 maxlen: 24 103.102.134.0/23 maxlen: 23 103.102.134.0/24 maxlen: 24 103.102.135.0/24 maxlen: 24 2405:e2c0::/32 maxlen: 32 2405:e2c0::/48 maxlen: 48 2405:e2c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/OkN4D2xDLe5HSoqVaFkCgtvqXbM.crl rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/OkN4D2xDLe5HSoqVaFkCgtvqXbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OkN4D2xDLe5HSoqVaFkCgtvqXbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915802B/serialNumber=3A43780F6C432DEE474A8A9568590282DBEA5DB3 Validity Not Before: Nov 22 19:39:24 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6740ddeb-c5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:da:70:e3:09:11:bb:20:15:3e:fa:bd:a3:e1: e0:3b:57:3b:f5:01:11:9b:4e:3e:35:21:e3:be:93: 08:12:f2:d3:5e:0c:89:36:a4:45:0a:eb:ed:c6:34: 50:d3:df:e8:d1:45:3d:ca:2f:dd:1c:7d:97:91:50: b7:96:06:4a:41:eb:a9:2e:bb:6b:66:ca:0f:31:0e: de:b4:54:48:f1:67:3e:46:db:97:e9:ee:4f:3b:b6: 15:6b:94:c9:16:89:e9:82:cb:1f:10:92:43:2f:c1: 71:73:60:d6:03:46:b4:cb:6d:9e:63:c0:29:04:59: 32:e1:b6:cb:a2:55:a0:dc:c6:a1:16:d1:18:d8:24: 14:bb:93:58:fd:8c:95:8f:63:18:c0:ee:26:31:7a: 8a:44:1c:7b:9a:3d:87:f2:c3:b0:3b:1a:55:5c:47: b2:e7:72:7e:08:09:c2:4d:e9:15:77:2d:9e:c2:f8: d4:b6:94:37:3c:d5:33:6c:a9:51:d9:90:f1:b1:8f: 67:f7:6e:f8:00:f5:61:68:b1:19:89:8c:9d:d9:80: b7:d3:2b:6a:70:dc:d4:3b:0e:b3:f3:7a:78:1e:62: 48:4e:55:5e:e4:c3:b9:ca:ef:7f:f4:e9:13:c8:e4: d6:e8:2a:9f:50:9e:64:62:b0:d3:33:dc:4a:45:7c: 92:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:35:DE:18:72:4F:91:DB:15:B2:55:D8:66:1F:91:07:75:40:7E:DE X509v3 Authority Key Identifier: keyid:3A:43:78:0F:6C:43:2D:EE:47:4A:8A:95:68:59:02:82:DB:EA:5D:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/OkN4D2xDLe5HSoqVaFkCgtvqXbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OkN4D2xDLe5HSoqVaFkCgtvqXbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/1AD373BAB85911EEAD35104FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.132.0/22 IPv6: 2405:e2c0::/32 Signature Algorithm: sha256WithRSAEncryption 9a:fa:63:f3:18:d7:e5:6f:56:42:59:5e:ed:57:71:23:c5:51: ee:7c:71:d1:2f:f1:09:9a:1a:bf:fb:f5:fc:87:90:68:83:c0: 7e:05:18:16:fa:3c:83:c9:fb:ad:09:7c:07:fe:f3:9b:57:23: 84:01:ad:46:bf:b9:64:77:14:b0:6e:42:7a:74:34:08:39:1f: 5b:ec:a2:8e:6f:fc:ad:6c:1e:9a:d0:40:a7:af:05:dc:da:58: bc:f6:b0:47:44:f3:65:49:82:01:d3:11:3b:f0:7b:b7:2b:bb: ea:47:b3:29:e1:bd:8c:52:f1:52:08:38:5b:dc:be:41:26:f6: 9b:e9:e6:f7:81:92:f8:f6:ed:49:72:13:49:10:36:f8:b2:db: 3e:c2:6b:7a:6a:42:a1:a4:b7:c3:29:6f:7c:65:36:dc:a3:47: 49:86:09:60:8f:c9:5c:73:a6:7b:f2:c9:b9:d1:08:1c:a0:78: 5f:be:bb:40:70:97:91:2a:79:ee:4d:55:c3:eb:9e:d3:34:bb: 34:08:67:b9:16:e0:1f:58:b5:22:58:6b:9b:d6:89:a3:fa:04: 8b:e1:38:ae:a3:7f:c3:04:16:e1:ce:f0:c4:4c:a1:90:2d:ee: 60:55:c7:1f:bf:30:e0:8d:7a:db:73:f2:8d:9f:9e:73:24:33: 99:c7:eb:c5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMkIxMTAvBgNVBAUTKDNBNDM3ODBGNkM0MzJERUU0NzRBOEE5NTY4NTkwMjgy REJFQTVEQjMwHhcNMjQxMTIyMTkzOTI0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQwZGRlYi1jNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9pw4wkRuyAVPvq9o+HgO1c79QERm04+NSHjvpMIEvLTXgyJNqRFCuvtxjRQ 09/o0UU9yi/dHH2XkVC3lgZKQeupLrtrZsoPMQ7etFRI8Wc+RtuX6e5PO7YVa5TJ FonpgssfEJJDL8Fxc2DWA0a0y22eY8ApBFky4bbLolWg3MahFtEY2CQUu5NY/YyV j2MYwO4mMXqKRBx7mj2H8sOwOxpVXEey53J+CAnCTekVdy2ewvjUtpQ3PNUzbKlR 2ZDxsY9n9274APVhaLEZiYyd2YC30ytqcNzUOw6z83p4HmJITlVe5MO5yu9/9OkT yOTW6CqfUJ5kYrDTM9xKRXySYwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAc13hhy T5HbFbJV2GYfkQd1QH7eMB8GA1UdIwQYMBaAFDpDeA9sQy3uR0qKlWhZAoLb6l2z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAyQi8zMzBDQzNDNDYw NTAxMUVBOTU3NzY3NTRDNEY5QUUwMi9Pa040RDJ4RExlNUhTb3FWYUZrQ2d0dnFY Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rTjREMnhETGU1SFNvcVZhRmtDZ3R2cVhiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgwMkIvMzMwQ0MzQzQ2MDUwMTFFQTk1Nzc2NzU0QzRGOUFFMDIvMUFEMzczQkFC ODU5MTFFRUFEMzUxMDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnZoQwDQQCAAIwBwMFACQF4sAwDQYJKoZIhvcNAQELBQAD ggEBAJr6Y/MY1+VvVkJZXu1XcSPFUe58cdEv8QmaGr/79fyHkGiDwH4FGBb6PIPJ +60JfAf+85tXI4QBrUa/uWR3FLBuQnp0NAg5H1vsoo5v/K1sHprQQKevBdzaWLz2 sEdE82VJggHTETvwe7cru+pHsynhvYxS8VIIOFvcvkEm9pvp5veBkvj27UlyE0kQ Nviy2z7Ca3pqQqGkt8Mpb3xlNtyjR0mGCWCPyVxzpnvyybnRCBygeF++u0Bwl5Eq ee5NVcPrntM0uzQIZ7kW4B9YtSJYa5vWiaP6BIvhOK6jf8MEFuHO8MRMoZAt7mBV xx+/MOCNettz8o2fnnMkM5nH68U= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org