$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/9554034062CB11EEA41B6D2EC4F9AE02.roa File: 9554034062CB11EEA41B6D2EC4F9AE02.roa (raw, json) Hash identifier: x5SsZ9fPo44FXXa4cVncXx0ome2Tsxvse4Uv1sTSAKU= Subject key identifier: 0E:CA:E9:F9:90:28:75:49:F6:5A:ED:BE:64:EB:BA:72:27:70:14:6D Certificate issuer: /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F Certificate serial: 345A Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/9554034062CB11EEA41B6D2EC4F9AE02.roa Signing time: Wed 06 Nov 2024 15:31:13 +0000 ROA not before: Wed 06 Nov 2024 15:31:13 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 63961 IP address blocks: 103.28.120.0/22 maxlen: 24 163.47.36.0/22 maxlen: 24 203.96.188.0/22 maxlen: 24 2402:f500::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13402 (0x345a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F Validity Not Before: Nov 6 15:31:13 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=672b8bc1-6adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:c8:90:d2:23:20:26:06:aa:cf:69:c1:cd: 71:d9:d3:61:f3:5e:80:7c:35:75:93:05:2f:e7:4e: f6:7b:4a:11:b8:dd:a7:ff:43:d2:c0:ea:03:ad:3b: 41:ad:8d:3d:a5:81:ca:19:32:c7:67:e6:0f:3d:9c: d6:e1:c2:27:ef:23:e4:94:96:f8:d3:05:98:a2:a2: 39:d1:da:37:89:f0:f6:b4:27:f3:0b:9c:d3:3a:e9: 70:94:d9:40:f7:0d:54:cc:4e:57:3a:c5:bb:cb:58: 07:87:4e:90:a4:1d:32:5d:f8:3d:ad:53:0a:5d:25: 1b:e1:6d:8b:b3:d6:e9:9b:66:10:78:5b:b5:39:1d: 09:a3:0e:68:58:75:df:05:55:ad:25:21:10:26:fe: c9:b0:b2:e8:1c:97:87:45:ef:c4:ae:93:14:e3:7a: 74:eb:15:7f:01:14:38:05:e2:e7:18:06:ba:b4:f4: 26:11:12:31:fe:aa:0a:07:ab:37:0e:91:e9:89:36: cc:52:78:c5:92:88:7b:4a:a2:4f:7f:0e:7c:77:ae: f7:02:72:00:de:5d:19:d0:48:14:58:0a:dd:51:8e: f5:4f:27:63:17:d2:32:44:59:72:c7:5b:49:d2:49: b7:0d:53:58:19:16:e9:b0:bd:53:31:b2:c6:a9:be: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CA:E9:F9:90:28:75:49:F6:5A:ED:BE:64:EB:BA:72:27:70:14:6D X509v3 Authority Key Identifier: keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/9554034062CB11EEA41B6D2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.120.0/22 163.47.36.0/22 203.96.188.0/22 IPv6: 2402:f500::/32 Signature Algorithm: sha256WithRSAEncryption 42:0f:49:97:0e:b0:e6:15:2e:05:b5:21:02:81:1b:8d:02:50: 5a:ed:18:a2:21:9a:9e:d1:38:76:66:6a:3e:55:f7:f5:4f:a0: ab:8e:a0:63:91:8b:c4:9c:bc:e5:ea:bf:af:4e:51:35:4b:33: f0:a4:75:08:70:ab:b5:ad:63:d2:6e:c1:d4:7d:64:3e:fd:d5: 34:de:98:5e:7b:3d:c9:53:1f:74:da:d0:99:b3:4a:6b:8a:6d: 85:04:77:b1:7c:b6:f4:a0:29:25:a7:e7:b5:e7:7c:26:7b:00: 34:08:74:a2:ce:a3:85:fd:2d:f1:0f:9a:87:f0:19:1c:b5:ba: 73:7c:74:fa:76:4e:c7:ec:46:33:e3:e0:d7:01:d8:aa:ce:8f: 52:c5:16:72:20:5a:e6:d1:0b:ec:0a:58:9d:38:7d:e0:09:72: 46:76:0f:a8:26:9e:1a:26:8f:e8:83:fe:8f:cb:c8:9b:82:99: 7f:c9:b5:a4:e5:a5:ed:76:ad:3e:b5:a1:aa:8e:4f:db:79:1a: 4c:ad:a3:45:3c:93:7a:30:7d:03:b8:6c:d0:91:ce:c5:de:03: 23:85:71:d6:be:b4:8d:9b:c0:a1:12:52:ee:e7:96:20:3c:86: 14:73:0b:18:12:78:cd:68:3b:c8:5a:f7:b5:86:c6:2d:d2:00: 29:86:88:84 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICNFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFFRkExMTAvBgNVBAUTKDhEMDk5QjE2QkU5NTc1RENCNEJCMDY4NTg3OTc5OTlG NTVFNjAzNUYwHhcNMjQxMTA2MTUzMTEzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiOGJjMS02YWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBfIkNIjICYGqs9pwc1x2dNh816AfDV1kwUv5072e0oRuN2n/0PSwOoDrTtB rY09pYHKGTLHZ+YPPZzW4cIn7yPklJb40wWYoqI50do3ifD2tCfzC5zTOulwlNlA 9w1UzE5XOsW7y1gHh06QpB0yXfg9rVMKXSUb4W2Ls9bpm2YQeFu1OR0Jow5oWHXf BVWtJSEQJv7JsLLoHJeHRe/ErpMU43p06xV/ARQ4BeLnGAa6tPQmERIx/qoKB6s3 DpHpiTbMUnjFkoh7SqJPfw58d673AnIA3l0Z0EgUWArdUY71TydjF9IyRFlyx1tJ 0km3DVNYGRbpsL1TMbLGqb617wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFA7K6fmQ KHVJ9lrtvmTrunIncBRtMB8GA1UdIwQYMBaAFI0Jmxa+lXXctLsGhYeXmZ9V5gNf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVGQS9DNEI1OTI2NjFE QTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRkeTB1d2FGaDVlWm4xWG1B MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pRbWJGcjZWZGR5MHV3YUZoNWVabjFYbUExOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFFRkEvQzRCNTkyNjYxREE5MTFFMjk2QkJGRUE0MDhCMDJDRDIvOTU1NDAzNDA2 MkNCMTFFRUE0MUI2RDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnHHgDBAKjLyQDBALLYLwwDQQCAAIwBwMFACQC9QAwDQYJ KoZIhvcNAQELBQADggEBAEIPSZcOsOYVLgW1IQKBG40CUFrtGKIhmp7ROHZmaj5V 9/VPoKuOoGORi8ScvOXqv69OUTVLM/CkdQhwq7WtY9JuwdR9ZD791TTemF57PclT H3Ta0JmzSmuKbYUEd7F8tvSgKSWn57XnfCZ7ADQIdKLOo4X9LfEPmofwGRy1unN8 dPp2TsfsRjPj4NcB2KrOj1LFFnIgWubRC+wKWJ04feAJckZ2D6gmnhomj+iD/o/L yJuCmX/JtaTlpe12rT61oaqOT9t5Gkyto0U8k3owfQO4bNCRzsXeAyOFcda+tI2b wKESUu7nliA8hhRzCxgSeM1oO8ha97WGxi3SACmGiIQ= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:40 2024 by rpki-client on console-fra.rpki-client.org