$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/72B84162E2A411E9A300492AC4F9AE02.roa File: 72B84162E2A411E9A300492AC4F9AE02.roa (raw, json) Hash identifier: QrHwkCxaqX0D4CMUIb/gJ2hugEkme/UAAaAoVbq7U4k= Subject key identifier: 96:60:E8:CE:47:20:B7:DA:E5:33:37:FF:D8:03:FF:83:D7:E6:29:97 Certificate issuer: /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Certificate serial: 0C6F Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/72B84162E2A411E9A300492AC4F9AE02.roa Signing time: Tue 20 Aug 2024 18:36:47 +0000 ROA not before: Tue 20 Aug 2024 18:36:47 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 38200 IP address blocks: 45.64.164.0/24 maxlen: 24 45.64.165.0/24 maxlen: 24 45.64.166.0/24 maxlen: 24 45.64.167.0/24 maxlen: 24 103.234.24.0/24 maxlen: 24 103.234.25.0/24 maxlen: 24 103.234.26.0/24 maxlen: 24 103.234.27.0/24 maxlen: 24 103.234.164.0/22 maxlen: 22 103.234.164.0/24 maxlen: 24 103.234.165.0/24 maxlen: 24 103.234.166.0/24 maxlen: 24 103.234.167.0/24 maxlen: 24 220.247.160.0/24 maxlen: 24 220.247.161.0/24 maxlen: 24 220.247.162.0/24 maxlen: 24 220.247.163.0/24 maxlen: 24 220.247.164.0/24 maxlen: 24 220.247.165.0/24 maxlen: 24 220.247.166.0/24 maxlen: 24 220.247.167.0/24 maxlen: 24 2401:580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Validity Not Before: Aug 20 18:36:47 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c4e23e-e5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:1e:d9:1b:8c:9b:0d:fe:f4:52:d5:1b:77: a9:68:d1:82:d4:2d:3a:17:a0:5e:07:72:a0:4c:20: e7:26:9c:53:98:29:0c:51:a3:95:97:0e:a2:6a:14: 83:2c:0d:90:f1:a1:bb:62:38:08:cd:86:7c:3d:68: c3:50:50:2f:60:28:3b:04:84:5a:75:fc:a7:34:92: f7:ab:4a:04:dc:ef:7e:5d:ed:b5:24:59:af:6c:be: 6d:e6:47:e8:4f:b3:51:40:56:3d:46:5b:d5:6f:fb: f2:d2:90:0c:a6:74:95:cf:41:86:b2:cb:43:e0:5e: 75:2c:d2:5b:8b:25:61:8e:6c:88:14:02:39:e9:df: 95:dc:3c:b1:38:4f:29:dc:20:4e:d6:0b:99:6d:e3: ae:42:c2:a5:f5:58:4a:31:2a:69:bf:d2:28:c7:cf: 49:ae:6a:32:59:01:7f:9c:db:bc:3a:b6:f1:45:24: a7:7d:dc:48:3e:dc:18:6c:f0:46:5c:35:27:83:69: 00:ac:58:8d:f6:f9:8d:15:25:63:79:f4:67:b0:dd: 2a:33:5b:42:95:ab:e0:1d:d1:4e:d1:09:27:fb:64: df:bd:7b:d6:0b:28:2d:96:ee:f3:88:c0:bd:e7:38: 0f:e0:b9:7c:42:9a:0b:9d:dc:28:d1:d4:d8:f8:a5: 89:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:60:E8:CE:47:20:B7:DA:E5:33:37:FF:D8:03:FF:83:D7:E6:29:97 X509v3 Authority Key Identifier: keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/72B84162E2A411E9A300492AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.164.0/22 103.234.24.0/22 103.234.164.0/22 220.247.160.0/21 IPv6: 2401:580::/32 Signature Algorithm: sha256WithRSAEncryption 13:49:db:f4:5a:34:5c:de:73:06:b7:8d:f3:2b:b8:19:09:9d: 30:61:05:81:98:4a:62:14:bf:7e:9a:a5:87:cc:f5:a9:19:c0: ad:4c:96:e7:ac:0f:e0:43:9e:a8:7e:b0:84:dd:c4:f5:d8:6d: 4a:aa:f3:ee:4f:9a:c8:c6:6f:33:34:7f:d9:21:2e:5f:2b:6a: 5c:ce:31:1d:74:6c:43:f4:79:62:50:b5:6e:3f:fb:29:6b:4c: 9b:08:43:76:16:8f:f2:69:ee:54:5f:5c:c2:c3:09:73:0b:a2: d0:c4:b2:a3:c5:15:60:a1:74:87:9a:36:61:e3:0e:c0:4c:ac: 84:6c:d5:70:5a:5a:55:2e:2f:b3:60:c1:85:63:eb:ba:be:94: c3:c7:ab:5d:cb:a0:2e:9e:71:d3:ba:d6:22:8f:7b:b6:0d:8d: 8b:43:3b:b3:a9:0f:b6:6e:3d:73:7b:df:e3:27:96:b6:5c:91: 37:ff:df:46:68:0e:e0:88:4c:d2:d6:b1:e2:c4:73:2d:17:b3: b7:a5:ef:8d:db:81:e1:5f:9e:59:db:79:69:90:a1:e6:a5:fa: 29:a3:37:4b:ad:d9:95:5b:73:0c:fd:de:72:78:20:33:87:85: ed:e9:c3:04:b5:6c:66:b3:5b:04:ff:c3:cf:6b:2a:e3:8c:2d: 40:93:6d:7f -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgxRTAxMTAvBgNVBAUTKDhERTFEMEI1NjEzMDk4MEI4MzkwMEZCNzhGQURBNjcw REUyRTBBNjUwHhcNMjQwODIwMTgzNjQ3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM0ZTIzZS1lNWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnD0e2RuMmw3+9FLVG3epaNGC1C06F6BeB3KgTCDnJpxTmCkMUaOVlw6iahSD LA2Q8aG7YjgIzYZ8PWjDUFAvYCg7BIRadfynNJL3q0oE3O9+Xe21JFmvbL5t5kfo T7NRQFY9RlvVb/vy0pAMpnSVz0GGsstD4F51LNJbiyVhjmyIFAI56d+V3DyxOE8p 3CBO1guZbeOuQsKl9VhKMSppv9Iox89JrmoyWQF/nNu8OrbxRSSnfdxIPtwYbPBG XDUng2kArFiN9vmNFSVjefRnsN0qM1tClavgHdFO0Qkn+2TfvXvWCygtlu7ziMC9 5zgP4Ll8QpoLndwo0dTY+KWJ+wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFJZg6M5H ILfa5TM3/9gD/4PX5imXMB8GA1UdIwQYMBaAFI3h0LVhMJgLg5APt4+tpnDeLgpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODFFMC83NjFBN0VBQ0Uy QTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21BdURrQS0zajYybWNONHVD bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plSFF0V0V3bUF1RGtBLTNqNjJtY040dUNtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjgxRTAvNzYxQTdFQUNFMkEzMTFFOUFFOEJCNTI4QzRGOUFFMDIvNzJCODQxNjJF MkE0MTFFOUEzMDA0OTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAItQKQDBAJn6hgDBAJn6qQDBAPc96AwDQQCAAIwBwMFACQB BYAwDQYJKoZIhvcNAQELBQADggEBABNJ2/RaNFzecwa3jfMruBkJnTBhBYGYSmIU v36apYfM9akZwK1MluesD+BDnqh+sITdxPXYbUqq8+5PmsjGbzM0f9khLl8ralzO MR10bEP0eWJQtW4/+ylrTJsIQ3YWj/Jp7lRfXMLDCXMLotDEsqPFFWChdIeaNmHj DsBMrIRs1XBaWlUuL7NgwYVj67q+lMPHq13LoC6ecdO61iKPe7YNjYtDO7OpD7Zu PXN73+MnlrZckTf/30ZoDuCITNLWseLEcy0Xs7el743bgeFfnlnbeWmQoeal+imj N0ut2ZVbcwz93nJ4IDOHhe3pwwS1bGazWwT/w89rKuOMLUCTbX8= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org