$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAA0388003B611EB9ECABC65C4F9AE02.roa File: AAA0388003B611EB9ECABC65C4F9AE02.roa (raw, json) Hash identifier: A9yNye9tPVGcVtPS9A6mmrRx4z8jgHRmd9Ovr7aiBp4= Subject key identifier: 52:79:0D:E5:22:01:9A:CA:46:FC:14:ED:3F:E5:EF:AC:1B:83:B5:B6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9498 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAA0388003B611EB9ECABC65C4F9AE02.roa Signing time: Mon 15 Jul 2024 11:16:49 +0000 ROA not before: Mon 15 Jul 2024 11:16:49 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 59185 IP address blocks: 45.119.112.0/22 maxlen: 24 103.59.152.0/22 maxlen: 24 103.77.202.0/23 maxlen: 24 2001:df4:5a80::/48 maxlen: 48 2401:a360::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38040 (0x9498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 15 11:16:49 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66950520-bd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:98:33:d9:c0:60:fe:92:27:d9:8b:51:1a:ef: 8e:52:4c:88:3e:66:62:68:d8:61:ac:5d:b3:c5:4c: e2:03:f6:0d:81:5b:62:c1:bf:f0:e1:9f:2a:f4:c6: 98:4c:c6:90:04:cb:cf:98:14:3f:82:5b:eb:79:c4: 64:63:8f:a0:bc:a1:3b:5b:c9:60:06:ef:30:41:f5: ec:32:7b:cd:f7:c1:50:51:cf:df:16:13:9f:41:8c: 59:9b:3a:d2:1f:a7:ab:6e:25:97:35:c0:04:43:7b: 87:09:c3:92:08:22:4c:15:f7:f0:33:8d:e4:d4:f8: ed:ea:f7:8e:1d:d5:35:6c:65:5c:cb:33:0c:bd:e8: 2a:14:e9:24:c3:d6:ea:25:af:f6:ed:fc:af:3d:38: 45:95:cb:ab:11:55:2e:2d:56:03:99:ab:f8:a3:a1: bc:c9:31:0b:84:1a:61:43:70:13:4d:17:c2:89:bd: b1:94:7b:63:e5:6e:68:18:9a:87:ae:ee:d3:88:90: e7:25:14:f0:d0:8e:a6:ea:0f:b8:b8:c4:f8:4a:cd: 64:65:cb:db:95:e8:49:35:04:3d:2d:af:28:18:50: 96:9f:0a:9e:b4:8c:40:b0:07:a5:30:70:65:ec:35: 8d:63:9e:51:3c:64:b9:85:f1:c9:10:75:ab:ab:cc: 57:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:79:0D:E5:22:01:9A:CA:46:FC:14:ED:3F:E5:EF:AC:1B:83:B5:B6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AAA0388003B611EB9ECABC65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.112.0/22 103.59.152.0/22 103.77.202.0/23 IPv6: 2001:df4:5a80::/48 2401:a360::/32 Signature Algorithm: sha256WithRSAEncryption 7b:8c:63:88:cd:94:ae:12:d8:64:b6:3c:f5:5e:0a:c8:bd:23: 42:51:eb:18:49:af:dc:40:e7:ca:69:6a:fc:31:57:98:c0:a7: 82:f4:2c:a6:de:1e:90:fc:c3:24:2d:0f:43:68:c9:3d:81:a0: 49:f9:c0:31:f3:8d:69:73:c1:dd:3e:36:0a:61:12:f9:ec:ac: 4c:63:2e:13:4d:4a:0b:46:bc:0b:5e:7b:0b:fe:b8:77:7f:81: c5:2e:aa:fc:55:9c:b3:9c:c6:a6:32:bf:be:d5:a1:a4:32:f8: a9:77:13:3b:17:2c:cf:86:df:3f:ee:5a:6a:11:9d:ea:a9:38: 89:94:c6:a8:3b:55:18:a8:bf:7d:38:f4:b8:bc:49:8c:4e:ac: 97:8a:8a:42:48:01:39:a3:6c:07:9d:43:e9:e1:63:15:8a:ac: 0e:b6:23:90:11:a2:81:72:eb:47:5c:22:b4:a3:c8:e4:98:53: 66:a3:f5:63:87:e4:e2:a8:ea:04:40:99:1e:cc:36:34:31:31: 97:94:b7:b5:80:dc:4e:e0:01:d2:d4:d5:bf:c8:f7:dc:42:73: bc:18:9f:43:46:33:4e:c4:ed:7e:01:f1:d6:79:ad:99:e9:94: e9:cb:e4:d0:9b:4b:31:be:a2:fb:01:2e:8e:3a:23:a9:b3:f8: 74:53:5e:39 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIDAJSYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDcxNTExMTY0OVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY5NTA1MjAtYmQzYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPSYM9nAYP6SJ9mLURrvjlJMiD5mYmjYYaxds8VM4gP2DYFbYsG/8OGfKvTG mEzGkATLz5gUP4Jb63nEZGOPoLyhO1vJYAbvMEH17DJ7zffBUFHP3xYTn0GMWZs6 0h+nq24llzXABEN7hwnDkggiTBX38DON5NT47er3jh3VNWxlXMszDL3oKhTpJMPW 6iWv9u38rz04RZXLqxFVLi1WA5mr+KOhvMkxC4QaYUNwE00Xwom9sZR7Y+VuaBia h67u04iQ5yUU8NCOpuoPuLjE+ErNZGXL25XoSTUEPS2vKBhQlp8KnrSMQLAHpTBw Zew1jWOeUTxkuYXxyRB1q6vMV4cCAwEAAaOCArkwggK1MB0GA1UdDgQWBBRSeQ3l IgGaykb8FO0/5e+sG4O1tjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FBQTAzODgw MDNCNjExRUI5RUNBQkM2NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEMGCCsGAQUFBwEHAQH/ BDQwMjAYBAIAATASAwQCLXdwAwQCZzuYAwQBZ03KMBYEAgACMBADBwAgAQ30WoAD BQAkAaNgMA0GCSqGSIb3DQEBCwUAA4IBAQB7jGOIzZSuEthktjz1XgrIvSNCUesY Sa/cQOfKaWr8MVeYwKeC9Cym3h6Q/MMkLQ9DaMk9gaBJ+cAx841pc8HdPjYKYRL5 7KxMYy4TTUoLRrwLXnsL/rh3f4HFLqr8VZyznMamMr++1aGkMvipdxM7FyzPht8/ 7lpqEZ3qqTiJlMaoO1UYqL99OPS4vEmMTqyXiopCSAE5o2wHnUPp4WMViqwOtiOQ EaKBcutHXCK0o8jkmFNmo/Vjh+TiqOoEQJkezDY0MTGXlLe1gNxO4AHS1NW/yPfc QnO8GJ9DRjNOxO1+AfHWea2Z6ZTpy+TQm0sxvqL7AS6OOiOps/h0U145 -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:48 2024 by rpki-client on console-fra.rpki-client.org