$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/7E847B60998D11EEB9881356C4F9AE02.roa File: 7E847B60998D11EEB9881356C4F9AE02.roa (raw, json) Hash identifier: A02TkzE0gtzmmXM02idw5IYDPMR1UoGdX1Nto88Ee1Q= Subject key identifier: 85:2C:82:B4:6B:BE:A2:55:77:84:4B:48:98:5F:D4:1D:81:65:0C:27 Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E Certificate serial: 17D9 Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/7E847B60998D11EEB9881356C4F9AE02.roa Signing time: Fri 04 Oct 2024 16:54:45 +0000 ROA not before: Fri 04 Oct 2024 16:54:45 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 134512 IP address blocks: 43.239.140.0/22 maxlen: 22 43.239.140.0/24 maxlen: 24 43.239.141.0/24 maxlen: 24 43.239.142.0/24 maxlen: 24 43.239.143.0/24 maxlen: 24 103.71.172.0/22 maxlen: 22 103.71.172.0/24 maxlen: 24 103.71.173.0/24 maxlen: 24 103.71.174.0/24 maxlen: 24 103.71.175.0/24 maxlen: 24 103.194.168.0/24 maxlen: 24 103.194.169.0/24 maxlen: 24 103.194.170.0/24 maxlen: 24 103.194.171.0/24 maxlen: 24 103.248.52.0/24 maxlen: 24 103.248.53.0/24 maxlen: 24 103.248.55.0/24 maxlen: 24 103.252.220.0/22 maxlen: 22 103.252.220.0/24 maxlen: 24 103.252.221.0/24 maxlen: 24 103.252.222.0/24 maxlen: 24 103.252.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6105 (0x17d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E Validity Not Before: Oct 4 16:54:45 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67001dd4-806e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a5:c2:29:e0:bf:64:79:00:cd:03:8f:51:cf: 0a:99:1f:10:3f:af:5d:69:4d:00:d4:87:94:33:22: 15:66:1f:82:2a:64:a1:ae:6b:4c:b7:d0:53:af:88: 4a:4a:53:dd:4b:5d:c9:9e:c5:4b:9f:21:42:86:49: fb:a4:c9:2c:74:75:83:81:d5:61:00:b9:4f:7e:27: d9:04:db:80:dd:a1:1a:9f:8b:37:0e:eb:a1:98:61: 12:b7:f1:50:a5:f7:1e:af:88:3b:b2:76:da:b0:64: 6a:49:96:11:27:eb:f0:f1:26:37:3f:f7:f0:97:11: 26:14:c8:c8:9d:a8:b3:99:e8:2a:f4:90:37:2d:4a: ca:09:8f:75:f3:5a:82:71:c0:3b:b4:72:67:ca:eb: 90:6e:a5:53:83:2a:5e:5d:df:a8:41:cf:89:a9:f0: 54:05:6e:b2:67:cb:81:48:47:4f:0f:ac:76:4f:51: bb:ce:69:79:21:48:b2:a8:34:ce:20:03:e3:8e:6c: 4b:eb:16:cc:84:80:f0:8f:55:1e:3c:f2:e6:ad:3b: d9:bf:52:00:82:ad:c8:46:23:48:dd:cc:53:d6:3d: 6b:04:00:3f:1c:3a:4e:44:a7:46:e0:14:01:82:ad: 59:3a:c1:00:d8:ca:4d:47:48:31:9d:aa:59:a6:13: ef:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2C:82:B4:6B:BE:A2:55:77:84:4B:48:98:5F:D4:1D:81:65:0C:27 X509v3 Authority Key Identifier: keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/7E847B60998D11EEB9881356C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.140.0/22 103.71.172.0/22 103.194.168.0/22 103.248.52.0/23 103.248.55.0/24 103.252.220.0/22 Signature Algorithm: sha256WithRSAEncryption aa:30:fb:0b:a8:2e:78:e9:25:14:23:2a:a0:38:5c:61:cb:5b: 9a:8e:a7:d4:4f:7f:0b:c5:af:67:f8:36:c1:63:f2:a8:c5:a5: a9:ac:15:b2:6c:d1:1e:a2:4f:a1:0f:ba:4d:12:eb:b0:ef:28: 87:02:48:56:f0:1d:79:8a:47:b6:19:90:75:d8:54:c3:f5:d3: e6:9b:fa:2e:4b:af:11:b1:db:f4:89:de:1a:16:aa:1e:9a:78: 46:5c:08:e8:f1:8a:56:f1:ba:6b:b4:cc:ea:98:8b:66:f0:d2: 8c:f4:be:f1:d6:68:61:61:1e:e9:8c:a9:4a:3f:0e:5c:75:91: 77:17:87:22:b7:37:f8:14:80:b6:e9:f2:82:71:f4:a0:51:5b: 4e:b2:a8:78:b3:50:c7:dd:ed:3f:88:4f:1a:63:91:02:3b:a3: 6a:cc:fa:f0:49:ca:ae:06:9d:91:ac:54:54:62:51:93:95:db: 1b:7b:6e:b5:db:ee:c3:72:ab:63:02:61:98:c8:82:e1:a2:11: 31:29:7c:06:cf:37:f4:e9:76:ff:4a:ce:34:95:49:07:44:c9: a2:ef:3a:2f:6e:ff:86:f1:47:60:ec:1d:dd:9d:0d:5d:69:6a: c2:a7:62:10:b7:34:b9:d6:63:09:08:92:55:ba:f0:21:ba:25: c3:4a:3d:09 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICF9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI1QkQxMTAvBgNVBAUTKDIyRTgxQjMyN0NCMUZCMzUwMUUwNUFGQUI5NDEyMTkx OEZEQjVCNUUwHhcNMjQxMDA0MTY1NDQ1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzAwMWRkNC04MDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56XCKeC/ZHkAzQOPUc8KmR8QP69daU0A1IeUMyIVZh+CKmShrmtMt9BTr4hK SlPdS13JnsVLnyFChkn7pMksdHWDgdVhALlPfifZBNuA3aEan4s3DuuhmGESt/FQ pfcer4g7snbasGRqSZYRJ+vw8SY3P/fwlxEmFMjInaizmegq9JA3LUrKCY9181qC ccA7tHJnyuuQbqVTgypeXd+oQc+JqfBUBW6yZ8uBSEdPD6x2T1G7zml5IUiyqDTO IAPjjmxL6xbMhIDwj1UePPLmrTvZv1IAgq3IRiNI3cxT1j1rBAA/HDpORKdG4BQB gq1ZOsEA2MpNR0gxnapZphPv4QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFIUsgrRr vqJVd4RLSJhf1B2BZQwnMB8GA1UdIwQYMBaAFCLoGzJ8sfs1AeBa+rlBIZGP21te MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjVCRC8zM0NCMTE3QUI1 QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16VUI0RnI2dVVFaGtZX2JX MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1Z2JNbnl4LXpVQjRGcjZ1VUVoa1lfYlcxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEI1QkQvMzNDQjExN0FCNUE5MTFFNzlDNzRDQjcyQzRGOUFFMDIvN0U4NDdCNjA5 OThEMTFFRUI5ODgxMzU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAIr74wDBAJnR6wDBAJnwqgDBAFn+DQDBABn+DcDBAJn/Nww DQYJKoZIhvcNAQELBQADggEBAKow+wuoLnjpJRQjKqA4XGHLW5qOp9RPfwvFr2f4 NsFj8qjFpamsFbJs0R6iT6EPuk0S67DvKIcCSFbwHXmKR7YZkHXYVMP10+ab+i5L rxGx2/SJ3hoWqh6aeEZcCOjxilbxumu0zOqYi2bw0oz0vvHWaGFhHumMqUo/Dlx1 kXcXhyK3N/gUgLbp8oJx9KBRW06yqHizUMfd7T+ITxpjkQI7o2rM+vBJyq4GnZGs VFRiUZOV2xt7brXb7sNyq2MCYZjIguGiETEpfAbPN/Tpdv9KzjSVSQdEyaLvOi9u /4bxR2DsHd2dDV1pasKnYhC3NLnWYwkIklW68CG6JcNKPQk= -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:17 2024 by rpki-client on console-ams.rpki-client.org