$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa File: 919E2B20E52811ED863E8C34C4F9AE02.roa (raw, json) Hash identifier: 4MLRq0YL6v9paTmHRTZWxjeku/RvHYQuxfXh3kK5soA= Subject key identifier: 27:61:B5:9D:BB:CF:E4:59:4D:AA:4E:A8:45:46:8D:4C:C4:25:8B:57 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 0633 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa Signing time: Tue 03 Sep 2024 01:14:19 +0000 ROA not before: Tue 03 Sep 2024 01:14:19 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 42960 IP address blocks: 43.255.159.0/24 maxlen: 24 103.30.76.0/22 maxlen: 24 103.171.34.0/23 maxlen: 24 2001:df7:3480::/48 maxlen: 48 2401:2660:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1587 (0x633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Sep 3 01:14:19 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d662eb-50c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:72:16:bf:67:7b:04:76:1f:81:34:b1:91: ba:c1:35:ad:a3:bf:8c:78:b8:9e:c7:3a:4d:e0:68: f0:2b:3f:b7:94:40:1c:7a:14:64:4f:2b:e0:08:88: 37:88:0f:c5:43:52:5a:13:ab:31:92:b1:c4:41:f3: 3a:63:7c:fe:ed:4c:6a:58:cf:6a:a1:b5:3b:d4:c5: 48:8a:b1:4d:27:f2:03:ef:56:e3:f7:f7:74:ed:74: 46:f7:ca:0e:84:ad:55:e7:cb:24:8d:86:e2:fa:16: dd:43:4a:79:87:ef:72:9b:01:0a:9f:e9:e2:07:74: 96:49:d8:e9:ea:d1:e8:f3:76:b7:97:2c:89:ad:0a: 7f:a5:85:de:7f:74:f2:77:2e:21:09:fd:c4:c7:ad: 7c:a5:d9:c5:cb:9c:22:33:85:26:f0:0c:5e:09:f0: e5:d8:cd:27:b3:e3:83:f6:07:54:8c:ae:f7:5d:91: 68:4e:d8:20:70:e3:1f:44:5a:f6:92:e7:cb:df:70: 13:5c:ba:01:35:5c:2c:79:8d:92:08:03:61:77:62: d6:9f:53:8e:11:df:10:73:19:1f:f1:c2:0b:58:e2: a9:45:3b:fe:00:20:38:0d:9e:79:b3:e0:8c:c7:0e: 2e:db:d7:0a:b0:4e:3f:5f:35:4a:0b:33:cf:c5:4f: 9b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:61:B5:9D:BB:CF:E4:59:4D:AA:4E:A8:45:46:8D:4C:C4:25:8B:57 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.159.0/24 103.30.76.0/22 103.171.34.0/23 IPv6: 2001:df7:3480::/48 2401:2660:1000::/36 Signature Algorithm: sha256WithRSAEncryption 25:25:90:6b:2c:ec:ce:a6:a1:fd:d3:b7:84:c1:3f:77:cd:bc: f8:3c:97:cb:21:46:6b:6e:f5:09:99:c9:a5:41:49:c7:de:fe: 7e:d9:e8:a9:c1:5f:93:cb:36:ac:3b:36:0a:b1:c8:88:a4:78: 86:7a:d3:60:06:96:f0:d2:53:56:be:78:c4:07:9a:8d:e2:f5: cc:e2:99:e7:27:28:a5:83:d2:88:11:d6:89:08:8d:48:e5:2c: 11:4a:67:2d:91:e7:01:1b:1e:06:8e:e4:7a:3b:f8:5d:a9:6d: e1:5a:5e:70:ec:19:8c:ce:fa:d2:d8:7b:dd:9b:9d:82:78:0c: 0f:60:3c:4b:e4:13:7b:04:30:57:31:05:61:2c:40:d4:2a:06: 30:86:cf:7a:04:74:1a:ba:9e:71:37:b5:6f:ee:e5:06:42:f3: 81:ce:6a:8c:1a:9b:c8:05:b5:14:6f:f1:32:13:12:07:28:50: 19:62:bb:82:4e:6f:f0:ec:0c:77:7b:cc:7e:3d:c1:e7:c7:19: 48:f4:77:c3:03:9a:cb:cc:66:ae:a7:1f:5b:4d:f1:a5:99:0b: e8:bb:c4:3e:ad:e5:1c:21:e4:a4:4a:9b:95:bf:52:62:c6:ad: 23:37:a7:2b:c4:cd:12:da:92:2d:78:43:12:a0:72:8a:14:18: 6c:7a:a6:f4 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjQwOTAzMDExNDE5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2NjJlYi01MGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsylyFr9newR2H4E0sZG6wTWto7+MeLiexzpN4GjwKz+3lEAcehRkTyvgCIg3 iA/FQ1JaE6sxkrHEQfM6Y3z+7UxqWM9qobU71MVIirFNJ/ID71bj9/d07XRG98oO hK1V58skjYbi+hbdQ0p5h+9ymwEKn+niB3SWSdjp6tHo83a3lyyJrQp/pYXef3Ty dy4hCf3Ex618pdnFy5wiM4Um8AxeCfDl2M0ns+OD9gdUjK73XZFoTtggcOMfRFr2 kufL33ATXLoBNVwseY2SCANhd2LWn1OOEd8Qcxkf8cILWOKpRTv+ACA4DZ55s+CM xw4u29cKsE4/XzVKCzPPxU+bxQIDAQABo4ICujCCArYwHQYDVR0OBBYEFCdhtZ27 z+RZTapOqEVGjUzEJYtXMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvOTE5RTJCMjBF NTI4MTFFRDg2M0U4QzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E NTAzMBgEAgABMBIDBAAr/58DBAJnHkwDBAFnqyIwFwQCAAIwEQMHACABDfc0gAMG BCQBJmAQMA0GCSqGSIb3DQEBCwUAA4IBAQAlJZBrLOzOpqH907eEwT93zbz4PJfL IUZrbvUJmcmlQUnH3v5+2eipwV+TyzasOzYKsciIpHiGetNgBpbw0lNWvnjEB5qN 4vXM4pnnJyilg9KIEdaJCI1I5SwRSmctkecBGx4GjuR6O/hdqW3hWl5w7BmMzvrS 2Hvdm52CeAwPYDxL5BN7BDBXMQVhLEDUKgYwhs96BHQaup5xN7Vv7uUGQvOBzmqM GpvIBbUUb/EyExIHKFAZYruCTm/w7Ax3e8x+PcHnxxlI9HfDA5rLzGaupx9bTfGl mQvou8Q+reUcIeSkSpuVv1Jixq0jN6crxM0S2pIteEMSoHKKFBhseqb0 -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:19 2024 by rpki-client on console-fra.rpki-client.org