$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/9A19DA76006E11EAA4A23169C4F9AE02.roa File: 9A19DA76006E11EAA4A23169C4F9AE02.roa (raw, json) Hash identifier: OzbyolH9bnqek+TgcOKhtz1xdA7SR4fsToEZAPwjNSo= Subject key identifier: 3F:47:5D:BA:95:F1:BB:DB:CC:B0:57:28:CD:B7:B2:D1:99:7A:96:DA Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Certificate serial: 0BF2 Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/9A19DA76006E11EAA4A23169C4F9AE02.roa Signing time: Mon 28 Oct 2024 18:48:02 +0000 ROA not before: Mon 28 Oct 2024 18:48:02 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 64043 IP address blocks: 59.153.16.0/22 maxlen: 22 59.153.16.0/23 maxlen: 23 59.153.16.0/24 maxlen: 24 59.153.17.0/24 maxlen: 24 59.153.18.0/23 maxlen: 23 59.153.18.0/24 maxlen: 24 59.153.19.0/24 maxlen: 24 103.197.248.0/22 maxlen: 22 103.197.248.0/23 maxlen: 23 103.197.248.0/24 maxlen: 24 103.197.249.0/24 maxlen: 24 103.197.250.0/23 maxlen: 23 103.197.250.0/24 maxlen: 24 103.197.251.0/24 maxlen: 24 2403:f2c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3058 (0xbf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E Validity Not Before: Oct 28 18:48:02 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671fdc61-3c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:51:db:84:d7:84:c0:f6:57:7f:14:8e:34: 2d:f8:38:98:fd:ca:ba:4c:5e:dc:3e:6e:c3:83:dd: bf:75:80:d8:4f:a4:57:ea:6f:7c:1e:1c:43:93:ba: e5:a3:46:71:f1:4b:11:7a:4d:c8:79:bd:c9:03:c7: a3:35:bd:61:e2:6d:3f:b2:8e:6a:07:96:7d:d7:b8: 77:5e:f5:d0:55:f5:61:51:7f:9d:c7:a5:9e:f7:59: bf:2a:00:bf:e8:6a:bd:5e:02:4a:27:04:57:5f:72: 8e:24:99:05:3d:0e:21:10:94:d1:75:df:85:99:f3: 86:b5:2b:5d:bf:35:7a:05:d5:fc:b3:c8:b4:ca:69: f9:ab:f7:5d:7a:5c:cd:d5:4e:c6:d5:79:9e:b7:03: 04:7e:f9:11:ec:c7:38:75:c3:5a:45:ee:04:c0:06: 89:c3:fd:b8:07:72:04:a9:1b:f7:dd:66:cd:31:f3: 9e:8a:90:bb:fb:e6:2d:b6:c2:3e:7d:f6:3a:2b:a0: 76:11:89:66:f4:27:04:f5:d4:04:62:ef:5c:9f:87: 85:9a:54:f4:05:9e:36:d2:13:36:31:21:f8:60:0f: 6c:95:64:1f:ea:44:a4:15:de:7f:dd:87:36:28:f9: 0b:8c:85:dd:67:db:53:4b:db:f7:0f:e1:a2:10:5f: 70:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:47:5D:BA:95:F1:BB:DB:CC:B0:57:28:CD:B7:B2:D1:99:7A:96:DA X509v3 Authority Key Identifier: keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/9A19DA76006E11EAA4A23169C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.153.16.0/22 103.197.248.0/22 IPv6: 2403:f2c0::/32 Signature Algorithm: sha256WithRSAEncryption 4c:b2:28:20:bc:dc:f4:ce:84:9a:e0:b5:d9:07:2a:fc:12:f7: b3:f3:14:f9:98:43:8b:83:03:d2:ce:55:d7:01:d5:7e:45:74: 72:ba:23:b4:16:31:d6:82:b5:3a:53:89:fa:d4:5b:c6:2b:31: 68:26:27:04:6b:e8:5a:98:98:a8:e6:2b:54:17:ef:59:f9:63: 83:16:0a:8f:00:2a:1b:37:a9:b3:53:d2:44:40:90:9e:bc:05: 96:c4:4f:36:2a:08:28:a4:0b:20:c2:c5:25:8d:1c:24:1e:2a: cb:13:33:54:fa:40:bc:ea:0b:71:81:11:38:5d:54:ee:d5:7f: 97:24:a3:7f:13:ba:4b:24:37:02:35:27:06:50:64:16:78:29: 6a:ee:54:22:10:64:45:b8:e3:92:04:1e:ac:cb:6a:40:37:5c: 6c:d5:a2:63:47:2f:6d:7d:53:d0:cc:92:37:5c:7d:ba:b0:29: 3b:86:58:58:7d:a0:80:23:b9:3e:a8:9a:14:a2:34:6b:ec:05: 5e:7a:89:de:fb:d7:e8:dc:6a:e0:62:78:20:c3:9d:0f:1d:e9: 87:8c:39:bd:bf:4b:17:63:75:3d:1f:68:a9:f2:dd:6a:f3:83: 82:49:5b:af:fb:db:96:93:03:0b:df:ad:8c:0e:14:0c:20:83: dc:ac:1b:f3 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2MTUxMTAvBgNVBAUTKDE5NDhDQzE0RjMwRUQ4M0NBQTUyQzhFQzRCMDhDNDRD QTgzQTYyOUUwHhcNMjQxMDI4MTg0ODAyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFmZGM2MS0zYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrpR24TXhMD2V38UjjQt+DiY/cq6TF7cPm7Dg92/dYDYT6RX6m98HhxDk7rl o0Zx8UsRek3Ieb3JA8ejNb1h4m0/so5qB5Z917h3XvXQVfVhUX+dx6We91m/KgC/ 6Gq9XgJKJwRXX3KOJJkFPQ4hEJTRdd+FmfOGtStdvzV6BdX8s8i0ymn5q/ddelzN 1U7G1XmetwMEfvkR7Mc4dcNaRe4EwAaJw/24B3IEqRv33WbNMfOeipC7++YttsI+ ffY6K6B2EYlm9CcE9dQEYu9cn4eFmlT0BZ420hM2MSH4YA9slWQf6kSkFd5/3Yc2 KPkLjIXdZ9tTS9v3D+GiEF9wVwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFD9HXbqV 8bvbzLBXKM23stGZepbaMB8GA1UdIwQYMBaAFBlIzBTzDtg8qlLI7EsIxEyoOmKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzYxNS80MjAwQzlFNjAw NkMxMUVBQTM2M0MyNjRDNEY5QUUwMi9HVWpNRlBNTzJEeXFVc2pzU3dqRVRLZzZZ cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVak1GUE1PMkR5cVVzanNTd2pFVEtnNllwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M2MTUvNDIwMEM5RTYwMDZDMTFFQUEzNjNDMjY0QzRGOUFFMDIvOUExOURBNzYw MDZFMTFFQUE0QTIzMTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAI7mRADBAJnxfgwDQQCAAIwBwMFACQD8sAwDQYJKoZIhvcN AQELBQADggEBAEyyKCC83PTOhJrgtdkHKvwS97PzFPmYQ4uDA9LOVdcB1X5FdHK6 I7QWMdaCtTpTifrUW8YrMWgmJwRr6FqYmKjmK1QX71n5Y4MWCo8AKhs3qbNT0kRA kJ68BZbETzYqCCikCyDCxSWNHCQeKssTM1T6QLzqC3GBEThdVO7Vf5cko38Tuksk NwI1JwZQZBZ4KWruVCIQZEW445IEHqzLakA3XGzVomNHL219U9DMkjdcfbqwKTuG WFh9oIAjuT6omhSiNGvsBV56id771+jcauBieCDDnQ8d6YeMOb2/SxdjdT0faKny 3Wrzg4JJW6/725aTAwvfrYwOFAwgg9ysG/M= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org