$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/B937CBBA6DD411EF977CA52AC4F9AE02.roa File: B937CBBA6DD411EF977CA52AC4F9AE02.roa (raw, json) Hash identifier: DNPEZoiqquqZXGfdK28t7zQLFNY8ea/+gAa4O/ZRs1s= Subject key identifier: DA:0D:DB:58:4B:1C:79:07:D9:5E:61:7C:82:5E:DC:FD:48:03:F3:F7 Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 218E Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/B937CBBA6DD411EF977CA52AC4F9AE02.roa Signing time: Sun 08 Sep 2024 11:27:25 +0000 ROA not before: Sun 08 Sep 2024 11:27:25 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 134128 IP address blocks: 59.153.28.0/23 maxlen: 23 59.153.28.0/24 maxlen: 24 59.153.29.0/24 maxlen: 24 103.18.80.0/22 maxlen: 24 103.54.148.0/22 maxlen: 24 2402:3b80::/32 maxlen: 32 2402:3b80::/48 maxlen: 48 2402:3b80:1::/48 maxlen: 48 2402:3b80:2::/48 maxlen: 48 2402:3b80:3::/48 maxlen: 48 2402:3b80:4::/48 maxlen: 48 2402:3b80:5::/48 maxlen: 48 2402:3b80:6::/48 maxlen: 48 2402:3b80:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8590 (0x218e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: Sep 8 11:27:25 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66dd8a1d-a782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:72:49:39:9a:d1:a7:2e:49:57:01:0f:6f:88: 3c:b4:63:66:32:c5:41:4b:b4:6e:01:d5:aa:61:cf: 19:a9:b7:91:34:fd:f1:2c:e0:71:13:04:00:7c:2b: 68:79:af:e5:e4:25:e4:e9:49:d0:b0:3e:2d:af:02: 32:1f:46:2a:95:7c:c2:03:1e:9b:ce:82:3f:1d:04: ed:46:58:dc:60:87:37:38:6c:1b:67:21:c6:61:66: 86:3e:3b:7d:7c:7c:80:6a:da:b4:0f:50:65:34:02: 10:e5:6e:3e:69:f0:cc:fb:37:55:e0:01:35:71:e9: 0c:70:cd:9f:dd:36:b9:99:0d:d2:0b:08:f2:bb:20: da:d0:57:cb:ca:1b:9e:d8:a4:8c:16:d6:dc:d8:a9: 31:ef:8d:f8:81:a0:85:d6:49:96:76:87:07:be:50: 95:26:0e:e2:e2:4b:27:a2:55:7e:6c:f0:ae:ab:cd: aa:22:d8:a9:cc:e3:76:01:6c:85:6c:3d:08:2a:62: a4:83:b3:c1:fe:05:8c:be:61:38:26:ed:f5:d6:6f: 84:d3:7e:05:88:91:00:60:8a:21:e8:5d:56:41:2b: 64:41:bc:97:cb:d8:4c:fc:75:20:36:8a:65:eb:cc: 2d:a5:65:24:10:73:fc:e6:ae:a1:64:e5:b8:1e:fa: a0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0D:DB:58:4B:1C:79:07:D9:5E:61:7C:82:5E:DC:FD:48:03:F3:F7 X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/B937CBBA6DD411EF977CA52AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.153.28.0/23 103.18.80.0/22 103.54.148.0/22 IPv6: 2402:3b80::/32 Signature Algorithm: sha256WithRSAEncryption 36:4a:18:1e:75:02:5e:8a:f4:de:a9:a8:58:c4:87:01:e5:ef: 7c:04:e1:df:4a:ef:1c:8e:d1:0b:98:d1:1f:52:ff:ac:8c:17: ee:3c:85:f0:7b:84:fc:01:c1:69:46:5a:4a:a1:f7:b3:f8:24: 61:33:95:b2:fc:1d:5c:07:88:f9:68:b0:66:25:17:68:db:d3: 87:ed:29:8d:94:06:d8:87:b8:43:1e:b7:95:8e:4d:5f:2a:0a: db:a1:21:09:9e:2b:c5:68:18:eb:69:8d:ed:a7:71:c3:53:54: 4a:e8:eb:19:3a:5f:f1:53:5f:6a:40:e3:09:e4:8d:ec:b1:77: 86:ac:4a:6e:ce:7f:98:83:b5:92:c6:5f:34:9f:33:5d:bd:e7: 17:9f:f2:c6:a3:45:35:74:8e:0d:a9:01:f2:38:ca:6c:5f:83: 6b:a6:65:b3:46:3a:c1:66:dc:3e:54:47:0c:a5:5c:37:af:a9: 9b:17:83:9a:8b:00:ff:5e:8d:a4:34:78:76:a4:6c:05:1b:d9: 7e:99:e9:c2:aa:7c:f2:85:fb:db:67:72:98:bb:dc:05:55:a5: f6:a5:fb:ff:fa:8a:11:f4:81:90:30:e0:0c:a0:15:92:98:f0: a2:b0:97:fb:8c:f2:a9:02:4e:49:40:e5:82:0c:1a:0b:b7:05: 83:f1:a3:ff -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICIY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjQwOTA4MTEyNzI1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmRkOGExZC1hNzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnJJOZrRpy5JVwEPb4g8tGNmMsVBS7RuAdWqYc8ZqbeRNP3xLOBxEwQAfCto ea/l5CXk6UnQsD4trwIyH0YqlXzCAx6bzoI/HQTtRljcYIc3OGwbZyHGYWaGPjt9 fHyAatq0D1BlNAIQ5W4+afDM+zdV4AE1cekMcM2f3Ta5mQ3SCwjyuyDa0FfLyhue 2KSMFtbc2Kkx7434gaCF1kmWdocHvlCVJg7i4ksnolV+bPCuq82qItipzON2AWyF bD0IKmKkg7PB/gWMvmE4Ju311m+E034FiJEAYIoh6F1WQStkQbyXy9hM/HUgNopl 68wtpWUkEHP85q6hZOW4HvqgXQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFNoN21hL HHkH2V5hfIJe3P1IA/P3MB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDRDYvMUU5RTFBQUNEMkVBMTFFNUFGQjFFMjRDQzRGOUFFMDIvQjkzN0NCQkE2 REQ0MTFFRjk3N0NBNTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAE7mRwDBAJnElADBAJnNpQwDQQCAAIwBwMFACQCO4AwDQYJ KoZIhvcNAQELBQADggEBADZKGB51Al6K9N6pqFjEhwHl73wE4d9K7xyO0QuY0R9S /6yMF+48hfB7hPwBwWlGWkqh97P4JGEzlbL8HVwHiPlosGYlF2jb04ftKY2UBtiH uEMet5WOTV8qCtuhIQmeK8VoGOtpje2nccNTVEro6xk6X/FTX2pA4wnkjeyxd4as Sm7Of5iDtZLGXzSfM1295xef8sajRTV0jg2pAfI4ymxfg2umZbNGOsFm3D5URwyl XDevqZsXg5qLAP9ejaQ0eHakbAUb2X6Z6cKqfPKF+9tncpi73AVVpfal+//6ihH0 gZAw4AygFZKY8KKwl/uM8qkCTklA5YIMGgu3BYPxo/8= -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:49 2024 by rpki-client on console-fra.rpki-client.org