$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/388A8C304FFE11EFA3C2A52BC4F9AE02.roa File: 388A8C304FFE11EFA3C2A52BC4F9AE02.roa (raw, json) Hash identifier: FuUbKZ/ocUxu5AADTd4LgiwOZYxCtzKF/SPhgRRODZo= Subject key identifier: 40:8A:73:B3:9B:67:8E:66:86:9F:80:8E:58:59:10:29:A3:51:A6:08 Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 0534 Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/388A8C304FFE11EFA3C2A52BC4F9AE02.roa Signing time: Thu 01 Aug 2024 12:04:36 +0000 ROA not before: Thu 01 Aug 2024 12:04:36 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 45458 IP address blocks: 203.170.186.0/24 maxlen: 24 203.170.187.0/24 maxlen: 24 203.170.206.0/24 maxlen: 24 203.170.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Aug 1 12:04:36 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66ab79d4-4529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:60:79:f6:01:ad:ed:1b:f6:fc:92:a1:76: 7a:87:44:38:0d:fb:d3:d0:14:b4:8b:23:7b:2b:f3: 2f:1e:c4:b2:ed:f7:7a:ac:76:b5:3a:db:9a:67:9a: da:e4:a5:eb:57:92:a3:0c:85:45:82:84:b4:d8:f4: c8:8a:e3:7e:d6:bf:3b:18:32:ce:3c:4d:6e:5e:87: e5:de:f0:47:28:8e:81:66:e8:f2:db:ef:84:4b:0d: 20:b0:d3:01:8b:f1:ad:1d:49:a9:44:d1:85:88:3e: e4:33:06:be:1f:55:85:4b:35:64:78:77:48:3e:e3: 8d:d6:4d:29:f4:8c:21:33:1f:75:9a:2e:ca:6d:c1: a7:e5:38:47:bb:66:cd:84:89:2b:a3:e7:71:3c:e2: 0a:44:2b:27:84:2b:0f:49:96:84:ef:3b:ea:86:28: 64:48:6c:a2:84:3b:25:93:9f:f5:6b:3c:b8:42:ca: 3a:dc:07:55:a4:8c:a1:79:01:ce:69:49:fd:9c:d3: 47:f8:66:95:1d:a3:05:bd:a7:a8:76:aa:37:e9:84: 92:82:07:54:3d:33:9a:2f:18:32:49:ac:2c:40:ba: ee:54:1c:21:39:82:46:27:50:38:c5:31:e7:43:9b: d2:3b:71:8c:db:01:9b:89:7c:c5:71:da:85:06:98: 35:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:73:B3:9B:67:8E:66:86:9F:80:8E:58:59:10:29:A3:51:A6:08 X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/388A8C304FFE11EFA3C2A52BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.170.186.0/23 203.170.206.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:18:67:94:85:4c:8b:25:78:da:00:cf:02:67:64:4d:41:b4: 5f:39:55:14:1d:38:fe:0b:65:dd:26:a0:5d:b5:d1:f7:49:4b: 96:c3:8a:91:3e:64:b4:d3:62:0f:c3:b7:2e:e2:8c:8f:78:65: bb:55:0a:c2:85:e2:c5:3b:46:33:e6:86:b3:09:d7:25:e8:ab: be:b7:d7:48:76:2a:d0:c1:97:42:56:f8:00:f5:73:be:ef:cd: 7d:06:fd:a0:ef:f6:34:40:be:ae:b8:1d:5e:dc:a6:71:18:fa: eb:1a:90:f6:e6:46:82:5b:64:1e:9f:92:21:21:6d:6e:7b:f3: 59:e2:03:42:69:c2:8a:35:27:8e:30:da:7c:50:32:df:cb:4a: 4e:30:5c:96:d6:9d:75:ad:fa:60:5c:88:49:43:69:c8:01:a9: 44:d8:f9:42:e1:01:93:5c:eb:26:b7:62:43:ed:51:7c:db:d2: 59:6f:ad:d3:5c:9e:6b:4b:20:34:cd:d0:a6:51:ad:7d:9c:c0: ca:7d:86:8e:fe:36:f4:78:5d:0f:62:73:38:5c:c5:97:9c:ed: f2:8c:25:92:b8:16:90:cd:41:9c:6d:cc:76:6a:b5:ee:07:20: 77:02:f0:eb:db:41:32:8e:ee:11:89:e4:dc:a9:21:6b:08:02: d6:f8:28:d1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjQwODAxMTIwNDM2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFiNzlkNC00NTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/hgefYBre0b9vySoXZ6h0Q4DfvT0BS0iyN7K/MvHsSy7fd6rHa1OtuaZ5ra 5KXrV5KjDIVFgoS02PTIiuN+1r87GDLOPE1uXofl3vBHKI6BZujy2++ESw0gsNMB i/GtHUmpRNGFiD7kMwa+H1WFSzVkeHdIPuON1k0p9IwhMx91mi7KbcGn5ThHu2bN hIkro+dxPOIKRCsnhCsPSZaE7zvqhihkSGyihDslk5/1azy4Qso63AdVpIyheQHO aUn9nNNH+GaVHaMFvaeodqo36YSSggdUPTOaLxgySawsQLruVBwhOYJGJ1A4xTHn Q5vSO3GM2wGbiXzFcdqFBpg1LwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFECKc7Ob Z45mhp+AjlhZECmjUaYIMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvMzg4QThDMzA0 RkZFMTFFRkEzQzJBNTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAHLqroDBAHLqs4wDQYJKoZIhvcNAQELBQADggEBAJsYZ5SF TIsleNoAzwJnZE1BtF85VRQdOP4LZd0moF210fdJS5bDipE+ZLTTYg/Dty7ijI94 ZbtVCsKF4sU7RjPmhrMJ1yXoq76310h2KtDBl0JW+AD1c77vzX0G/aDv9jRAvq64 HV7cpnEY+usakPbmRoJbZB6fkiEhbW5781niA0Jpwoo1J44w2nxQMt/LSk4wXJbW nXWt+mBciElDacgBqUTY+ULhAZNc6ya3YkPtUXzb0llvrdNcnmtLIDTN0KZRrX2c wMp9ho7+NvR4XQ9iczhcxZec7fKMJZK4FpDNQZxtzHZqte4HIHcC8OvbQTKO7hGJ 5NypIWsIAtb4KNE= -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:52 2024 by rpki-client on console-fra.rpki-client.org