$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D99C6B9853BE11EF819E6347C4F9AE02.roa File: D99C6B9853BE11EF819E6347C4F9AE02.roa (raw, json) Hash identifier: HMObo0lfz4F6N80OBTdLQh6EOPuKBNscLBysUmuHPew= Subject key identifier: D0:D9:56:F8:A3:2D:DA:94:10:33:99:EE:1F:7B:0E:DF:20:1C:95:16 Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 3465 Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D99C6B9853BE11EF819E6347C4F9AE02.roa Signing time: Mon 07 Oct 2024 06:14:49 +0000 ROA not before: Mon 07 Oct 2024 06:14:49 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 7616 IP address blocks: 203.130.128.0/19 maxlen: 20 203.130.146.0/24 maxlen: 24 203.147.16.0/20 maxlen: 21 203.147.31.0/24 maxlen: 24 203.147.32.0/20 maxlen: 21 203.147.42.0/24 maxlen: 24 203.147.48.0/20 maxlen: 20 203.147.54.0/24 maxlen: 24 203.156.18.0/24 maxlen: 24 203.156.48.0/20 maxlen: 20 203.156.64.0/20 maxlen: 20 203.156.80.0/20 maxlen: 20 203.156.128.0/18 maxlen: 20 203.156.146.0/24 maxlen: 24 203.156.147.0/24 maxlen: 24 203.156.148.0/24 maxlen: 24 203.156.149.0/24 maxlen: 24 203.156.150.0/24 maxlen: 24 203.156.152.0/21 maxlen: 21 203.156.152.0/24 maxlen: 24 2403:bf00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13413 (0x3465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Validity Not Before: Oct 7 06:14:49 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=67037c59-f486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:58:1b:a0:a4:df:c5:62:8d:2d:6c:06:a7: b9:31:f6:45:5d:17:9b:1e:29:e8:4a:41:03:16:0f: b1:f1:5a:5e:c6:6b:37:65:e2:37:4d:99:46:4a:ef: 41:d7:24:6d:94:08:bd:60:cd:7c:19:a0:74:d7:b4: 65:bf:91:d0:27:f2:97:c1:a4:c1:8d:63:b9:19:6d: 75:53:3e:d5:d2:e7:4b:b8:a3:fe:32:b7:16:e3:6f: f8:85:fc:a0:58:34:30:da:1d:af:62:1e:ec:ea:6c: ec:df:38:69:04:f1:84:cb:83:da:db:b7:db:34:54: 19:98:10:90:c6:e5:4f:e1:a5:7d:55:4f:e7:a8:b1: 8a:3c:25:8d:7f:53:34:d3:4b:60:5f:39:66:d5:61: 96:c1:cf:f7:5e:7d:c5:6f:03:82:1c:65:34:73:b6: 0d:4b:d8:25:35:bd:5c:4c:3b:da:af:b1:29:e7:69: 92:d3:26:b3:88:ac:83:3b:ad:3c:ae:f0:e9:b4:d9: dd:46:ce:44:c1:b1:8d:ba:85:80:4b:9f:99:99:ab: 55:70:cb:75:f5:37:a2:56:d8:bb:23:9f:b2:c0:b5: b8:dc:ab:41:2f:41:3a:f4:ae:c3:11:5c:11:c8:01: 8e:b8:a3:a4:f8:e4:d7:45:cc:fd:f5:88:aa:d0:dd: 81:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D9:56:F8:A3:2D:DA:94:10:33:99:EE:1F:7B:0E:DF:20:1C:95:16 X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D99C6B9853BE11EF819E6347C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.130.128.0/19 203.147.16.0-203.147.63.255 203.156.18.0/24 203.156.48.0-203.156.95.255 203.156.128.0/18 IPv6: 2403:bf00::/32 Signature Algorithm: sha256WithRSAEncryption 04:c2:90:1c:42:03:63:4e:82:e8:df:86:1c:da:a8:69:30:a0: 41:51:e7:7c:2c:f6:03:dd:d2:8d:cf:f1:68:04:41:40:fa:4d: 61:18:a0:7b:a4:db:71:92:0b:ef:30:e6:a9:21:41:03:1e:6b: 6e:27:c1:93:42:16:f3:47:39:55:06:87:72:80:84:ba:55:81: 8b:ee:dd:68:ea:68:8b:5d:4c:a7:1d:63:1e:a3:6c:55:a5:55: a2:f6:fb:0c:02:73:f5:bb:7d:30:40:b8:93:cb:d9:7c:e7:14: b7:c3:6b:7d:c2:72:0c:90:f9:6c:61:d3:1a:34:ab:96:0a:32: 68:30:e5:55:3a:0a:89:f5:96:d2:72:6d:e4:f4:ba:7f:df:0d: 43:3d:ad:63:df:fb:a7:cf:9b:52:f8:91:c6:3f:dd:da:00:e4: b0:dd:6f:c6:b7:08:77:62:14:01:b0:47:d6:08:3e:d5:59:d5: 4f:6b:b0:50:5d:28:70:39:00:d9:7d:51:c9:ca:50:d6:53:2d: 32:68:24:b4:e1:b5:af:01:ba:41:ca:8f:30:4c:93:4d:72:bc: 43:ad:87:84:8f:54:9f:e3:05:1e:36:b5:e1:e4:d6:da:74:61: ce:ad:2d:a8:05:23:57:01:07:de:1c:7c:28:9a:d4:d8:8a:ba: bf:f8:55:96 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgICNGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjQxMDA3MDYxNDQ5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzAzN2M1OS1mNDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PpYG6Ck38VijS1sBqe5MfZFXRebHinoSkEDFg+x8Vpexms3ZeI3TZlGSu9B 1yRtlAi9YM18GaB017Rlv5HQJ/KXwaTBjWO5GW11Uz7V0udLuKP+MrcW42/4hfyg WDQw2h2vYh7s6mzs3zhpBPGEy4Pa27fbNFQZmBCQxuVP4aV9VU/nqLGKPCWNf1M0 00tgXzlm1WGWwc/3Xn3FbwOCHGU0c7YNS9glNb1cTDvar7Ep52mS0yaziKyDO608 rvDptNndRs5EwbGNuoWAS5+ZmatVcMt19TeiVti7I5+ywLW43KtBL0E69K7DEVwR yAGOuKOk+OTXRcz99Yiq0N2B/wIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFNDZVvij LdqUEDOZ7h97Dt8gHJUWMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvRDk5QzZCOTg1 M0JFMTFFRjgxOUU2MzQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVgYIKwYBBQUHAQcBAf8E RzBFMDQEAgABMC4DBAXLgoAwDAMEBMuTEAMEBsuTAAMEAMucEjAMAwQEy5wwAwQF y5xAAwQGy5yAMA0EAgACMAcDBQAkA78AMA0GCSqGSIb3DQEBCwUAA4IBAQAEwpAc QgNjToLo34Yc2qhpMKBBUed8LPYD3dKNz/FoBEFA+k1hGKB7pNtxkgvvMOapIUED HmtuJ8GTQhbzRzlVBodygIS6VYGL7t1o6miLXUynHWMeo2xVpVWi9vsMAnP1u30w QLiTy9l85xS3w2t9wnIMkPlsYdMaNKuWCjJoMOVVOgqJ9ZbScm3k9Lp/3w1DPa1j 3/unz5tS+JHGP93aAOSw3W/Gtwh3YhQBsEfWCD7VWdVPa7BQXShwOQDZfVHJylDW Uy0yaCS04bWvAbpByo8wTJNNcrxDrYeEj1Sf4wUeNrXh5NbadGHOrS2oBSNXAQfe HHwomtTYirq/+FWW -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:18 2024 by rpki-client on console-ams.rpki-client.org