$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F24192CCFFED11EB93712E74C4F9AE02.roa File: F24192CCFFED11EB93712E74C4F9AE02.roa (raw, json) Hash identifier: PYOGlMtt7KJUdRRAQ6bvQgTH2048xSAwhMeFWKXqbak= Subject key identifier: D7:98:A0:7C:58:07:AE:C0:ED:A9:0A:26:5C:DF:91:71:6F:A0:A9:FC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 99B7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F24192CCFFED11EB93712E74C4F9AE02.roa Signing time: Fri 20 Sep 2024 08:45:44 +0000 ROA not before: Fri 20 Sep 2024 08:45:44 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133296 IP address blocks: 43.239.110.0/24 maxlen: 24 103.233.24.0/23 maxlen: 24 103.251.22.0/24 maxlen: 24 202.162.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39351 (0x99b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 20 08:45:44 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66ed3638-a825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b1:62:2c:23:cd:ac:e4:36:af:0f:34:2e:81: b3:8a:94:22:cd:56:0b:e4:09:80:cd:e7:ca:9e:1f: a8:3c:38:e8:f9:5f:fd:c3:d9:82:d6:70:b9:73:63: c5:e1:9b:0c:1c:59:4a:03:99:95:b9:e4:f2:98:fc: 47:da:f6:82:04:e5:6c:f8:58:bd:7d:a7:11:23:cb: 7d:92:d9:b2:a2:71:5e:53:2c:64:70:60:3c:61:da: f2:91:dd:65:ef:5f:77:37:20:a6:2f:1e:f2:63:64: e7:e7:11:eb:f6:fb:a4:74:0a:2c:e9:96:06:77:b7: a7:9c:bb:eb:d9:25:1b:30:88:92:73:d9:df:3c:61: 0d:2c:30:e0:dd:2e:51:4d:35:f0:43:c8:fb:98:1b: 2a:0f:ab:c4:57:68:f0:f0:6c:d5:f4:bd:e4:ee:e9: fb:10:17:6e:dc:e3:45:49:36:2d:91:5a:65:5d:27: 01:54:88:5b:91:50:3d:da:e4:3d:a7:f8:92:26:7d: 3b:bd:40:f4:41:3d:fd:17:35:67:71:5d:20:00:3e: 03:50:c2:ad:ba:e0:ac:69:46:c2:da:b4:c4:40:b6: c3:6b:52:da:b9:d1:5c:c1:ae:b1:c0:91:22:c8:a0: 17:de:06:6c:0c:ce:17:61:7d:3d:f5:b7:ca:03:74: 79:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:98:A0:7C:58:07:AE:C0:ED:A9:0A:26:5C:DF:91:71:6F:A0:A9:FC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F24192CCFFED11EB93712E74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.110.0/24 103.233.24.0/23 103.251.22.0/24 202.162.231.0/24 Signature Algorithm: sha256WithRSAEncryption 49:d3:36:53:b7:9c:09:f8:d5:52:7e:04:14:61:75:be:3b:7e: 64:8f:9c:39:cd:c0:ad:c8:4a:28:9e:16:f0:ff:94:e3:a4:d7: 49:cb:78:b2:7c:cf:3d:3b:76:a1:96:71:b2:a8:85:42:28:3c: dd:ca:4a:12:8c:8e:3d:54:28:8f:20:27:10:80:98:66:6f:77: 4e:bb:5b:68:3a:64:a1:df:2e:0d:2a:d0:c9:5a:14:cd:61:ba: e5:1d:a0:a2:bb:43:9d:56:58:a9:4f:88:63:e6:ac:2b:51:06: 99:cb:60:2e:bb:4b:f0:ce:13:77:02:c0:d6:c5:75:84:cc:45: 93:dc:5e:b0:f2:4b:e9:90:04:46:7f:3b:61:1f:1a:ac:b8:e7: 50:57:a1:83:73:bc:05:82:02:8a:ed:62:6d:c8:e8:ae:0b:22: dc:c9:67:e7:27:1e:db:aa:25:cb:6f:6f:4d:0c:22:03:6e:fd: 75:b7:e8:5c:b3:c4:d0:89:a7:06:04:f7:ce:b7:05:2f:d2:bb: c5:34:41:24:5e:e3:40:6e:ff:0f:1a:94:e6:83:72:2b:1b:72: 5c:62:ad:3b:54:e6:bf:27:bf:5b:15:0a:c8:fb:64:1f:0c:0a: d4:f4:68:57:0b:f5:0f:b1:00:b6:51:70:61:eb:2c:0b:7f:0c: 87:30:6d:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAJm3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDkyMDA4NDU0NFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjZlZDM2MzgtYTgyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOSxYiwjzazkNq8PNC6Bs4qUIs1WC+QJgM3nyp4fqDw46Plf/cPZgtZwuXNj xeGbDBxZSgOZlbnk8pj8R9r2ggTlbPhYvX2nESPLfZLZsqJxXlMsZHBgPGHa8pHd Ze9fdzcgpi8e8mNk5+cR6/b7pHQKLOmWBne3p5y769klGzCIknPZ3zxhDSww4N0u UU018EPI+5gbKg+rxFdo8PBs1fS95O7p+xAXbtzjRUk2LZFaZV0nAVSIW5FQPdrk Paf4kiZ9O71A9EE9/Rc1Z3FdIAA+A1DCrbrgrGlGwtq0xEC2w2tS2rnRXMGuscCR IsigF94GbAzOF2F9PfW3ygN0eVUCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBTXmKB8 WAeuwO2pCiZc35Fxb6Cp/DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YyNDE5MkND RkZFRDExRUI5MzcxMkU3NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDEGCCsGAQUFBwEHAQH/ BCIwIDAeBAIAATAYAwQAK+9uAwQBZ+kYAwQAZ/sWAwQAyqLnMA0GCSqGSIb3DQEB CwUAA4IBAQBJ0zZTt5wJ+NVSfgQUYXW+O35kj5w5zcCtyEoonhbw/5TjpNdJy3iy fM89O3ahlnGyqIVCKDzdykoSjI49VCiPICcQgJhmb3dOu1toOmSh3y4NKtDJWhTN YbrlHaCiu0OdVlipT4hj5qwrUQaZy2Auu0vwzhN3AsDWxXWEzEWT3F6w8kvpkARG fzthHxqsuOdQV6GDc7wFggKK7WJtyOiuCyLcyWfnJx7bqiXLb29NDCIDbv11t+hc s8TQiacGBPfOtwUv0rvFNEEkXuNAbv8PGpTmg3IrG3JcYq07VOa/J79bFQrI+2Qf DArU9GhXC/UPsQC2UXBh6ywLfwyHMG3z -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:30 2024 by rpki-client on console-ams.rpki-client.org