$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa File: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (raw, json) Hash identifier: 6ms/JR/BOcYpbqf+j7psBq34xdVUcVZqpZ+JF3A68CE= Subject key identifier: 4C:F2:75:68:EB:65:5A:55:D7:52:C6:6C:49:FA:66:B7:65:B8:C9:2B Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 0687 Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa Signing time: Thu 08 Feb 2024 01:56:44 +0000 ROA not before: Thu 08 Feb 2024 01:56:44 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 58507 IP address blocks: 103.1.188.0/22 maxlen: 24 103.19.172.0/22 maxlen: 24 103.232.160.0/22 maxlen: 24 113.212.168.0/21 maxlen: 24 163.47.120.0/22 maxlen: 24 163.47.136.0/22 maxlen: 24 163.47.168.0/22 maxlen: 24 182.237.4.0/22 maxlen: 24 203.32.77.0/24 maxlen: 24 2400:5d00::/32 maxlen: 34 2400:5d00::/33 maxlen: 40 2400:5d00:8000::/34 maxlen: 40 2400:5d00:c000::/35 maxlen: 36 2400:5d00:c000::/36 maxlen: 40 2400:5d00:d000::/37 maxlen: 38 2400:5d00:d000::/38 maxlen: 40 2400:5d00:d400::/39 maxlen: 40 2404:59c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Feb 8 01:56:44 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65c434db-7920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:01:93:99:c4:c1:0d:5b:75:c8:10:48:4c: 62:5b:01:0c:18:50:bd:4b:bc:f3:3f:4e:02:05:ce: 53:4c:d6:17:24:38:ec:46:0e:0e:54:eb:87:d9:c6: 66:aa:ce:0a:f6:2e:b5:df:e2:f0:9e:b5:47:dc:4b: cf:ca:68:36:c8:87:a5:d8:4b:50:79:9d:13:7b:fb: 42:07:44:1f:b2:19:35:5c:bb:de:af:ff:59:f8:a9: 39:00:0e:59:f2:7f:0c:2b:73:62:35:d3:22:c2:77: 11:88:73:fd:32:09:89:48:b0:70:dd:3b:5c:69:3d: de:13:0d:6d:63:c4:aa:08:83:e6:26:4a:06:a2:c4: 09:d4:cd:d6:59:63:e9:17:37:83:6a:e9:7d:6a:41: 19:e9:df:3f:b2:11:21:7b:13:0e:bb:db:15:16:0c: 2d:70:ea:99:26:78:e8:9f:bd:67:fb:da:a0:ce:20: a6:c9:ac:05:f3:27:bd:c9:39:20:1e:5c:82:42:64: 70:54:e3:f4:bd:87:52:c0:36:8b:e2:cf:44:be:bf: 26:cf:96:ad:35:d9:b2:8b:73:05:f3:ce:bc:3c:e4: 58:70:75:77:0a:d5:c6:b5:a7:7d:b6:4a:c6:d2:4e: 02:d5:ff:e7:89:67:6a:54:47:a2:34:35:f8:b4:71: 80:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F2:75:68:EB:65:5A:55:D7:52:C6:6C:49:FA:66:B7:65:B8:C9:2B X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.188.0/22 103.19.172.0/22 103.232.160.0/22 113.212.168.0/21 163.47.120.0/22 163.47.136.0/22 163.47.168.0/22 182.237.4.0/22 203.32.77.0/24 IPv6: 2400:5d00::/32 2404:59c0::/32 Signature Algorithm: sha256WithRSAEncryption ca:1e:f8:92:0b:c2:f6:68:31:d4:6d:d8:e3:14:b1:f0:30:6a: 3b:08:61:79:b4:37:7b:24:72:64:46:b2:73:c5:49:bf:3c:01: a9:7a:7a:0c:89:57:81:d2:e3:b5:2a:80:ab:f5:09:5a:fc:5e: 33:4d:63:65:54:de:09:e9:ab:84:4e:cf:31:01:bc:42:7e:ce: 61:82:e4:89:84:22:a1:de:cd:a0:cf:03:41:e9:52:76:fb:a5: 89:ff:ec:08:d3:f1:4d:fc:ed:ee:d2:c3:99:3b:fc:cb:2a:ec: 61:c0:6e:e1:34:5f:b6:ad:19:65:98:1e:20:20:3e:ed:27:fc: 78:cf:ae:f8:27:e8:a4:fe:60:3f:60:2b:27:0d:b2:1f:a2:9e: 34:6d:64:f4:dd:6c:25:3d:6a:1b:e5:9d:be:05:d8:b9:0d:2f: 38:8a:52:73:2c:c3:89:21:3d:7f:42:43:74:ae:d7:4c:22:5c: 1e:c2:5f:0f:c0:e5:42:f1:69:5a:70:9d:a2:bd:83:60:fc:fb: fc:29:17:03:ee:57:83:28:37:b5:aa:7c:d6:e6:00:9c:dc:ab: d1:d0:84:33:56:25:5b:9b:28:5d:61:c2:b9:26:3c:5b:83:2a: d7:98:54:cd:f2:71:5a:a0:72:32:05:3f:be:a4:9b:76:b0:bd: 05:87:e4:f7 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjQwMjA4MDE1NjQ0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWM0MzRkYi03OTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgkBk5nEwQ1bdcgQSExiWwEMGFC9S7zzP04CBc5TTNYXJDjsRg4OVOuH2cZm qs4K9i613+LwnrVH3EvPymg2yIel2EtQeZ0Te/tCB0Qfshk1XLver/9Z+Kk5AA5Z 8n8MK3NiNdMiwncRiHP9MgmJSLBw3TtcaT3eEw1tY8SqCIPmJkoGosQJ1M3WWWPp FzeDaul9akEZ6d8/shEhexMOu9sVFgwtcOqZJnjon71n+9qgziCmyawF8ye9yTkg HlyCQmRwVOP0vYdSwDaL4s9Evr8mz5atNdmyi3MF8868PORYcHV3CtXGtad9tkrG 0k4C1f/niWdqVEeiNDX4tHGAoQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFEzydWjr ZVpV11LGbEn6ZrdluMkrMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzUwMjcvMjUwNUNFREMyNTY4MTFFQkFDMkNBQzVBQzRGOUFFMDIvMTJEQkFEM0NE QUZGMTFFQ0E2N0RBMTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZQYIKwYBBQUHAQcBAf8E VjBUMDwEAgABMDYDBAJnAbwDBAJnE6wDBAJn6KADBANx1KgDBAKjL3gDBAKjL4gD BAKjL6gDBAK27QQDBADLIE0wFAQCAAIwDgMFACQAXQADBQAkBFnAMA0GCSqGSIb3 DQEBCwUAA4IBAQDKHviSC8L2aDHUbdjjFLHwMGo7CGF5tDd7JHJkRrJzxUm/PAGp enoMiVeB0uO1KoCr9Qla/F4zTWNlVN4J6auETs8xAbxCfs5hguSJhCKh3s2gzwNB 6VJ2+6WJ/+wI0/FN/O3u0sOZO/zLKuxhwG7hNF+2rRllmB4gID7tJ/x4z674J+ik /mA/YCsnDbIfop40bWT03WwlPWob5Z2+Bdi5DS84ilJzLMOJIT1/QkN0rtdMIlwe wl8PwOVC8WlacJ2ivYNg/Pv8KRcD7leDKDe1qnzW5gCc3KvR0IQzViVbmyhdYcK5 JjxbgyrXmFTN8nFaoHIyBT++pJt2sL0Fh+T3 -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:44 2024 by rpki-client on console-fra.rpki-client.org