$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/E94D73BE291D11EF86792873C4F9AE02.roa File: E94D73BE291D11EF86792873C4F9AE02.roa (raw, json) Hash identifier: qoIoX0JsFREycCLqPoVIIwH985mBQUcv+rcmwGljHCU= Subject key identifier: 66:36:AB:FC:25:52:88:D3:39:30:26:6B:E1:12:ED:2F:B5:97:E0:48 Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Certificate serial: 09AB Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/E94D73BE291D11EF86792873C4F9AE02.roa Signing time: Sat 02 Nov 2024 20:49:15 +0000 ROA not before: Sat 02 Nov 2024 20:49:15 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 10143 IP address blocks: 58.96.0.0/17 maxlen: 24 103.237.16.0/22 maxlen: 22 115.70.0.0/16 maxlen: 20 115.70.0.0/18 maxlen: 24 115.70.64.0/22 maxlen: 23 115.70.65.0/24 maxlen: 24 115.70.66.0/23 maxlen: 24 115.70.68.0/22 maxlen: 24 115.70.72.0/21 maxlen: 24 115.70.80.0/20 maxlen: 24 115.70.96.0/19 maxlen: 24 115.70.128.0/17 maxlen: 24 163.53.144.0/22 maxlen: 22 220.233.0.0/16 maxlen: 24 2406:3400::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Validity Not Before: Nov 2 20:49:15 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6726904b-7415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:75:c2:cc:25:6a:87:89:83:b2:0c:5e:d2:f8: e3:9e:6c:3c:96:da:a4:16:95:7f:aa:36:ed:d4:80: a4:be:09:d6:3f:02:a6:0d:4d:70:dc:7f:f7:1d:00: f6:4d:e5:49:0b:ed:46:70:f2:e9:4a:f0:89:dd:ca: 39:db:09:8e:8a:d1:2a:d4:a1:bb:ec:4f:0b:9e:e7: bd:9b:1f:c5:57:e6:f9:71:bb:7d:81:6f:3f:ab:c7: a0:9d:33:ac:7d:4c:ff:3c:44:cd:e1:58:42:06:c4: 3a:22:4b:9c:b8:b3:de:3f:b6:f7:77:58:71:e2:0c: 55:ed:aa:b5:8a:73:0f:59:b2:97:ee:d1:08:29:17: 51:3c:1f:25:e7:bd:70:8c:8b:b8:dc:d8:56:f3:c4: 53:05:1e:e9:c9:f6:08:00:dc:20:de:97:5c:9e:9f: 4d:ee:08:5d:d3:0f:41:a6:c0:80:98:42:4c:22:88: d9:84:54:9c:01:5b:02:10:05:6f:ac:7c:5e:47:5b: 85:04:83:52:59:84:ba:ca:c3:d8:cb:00:03:05:fe: 7e:71:be:b4:33:bf:a8:1d:2c:37:8a:e9:36:35:27: 4b:f1:af:ad:b8:b7:c5:12:8b:52:de:e0:17:8c:3d: d6:6f:61:45:04:15:fc:00:23:d8:19:cf:2d:99:32: d6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:36:AB:FC:25:52:88:D3:39:30:26:6B:E1:12:ED:2F:B5:97:E0:48 X509v3 Authority Key Identifier: keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/E94D73BE291D11EF86792873C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.96.0.0/17 103.237.16.0/22 115.70.0.0/16 163.53.144.0/22 220.233.0.0/16 IPv6: 2406:3400::/32 Signature Algorithm: sha256WithRSAEncryption b7:80:3d:1c:a1:bb:bd:e8:3e:48:92:14:70:89:7b:ed:6c:64: 98:49:78:c4:d7:11:3c:05:0d:2d:92:3b:3c:cb:a3:ee:e2:53: 13:9d:f8:e7:47:e0:eb:2e:35:44:d2:bf:a6:a2:4b:cc:ff:05: cf:a9:b9:c7:79:35:c6:7b:1c:36:8c:4c:f6:ce:c4:44:bf:e6: e5:88:b8:7b:ec:ec:3b:af:3c:2f:da:ab:86:ba:a2:64:73:86: 8e:0d:32:f2:b4:27:f7:cb:b4:e7:1f:5f:ef:fa:10:ff:3d:38: 0f:40:26:1e:1a:72:1d:1a:53:52:a0:f6:e9:a6:ff:19:ec:56: d0:83:5a:1a:20:35:16:ac:93:f2:aa:e7:ab:72:ae:b4:d9:b1: 4c:4a:6c:a5:fb:6f:b7:7b:ed:b3:f7:31:ee:1a:77:b5:07:61: 01:a6:2a:32:33:fe:58:76:54:bf:0c:99:f4:79:df:fa:1a:00: bd:30:ee:83:5a:a6:d1:2b:b8:86:84:25:1f:d8:02:e2:c6:5c: 0b:d8:97:43:54:2d:f4:38:29:60:91:36:f4:2a:9f:05:21:9c: be:18:b1:0f:2f:7b:a1:6d:10:1d:52:bb:78:0c:03:e8:f2:0d: e3:93:d0:c1:c6:ee:ee:28:59:d7:fd:45:da:e5:32:fe:1f:bd: 72:b5:da:8d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0 QkM3OTczQjEwHhcNMjQxMTAyMjA0OTE1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2OTA0Yi03NDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03XCzCVqh4mDsgxe0vjjnmw8ltqkFpV/qjbt1ICkvgnWPwKmDU1w3H/3HQD2 TeVJC+1GcPLpSvCJ3co52wmOitEq1KG77E8Lnue9mx/FV+b5cbt9gW8/q8egnTOs fUz/PETN4VhCBsQ6IkucuLPeP7b3d1hx4gxV7aq1inMPWbKX7tEIKRdRPB8l571w jIu43NhW88RTBR7pyfYIANwg3pdcnp9N7ghd0w9BpsCAmEJMIojZhFScAVsCEAVv rHxeR1uFBINSWYS6ysPYywADBf5+cb60M7+oHSw3iuk2NSdL8a+tuLfFEotS3uAX jD3Wb2FFBBX8ACPYGc8tmTLWbwIDAQABo4ICujCCArYwHQYDVR0OBBYEFGY2q/wl UojTOTAma+ES7S+1l+BIMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUU0NzUvREE4M0FBN0FDQTExMTFFQUE0NzlDNzM0QzRGOUFFMDIvRTk0RDczQkUy OTFEMTFFRjg2NzkyODczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E NTAzMCIEAgABMBwDBAc6YAADBAJn7RADAwBzRgMEAqM1kAMDANzpMA0EAgACMAcD BQAkBjQAMA0GCSqGSIb3DQEBCwUAA4IBAQC3gD0cobu96D5IkhRwiXvtbGSYSXjE 1xE8BQ0tkjs8y6Pu4lMTnfjnR+DrLjVE0r+mokvM/wXPqbnHeTXGexw2jEz2zsRE v+bliLh77Ow7rzwv2quGuqJkc4aODTLytCf3y7TnH1/v+hD/PTgPQCYeGnIdGlNS oPbppv8Z7FbQg1oaIDUWrJPyquercq602bFMSmyl+2+3e+2z9zHuGne1B2EBpioy M/5YdlS/DJn0ed/6GgC9MO6DWqbRK7iGhCUf2ALixlwL2JdDVC30OClgkTb0Kp8F IZy+GLEPL3uhbRAdUrt4DAPo8g3jk9DBxu7uKFnX/UXa5TL+H71ytdqN -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org