$ rpki-client -vvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/1AA7504A92DD11EB9B9E993FC4F9AE02.roa File: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (raw, json) Hash identifier: VKY62GL5Ck/qXDFuD6a8QDseIo6kk4jLfJkbkCLEJK4= Subject key identifier: 0E:95:4B:18:61:31:2E:47:E4:9F:71:1C:28:B3:0B:9B:42:02:F5:3A Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Certificate serial: 0562 Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/1AA7504A92DD11EB9B9E993FC4F9AE02.roa Signing time: Tue 28 Nov 2023 22:30:02 +0000 ROA not before: Tue 28 Nov 2023 22:30:02 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 138368 IP address blocks: 103.131.212.0/22 maxlen: 22 103.131.212.0/24 maxlen: 24 103.131.213.0/24 maxlen: 24 103.131.214.0/24 maxlen: 24 103.131.215.0/24 maxlen: 24 2403:d240::/32 maxlen: 32 2403:d240::/36 maxlen: 36 2403:d240:1000::/36 maxlen: 36 2403:d240:2000::/36 maxlen: 36 2403:d240:3000::/36 maxlen: 36 2403:d240:4000::/36 maxlen: 36 2403:d240:5000::/36 maxlen: 36 2403:d240:6000::/36 maxlen: 36 2403:d240:7000::/36 maxlen: 36 2403:d240:8000::/36 maxlen: 36 2403:d240:9000::/36 maxlen: 36 2403:d240:a000::/36 maxlen: 36 2403:d240:b000::/36 maxlen: 36 2403:d240:c000::/36 maxlen: 36 2403:d240:d000::/36 maxlen: 36 2403:d240:e000::/36 maxlen: 36 2403:d240:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1378 (0x562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Validity Not Before: Nov 28 22:30:02 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656669ea-decd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:8d:f4:31:93:79:29:b4:db:af:b8:56:65: c4:19:43:c2:09:e0:97:ae:80:41:9f:ac:52:44:40: 11:57:62:9a:3c:ec:15:3d:86:b0:47:b8:27:25:2e: 21:5a:c1:da:68:bc:8f:d5:e3:48:ba:29:77:a1:b8: cc:fd:b5:29:7b:ff:96:88:44:27:c5:b0:c2:d0:84: 36:58:50:32:3b:20:28:ff:3d:29:7a:69:50:83:95: 0b:b9:cb:44:04:a1:60:40:13:b8:d7:b3:82:27:5c: 2d:3e:e0:3e:47:9d:e5:21:fa:e3:b9:80:60:dc:fd: 71:4f:52:d3:c8:c4:d2:2f:77:d6:f7:81:29:3d:4f: 94:bf:e1:80:5d:18:c8:c7:c8:99:72:72:e7:c7:a8: c7:a1:a5:3b:29:86:9e:fd:66:71:b4:cc:a8:5d:bc: fc:57:de:f1:d2:6b:ea:80:00:96:34:c8:f3:5e:2b: 89:1f:56:3e:49:1f:e8:51:a3:47:f7:6e:2d:0b:5c: cb:3b:73:3c:50:fd:e9:de:5e:05:0f:a3:94:77:cc: 38:da:4e:5b:9a:35:85:00:0b:ee:c5:35:fe:da:d2: 53:37:d1:73:da:9d:72:d3:92:30:c5:9b:12:04:fb: 29:04:bd:5b:6a:2c:83:b6:4e:7e:12:30:58:1c:08: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:95:4B:18:61:31:2E:47:E4:9F:71:1C:28:B3:0B:9B:42:02:F5:3A X509v3 Authority Key Identifier: keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/1AA7504A92DD11EB9B9E993FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.212.0/22 IPv6: 2403:d240::/32 Signature Algorithm: sha256WithRSAEncryption 52:fb:ba:29:99:85:72:8d:0d:46:ca:2e:c6:91:51:ae:e0:e3: 00:2f:c2:13:2e:14:08:34:76:4d:f5:7b:33:80:a4:70:b6:c6: 34:26:52:fc:03:ad:28:0d:74:ec:62:c0:75:b1:aa:6c:38:18: bc:9f:0c:86:6c:fb:91:63:f1:13:c9:8e:88:1b:96:b4:00:17: f7:c7:a2:ec:53:9e:2c:c9:5f:e5:0d:e2:ab:aa:94:6e:56:85: 74:b2:f4:dc:a4:90:65:2a:b2:a0:2b:96:f2:ed:30:50:82:30: d9:85:9f:76:36:2d:3b:b0:9f:92:72:af:77:fb:4a:c5:a7:fd: 04:83:a5:f7:3d:eb:2f:dd:3e:6b:d8:55:22:ce:34:89:f4:97: 31:a5:e1:d7:10:b7:a5:f4:c7:a2:1b:a3:29:15:46:8d:d3:be: 59:1d:0c:2e:6f:9a:c1:37:8f:d6:e6:55:68:ff:5a:03:1c:d8: 48:78:fd:b9:e5:d2:40:1c:10:94:8c:da:3d:28:50:94:91:1a: 45:6a:88:33:57:10:2a:3f:75:67:c3:f5:0c:37:61:08:b8:59: db:f3:99:3c:4d:76:3d:a8:ba:e1:a1:03:9d:81:03:97:5f:78: 06:e5:80:1c:bb:6e:db:23:be:35:60:01:39:15:0c:23:8e:18: 92:d3:94:32 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF NTIyMzdFOEEwHhcNMjMxMTI4MjIzMDAyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY2NjllYS1kZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0GN9DGTeSm026+4VmXEGUPCCeCXroBBn6xSREARV2KaPOwVPYawR7gnJS4h WsHaaLyP1eNIuil3objM/bUpe/+WiEQnxbDC0IQ2WFAyOyAo/z0pemlQg5ULuctE BKFgQBO417OCJ1wtPuA+R53lIfrjuYBg3P1xT1LTyMTSL3fW94EpPU+Uv+GAXRjI x8iZcnLnx6jHoaU7KYae/WZxtMyoXbz8V97x0mvqgACWNMjzXiuJH1Y+SR/oUaNH 924tC1zLO3M8UP3p3l4FD6OUd8w42k5bmjWFAAvuxTX+2tJTN9Fz2p1y05IwxZsS BPspBL1baiyDtk5+EjBYHAjU4QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFA6VSxhh MS5H5J9xHCizC5tCAvU6MB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4 NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEY2OTcvNzUyMURGQzBFODVEMTFFQUIyM0M4Rjg3QzRGOUFFMDIvMUFBNzUwNEE5 MkREMTFFQjlCOUU5OTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJng9QwDQQCAAIwBwMFACQD0kAwDQYJKoZIhvcNAQELBQAD ggEBAFL7uimZhXKNDUbKLsaRUa7g4wAvwhMuFAg0dk31ezOApHC2xjQmUvwDrSgN dOxiwHWxqmw4GLyfDIZs+5Fj8RPJjogblrQAF/fHouxTnizJX+UN4quqlG5WhXSy 9NykkGUqsqArlvLtMFCCMNmFn3Y2LTuwn5Jyr3f7SsWn/QSDpfc96y/dPmvYVSLO NIn0lzGl4dcQt6X0x6IboykVRo3TvlkdDC5vmsE3j9bmVWj/WgMc2Eh4/bnl0kAc EJSM2j0oUJSRGkVqiDNXECo/dWfD9Qw3YQi4WdvzmTxNdj2ouuGhA52BA5dfeAbl gBy7btsjvjVgATkVDCOOGJLTlDI= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org