$ rpki-client -vvf rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/7CEC0182B10C11E5BB6B2A16C4F9AE02.roa File: 7CEC0182B10C11E5BB6B2A16C4F9AE02.roa (raw, json) Hash identifier: szs84NZp6PRkDbAazU5Vux6gnoQk27OVrBFKSwWNnmU= Subject key identifier: BB:32:ED:C9:E4:B7:C1:88:11:1C:7A:B6:49:7A:73:E2:85:1F:88:B9 Certificate issuer: /CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Certificate serial: 2637 Authority key identifier: 3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/7CEC0182B10C11E5BB6B2A16C4F9AE02.roa Signing time: Sat 06 Jul 2024 16:02:42 +0000 ROA not before: Sat 06 Jul 2024 16:02:42 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 132917 IP address blocks: 43.226.8.0/24 maxlen: 24 43.226.9.0/24 maxlen: 24 43.226.10.0/24 maxlen: 24 43.226.11.0/24 maxlen: 24 103.250.48.0/24 maxlen: 24 103.250.49.0/24 maxlen: 24 103.250.50.0/24 maxlen: 24 103.250.51.0/24 maxlen: 24 2407:8300::/36 maxlen: 36 2407:8300:1000::/36 maxlen: 36 2407:8300:2000::/36 maxlen: 36 2407:8300:3000::/36 maxlen: 36 2407:8300:4000::/36 maxlen: 36 2407:8300:5000::/36 maxlen: 36 2407:8300:6000::/36 maxlen: 36 2407:8300:7000::/36 maxlen: 36 2407:8300:8000::/36 maxlen: 36 2407:8300:9000::/36 maxlen: 36 2407:8300:a000::/36 maxlen: 36 2407:8300:b000::/36 maxlen: 36 2407:8300:c000::/36 maxlen: 36 2407:8300:d000::/36 maxlen: 36 2407:8300:e000::/36 maxlen: 36 2407:8300:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9783 (0x2637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Validity Not Before: Jul 6 16:02:42 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66896aa2-583b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7e:2c:23:2e:64:dc:3d:91:a5:aa:f9:a8:e4: a4:12:d5:61:6f:60:f9:9f:0b:92:4e:04:72:f7:87: cd:3b:02:ea:e6:23:db:ee:a2:3e:5f:d1:5c:d1:58: 36:e1:da:21:e9:4b:a6:93:04:b6:d7:9a:c2:88:bb: 23:a8:1c:d0:9c:a7:c0:b9:72:a5:ea:53:6d:11:56: c6:bd:e8:55:13:3c:88:7a:23:b1:2c:fc:a2:3d:fb: bd:88:69:f1:47:85:c9:6b:11:f1:0f:54:22:ff:e3: 74:a8:b0:c1:1f:f6:bd:6c:6a:09:9e:a5:78:3f:12: fb:54:93:11:cc:a8:7a:e0:39:03:26:70:59:34:39: fe:06:79:fd:59:34:07:46:26:f6:e1:c8:22:0f:28: 43:d2:e6:e1:d6:99:23:58:83:ff:64:7f:81:9c:55: 5d:8a:99:3e:d1:d8:ea:92:09:88:a7:14:e6:7a:e1: 09:fa:11:de:2a:91:8c:9f:a1:91:e7:ed:8d:f9:e7: 1f:b0:28:a8:ac:9a:55:bd:56:87:79:44:af:b8:fd: 75:af:7b:5e:75:49:1e:79:fb:d8:0c:b1:dc:ba:a0: 0f:7a:6d:98:bc:b1:f0:bc:4e:d3:24:70:82:45:81: 6f:ad:1a:2b:55:54:c6:19:c8:2c:bb:85:35:c9:61: e8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:32:ED:C9:E4:B7:C1:88:11:1C:7A:B6:49:7A:73:E2:85:1F:88:B9 X509v3 Authority Key Identifier: keyid:3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/7CEC0182B10C11E5BB6B2A16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.8.0/22 103.250.48.0/22 IPv6: 2407:8300::/32 Signature Algorithm: sha256WithRSAEncryption 98:2c:c6:06:ee:7b:e4:3e:ab:0a:9f:e6:af:60:aa:84:53:7d: 9e:34:f5:13:9a:ad:21:36:30:ad:1b:56:06:a8:95:57:64:ab: 5b:6b:28:4c:d6:36:d1:2e:0a:e5:06:7f:18:4c:df:35:7d:a3: 4e:fb:f2:1c:8d:fb:de:36:0d:65:2c:7d:78:8b:d8:e4:86:f6: bb:84:36:a4:d9:32:2f:dc:80:c0:41:7a:57:d7:1f:28:58:b0: 45:c6:2a:3d:68:b8:a2:7f:52:88:8c:11:09:93:3e:01:c2:a9: 6d:f1:47:42:f5:46:3b:8b:d6:b7:b5:e7:73:81:ca:b9:b7:89: 7d:de:3c:53:66:9a:fe:43:b9:d5:84:08:15:eb:54:59:1b:8e: 5c:ea:69:dc:23:e0:8a:03:07:20:99:ea:2a:10:b8:6e:df:cf: 1e:99:95:6a:ef:9a:66:0f:10:75:14:f7:b1:6a:28:2b:25:8e: b0:52:9e:5f:d5:6c:bb:ba:03:c7:a9:c4:72:d7:80:57:5e:03: bd:bf:39:c3:72:20:2f:d6:d5:21:5e:b2:a4:fb:c3:20:9b:b3: ab:d8:e0:3d:78:40:75:02:96:7b:3a:1e:9e:b2:2b:1e:cc:51: ad:bb:37:bd:bf:ba:6b:cb:7e:d5:ac:f9:78:82:60:24:5a:92: ff:4c:43:38 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICJjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFMEMxMTAvBgNVBAUTKDNFMkI1ODQzN0U4NjI0NDEzOUFFNENEMDNEOTdGNDAz NDI4NTA3MzYwHhcNMjQwNzA2MTYwMjQyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg5NmFhMi01ODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8n4sIy5k3D2Rpar5qOSkEtVhb2D5nwuSTgRy94fNOwLq5iPb7qI+X9Fc0Vg2 4doh6UumkwS215rCiLsjqBzQnKfAuXKl6lNtEVbGvehVEzyIeiOxLPyiPfu9iGnx R4XJaxHxD1Qi/+N0qLDBH/a9bGoJnqV4PxL7VJMRzKh64DkDJnBZNDn+Bnn9WTQH Rib24cgiDyhD0ubh1pkjWIP/ZH+BnFVdipk+0djqkgmIpxTmeuEJ+hHeKpGMn6GR 5+2N+ecfsCiorJpVvVaHeUSvuP11r3tedUkeefvYDLHcuqAPem2YvLHwvE7TJHCC RYFvrRorVVTGGcgsu4U1yWHoYQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLsy7cnk t8GIERx6tkl6c+KFH4i5MB8GA1UdIwQYMBaAFD4rWEN+hiRBOa5M0D2X9ANChQc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUUwQy8yMkQ1MzY1MkQ2 NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pFRTVya3pRUFpmMEEwS0ZC elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BpdFlRMzZHSkVFNXJrelFQWmYwQTBLRkJ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVFMEMvMjJENTM2NTJENjcyMTFFNEEyMTIyMzUxQzRGOUFFMDIvN0NFQzAxODJC MTBDMTFFNUJCNkIyQTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr4ggDBAJn+jAwDQQCAAIwBwMFACQHgwAwDQYJKoZIhvcN AQELBQADggEBAJgsxgbue+Q+qwqf5q9gqoRTfZ409ROarSE2MK0bVgaolVdkq1tr KEzWNtEuCuUGfxhM3zV9o0778hyN+942DWUsfXiL2OSG9ruENqTZMi/cgMBBelfX HyhYsEXGKj1ouKJ/UoiMEQmTPgHCqW3xR0L1RjuL1re153OByrm3iX3ePFNmmv5D udWECBXrVFkbjlzqadwj4IoDByCZ6ioQuG7fzx6ZlWrvmmYPEHUU97FqKCsljrBS nl/VbLu6A8epxHLXgFdeA72/OcNyIC/W1SFesqT7wyCbs6vY4D14QHUClns6Hp6y Kx7MUa27N72/umvLftWs+XiCYCRakv9MQzg= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:19 2024 by rpki-client on console-ams.rpki-client.org