$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/7416299C4B0C11EDB8430084C4F9AE02.roa File: 7416299C4B0C11EDB8430084C4F9AE02.roa (raw, json) Hash identifier: fdccxhLktG5LcnRtoY1B1E3L3EfYU96oxOUA369yqRg= Subject key identifier: AD:F6:2B:02:04:1F:A2:CC:E6:95:68:AC:75:7E:EC:47:E0:D7:5E:32 Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Certificate serial: 0157 Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/7416299C4B0C11EDB8430084C4F9AE02.roa Signing time: Wed 07 Aug 2024 03:45:37 +0000 ROA not before: Wed 07 Aug 2024 03:45:37 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 38038 IP address blocks: 103.152.222.0/23 maxlen: 24 2406:35c0::/32 maxlen: 32 2406:35c0:4000::/36 maxlen: 36 2406:35c0:5000::/36 maxlen: 36 2406:35c0:6000::/35 maxlen: 36 2406:35c0:8000::/33 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Validity Not Before: Aug 7 03:45:37 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66b2ede0-c1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3f:49:4d:94:2f:68:e9:50:03:0c:b9:9b:1a: 21:6a:bb:97:b9:1c:ed:b2:8b:a2:9b:19:fc:67:fc: 8d:d3:2d:aa:0d:6b:f1:12:5e:f2:47:db:d9:c0:fc: d0:84:c8:ca:8d:77:7d:7e:24:3e:13:3c:7b:07:cc: b5:82:38:2a:0e:0d:08:10:0e:29:71:b6:86:a3:95: 53:4d:0f:db:6e:da:56:88:7d:e0:71:b1:42:19:6f: b1:62:e6:1c:c3:06:e1:dc:e7:20:8e:65:55:db:d5: 2f:3a:97:cb:68:ab:4a:b5:a6:7d:b7:f4:ba:f1:ed: 32:b3:70:8f:7d:3f:86:ed:9c:2b:da:6b:df:76:e5: 82:2e:ae:a3:8f:4f:25:71:e2:51:e4:fd:fd:d3:27: c8:29:de:d6:e6:2e:51:ab:92:09:f3:c8:84:5a:1c: 17:1e:56:31:fe:44:20:5e:04:ae:79:c0:e0:d4:15: f4:9c:39:78:13:fe:c3:04:bb:e9:9d:67:71:09:1b: cb:c1:16:0e:11:bc:2b:82:25:3f:9e:5d:b0:69:fb: b0:28:54:17:6f:b3:0f:ae:ec:86:28:61:34:98:4b: 9a:ee:da:5d:d4:41:7d:c4:77:a6:39:e8:25:1b:fd: 9a:03:4c:57:e2:24:fe:31:cd:f9:26:40:5a:b0:30: 7d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F6:2B:02:04:1F:A2:CC:E6:95:68:AC:75:7E:EC:47:E0:D7:5E:32 X509v3 Authority Key Identifier: keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/7416299C4B0C11EDB8430084C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.222.0/23 IPv6: 2406:35c0::/32 Signature Algorithm: sha256WithRSAEncryption 27:29:1d:27:6a:42:cf:75:4c:0e:41:72:72:be:14:86:b1:eb: f9:eb:21:47:01:dd:e9:7b:87:d5:7e:c7:7e:d9:c0:d7:a1:ed: 27:85:49:60:1c:69:82:6c:28:fe:1b:2a:b1:d6:96:d6:d3:3a: 9e:17:30:56:05:f4:33:eb:3e:61:6f:fe:29:bd:44:cf:38:82: 58:af:35:df:72:ea:a3:d1:a3:c5:63:95:bf:07:b4:ef:e9:3a: b4:61:ec:cf:de:c1:5d:20:57:ad:e4:9d:67:4e:3b:d5:9b:0c: 52:b1:8f:b1:2a:1e:1b:89:c6:0b:8c:22:3b:8e:61:7f:5f:1d: b0:16:db:f6:f3:66:c9:aa:24:7a:31:e2:a1:9c:71:65:95:68: 19:84:e0:7f:f2:d0:c2:08:1d:df:cf:2e:89:a6:6d:48:cf:ec: d5:5f:f7:3d:7c:c0:5a:3e:09:58:a4:45:df:a4:10:63:dd:0d: bc:d7:cd:64:f8:86:78:75:58:54:04:df:e6:09:4e:e8:ed:29: 75:81:ec:d3:85:5b:de:9b:35:70:a2:8f:a5:6e:87:4a:4a:6d: d0:3f:c0:f5:d1:33:6b:34:a8:25:ae:08:77:49:d6:b0:63:a7: af:d2:a7:f9:77:0a:cd:dd:a2:ed:6d:3b:59:8c:51:18:bc:ac: 5b:62:f3:40 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy ODZCQTkwNjUwHhcNMjQwODA3MDM0NTM3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIyZWRlMC1jMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5T9JTZQvaOlQAwy5mxoharuXuRztsouimxn8Z/yN0y2qDWvxEl7yR9vZwPzQ hMjKjXd9fiQ+Ezx7B8y1gjgqDg0IEA4pcbaGo5VTTQ/bbtpWiH3gcbFCGW+xYuYc wwbh3OcgjmVV29UvOpfLaKtKtaZ9t/S68e0ys3CPfT+G7Zwr2mvfduWCLq6jj08l ceJR5P390yfIKd7W5i5Rq5IJ88iEWhwXHlYx/kQgXgSuecDg1BX0nDl4E/7DBLvp nWdxCRvLwRYOEbwrgiU/nl2wafuwKFQXb7MPruyGKGE0mEua7tpd1EF9xHemOegl G/2aA0xX4iT+Mc35JkBasDB9xQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFK32KwIE H6LM5pVorHV+7Efg114yMB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURFRDQvRTRGQjJCRTQ0QjA3MTFFRDhFQzMzOTQ3QzRGOUFFMDIvNzQxNjI5OUM0 QjBDMTFFREI4NDMwMDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnmN4wDQQCAAIwBwMFACQGNcAwDQYJKoZIhvcNAQELBQAD ggEBACcpHSdqQs91TA5BcnK+FIax6/nrIUcB3el7h9V+x37ZwNeh7SeFSWAcaYJs KP4bKrHWltbTOp4XMFYF9DPrPmFv/im9RM84glivNd9y6qPRo8Vjlb8HtO/pOrRh 7M/ewV0gV63knWdOO9WbDFKxj7EqHhuJxguMIjuOYX9fHbAW2/bzZsmqJHox4qGc cWWVaBmE4H/y0MIIHd/PLommbUjP7NVf9z18wFo+CVikRd+kEGPdDbzXzWT4hnh1 WFQE3+YJTujtKXWB7NOFW96bNXCij6Vuh0pKbdA/wPXRM2s0qCWuCHdJ1rBjp6/S p/l3Cs3dou1tO1mMURi8rFti80A= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org