$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa File: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (raw, json) Hash identifier: xWLJsIOACYVl3HGPv+BGgFGrPw1FmHr3Q1PpP41xefE= Subject key identifier: E7:7C:A4:54:75:52:47:2B:49:3C:B5:22:62:50:BB:64:D0:89:35:66 Certificate issuer: /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Certificate serial: 0DC2 Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa Signing time: Wed 04 Sep 2024 18:36:18 +0000 ROA not before: Wed 04 Sep 2024 18:36:18 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 134809 IP address blocks: 43.228.200.0/22 maxlen: 22 43.252.216.0/22 maxlen: 22 103.12.140.0/22 maxlen: 22 103.22.160.0/22 maxlen: 22 103.26.248.0/22 maxlen: 22 103.194.80.0/22 maxlen: 22 163.53.224.0/22 maxlen: 22 2400:6e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 17:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3522 (0xdc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Validity Not Before: Sep 4 18:36:18 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66d8a8a2-b538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:64:1d:c9:fc:8b:a9:11:ba:01:e5:18:99:19: e5:d2:ae:7b:a2:4d:37:cc:ec:58:64:e8:9e:98:66: 7f:fe:ca:07:2f:72:4b:40:d5:7a:5f:16:8d:03:af: 17:e7:f0:de:4e:2f:1c:46:e4:4f:4c:f9:56:6b:31: a6:85:f3:82:88:e0:d7:ae:44:78:03:95:37:9e:bb: f7:5e:37:c1:4c:f5:98:70:7c:22:6d:1f:ea:50:53: ba:15:3d:fa:93:10:d9:68:2e:67:14:57:15:3f:8e: 28:d6:01:6d:70:7f:6b:15:01:e6:b3:44:8e:7a:87: 5d:93:5e:65:7d:48:ae:9f:5d:2d:be:dc:9c:fe:59: 3f:f3:f1:33:a1:80:c2:09:fd:f4:56:7b:b3:b8:b9: d2:7a:ad:11:fe:f4:a0:02:ec:31:48:a3:5e:14:59: 63:08:f7:d8:0e:89:8d:d4:50:8c:23:fb:5f:92:0f: d7:c2:9c:81:b3:0f:73:b9:0e:a7:40:96:6e:de:53: 92:30:51:a5:90:c1:7e:1e:b3:a1:0e:db:f1:08:5f: e3:06:80:e9:3f:34:5d:15:be:bf:9e:41:41:b6:dd: 0f:23:57:9e:c6:8e:05:d5:e1:0d:a0:87:81:7e:78: 0d:35:c2:aa:1d:ec:d1:f2:50:a3:5e:cb:bf:40:83: 44:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7C:A4:54:75:52:47:2B:49:3C:B5:22:62:50:BB:64:D0:89:35:66 X509v3 Authority Key Identifier: keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.200.0/22 43.252.216.0/22 103.12.140.0/22 103.22.160.0/22 103.26.248.0/22 103.194.80.0/22 163.53.224.0/22 IPv6: 2400:6e80::/32 Signature Algorithm: sha256WithRSAEncryption 2e:25:43:3c:09:48:ad:e8:84:ed:10:5a:19:32:b2:86:79:e4: c4:33:43:77:da:18:02:9b:6a:cf:d7:84:5d:de:38:b9:88:e4: 14:33:ff:68:b3:8f:37:68:68:21:87:38:c8:95:63:bd:bf:8f: 9a:76:af:c8:53:92:08:53:db:87:b0:95:87:ad:0e:0e:77:42: 57:3b:2f:ba:8f:20:d5:08:c5:96:9e:67:77:c1:2f:1e:33:c7: d8:5f:5e:e6:90:99:11:8b:fd:b6:6f:a7:ba:43:94:3f:af:e4: 92:27:65:c4:79:35:6e:ab:b4:58:3a:82:c9:bd:1f:5e:73:48: 06:2d:a9:4a:f3:40:17:e3:24:79:5a:55:e4:5d:52:7e:44:47: ec:37:cb:90:07:f2:75:ad:7b:8f:7f:09:26:84:88:b8:a0:fe: b7:54:a4:12:98:d6:ea:66:69:67:95:31:45:97:59:7d:b0:83: b7:ec:74:95:74:f7:bc:0f:ea:52:ad:db:1d:16:e3:0a:05:61: 00:10:a8:22:cf:7f:0f:6b:6d:8c:1a:3a:14:f5:28:62:e0:25: 87:71:03:fe:d3:13:ba:cc:b6:2c:25:b7:3c:48:34:a9:0a:c0: 13:77:c9:d6:78:96:2e:b1:b2:29:bb:49:dd:2c:7e:9e:3a:1a: 26:69:de:95 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICDcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz MEVBMkQwMzkwHhcNMjQwOTA0MTgzNjE4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4YThhMi1iNTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumQdyfyLqRG6AeUYmRnl0q57ok03zOxYZOiemGZ//soHL3JLQNV6XxaNA68X 5/DeTi8cRuRPTPlWazGmhfOCiODXrkR4A5U3nrv3XjfBTPWYcHwibR/qUFO6FT36 kxDZaC5nFFcVP44o1gFtcH9rFQHms0SOeoddk15lfUiun10tvtyc/lk/8/EzoYDC Cf30VnuzuLnSeq0R/vSgAuwxSKNeFFljCPfYDomN1FCMI/tfkg/XwpyBsw9zuQ6n QJZu3lOSMFGlkMF+HrOhDtvxCF/jBoDpPzRdFb6/nkFBtt0PI1eexo4F1eENoIeB fngNNcKqHezR8lCjXsu/QINEmQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFOd8pFR1 UkcrSTy1ImJQu2TQiTVmMB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0 MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Y0QjAvMkQyNzA2OTJBNDMzMTFFOTg4MTU4RjA5QzRGOUFFMDIvN0ZDMkJBM0FD RUUyMTFFREFGNDFCQzI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMDAEAgABMCoDBAIr5MgDBAIr/NgDBAJnDIwDBAJnFqADBAJnGvgDBAJnwlAD BAKjNeAwDQQCAAIwBwMFACQAboAwDQYJKoZIhvcNAQELBQADggEBAC4lQzwJSK3o hO0QWhkysoZ55MQzQ3faGAKbas/XhF3eOLmI5BQz/2izjzdoaCGHOMiVY72/j5p2 r8hTkghT24ewlYetDg53Qlc7L7qPINUIxZaeZ3fBLx4zx9hfXuaQmRGL/bZvp7pD lD+v5JInZcR5NW6rtFg6gsm9H15zSAYtqUrzQBfjJHlaVeRdUn5ER+w3y5AH8nWt e49/CSaEiLig/rdUpBKY1upmaWeVMUWXWX2wg7fsdJV097wP6lKt2x0W4woFYQAQ qCLPfw9rbYwaOhT1KGLgJYdxA/7TE7rMtiwltzxINKkKwBN3ydZ4li6xsim7Sd0s fp46GiZp3pU= -----END CERTIFICATE-----Generated at Tue Nov 26 19:07:08 2024 by rpki-client on console-fra.rpki-client.org