$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/D6138A3C292A11EB9CEDCC26C4F9AE02.roa File: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (raw, json) Hash identifier: eaeoz8RqOSGEC4peCpxGpY2PbARdRPwT9kf9QvE/Y6E= Subject key identifier: E3:72:E5:86:93:4C:86:FD:20:24:0C:92:09:7F:A7:92:75:40:CD:2A Certificate issuer: /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Certificate serial: 06EB Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/D6138A3C292A11EB9CEDCC26C4F9AE02.roa Signing time: Wed 20 Nov 2024 21:40:50 +0000 ROA not before: Wed 20 Nov 2024 21:40:50 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 55752 IP address blocks: 27.121.88.0/22 maxlen: 24 103.225.140.0/22 maxlen: 22 103.225.140.0/24 maxlen: 24 103.225.141.0/24 maxlen: 24 103.225.142.0/24 maxlen: 24 103.225.143.0/24 maxlen: 24 122.102.110.0/23 maxlen: 24 175.158.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Validity Not Before: Nov 20 21:40:50 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=673e5761-3060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:27:7f:10:b5:a1:08:d0:c6:a1:a5:ee:16:77: 0d:e1:01:b8:3c:70:9b:4b:c0:aa:86:a7:00:00:05: a7:f3:a3:1f:7f:7f:cc:12:21:89:c0:d5:4c:f8:d8: 37:34:b0:c2:be:1c:b7:d3:49:d2:29:d2:65:34:25: b5:06:d2:cb:27:24:57:6b:7b:e8:a0:ec:e8:6a:0a: d4:ad:60:78:18:29:4f:f6:66:db:20:07:45:39:0d: 0e:3f:b2:37:cc:8d:ce:fd:a9:4c:5c:6a:cd:4a:6b: 87:02:00:2f:4e:51:10:7b:34:4b:15:ac:92:ae:ee: 8d:42:63:c2:fe:43:09:ef:b0:d4:1b:d6:b3:02:08: 73:6f:68:f0:bb:57:cc:ea:48:c8:d2:ad:cb:80:69: 73:56:af:e7:c7:94:31:29:0c:b1:02:62:12:a0:15: 16:05:da:95:d7:19:4a:60:39:35:0d:20:1b:44:62: 6f:65:85:7f:ac:8e:62:ff:d3:50:45:3f:2e:cc:bf: 03:8f:c4:68:a9:b7:fd:31:82:32:1a:29:aa:3c:d0: e5:93:d1:9f:6b:ad:e8:ad:c9:84:20:44:27:b0:66: f7:1c:fb:f4:5d:bf:ce:1e:4d:34:30:e9:64:0b:a7: 62:83:1b:0d:6c:09:b5:31:5c:c3:06:80:d2:7d:7e: 7a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:72:E5:86:93:4C:86:FD:20:24:0C:92:09:7F:A7:92:75:40:CD:2A X509v3 Authority Key Identifier: keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/D6138A3C292A11EB9CEDCC26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.121.88.0/22 103.225.140.0/22 122.102.110.0/23 175.158.108.0/22 Signature Algorithm: sha256WithRSAEncryption c1:8f:80:89:61:29:85:9f:05:04:de:ab:12:f1:a5:7c:0a:cf: e8:b0:b5:1b:e8:9b:9b:c4:26:f1:b6:eb:20:54:6c:3f:1f:11: 83:d3:f7:27:ff:03:c8:63:5a:a5:31:7e:c3:f3:42:c8:97:7c: 3a:ea:0e:ed:02:74:4a:b0:aa:d1:79:62:51:d2:ac:32:fb:56: 05:13:b9:92:5e:be:62:00:4d:97:08:8e:04:7e:41:5f:c6:c4: de:df:92:71:98:3a:e1:92:e7:00:56:c6:fe:cf:96:5a:64:0f: 34:00:3b:d4:c0:36:e5:ba:5b:73:f2:4b:3f:78:d0:79:af:49: e9:36:43:1e:3b:23:62:f5:9e:72:b2:7f:33:72:c8:6f:d1:08: ba:6f:a5:09:53:36:e4:e3:05:19:7a:f9:79:2a:e7:58:d3:d9: 19:a9:75:d0:7d:0c:3f:60:e0:87:1f:5e:3a:3e:0f:7e:20:52: ab:ef:28:7f:35:6d:9c:12:b1:9b:98:89:c6:0a:21:33:58:b8: c9:a3:7a:77:70:38:84:23:0f:19:19:9f:a5:ec:44:e3:a2:24: 2e:f3:7c:c4:88:d1:29:19:65:11:4f:e0:9e:54:ef:a8:67:d2: 92:ac:f3:a0:a6:70:09:11:fc:60:e6:33:be:ee:b5:ea:83:63: 0f:c3:60:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFNzgxMTAvBgNVBAUTKDVFRTdDRjQzOUE0MjIzMjMyOTgyQTJDQjRERTU0RjM3 QzcyMDVBQTkwHhcNMjQxMTIwMjE0MDUwWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNlNTc2MS0zMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yd/ELWhCNDGoaXuFncN4QG4PHCbS8CqhqcAAAWn86Mff3/MEiGJwNVM+Ng3 NLDCvhy300nSKdJlNCW1BtLLJyRXa3vooOzoagrUrWB4GClP9mbbIAdFOQ0OP7I3 zI3O/alMXGrNSmuHAgAvTlEQezRLFaySru6NQmPC/kMJ77DUG9azAghzb2jwu1fM 6kjI0q3LgGlzVq/nx5QxKQyxAmISoBUWBdqV1xlKYDk1DSAbRGJvZYV/rI5i/9NQ RT8uzL8Dj8Roqbf9MYIyGimqPNDlk9Gfa63orcmEIEQnsGb3HPv0Xb/OHk00MOlk C6digxsNbAm1MVzDBoDSfX56FwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFONy5YaT TIb9ICQMkgl/p5J1QM0qMB8GA1UdIwQYMBaAFF7nz0OaQiMjKYKiy03lTzfHIFqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3OC9GMUY0RDNDRTI5 MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5TXBncUxMVGVWUE44Y2dX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h1ZlBRNXBDSXlNcGdxTExUZVZQTjhjZ1dxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFNzgvRjFGNEQzQ0UyOTI5MTFFQjk0RTM4RDI2QzRGOUFFMDIvRDYxMzhBM0My OTJBMTFFQjlDRURDQzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIbeVgDBAJn4YwDBAF6Zm4DBAKvnmwwDQYJKoZIhvcNAQEL BQADggEBAMGPgIlhKYWfBQTeqxLxpXwKz+iwtRvom5vEJvG26yBUbD8fEYPT9yf/ A8hjWqUxfsPzQsiXfDrqDu0CdEqwqtF5YlHSrDL7VgUTuZJevmIATZcIjgR+QV/G xN7fknGYOuGS5wBWxv7PllpkDzQAO9TANuW6W3PySz940HmvSek2Qx47I2L1nnKy fzNyyG/RCLpvpQlTNuTjBRl6+Xkq51jT2RmpddB9DD9g4IcfXjo+D34gUqvvKH81 bZwSsZuYicYKITNYuMmjendwOIQjDxkZn6XsROOiJC7zfMSI0SkZZRFP4J5U76hn 0pKs86CmcAkR/GDmM77uteqDYw/DYEA= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org