$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/16D9F79EE1DE11EEA385B763C4F9AE02.roa File: 16D9F79EE1DE11EEA385B763C4F9AE02.roa (raw, json) Hash identifier: cczU69wISt7/AR5yeZ1XveY0HlidI8LzNJiDO6ld4tc= Subject key identifier: 44:FF:14:0F:C3:A3:95:44:07:55:94:FC:60:53:9E:C7:9A:5D:A4:91 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 21CF Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/16D9F79EE1DE11EEA385B763C4F9AE02.roa Signing time: Tue 30 Apr 2024 16:23:49 +0000 ROA not before: Tue 30 Apr 2024 16:23:49 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 45650 IP address blocks: 43.245.84.0/22 maxlen: 24 45.64.114.0/24 maxlen: 24 45.64.115.0/24 maxlen: 24 103.10.28.0/22 maxlen: 24 103.41.172.0/22 maxlen: 24 103.129.132.0/22 maxlen: 24 110.44.112.0/20 maxlen: 24 150.107.106.0/23 maxlen: 24 2404:7c00::/32 maxlen: 32 2404:7c00::/48 maxlen: 48 2404:7c00:1::/48 maxlen: 48 2404:7c00:40::/44 maxlen: 48 2404:7c00:50::/44 maxlen: 48 2404:7c00:60::/44 maxlen: 48 2404:7c00:70::/44 maxlen: 48 2404:7c00:80::/44 maxlen: 48 2404:7c00:7c00::/40 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8655 (0x21cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Apr 30 16:23:49 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66311b15-4e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e7:7a:e6:00:3f:26:57:4a:95:14:3f:cc:a1: 33:80:69:57:55:0c:36:36:90:e7:c2:77:e9:00:6e: 56:a4:32:e7:96:01:0f:05:18:34:02:29:f8:fb:3f: eb:9b:f5:04:99:92:26:f7:35:ee:05:ea:45:fd:92: 06:ad:2a:5b:36:2c:ea:f6:55:79:ec:ff:23:76:d4: bc:83:67:9d:1d:d8:50:64:28:00:33:1f:03:3f:ec: 06:94:1b:9e:6f:8e:c7:05:08:30:93:25:26:f5:53: 85:af:41:32:ed:d2:cd:dc:9a:b0:7f:c1:6a:47:f8: ce:f5:99:39:b3:83:17:17:04:f9:25:a0:7d:45:5d: 7e:bb:ca:3f:4c:86:46:c6:79:24:de:2d:d3:0c:c8: 92:bb:2a:2a:ba:a9:f9:71:a7:a0:79:fc:97:39:b5: 36:ac:fa:f3:79:36:e6:22:91:d7:4b:9a:07:82:00: fb:c4:96:76:f1:68:48:1e:3d:68:55:41:ae:b2:38: ea:ba:64:1a:d2:1e:80:a7:58:3e:fa:9b:74:cb:51: 80:e4:20:ef:b4:83:ed:b3:45:aa:cf:49:ae:d0:c6: 74:09:6d:e7:b2:25:3e:4c:bd:3b:17:6d:7e:8a:45: 78:3d:21:1a:38:ce:f7:81:25:21:37:ed:b8:9d:e9: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FF:14:0F:C3:A3:95:44:07:55:94:FC:60:53:9E:C7:9A:5D:A4:91 X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/16D9F79EE1DE11EEA385B763C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.84.0/22 45.64.114.0/23 103.10.28.0/22 103.41.172.0/22 103.129.132.0/22 110.44.112.0/20 150.107.106.0/23 IPv6: 2404:7c00::/32 Signature Algorithm: sha256WithRSAEncryption 13:3a:00:b9:d0:ed:aa:66:24:8d:5f:a7:4a:34:60:ff:f3:0f: 26:3a:f5:b4:59:27:52:89:7f:6f:46:70:6e:19:ac:50:ff:3f: 3d:d8:b7:5f:53:a3:6d:f8:03:0b:df:8b:0f:f2:73:21:3f:ed: 48:b9:e1:d6:aa:df:64:f8:5a:a4:d4:99:ea:c7:f6:2f:45:93: b4:85:15:a5:93:2f:59:97:77:06:a8:2c:10:f5:bb:eb:d4:77: 81:4c:3c:ab:94:77:4c:bb:0e:f3:4d:91:ad:e3:4e:35:4f:8a: 12:f8:c7:39:63:1e:87:c4:89:e1:32:a1:f2:39:e4:09:10:43: 22:f2:bb:4f:b1:70:c6:b4:0e:b1:2c:6c:5d:26:e0:ed:0d:d7: 05:3d:7b:06:47:ca:71:ca:f1:25:c5:59:08:3a:ab:55:9f:d5: 88:05:cc:c5:07:2a:92:6b:f5:90:82:57:aa:93:06:19:f6:69: 47:02:4f:97:68:92:2e:60:e2:68:92:ba:6f:7e:c0:1f:01:1d: 48:db:92:f9:d7:fa:b4:63:b3:6e:fc:94:12:71:46:5b:f6:35: b4:94:c3:0e:29:2f:51:e9:38:64:4f:e4:81:ad:97:e5:41:77: 75:7f:0f:15:8c:a0:d3:95:6b:b4:63:fc:af:71:90:fa:f3:61: 11:2e:eb:35 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICIc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjQwNDMwMTYyMzQ5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxMWIxNS00ZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Od65gA/JldKlRQ/zKEzgGlXVQw2NpDnwnfpAG5WpDLnlgEPBRg0Ain4+z/r m/UEmZIm9zXuBepF/ZIGrSpbNizq9lV57P8jdtS8g2edHdhQZCgAMx8DP+wGlBue b47HBQgwkyUm9VOFr0Ey7dLN3Jqwf8FqR/jO9Zk5s4MXFwT5JaB9RV1+u8o/TIZG xnkk3i3TDMiSuyoquqn5caegefyXObU2rPrzeTbmIpHXS5oHggD7xJZ28WhIHj1o VUGusjjqumQa0h6Ap1g++pt0y1GA5CDvtIPts0Wqz0mu0MZ0CW3nsiU+TL07F21+ ikV4PSEaOM73gSUhN+24nemZSQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFET/FA/D o5VEB1WU/GBTnseaXaSRMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTkzMzMvMDY1REEzQkFCODQ0MTFFNUI1MzU3QjJGQzRGOUFFMDIvMTZEOUY3OUVF MURFMTFFRUEzODVCNzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMDAEAgABMCoDBAIr9VQDBAEtQHIDBAJnChwDBAJnKawDBAJngYQDBARuLHAD BAGWa2owDQQCAAIwBwMFACQEfAAwDQYJKoZIhvcNAQELBQADggEBABM6ALnQ7apm JI1fp0o0YP/zDyY69bRZJ1KJf29GcG4ZrFD/Pz3Yt19To234Awvfiw/ycyE/7Ui5 4daq32T4WqTUmerH9i9Fk7SFFaWTL1mXdwaoLBD1u+vUd4FMPKuUd0y7DvNNka3j TjVPihL4xzljHofEieEyofI55AkQQyLyu0+xcMa0DrEsbF0m4O0N1wU9ewZHynHK 8SXFWQg6q1Wf1YgFzMUHKpJr9ZCCV6qTBhn2aUcCT5doki5g4miSum9+wB8BHUjb kvnX+rRjs278lBJxRlv2NbSUww4pL1HpOGRP5IGtl+VBd3V/DxWMoNOVa7Rj/K9x kPrzYREu6zU= -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:56 2024 by rpki-client on console-ams.rpki-client.org