$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/338E008C33DD11EAB6057973C4F9AE02.roa File: 338E008C33DD11EAB6057973C4F9AE02.roa (raw, json) Hash identifier: 7+ZLULjVqPCfadW/ubEy902j24oY/POwRPTnqDmUr9w= Subject key identifier: 67:74:C1:32:A0:A3:C7:13:CA:B2:2A:D9:DD:DE:5B:9F:64:B7:7D:48 Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0CC3 Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/338E008C33DD11EAB6057973C4F9AE02.roa Signing time: Sun 06 Oct 2024 14:13:46 +0000 ROA not before: Sun 06 Oct 2024 14:13:46 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 134806 IP address blocks: 103.89.26.0/24 maxlen: 24 103.89.27.0/24 maxlen: 24 103.126.216.0/22 maxlen: 24 103.200.36.0/22 maxlen: 22 103.200.36.0/23 maxlen: 23 103.200.36.0/24 maxlen: 24 103.200.37.0/24 maxlen: 24 103.200.38.0/23 maxlen: 23 103.200.38.0/24 maxlen: 24 103.200.39.0/24 maxlen: 24 123.253.64.0/22 maxlen: 24 2401:1040::/32 maxlen: 32 2401:1040::/40 maxlen: 40 2401:1040::/48 maxlen: 48 2401:1040:1::/48 maxlen: 48 2401:1040:2::/48 maxlen: 48 2401:1040:3::/48 maxlen: 48 2401:1040:100::/40 maxlen: 40 2401:1040:102::/48 maxlen: 48 2401:1040:300::/40 maxlen: 40 2401:1040:301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Oct 6 14:13:46 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=67029b1a-3b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:04:6b:2a:24:e0:67:87:0a:53:c4:22:92: 81:55:da:cf:98:9d:2b:9d:b6:7d:f2:11:eb:17:e4: 6f:33:e0:ef:48:c4:0d:ba:27:5d:48:23:65:d1:c5: b4:3d:2f:6d:af:76:0b:f6:7e:d5:36:d3:df:80:0b: 79:90:f7:71:7b:45:b6:88:38:0f:91:c5:18:3f:2c: 60:2c:a8:82:7e:9b:49:da:73:7f:40:81:c2:e2:6b: ca:43:3c:6a:a3:d0:13:aa:31:cc:b2:b3:8d:ca:d6: f3:ee:73:4e:8b:5f:d8:c1:e1:d2:ed:2c:ec:a1:ac: 4c:41:40:bf:f5:6c:87:c7:41:40:60:9e:6f:91:41: e1:fc:fc:7c:d0:77:d6:1e:10:af:a8:fe:7c:0d:c7: 86:2e:13:99:6b:b1:16:15:89:30:8b:91:f0:e4:34: e3:f1:96:08:25:dc:12:32:5d:98:38:7b:f7:3d:00: e3:f5:b8:a6:14:c3:7a:90:9d:84:3f:70:da:28:1c: b2:04:ca:4d:c0:ae:10:d4:33:d6:5a:75:61:9c:ca: b7:b2:82:40:df:16:5c:89:39:96:e1:b5:9f:63:75: b2:e4:72:1e:22:52:c5:f2:32:39:10:7e:35:e8:e3: 4a:fb:ea:63:4d:4a:d1:fa:55:01:19:b8:f0:f4:2a: 1a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:74:C1:32:A0:A3:C7:13:CA:B2:2A:D9:DD:DE:5B:9F:64:B7:7D:48 X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/338E008C33DD11EAB6057973C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.26.0/23 103.126.216.0/22 103.200.36.0/22 123.253.64.0/22 IPv6: 2401:1040::/32 Signature Algorithm: sha256WithRSAEncryption 9f:26:c9:d5:05:a0:f8:3f:cc:da:0e:af:ae:ad:77:23:31:a2: 80:21:5f:ba:df:46:22:6c:ac:85:b6:d1:da:b9:d0:0b:38:82: 79:ee:5a:ea:41:5e:8c:20:47:9f:7f:f6:b3:cf:cd:3e:5b:e6: 72:00:4b:a4:5e:ba:38:45:9e:17:26:14:96:40:6f:93:ec:47: df:e3:7d:e2:2f:d5:49:0b:3c:3c:c0:40:68:ad:79:da:a6:42: 00:df:31:b4:02:3a:ff:56:6a:dd:10:5e:c0:e1:5e:17:dc:71: b0:ab:d0:1f:64:43:de:88:fb:d9:5c:78:4e:db:3f:f1:d0:73: ad:0b:d8:b9:16:0b:69:07:7c:20:4d:c6:05:22:15:d1:55:69: ac:31:48:85:64:de:9d:0b:3d:6f:1e:f8:ae:55:69:74:81:a1: 8f:d8:af:bf:8e:32:96:fb:c4:cf:a8:b9:55:d6:02:52:a8:d2: f0:2e:30:25:62:b3:33:61:28:a8:f9:e7:38:ea:83:a8:d5:ad: 5f:18:de:28:34:ea:80:37:98:4c:d1:db:6f:88:73:81:64:77: f8:d3:dc:8b:e3:75:b4:a8:7a:11:fd:c9:fd:5c:b6:1d:cf:17: 3f:28:81:3a:1c:87:aa:77:1f:a5:fc:0b:91:61:fc:96:f9:82: 8a:d4:ec:18 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjQxMDA2MTQxMzQ2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzAyOWIxYS0zYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8sEayok4GeHClPEIpKBVdrPmJ0rnbZ98hHrF+RvM+DvSMQNuiddSCNl0cW0 PS9tr3YL9n7VNtPfgAt5kPdxe0W2iDgPkcUYPyxgLKiCfptJ2nN/QIHC4mvKQzxq o9ATqjHMsrONytbz7nNOi1/YweHS7SzsoaxMQUC/9WyHx0FAYJ5vkUHh/Px80HfW HhCvqP58DceGLhOZa7EWFYkwi5Hw5DTj8ZYIJdwSMl2YOHv3PQDj9bimFMN6kJ2E P3DaKByyBMpNwK4Q1DPWWnVhnMq3soJA3xZciTmW4bWfY3Wy5HIeIlLF8jI5EH41 6ONK++pjTUrR+lUBGbjw9CoaHQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGd0wTKg o8cTyrIq2d3eW59kt31IMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRDNDQvMjlCNkJFREFFNEZDMTFFOUIxM0I0ODYwQzRGOUFFMDIvMzM4RTAwOEMz M0REMTFFQUI2MDU3OTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAFnWRoDBAJnftgDBAJnyCQDBAJ7/UAwDQQCAAIwBwMFACQB EEAwDQYJKoZIhvcNAQELBQADggEBAJ8mydUFoPg/zNoOr66tdyMxooAhX7rfRiJs rIW20dq50As4gnnuWupBXowgR59/9rPPzT5b5nIAS6ReujhFnhcmFJZAb5PsR9/j feIv1UkLPDzAQGitedqmQgDfMbQCOv9Wat0QXsDhXhfccbCr0B9kQ96I+9lceE7b P/HQc60L2LkWC2kHfCBNxgUiFdFVaawxSIVk3p0LPW8e+K5VaXSBoY/Yr7+OMpb7 xM+ouVXWAlKo0vAuMCViszNhKKj55zjqg6jVrV8Y3ig06oA3mEzR22+Ic4Fkd/jT 3IvjdbSoehH9yf1cth3PFz8ogToch6p3H6X8C5Fh/Jb5gorU7Bg= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org