$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/2A08F1A4369211EAA64E320BC4F9AE02.roa File: 2A08F1A4369211EAA64E320BC4F9AE02.roa (raw, json) Hash identifier: I91qaFQgep6EuuEEdqbhO4Prklw7ndmFH38wo16kLVk= Subject key identifier: 9E:A1:E7:99:5F:43:15:CD:DA:CA:23:17:DC:28:C3:F2:D1:F5:81:BA Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0ACF Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/2A08F1A4369211EAA64E320BC4F9AE02.roa Signing time: Mon 16 Sep 2024 19:27:55 +0000 ROA not before: Mon 16 Sep 2024 19:27:55 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 58895 IP address blocks: 103.72.84.0/22 maxlen: 22 103.72.84.0/24 maxlen: 24 103.72.85.0/24 maxlen: 24 103.72.86.0/24 maxlen: 24 103.72.87.0/24 maxlen: 24 203.3.132.0/24 maxlen: 24 203.11.65.0/24 maxlen: 24 203.142.218.0/24 maxlen: 24 203.161.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2767 (0xacf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: Sep 16 19:27:55 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e886bb-73d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b8:30:3f:b0:03:45:8f:c2:30:f7:e4:dc:92: a4:6c:c2:ed:6e:0c:8e:d3:7a:2b:70:23:d2:4c:8b: 4e:1a:d7:36:e8:dd:1d:ab:28:cb:80:9e:c5:b7:0d: 74:f0:7e:b8:d2:00:68:73:72:c7:85:bd:1d:ef:6f: 68:92:4a:65:1e:d4:46:df:4e:24:67:8e:e8:eb:f5: 9e:86:05:7e:28:3b:09:dd:cd:c7:e9:bd:d6:35:48: 75:55:fe:31:f0:c0:e2:1f:60:f5:98:6e:4b:8f:42: 2e:5a:19:92:82:75:9d:3b:4e:2f:4e:ad:41:65:53: d2:c9:2c:cc:50:3b:4f:39:d2:e7:37:ab:67:64:c5: 2b:d7:0f:ea:c1:73:67:c0:e3:9b:68:b1:78:ba:59: a4:04:6b:37:5f:ba:91:f8:85:27:b1:a9:93:d9:0e: db:37:8d:e0:0b:d7:dc:d9:11:10:49:05:d1:ac:21: b1:c9:e5:17:5b:c7:b7:63:88:13:14:23:08:45:0a: ff:18:36:e1:91:a1:f7:f4:87:5a:64:9d:1d:fe:5c: 0d:a2:3c:77:6a:7c:75:89:22:9f:8e:1b:6c:e9:88: a5:1a:8f:14:be:6f:d8:dc:b9:b6:d6:2a:90:d1:3b: 26:60:3e:9b:47:7a:58:bd:20:dc:fb:d4:b3:5f:97: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A1:E7:99:5F:43:15:CD:DA:CA:23:17:DC:28:C3:F2:D1:F5:81:BA X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/2A08F1A4369211EAA64E320BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.84.0/22 203.3.132.0/24 203.11.65.0/24 203.142.218.0/24 203.161.179.0/24 Signature Algorithm: sha256WithRSAEncryption 82:64:90:90:8e:44:3e:ab:c4:91:9a:02:8d:86:4d:00:9a:16: 1b:e6:fc:75:9f:7d:7b:46:c7:83:fb:b3:a7:ab:a8:54:4b:01: 39:e9:d0:27:35:38:37:f4:65:ec:16:39:16:c5:4c:6f:51:e1: 32:77:67:39:9e:49:c7:d6:b1:66:c6:1e:81:cd:60:e4:96:a2: da:59:32:55:5e:18:77:1f:20:f9:76:5d:0d:2d:02:81:d5:78: 91:2a:4c:cb:4c:c8:34:66:19:e3:06:55:e8:4a:e4:33:d3:c4: c5:50:36:26:87:84:71:1d:78:76:7e:70:aa:c4:04:f2:f0:13: 15:ba:14:75:fe:1b:d6:fa:2a:84:83:a3:8d:14:8e:3e:e5:9a: b9:93:ff:db:b4:74:3a:ce:42:47:88:4e:90:59:a2:dd:70:5c: 0f:92:c9:96:cb:96:7c:50:8f:4f:c5:56:7d:d6:fb:ff:c9:cf: e3:03:d7:86:7c:dc:68:4a:11:bf:22:1e:b0:d2:97:17:2e:c0: 2c:e4:8b:86:d6:3c:fb:b2:47:77:fd:93:57:a0:48:5f:75:57: 09:6d:4f:84:41:40:58:02:f3:bb:83:61:9d:ae:4e:c9:12:b6: c7:e3:90:fd:a3:97:25:bb:58:c4:24:f9:95:22:d3:c1:95:99: a1:75:e1:51 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICCs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjQwOTE2MTkyNzU1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU4ODZiYi03M2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA97gwP7ADRY/CMPfk3JKkbMLtbgyO03orcCPSTItOGtc26N0dqyjLgJ7Ftw10 8H640gBoc3LHhb0d729okkplHtRG304kZ47o6/WehgV+KDsJ3c3H6b3WNUh1Vf4x 8MDiH2D1mG5Lj0IuWhmSgnWdO04vTq1BZVPSySzMUDtPOdLnN6tnZMUr1w/qwXNn wOObaLF4ulmkBGs3X7qR+IUnsamT2Q7bN43gC9fc2REQSQXRrCGxyeUXW8e3Y4gT FCMIRQr/GDbhkaH39IdaZJ0d/lwNojx3anx1iSKfjhts6YilGo8Uvm/Y3Lm21iqQ 0TsmYD6bR3pYvSDc+9SzX5ci8QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJ6h55lf QxXN2sojF9wow/LR9YG6MB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUwRkEvQUFBMEVCRTAzNjhFMTFFQUE3NjhGQzdFQzRGOUFFMDIvMkEwOEYxQTQz NjkyMTFFQUE2NEUzMjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAJnSFQDBADLA4QDBADLC0EDBADLjtoDBADLobMwDQYJKoZI hvcNAQELBQADggEBAIJkkJCORD6rxJGaAo2GTQCaFhvm/HWffXtGx4P7s6erqFRL ATnp0Cc1ODf0ZewWORbFTG9R4TJ3ZzmeScfWsWbGHoHNYOSWotpZMlVeGHcfIPl2 XQ0tAoHVeJEqTMtMyDRmGeMGVehK5DPTxMVQNiaHhHEdeHZ+cKrEBPLwExW6FHX+ G9b6KoSDo40Ujj7lmrmT/9u0dDrOQkeITpBZot1wXA+SyZbLlnxQj0/FVn3W+//J z+MD14Z83GhKEb8iHrDSlxcuwCzki4bWPPuyR3f9k1egSF91VwltT4RBQFgC87uD YZ2uTskStsfjkP2jlyW7WMQk+ZUi08GVmaF14VE= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org