$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/38B6FA8E8E1211EFA0811E85C4F9AE02.roa File: 38B6FA8E8E1211EFA0811E85C4F9AE02.roa (raw, json) Hash identifier: iRZKmHYBNqjzCf6tBnAPaBn3O0oKNDtq+EW2vxjnuEA= Subject key identifier: D5:A5:77:D0:D2:22:B5:3C:E7:43:C0:86:55:66:D0:92:41:4E:61:F3 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 27A4 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/38B6FA8E8E1211EFA0811E85C4F9AE02.roa Signing time: Sat 19 Oct 2024 12:03:58 +0000 ROA not before: Sat 19 Oct 2024 12:03:58 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 7489 IP address blocks: 27.100.36.0/23 maxlen: 24 45.124.64.0/22 maxlen: 24 45.249.88.0/24 maxlen: 24 103.192.176.0/22 maxlen: 24 103.196.20.0/23 maxlen: 24 103.196.22.0/24 maxlen: 24 103.217.252.0/22 maxlen: 22 103.217.252.0/24 maxlen: 24 103.217.253.0/24 maxlen: 24 103.217.255.0/24 maxlen: 24 2402:9e80::/48 maxlen: 48 2402:9e80:1::/48 maxlen: 48 2402:9e80:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10148 (0x27a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Oct 19 12:03:58 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6713a02e-282f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a6:e7:f3:d7:af:bd:82:1f:41:a7:e2:b6:71: 1f:06:6b:de:d9:3d:4b:76:90:e5:c2:54:7c:4f:83: fb:2a:30:68:da:25:ed:f4:f0:2c:1c:2b:08:e4:5b: 4f:4c:9c:b9:a6:44:f6:10:55:e9:4e:55:36:e5:11: a0:27:c8:35:96:ea:d3:d5:00:ef:78:bc:e8:9f:b1: a8:70:eb:cc:fe:f9:a8:ac:19:d8:97:d4:00:38:aa: 57:4e:1d:fb:0e:3e:24:18:f7:fc:e3:e2:03:e2:24: 4e:29:92:80:2a:f9:1f:30:6c:5b:93:0f:92:79:ba: 63:7d:a9:d1:7f:ff:2a:68:f1:c4:74:4f:cc:bc:d1: 59:4c:4d:ca:56:76:65:da:42:a6:3b:76:b6:99:eb: d0:ed:f5:bd:19:27:e4:92:38:a2:17:d5:a1:67:a1: 0d:cc:97:ad:88:dd:5b:33:c2:bc:68:00:b8:7c:8a: 1d:0e:cd:d6:c6:cd:91:19:c4:86:08:f9:8e:10:8c: 42:cc:e6:f3:f3:6d:1c:2b:09:36:ae:0a:47:d1:d8: aa:3c:a9:4f:73:0a:ce:55:f0:5c:76:63:74:fa:ac: 52:b1:cb:29:95:18:19:fd:88:c6:aa:cf:b7:ec:44: a4:63:4b:9b:20:02:a6:f8:df:20:cd:e0:56:a0:95: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A5:77:D0:D2:22:B5:3C:E7:43:C0:86:55:66:D0:92:41:4E:61:F3 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/38B6FA8E8E1211EFA0811E85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.100.36.0/23 45.124.64.0/22 45.249.88.0/24 103.192.176.0/22 103.196.20.0-103.196.22.255 103.217.252.0/22 IPv6: 2402:9e80::/47 2402:9e80:5::/48 Signature Algorithm: sha256WithRSAEncryption d0:34:63:fa:e2:83:19:e2:49:10:94:c0:40:34:95:7f:3f:a2: ba:f8:da:7f:16:b5:0a:61:c3:46:11:36:6f:7d:29:72:db:a2: d1:64:2b:a8:3d:5b:b7:f6:4d:e8:12:ec:43:ce:c0:e9:1c:d0: 98:22:ca:c7:af:9e:3f:eb:d2:6e:ef:9b:1a:3b:db:c1:c0:8c: 53:82:1d:87:a3:7e:94:c6:33:69:3a:24:9d:e3:1a:41:e8:df: 49:75:da:75:4b:4f:fb:e7:fd:8d:91:05:47:38:41:eb:0c:c1: a5:0f:75:97:7d:05:10:5b:4e:b9:c3:44:59:8e:59:5e:a9:1a: 0f:76:c3:35:db:23:68:fa:76:af:e6:de:aa:bb:36:8b:f5:5b: 3c:9f:8f:15:b7:05:0c:69:14:c4:e4:a4:a0:30:54:e2:31:85: 0b:72:19:c0:66:54:50:fc:22:9c:2e:2e:1e:29:68:31:5f:7e: 53:48:2f:ba:8f:fa:91:51:af:a4:f3:ec:f2:25:9d:60:02:d8: 68:f9:f0:f1:df:27:49:40:95:63:de:ad:5c:ae:43:f3:68:73: 05:ca:bd:ae:06:9e:4e:a2:a3:5a:84:ab:54:0c:92:70:a1:f9: 42:9b:51:86:c8:04:3d:b8:f1:92:e8:46:2d:57:e6:93:0f:1b: dc:32:65:0d -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgICJ6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjQxMDE5MTIwMzU4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEzYTAyZS0yODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Kbn89evvYIfQafitnEfBmve2T1LdpDlwlR8T4P7KjBo2iXt9PAsHCsI5FtP TJy5pkT2EFXpTlU25RGgJ8g1lurT1QDveLzon7GocOvM/vmorBnYl9QAOKpXTh37 Dj4kGPf84+ID4iROKZKAKvkfMGxbkw+SebpjfanRf/8qaPHEdE/MvNFZTE3KVnZl 2kKmO3a2mevQ7fW9GSfkkjiiF9WhZ6ENzJetiN1bM8K8aAC4fIodDs3Wxs2RGcSG CPmOEIxCzObz820cKwk2rgpH0diqPKlPcwrOVfBcdmN0+qxSscsplRgZ/YjGqs+3 7ESkY0ubIAKm+N8gzeBWoJXZGQIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFNWld9DS IrU850PAhlVm0JJBTmHzMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMzhCNkZBOEU4 RTEyMTFFRkEwODExRTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXwYIKwYBBQUHAQcBAf8E UDBOMDIEAgABMCwDBAEbZCQDBAItfEADBAAt+VgDBAJnwLAwDAMEAmfEFAMEAGfE FgMEAmfZ/DAYBAIAAjASAwcBJAKegAAAAwcAJAKegAAFMA0GCSqGSIb3DQEBCwUA A4IBAQDQNGP64oMZ4kkQlMBANJV/P6K6+Np/FrUKYcNGETZvfSly26LRZCuoPVu3 9k3oEuxDzsDpHNCYIsrHr54/69Ju75saO9vBwIxTgh2Ho36UxjNpOiSd4xpB6N9J ddp1S0/75/2NkQVHOEHrDMGlD3WXfQUQW065w0RZjlleqRoPdsM12yNo+nav5t6q uzaL9Vs8n48VtwUMaRTE5KSgMFTiMYULchnAZlRQ/CKcLi4eKWgxX35TSC+6j/qR Ua+k8+zyJZ1gAtho+fDx3ydJQJVj3q1crkPzaHMFyr2uBp5OoqNahKtUDJJwoflC m1GGyAQ9uPGS6EYtV+aTDxvcMmUN -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:11 2024 by rpki-client on console-ams.rpki-client.org