$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/8732232CCBA011E887F87451C4F9AE02.roa File: 8732232CCBA011E887F87451C4F9AE02.roa (raw, json) Hash identifier: d4g6nOFA6rT76ss8TIfPVoSl8yk4nYFL3JBknIEAxA8= Subject key identifier: F7:E5:DD:D7:EB:61:1F:8B:07:12:48:57:93:25:F4:56:24:D0:6B:3B Certificate issuer: /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970 Certificate serial: 18A7 Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/8732232CCBA011E887F87451C4F9AE02.roa Signing time: Mon 18 Nov 2024 16:34:19 +0000 ROA not before: Mon 18 Nov 2024 16:34:19 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 38719 IP address blocks: 103.20.200.0/22 maxlen: 22 103.28.48.0/22 maxlen: 22 122.201.64.0/19 maxlen: 19 122.201.96.0/19 maxlen: 19 202.146.208.0/21 maxlen: 24 2402:af00::/32 maxlen: 32 2405:3f00::/32 maxlen: 32 2405:3f01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6311 (0x18a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970 Validity Not Before: Nov 18 16:34:19 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=673b6c8b-fbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:6d:4a:04:01:53:aa:51:dd:20:40:49:e6: e1:e2:f8:26:b0:90:b1:6d:df:0a:e9:3d:79:80:07: fd:56:ba:d0:46:4d:53:5d:1c:9f:27:6d:b1:47:a2: 8b:17:6e:f6:4d:83:e8:ca:99:b6:e6:8c:7f:2a:28: 52:69:13:8a:cd:f8:09:33:31:ea:a3:c5:6f:a2:e5: 82:5a:ae:90:e9:d8:ab:05:02:90:b2:92:e6:d9:af: 86:1d:f4:18:fc:ca:77:06:1b:5b:3e:eb:0a:e8:a5: 60:59:92:8a:c5:f9:33:55:c2:8d:5d:16:e1:0d:2b: 50:f5:94:0e:91:b0:1f:19:e9:4b:63:b5:7f:7c:3c: f1:1f:ce:09:af:88:e9:a7:57:28:a9:dd:67:47:11: 73:a9:f1:fe:86:de:a6:be:c6:6d:e0:9f:90:d6:dd: b0:63:35:48:23:09:8b:99:2e:b6:d1:3f:18:10:a0: 10:52:3c:10:da:ff:f4:8d:ab:61:60:99:16:5e:75: f9:98:3a:65:99:94:ea:ae:c7:46:cb:cf:aa:fa:c2: fc:6f:2e:cb:29:38:fb:a1:b0:47:c7:f7:25:a7:b9: 8f:26:f7:78:37:65:d5:f4:19:11:0d:ca:a5:ff:36: 6f:1c:5a:ba:31:82:14:65:87:c2:8a:6f:fb:5f:9c: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E5:DD:D7:EB:61:1F:8B:07:12:48:57:93:25:F4:56:24:D0:6B:3B X509v3 Authority Key Identifier: keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/8732232CCBA011E887F87451C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.200.0/22 103.28.48.0/22 122.201.64.0/18 202.146.208.0/21 IPv6: 2402:af00::/32 2405:3f00::/31 Signature Algorithm: sha256WithRSAEncryption 36:3a:2c:67:a7:db:3e:24:cb:14:bb:58:ea:d1:c5:a1:d0:4e: db:e4:a8:2b:c9:d0:11:09:41:52:a3:40:42:98:4b:bc:02:b3: 8a:a6:d9:ae:f4:75:0b:36:94:f6:2e:f7:0c:21:76:bf:c1:21: 69:cf:53:60:08:00:1e:9a:9b:16:c2:36:5b:36:8c:14:e8:84: 7e:4c:a7:10:2f:21:36:b5:a9:a9:2c:d3:b9:34:75:58:bd:2c: 73:d7:e6:b5:2c:a9:1d:45:81:1e:d4:bc:02:95:ae:69:e1:44: 9c:54:22:80:18:f3:4d:6f:78:b7:00:d1:22:63:79:8b:38:1d: f4:91:e3:14:be:cd:1e:0d:21:ad:9b:c3:4f:da:1a:1f:14:1b: e8:05:97:81:60:c5:79:73:57:38:18:8e:3c:a5:9e:69:3c:47: c6:0f:57:ed:69:e0:ef:22:6b:de:02:f0:ab:4f:57:08:a7:c5: 68:fd:77:01:01:d0:ca:b3:c2:63:73:3e:6f:c8:0f:62:37:0f: d8:34:f5:03:af:17:a5:33:46:5d:80:bc:0d:f2:cb:ea:ee:ee: 69:b2:6b:0b:67:39:db:81:cb:91:b6:94:d0:e4:56:46:fb:76: 4f:d1:8e:14:0c:7c:0e:d9:7a:9f:a8:4f:dc:5f:20:c9:94:20: a9:0c:e2:04 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICGKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY5RkIxMTAvBgNVBAUTKEJGRkRCN0VCRjQ1RDdDNjFCRjlEMjM5MDhBOUYzOEMz MzI5ODU5NzAwHhcNMjQxMTE4MTYzNDE5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNiNmM4Yi1mYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3W5tSgQBU6pR3SBASebh4vgmsJCxbd8K6T15gAf9VrrQRk1TXRyfJ22xR6KL F272TYPoypm25ox/KihSaROKzfgJMzHqo8VvouWCWq6Q6dirBQKQspLm2a+GHfQY /Mp3BhtbPusK6KVgWZKKxfkzVcKNXRbhDStQ9ZQOkbAfGelLY7V/fDzxH84Jr4jp p1coqd1nRxFzqfH+ht6mvsZt4J+Q1t2wYzVIIwmLmS620T8YEKAQUjwQ2v/0jath YJkWXnX5mDplmZTqrsdGy8+q+sL8by7LKTj7obBHx/clp7mPJvd4N2XV9BkRDcql /zZvHFq6MYIUZYfCim/7X5woewIDAQABo4ICvTCCArkwHQYDVR0OBBYEFPfl3dfr YR+LBxJIV5Ml9FYk0Gs7MB8GA1UdIwQYMBaAFL/9t+v0XXxhv50jkIqfOMMymFlw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjlGQi9BRjAwOThEMDg5 NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZHR19uU09RaXA4NHd6S1lX WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZfMjM2X1JkZkdHX25TT1FpcDg0d3pLWVdYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY5RkIvQUYwMDk4RDA4OTZGMTFFNzhBODFDODNDQzRGOUFFMDIvODczMjIzMkND QkEwMTFFODg3Rjg3NDUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MB4EAgABMBgDBAJnFMgDBAJnHDADBAZ6yUADBAPKktAwFAQCAAIwDgMFACQC rwADBQEkBT8AMA0GCSqGSIb3DQEBCwUAA4IBAQA2Oixnp9s+JMsUu1jq0cWh0E7b 5KgrydARCUFSo0BCmEu8ArOKptmu9HULNpT2LvcMIXa/wSFpz1NgCAAempsWwjZb NowU6IR+TKcQLyE2tampLNO5NHVYvSxz1+a1LKkdRYEe1LwCla5p4UScVCKAGPNN b3i3ANEiY3mLOB30keMUvs0eDSGtm8NP2hofFBvoBZeBYMV5c1c4GI48pZ5pPEfG D1ftaeDvImveAvCrT1cIp8Vo/XcBAdDKs8Jjcz5vyA9iNw/YNPUDrxelM0ZdgLwN 8svq7u5psmsLZznbgcuRtpTQ5FZG+3ZP0Y4UDHwO2XqfqE/cXyDJlCCpDOIE -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org