$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/7A42D8C8DD3C11EA8C68452FC4F9AE02.roa File: 7A42D8C8DD3C11EA8C68452FC4F9AE02.roa (raw, json) Hash identifier: m2yIuby8HlO1waMEwZ3VKb7grN7qwZoDdVN1MenQrvg= Subject key identifier: 60:D5:6D:A8:00:04:0B:23:D7:DD:68:AF:62:7B:2F:B1:4A:53:4B:4C Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Certificate serial: 3419 Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/7A42D8C8DD3C11EA8C68452FC4F9AE02.roa Signing time: Tue 24 Sep 2024 14:50:55 +0000 ROA not before: Tue 24 Sep 2024 14:50:55 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 7700 IP address blocks: 103.30.32.0/22 maxlen: 22 202.63.224.0/20 maxlen: 20 202.63.224.0/24 maxlen: 24 202.63.225.0/24 maxlen: 24 202.63.226.0/24 maxlen: 24 202.63.227.0/24 maxlen: 24 202.63.228.0/24 maxlen: 24 202.63.229.0/24 maxlen: 24 202.63.230.0/24 maxlen: 24 202.63.231.0/24 maxlen: 24 202.63.232.0/24 maxlen: 24 202.63.233.0/24 maxlen: 24 202.63.234.0/24 maxlen: 24 202.63.235.0/24 maxlen: 24 202.63.236.0/24 maxlen: 24 202.63.237.0/24 maxlen: 24 202.63.238.0/24 maxlen: 24 202.63.239.0/24 maxlen: 24 221.120.112.0/21 maxlen: 21 221.120.120.0/21 maxlen: 21 2402:ce00::/32 maxlen: 32 2402:ce01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13337 (0x3419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Validity Not Before: Sep 24 14:50:55 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66f2d1ce-c2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:5d:13:ce:22:91:8a:d0:86:16:8a:92:72: f4:0a:ad:43:f2:17:9c:9d:3b:1a:09:69:bf:cc:5d: 99:77:99:39:b4:99:60:0d:b2:cb:3d:8e:fc:6d:d5: b7:ea:f3:d6:f1:47:61:27:63:ce:45:e8:1d:90:94: 99:52:06:3e:28:c9:be:19:04:a6:af:dd:df:ef:13: 44:eb:cf:6a:63:d5:32:17:32:a4:27:e5:79:fa:dd: cd:72:21:59:16:ad:e7:4e:d2:e4:70:60:a7:a2:bf: d1:00:e0:19:ed:4f:f8:c8:c5:80:89:c4:c7:ff:2b: 37:4c:5e:c8:03:0c:b2:e9:85:9d:10:35:19:3e:d1: 2a:6a:37:ae:d2:6e:f5:57:e2:08:f4:a2:8f:60:93: 2e:19:c6:42:62:dc:5a:93:38:a6:8d:1a:2c:8d:b2: 22:51:7d:51:ea:55:60:0f:79:b6:fa:77:0b:7a:dc: ce:07:72:4c:26:79:63:ce:2e:61:98:47:9d:e2:2e: ac:98:fa:67:b5:ac:f2:b2:f3:4c:1e:be:06:75:74: 59:77:f4:26:59:fb:28:91:2e:b6:1b:23:24:be:b7: 7e:1f:75:c6:d8:ee:34:ce:ad:e5:79:9c:d2:98:f4: a8:c1:57:ba:fa:de:df:72:2b:58:b3:d8:f4:2c:e1: 61:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D5:6D:A8:00:04:0B:23:D7:DD:68:AF:62:7B:2F:B1:4A:53:4B:4C X509v3 Authority Key Identifier: keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/7A42D8C8DD3C11EA8C68452FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.30.32.0/22 202.63.224.0/20 221.120.112.0/20 IPv6: 2402:ce00::/31 Signature Algorithm: sha256WithRSAEncryption 1f:25:dc:4b:ab:71:68:33:cc:43:4e:3a:28:4a:7d:b0:97:c0: 55:6e:90:ad:a3:09:f6:db:5b:11:1f:ce:14:c9:a7:76:5b:c5: 67:1b:b3:b7:f4:e5:21:16:6e:78:a7:ff:5d:0a:65:37:f1:2d: ee:22:46:d9:99:3d:5d:bc:72:0b:9b:79:89:a5:71:0c:db:a9: 57:1a:5f:86:8d:d3:c0:7e:fe:af:5a:ea:89:a5:7a:8c:c9:73: 50:c7:60:23:d8:12:e7:4c:2e:b5:61:0e:36:ae:e3:76:b0:e5: 99:16:32:f5:ab:d9:cd:d8:a0:fc:76:48:9e:25:40:4a:2a:08: bc:c8:e3:ff:53:55:df:3d:3a:ff:80:02:3c:98:e4:ee:a0:c1: 89:ec:f8:4e:f0:8d:31:54:50:6d:27:76:da:98:69:91:2a:10: 1f:4e:8f:d2:73:50:02:39:c8:6b:c7:c5:a9:23:d5:b1:03:60: 90:e0:b4:54:41:5a:ba:f7:b3:b7:9f:30:26:36:ec:3f:28:15: 06:dd:1c:87:56:dd:1c:c2:5b:b7:d2:7b:5e:4e:b3:d9:69:8b: 1f:f4:d1:7f:49:58:8f:e9:65:78:6a:4d:4a:34:59:27:07:ca: 59:59:f2:47:22:d6:86:bd:0e:ae:3f:f9:52:93:34:f6:a0:2e: 4c:7e:b4:65 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICNBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG OEYyMzhCMzEwHhcNMjQwOTI0MTQ1MDU1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYyZDFjZS1jMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu25dE84ikYrQhhaKknL0Cq1D8hecnTsaCWm/zF2Zd5k5tJlgDbLLPY78bdW3 6vPW8UdhJ2PORegdkJSZUgY+KMm+GQSmr93f7xNE689qY9UyFzKkJ+V5+t3NciFZ Fq3nTtLkcGCnor/RAOAZ7U/4yMWAicTH/ys3TF7IAwyy6YWdEDUZPtEqajeu0m71 V+II9KKPYJMuGcZCYtxakzimjRosjbIiUX1R6lVgD3m2+ncLetzOB3JMJnljzi5h mEed4i6smPpntazysvNMHr4GdXRZd/QmWfsokS62GyMkvrd+H3XG2O40zq3leZzS mPSowVe6+t7fcitYs9j0LOFhzwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGDVbagA BAsj191or2J7L7FKU0tMMB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQzMDYvQkNCRDgwMUMxRDhEMTFFMkI0MjlCN0VCMDhCMDJDRDIvN0E0MkQ4QzhE RDNDMTFFQThDNjg0NTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnHiADBATKP+ADBATdeHAwDQQCAAIwBwMFASQCzgAwDQYJ KoZIhvcNAQELBQADggEBAB8l3EurcWgzzENOOihKfbCXwFVukK2jCfbbWxEfzhTJ p3ZbxWcbs7f05SEWbnin/10KZTfxLe4iRtmZPV28cgubeYmlcQzbqVcaX4aN08B+ /q9a6omleozJc1DHYCPYEudMLrVhDjau43aw5ZkWMvWr2c3YoPx2SJ4lQEoqCLzI 4/9TVd89Ov+AAjyY5O6gwYns+E7wjTFUUG0ndtqYaZEqEB9Oj9JzUAI5yGvHxakj 1bEDYJDgtFRBWrr3s7efMCY27D8oFQbdHIdW3RzCW7fSe15Os9lpix/00X9JWI/p ZXhqTUo0WScHyllZ8kci1oa9Dq4/+VKTNPagLkx+tGU= -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:35 2024 by rpki-client on console-fra.rpki-client.org