$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/9A357E62171111EEA9C5DD2CC4F9AE02.roa File: 9A357E62171111EEA9C5DD2CC4F9AE02.roa (raw, json) Hash identifier: ZzvPd5LHjJjhVtmj0leruUn3ZgBweBo8kJim+9/25sQ= Subject key identifier: 28:47:4A:14:21:EA:60:82:38:E0:37:32:68:CE:D5:F9:E1:D9:14:78 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 0876 Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/9A357E62171111EEA9C5DD2CC4F9AE02.roa Signing time: Mon 20 May 2024 22:00:54 +0000 ROA not before: Mon 20 May 2024 22:00:54 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135391 IP address blocks: 43.230.88.0/22 maxlen: 24 45.253.244.0/24 maxlen: 24 45.253.245.0/24 maxlen: 24 45.253.246.0/24 maxlen: 24 45.253.247.0/24 maxlen: 24 61.29.240.0/22 maxlen: 24 61.29.248.0/24 maxlen: 24 61.29.249.0/24 maxlen: 24 61.29.250.0/23 maxlen: 24 103.49.132.0/22 maxlen: 24 103.211.228.0/22 maxlen: 24 103.216.100.0/22 maxlen: 24 146.196.76.0/23 maxlen: 24 157.119.232.0/22 maxlen: 24 2405:fd80:1000::/40 maxlen: 40 2405:fd80:1000::/48 maxlen: 48 2405:fd80:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2166 (0x876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: May 20 22:00:54 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=664bc816-94f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:dc:02:e6:62:f1:e8:0d:4a:e6:3d:ed:5f: 7b:43:72:cb:f8:af:70:22:e5:b2:be:67:f4:9c:64: bc:89:c5:49:c0:2d:be:d3:5c:ab:30:06:42:45:12: 60:e8:0d:c0:2e:cd:49:05:63:7d:fd:75:53:ce:78: e6:f8:fa:60:4e:7f:2f:65:5d:f0:8a:be:37:6b:05: b7:21:ec:a3:5b:9a:00:02:cf:ad:fd:14:2e:d1:79: 6c:d2:d0:6b:f5:3b:c1:4c:91:d1:93:8b:95:75:27: 43:10:26:2c:a3:90:09:77:53:f8:5f:a1:77:bd:4f: d9:29:ff:f1:c4:a5:0f:29:0a:fb:5c:bf:fd:ac:6f: 74:a8:79:a6:b0:c3:44:e2:36:31:45:4c:03:08:e2: f1:09:d5:10:a3:9f:e3:00:65:f2:cb:95:cb:24:e2: 8f:7c:0a:9f:ae:2d:81:16:5a:f9:ca:4a:0b:e7:0e: 38:2f:fb:ba:46:c8:6b:40:45:e0:bb:90:16:95:a3: cf:1e:91:e0:2a:73:c2:c8:2c:8c:a2:70:58:bf:a5: 6e:44:33:63:2c:0c:32:6d:0b:ce:3c:f8:2d:fb:a1: fd:9f:8d:88:45:72:da:2a:a7:95:26:ea:f7:4c:e7: c7:cd:cd:20:f9:79:70:08:09:de:fb:97:35:9c:e1: a5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:47:4A:14:21:EA:60:82:38:E0:37:32:68:CE:D5:F9:E1:D9:14:78 X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/9A357E62171111EEA9C5DD2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.88.0/22 45.253.244.0/22 61.29.240.0/22 61.29.248.0/22 103.49.132.0/22 103.211.228.0/22 103.216.100.0/22 146.196.76.0/23 157.119.232.0/22 IPv6: 2405:fd80:1000::/40 Signature Algorithm: sha256WithRSAEncryption 60:38:08:c5:f0:a7:f4:1e:9b:35:f2:f0:0d:98:d0:d8:67:23: 1e:0a:eb:05:a4:39:4d:3a:ad:a4:a6:f0:59:8e:80:9f:04:d0: da:a3:d0:03:ae:a6:02:66:2d:d0:58:f9:df:16:14:6a:50:45: 6f:95:fc:89:da:da:15:da:b6:87:93:01:83:45:54:9d:da:04: 39:e9:f8:eb:cc:59:90:52:20:40:13:de:c3:7b:91:c1:b8:82: ac:3f:2c:e7:47:84:a0:a5:b4:53:02:35:df:9d:10:b8:16:0c: a8:53:1b:ef:18:9b:99:d5:82:01:f8:bf:56:bf:be:49:60:e2: 32:6a:e8:45:e9:07:54:71:9b:46:38:89:f4:35:98:c2:72:0d: a0:0e:f1:43:b7:a5:c5:a6:69:e6:9a:d6:e6:8e:fe:cc:f8:db: 14:f6:de:72:cb:ef:99:b3:79:74:eb:92:f0:f3:3e:f7:a3:4d: 75:82:2c:fd:54:cb:71:ce:fd:2c:de:46:8c:8e:56:2d:32:c7: 69:01:2c:8e:38:0e:75:14:1e:c1:f8:c9:70:f8:e4:9d:e8:fc: 6b:ff:a9:a2:50:89:d0:8f:cb:99:fb:0b:0d:c7:cf:ed:c7:ea: 2a:24:6c:47:45:8e:df:75:6c:7e:f1:98:6a:1d:54:61:12:8e: 1b:70:bc:65 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjQwNTIwMjIwMDU0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRiYzgxNi05NGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/jcAuZi8egNSuY97V97Q3LL+K9wIuWyvmf0nGS8icVJwC2+01yrMAZCRRJg 6A3ALs1JBWN9/XVTznjm+PpgTn8vZV3wir43awW3IeyjW5oAAs+t/RQu0Xls0tBr 9TvBTJHRk4uVdSdDECYso5AJd1P4X6F3vU/ZKf/xxKUPKQr7XL/9rG90qHmmsMNE 4jYxRUwDCOLxCdUQo5/jAGXyy5XLJOKPfAqfri2BFlr5ykoL5w44L/u6RshrQEXg u5AWlaPPHpHgKnPCyCyMonBYv6VuRDNjLAwybQvOPPgt+6H9n42IRXLaKqeVJur3 TOfHzc0g+XlwCAne+5c1nOGlKwIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFChHShQh 6mCCOOA3MmjO1fnh2RR4MB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU1MDkvNzlFQTU5MUVBN0JEMTFFQUFBQTYyOTQ4QzRGOUFFMDIvOUEzNTdFNjIx NzExMTFFRUE5QzVERDJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXwYIKwYBBQUHAQcBAf8E UDBOMDwEAgABMDYDBAIr5lgDBAIt/fQDBAI9HfADBAI9HfgDBAJnMYQDBAJn0+QD BAJn2GQDBAGSxEwDBAKdd+gwDgQCAAIwCAMGACQF/YAQMA0GCSqGSIb3DQEBCwUA A4IBAQBgOAjF8Kf0Hps18vANmNDYZyMeCusFpDlNOq2kpvBZjoCfBNDao9ADrqYC Zi3QWPnfFhRqUEVvlfyJ2toV2raHkwGDRVSd2gQ56fjrzFmQUiBAE97De5HBuIKs PyznR4SgpbRTAjXfnRC4FgyoUxvvGJuZ1YIB+L9Wv75JYOIyauhF6QdUcZtGOIn0 NZjCcg2gDvFDt6XFpmnmmtbmjv7M+NsU9t5yy++Zs3l065Lw8z73o011giz9VMtx zv0s3kaMjlYtMsdpASyOOA51FB7B+Mlw+OSd6Pxr/6miUInQj8uZ+wsNx8/tx+oq JGxHRY7fdWx+8ZhqHVRhEo4bcLxl -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org