$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/657B47B61C2F11E880C4ED7BC4F9AE02.roa File: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (raw, json) Hash identifier: cn19kmgTI5pykmKU6ztYW1fuk/UgkkZVZQRR4mCHAg4= Subject key identifier: AD:8C:71:93:FD:68:A9:F6:E2:17:7D:CC:B2:6B:D8:E1:9A:2E:D4:75 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 24A9 Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/657B47B61C2F11E880C4ED7BC4F9AE02.roa Signing time: Sat 28 Sep 2024 16:03:17 +0000 ROA not before: Sat 28 Sep 2024 16:03:17 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 38800 IP address blocks: 103.154.194.0/23 maxlen: 23 103.154.194.0/24 maxlen: 24 103.154.195.0/24 maxlen: 24 182.50.168.0/22 maxlen: 22 182.50.168.0/22 maxlen: 24 202.87.208.0/22 maxlen: 24 203.99.156.0/22 maxlen: 22 203.99.156.0/22 maxlen: 24 203.99.156.0/24 maxlen: 24 203.99.157.0/24 maxlen: 24 2402:ae80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9385 (0x24a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: Sep 28 16:03:17 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f828c5-d6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c8:db:4b:70:06:cb:d0:b4:c7:c1:8e:2b:8e: d1:c7:7a:a3:05:77:0e:49:1e:2d:56:0e:68:2f:33: 12:3b:dd:be:f8:2a:4d:5f:dc:03:bd:69:63:37:df: 88:37:1a:a3:88:b8:2a:01:3a:b0:d4:ec:d1:fd:f2: 94:5f:58:5c:af:16:27:b9:a7:75:59:3d:bf:d7:dc: 62:9e:d0:d3:70:3e:11:fc:74:98:bf:2b:fd:f9:24: 1b:3d:c0:74:2e:dd:94:44:8f:57:8b:6e:66:bc:65: 80:74:44:41:2d:58:37:d6:13:2f:dc:94:af:ea:a2: de:7a:7b:25:a5:79:90:c6:ea:3c:cd:5f:e4:ce:9e: 32:97:5b:a9:e4:90:5a:cf:5e:47:2c:3b:1d:31:ad: 4e:b8:e5:c4:7e:73:6d:6e:59:1b:e0:3f:e3:24:a5: 1a:1f:ef:de:fb:81:8d:28:aa:e0:2f:8c:d8:00:5e: d3:69:a0:d0:7d:98:c2:69:a7:a5:35:46:64:70:89: 7e:8d:b9:4a:4d:bd:fd:c1:42:70:df:4a:a1:10:b3: 12:28:0a:91:5d:39:1c:1d:bf:e3:7d:1f:75:95:0f: 29:4c:d1:f9:bb:65:2e:a2:26:79:19:f9:a9:ee:23: 0b:db:51:49:be:6c:da:72:89:4a:69:42:ee:4e:4f: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8C:71:93:FD:68:A9:F6:E2:17:7D:CC:B2:6B:D8:E1:9A:2E:D4:75 X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/657B47B61C2F11E880C4ED7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.194.0/23 182.50.168.0/22 202.87.208.0/22 203.99.156.0/22 IPv6: 2402:ae80::/32 Signature Algorithm: sha256WithRSAEncryption 9b:48:df:08:44:46:92:34:79:54:55:55:61:b8:a6:80:62:08: 12:54:b4:30:7a:51:ad:70:22:36:e2:47:69:46:a1:a6:1a:6e: c9:a7:f6:be:d0:42:29:e5:4c:1c:65:94:d1:2c:7b:f8:be:26: 7b:af:2f:92:c2:3a:06:c3:df:2a:0a:ea:37:c3:05:87:61:b0: 3e:75:aa:6a:ef:ea:4f:ef:6a:00:e9:9a:3b:b6:f8:36:06:58: 27:61:ee:b3:e8:c3:1c:18:88:1d:7c:b6:dc:fa:2a:2f:43:a2: 53:17:96:31:3d:75:01:c3:31:23:a8:a4:53:55:95:52:24:50: 50:1f:80:4a:e7:ff:4e:e6:a6:1e:a2:a4:a0:c7:34:e0:31:78: 81:00:8b:16:b7:14:b8:82:e9:18:ec:61:ce:5b:be:fd:b4:4c: 8f:21:df:98:51:b3:41:45:55:e4:9d:07:b8:43:fc:8e:4e:4d: 77:45:ea:02:06:eb:2f:a6:fa:24:2d:44:8e:6c:d5:59:32:c1: 42:ff:58:f7:12:0e:fe:6a:fa:27:ba:98:67:95:1a:b6:b1:ef: 95:2d:30:a7:ab:41:24:46:71:c8:ff:93:ee:43:09:0d:ab:1a: 81:9b:cc:cc:fe:ac:06:3a:f8:22:fd:de:50:bd:61:05:f3:19: 09:4a:00:7a -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICJKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjQwOTI4MTYwMzE3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY4MjhjNS1kNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscjbS3AGy9C0x8GOK47Rx3qjBXcOSR4tVg5oLzMSO92++CpNX9wDvWljN9+I NxqjiLgqATqw1OzR/fKUX1hcrxYnuad1WT2/19xintDTcD4R/HSYvyv9+SQbPcB0 Lt2URI9Xi25mvGWAdERBLVg31hMv3JSv6qLeenslpXmQxuo8zV/kzp4yl1up5JBa z15HLDsdMa1OuOXEfnNtblkb4D/jJKUaH+/e+4GNKKrgL4zYAF7TaaDQfZjCaael NUZkcIl+jblKTb39wUJw30qhELMSKAqRXTkcHb/jfR91lQ8pTNH5u2UuoiZ5Gfmp 7iML21FJvmzacolKaULuTk+PkQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFK2McZP9 aKn24hd9zLJr2OGaLtR1MB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY0MzgvQjdFRjUzRkUyQjRFMTFFNUFDQkJERjNBQzRGOUFFMDIvNjU3QjQ3QjYx QzJGMTFFODgwQzRFRDdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAFnmsIDBAK2MqgDBALKV9ADBALLY5wwDQQCAAIwBwMFACQC roAwDQYJKoZIhvcNAQELBQADggEBAJtI3whERpI0eVRVVWG4poBiCBJUtDB6Ua1w IjbiR2lGoaYabsmn9r7QQinlTBxllNEse/i+JnuvL5LCOgbD3yoK6jfDBYdhsD51 qmrv6k/vagDpmju2+DYGWCdh7rPowxwYiB18ttz6Ki9DolMXljE9dQHDMSOopFNV lVIkUFAfgErn/07mph6ipKDHNOAxeIEAixa3FLiC6RjsYc5bvv20TI8h35hRs0FF VeSdB7hD/I5OTXdF6gIG6y+m+iQtRI5s1VkywUL/WPcSDv5q+ie6mGeVGrax75Ut MKerQSRGccj/k+5DCQ2rGoGbzMz+rAY6+CL93lC9YQXzGQlKAHo= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:20 2024 by rpki-client on console-ams.rpki-client.org