$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/4A08F422F43211EBA188C86AC4F9AE02.roa File: 4A08F422F43211EBA188C86AC4F9AE02.roa (raw, json) Hash identifier: 3Y7LHhfPoBb0WxabpgiKDHOJivLh/nfOe4OHRiwg/0A= Subject key identifier: 37:E4:39:A6:37:FB:EB:B5:00:E4:9F:93:56:0D:B4:7A:B8:74:AE:B6 Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 3456 Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/4A08F422F43211EBA188C86AC4F9AE02.roa Signing time: Wed 02 Oct 2024 14:51:09 +0000 ROA not before: Wed 02 Oct 2024 14:51:09 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 4007 IP address blocks: 103.232.152.0/22 maxlen: 24 110.34.0.0/19 maxlen: 24 116.66.192.0/21 maxlen: 24 163.47.148.0/22 maxlen: 22 163.47.148.0/24 maxlen: 24 163.47.149.0/24 maxlen: 24 163.47.150.0/24 maxlen: 24 163.47.151.0/24 maxlen: 24 182.93.64.0/19 maxlen: 24 202.63.240.0/21 maxlen: 24 2403:3800::/32 maxlen: 40 2403:3800:8::/48 maxlen: 48 2403:3800:600::/48 maxlen: 48 2403:3800:700::/48 maxlen: 48 2403:3800:820::/48 maxlen: 48 2403:3800:1200::/44 maxlen: 44 2403:3800:1210::/44 maxlen: 44 2403:3800:1220::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13398 (0x3456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: Oct 2 14:51:09 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fd5ddd-b513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:10:cc:2d:1a:f4:0f:ed:9e:ae:5e:ff:b2: 0f:52:e2:55:91:04:5d:bd:30:f2:47:88:a7:df:ec: 7c:ab:b3:bb:da:69:3a:24:cc:21:b8:d1:31:e0:c0: d2:bc:f6:eb:78:64:57:c9:49:33:48:34:bf:5b:c4: 5a:e4:ba:16:e0:e0:b2:d1:7d:d1:18:e6:e9:0b:2e: ee:b1:12:9d:70:54:c5:05:2e:92:ff:41:f5:50:bf: 14:63:4d:c0:01:a9:75:9b:d8:2d:43:3c:0a:d2:64: 51:0d:95:b3:90:82:7c:31:32:6e:f7:7a:10:c0:cc: c2:75:88:78:69:83:c6:55:15:28:6e:5f:8e:21:8d: be:c5:f5:53:52:37:95:06:b0:cc:63:ab:5c:61:ee: 3e:ee:f7:84:b1:32:d2:eb:b6:46:13:88:b2:20:d4: b6:c7:b2:66:bd:2b:2c:c9:cb:70:96:e4:23:7b:28: 7e:65:26:e6:8a:61:94:e1:03:9c:96:87:46:dc:89: bd:d9:ba:97:80:57:09:79:b9:b0:32:83:55:f3:b9: 1a:35:44:b1:8c:01:2d:ef:48:d2:c3:bd:c6:11:f8: 5c:67:eb:65:32:51:c3:0a:cf:2e:c1:6e:b5:18:d2: b6:27:18:da:eb:4d:95:56:06:82:d0:92:d8:76:f1: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E4:39:A6:37:FB:EB:B5:00:E4:9F:93:56:0D:B4:7A:B8:74:AE:B6 X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/4A08F422F43211EBA188C86AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.232.152.0/22 110.34.0.0/19 116.66.192.0/21 163.47.148.0/22 182.93.64.0/19 202.63.240.0/21 IPv6: 2403:3800::/32 Signature Algorithm: sha256WithRSAEncryption d7:dc:54:5f:31:b5:d0:4f:1c:64:00:a1:bc:ea:36:6a:3b:6f: cf:97:2e:e4:37:4e:16:46:6b:40:04:00:2b:e5:ee:fc:73:86: b9:39:d8:3a:b4:ce:02:51:7b:f9:fb:f3:17:f9:2d:b6:26:db: 3c:cf:8e:20:b3:09:0b:84:e0:f2:5d:51:3d:4a:8b:51:8d:a3: 2a:0d:8f:00:d1:6a:f1:cb:3c:9f:bf:42:30:5e:74:3f:bc:ac: db:92:43:67:78:72:da:e9:3b:ab:3e:55:41:8d:fa:e4:ae:88: 26:81:c1:a1:cd:b1:4b:05:b0:ab:73:e7:bb:41:fa:14:41:38: a3:4c:73:78:e8:d5:29:42:eb:67:4f:22:9d:12:fe:6e:23:13: 37:4e:f6:45:6b:e1:f8:91:0d:f8:70:a3:d2:03:86:8a:8f:bd: 60:01:ac:67:27:88:5a:70:f5:88:8d:70:aa:8d:76:a7:e1:02: 9c:b0:ed:05:0d:78:f9:19:3d:50:a3:91:4c:31:df:b2:78:f5: 79:03:a9:64:d2:08:4c:e8:38:a6:e8:f9:b7:8c:1e:d0:0c:b2: b6:6a:8c:8f:2c:cf:c6:5f:9a:40:44:b9:b2:27:bf:a0:d0:02: ce:47:e7:7a:56:cd:86:f8:a2:01:be:d2:c6:19:bb:f3:b8:44: a9:b3:d8:e5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICNFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjQxMDAyMTQ1MTA5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkNWRkZC1iNTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrsQzC0a9A/tnq5e/7IPUuJVkQRdvTDyR4in3+x8q7O72mk6JMwhuNEx4MDS vPbreGRXyUkzSDS/W8Ra5LoW4OCy0X3RGObpCy7usRKdcFTFBS6S/0H1UL8UY03A Aal1m9gtQzwK0mRRDZWzkIJ8MTJu93oQwMzCdYh4aYPGVRUobl+OIY2+xfVTUjeV BrDMY6tcYe4+7veEsTLS67ZGE4iyINS2x7JmvSssyctwluQjeyh+ZSbmimGU4QOc lodG3Im92bqXgFcJebmwMoNV87kaNUSxjAEt70jSw73GEfhcZ+tlMlHDCs8uwW61 GNK2Jxja602VVgaC0JLYdvFeNwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFDfkOaY3 ++u1AOSfk1YNtHq4dK62MB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQ4MzQvREZCQTUwQjgxRDhEMTFFMjgyNERFREVCMDhCMDJDRDIvNEEwOEY0MjJG NDMyMTFFQkExODhDODZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDBAJn6JgDBAVuIgADBAN0QsADBAKjL5QDBAW2XUADBAPKP/Aw DQQCAAIwBwMFACQDOAAwDQYJKoZIhvcNAQELBQADggEBANfcVF8xtdBPHGQAobzq Nmo7b8+XLuQ3ThZGa0AEACvl7vxzhrk52Dq0zgJRe/n78xf5LbYm2zzPjiCzCQuE 4PJdUT1Ki1GNoyoNjwDRavHLPJ+/QjBedD+8rNuSQ2d4ctrpO6s+VUGN+uSuiCaB waHNsUsFsKtz57tB+hRBOKNMc3jo1SlC62dPIp0S/m4jEzdO9kVr4fiRDfhwo9ID hoqPvWABrGcniFpw9YiNcKqNdqfhApyw7QUNePkZPVCjkUwx37J49XkDqWTSCEzo OKbo+beMHtAMsrZqjI8sz8ZfmkBEubInv6DQAs5H53pWzYb4ogG+0sYZu/O4RKmz 2OU= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:14 2024 by rpki-client on console-ams.rpki-client.org