$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/4990DE3AB79C11EE98F9562DC4F9AE02.roa File: 4990DE3AB79C11EE98F9562DC4F9AE02.roa (raw, json) Hash identifier: udwIL3TemXgN99WsiGZezgc/ERVVheSUhT58Wdtis9o= Subject key identifier: 73:28:E4:AF:8E:E5:0F:B0:F0:0C:AA:3E:BE:48:8F:DA:F4:50:72:6F Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 9A Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/4990DE3AB79C11EE98F9562DC4F9AE02.roa Signing time: Sun 18 Aug 2024 07:27:08 +0000 ROA not before: Sun 18 Aug 2024 07:27:08 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 8100 IP address blocks: 36.50.84.0/23 maxlen: 23 103.79.76.0/22 maxlen: 22 103.79.76.0/24 maxlen: 24 103.79.77.0/24 maxlen: 24 103.79.78.0/24 maxlen: 24 103.79.79.0/24 maxlen: 24 103.79.118.0/24 maxlen: 24 202.91.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Aug 18 07:27:08 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66c1a24c-bca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:f9:c1:8f:21:32:b8:31:62:ee:8b:57:3f: c3:3d:dc:39:8f:9b:a1:a6:2c:77:5c:94:a2:7f:20: 4a:b8:5c:63:f6:2f:09:d8:01:ae:76:fc:42:01:29: b6:ac:95:a9:09:f7:45:95:3e:e1:18:fd:f3:34:63: b1:ff:4e:45:1f:31:8b:6e:e7:85:6d:8b:33:ab:37: 68:09:76:a1:4f:07:45:75:73:26:59:cd:53:42:b4: 44:b7:42:76:b7:d0:4b:4e:97:36:41:36:d0:fb:31: 56:ef:26:00:59:07:a4:ed:4f:aa:53:aa:30:60:c1: 4e:fb:af:1b:98:d9:5f:47:7d:31:e6:0f:5d:bf:c1: 2c:16:de:47:5e:82:a3:5e:d3:a7:9e:f6:24:7d:c9: a9:bc:28:36:dc:3f:a2:e0:55:a1:04:07:cc:98:03: 4c:7d:bd:68:56:69:35:af:90:cf:ad:1c:b1:9d:56: 96:e7:b4:e4:37:ea:41:75:12:f2:ba:71:ef:7c:cf: 5e:54:ca:ad:37:68:5e:c6:13:6f:1d:f6:34:3d:86: 78:db:e9:70:23:9f:61:f3:08:33:e1:3d:30:cc:d0: 9d:9b:34:62:08:07:06:66:e5:85:db:71:f5:71:92: eb:1b:b0:00:cf:b5:95:e6:d2:ef:b1:79:50:f6:32: b3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:28:E4:AF:8E:E5:0F:B0:F0:0C:AA:3E:BE:48:8F:DA:F4:50:72:6F X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/4990DE3AB79C11EE98F9562DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.84.0/23 103.79.76.0/22 103.79.118.0/24 202.91.32.0/24 Signature Algorithm: sha256WithRSAEncryption ae:d6:bf:45:8e:86:2c:b3:62:2e:4a:9a:bc:5d:e8:5d:67:83: 45:fb:a3:da:87:c3:ad:fb:9e:db:2e:13:ca:2e:8a:17:70:88: c0:4f:f9:71:34:74:ea:82:d3:a4:6b:6f:7c:c0:c5:25:f0:b5: f1:3e:99:ad:5d:41:b0:97:6c:4b:08:8d:e8:55:f5:58:ae:06: df:a1:fa:08:70:74:02:d5:7a:6d:fc:3a:d9:0c:4b:9a:0c:d7: 58:d6:d9:89:6e:8b:c6:42:e9:dd:eb:64:b1:b0:ab:b8:e4:f4: 09:f4:68:f1:8f:10:b2:33:2c:73:cb:95:06:6a:58:da:8f:bc: 0b:57:59:f9:a4:da:0e:e1:09:12:e1:6f:ae:4e:74:2f:64:13: 09:69:c9:91:7b:19:3c:c2:07:05:4d:25:f9:53:d8:a1:09:61: 0d:4d:17:c3:44:47:c8:e9:3c:b7:84:7b:13:85:b9:44:4e:30: 51:38:87:f0:2e:45:15:b9:88:d5:63:3e:ac:eb:ac:fc:a7:04: 3e:c6:75:32:1c:d1:2c:4d:73:2a:5a:62:d3:1e:6a:45:7d:d4: 0d:ea:d3:16:b8:6e:14:06:d1:87:a6:10:83:f4:42:c6:70:0c: ae:eb:17:a3:77:fc:b9:dd:01:2c:fe:62:75:5f:1a:90:e3:17: 8f:fe:f5:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjQwODE4MDcyNzA4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmMxYTI0Yy1iY2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlr5wY8hMrgxYu6LVz/DPdw5j5uhpix3XJSifyBKuFxj9i8J2AGudvxCASm2 rJWpCfdFlT7hGP3zNGOx/05FHzGLbueFbYszqzdoCXahTwdFdXMmWc1TQrREt0J2 t9BLTpc2QTbQ+zFW7yYAWQek7U+qU6owYMFO+68bmNlfR30x5g9dv8EsFt5HXoKj XtOnnvYkfcmpvCg23D+i4FWhBAfMmANMfb1oVmk1r5DPrRyxnVaW57TkN+pBdRLy unHvfM9eVMqtN2hexhNvHfY0PYZ42+lwI59h8wgz4T0wzNCdmzRiCAcGZuWF23H1 cZLrG7AAz7WV5tLvsXlQ9jKzywIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFHMo5K+O 5Q+w8AyqPr5Ij9r0UHJvMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUVEMkMvMDAzNzNDNkM5QkJDMTFFRTg1MUFERDUwQzRGOUFFMDIvNDk5MERFM0FC NzlDMTFFRTk4Rjk1NjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAEkMlQDBAJnT0wDBABnT3YDBADKWyAwDQYJKoZIhvcNAQEL BQADggEBAK7Wv0WOhiyzYi5Kmrxd6F1ng0X7o9qHw637ntsuE8ouihdwiMBP+XE0 dOqC06Rrb3zAxSXwtfE+ma1dQbCXbEsIjehV9ViuBt+h+ghwdALVem38OtkMS5oM 11jW2Ylui8ZC6d3rZLGwq7jk9An0aPGPELIzLHPLlQZqWNqPvAtXWfmk2g7hCRLh b65OdC9kEwlpyZF7GTzCBwVNJflT2KEJYQ1NF8NER8jpPLeEexOFuUROMFE4h/Au RRW5iNVjPqzrrPynBD7GdTIc0SxNcypaYtMeakV91A3q0xa4bhQG0YemEIP0QsZw DK7rF6N3/LndASz+YnVfGpDjF4/+9fQ= -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:01 2024 by rpki-client on console-ams.rpki-client.org