$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/79B8CEF4563111EFBDD3C42FC4F9AE02.roa File: 79B8CEF4563111EFBDD3C42FC4F9AE02.roa (raw, json) Hash identifier: GHU72C+U6ZnK08+jP9lp5y5Zt1C+WMqsIH2nOqr5Sg4= Subject key identifier: 1C:A4:5E:DE:E6:19:11:99:73:7C:5B:5D:DB:67:E2:5D:9F:08:E1:77 Certificate issuer: /CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F Certificate serial: F3 Authority key identifier: E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/79B8CEF4563111EFBDD3C42FC4F9AE02.roa Signing time: Fri 09 Aug 2024 09:26:37 +0000 ROA not before: Fri 09 Aug 2024 09:26:37 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 151396 IP address blocks: 103.134.216.0/24 maxlen: 24 103.134.217.0/24 maxlen: 24 103.134.218.0/24 maxlen: 24 103.134.219.0/24 maxlen: 24 103.214.0.0/23 maxlen: 24 2401:720::/36 maxlen: 36 2401:720:1000::/36 maxlen: 36 2401:720:2000::/36 maxlen: 36 2401:720:3000::/36 maxlen: 36 2401:720:4000::/36 maxlen: 36 2401:720:5000::/36 maxlen: 36 2401:720:6000::/36 maxlen: 36 2401:720:7000::/36 maxlen: 36 2401:720:8000::/36 maxlen: 36 2401:720:9000::/36 maxlen: 36 2401:720:a000::/36 maxlen: 36 2401:720:b000::/36 maxlen: 36 2401:720:c000::/36 maxlen: 36 2401:720:d000::/36 maxlen: 36 2401:720:e000::/36 maxlen: 36 2401:720:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F Validity Not Before: Aug 9 09:26:37 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b5e0cc-1f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:48:81:f5:15:c0:84:f6:2a:d7:ab:43:73:e5: 1a:bb:70:36:5f:55:bc:90:92:44:89:2f:dc:3a:bd: 9e:48:0b:5b:ea:40:25:dc:a2:4e:c7:5c:33:a0:e7: b6:27:1c:01:b8:05:bc:0b:d4:d5:b2:ed:7d:fe:b4: e1:2e:4c:b6:bd:0a:6d:11:c5:bc:52:69:7e:b5:79: 4d:34:b8:21:59:a7:b7:19:97:a3:88:52:1e:a6:64: 6a:10:99:ec:cd:3a:a3:e4:6c:53:08:e2:69:1c:f9: 8d:0a:7d:01:20:c2:29:c1:77:6f:51:0f:88:6f:76: c9:f4:72:06:c9:28:7a:3e:89:48:43:d4:74:07:04: fd:29:97:79:40:95:5b:fb:cd:71:ad:9c:3c:f1:56: f2:62:74:d8:e6:68:b2:b3:7a:45:12:c5:df:72:14: 81:e9:16:60:19:fd:40:42:9e:4d:27:61:c6:b1:2a: e5:7b:50:33:cf:b8:2b:76:82:d8:6f:2d:ca:ba:3f: 40:ed:d0:02:be:66:a7:c0:cc:ec:c4:c9:a9:96:e3: 6c:11:74:71:51:1c:f4:e7:ca:9c:59:37:0a:13:da: 2d:b2:bc:4b:41:4e:7d:2c:22:1c:18:d3:54:4b:09: c1:b7:1c:32:6a:13:aa:9a:91:de:62:38:27:91:cf: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A4:5E:DE:E6:19:11:99:73:7C:5B:5D:DB:67:E2:5D:9F:08:E1:77 X509v3 Authority Key Identifier: keyid:E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/79B8CEF4563111EFBDD3C42FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.216.0/22 103.214.0.0/23 IPv6: 2401:720::/32 Signature Algorithm: sha256WithRSAEncryption 12:e9:09:4d:ac:df:af:dc:be:fd:11:35:a2:24:3c:ba:91:f4: c6:58:49:f3:72:f2:e3:11:68:d6:d9:6a:47:6b:98:9a:21:17: 88:17:96:c6:20:a0:c6:7c:8b:35:46:c9:e7:fb:2d:73:49:ac: 74:c3:fe:b5:c1:72:ca:02:06:72:71:43:3f:f2:79:0a:31:a8: 7e:0f:fc:76:0c:75:49:a1:51:4e:c5:e5:6a:2c:38:e0:ad:73: 48:50:11:ef:54:c4:55:73:d2:b2:5a:4b:cc:98:95:ff:39:a6: 60:6e:93:17:04:a7:0e:44:b9:21:e0:42:09:59:ed:a8:56:c1: 3e:4f:b7:fe:8f:d3:f7:88:62:74:e4:4f:01:e9:a8:e4:ad:57: 0d:6f:99:ad:29:c2:7c:58:0d:9d:ef:0f:53:0c:06:ee:f4:c1: 59:c3:2e:8b:e3:72:c1:bd:bc:a3:6b:e6:71:be:b1:a3:f2:ec: 8b:60:64:7c:9d:8b:a1:b9:6f:e5:ab:e6:dc:0a:8d:33:ac:9e: 49:52:ab:bb:8b:9d:2c:3b:33:71:96:c8:a7:ba:69:0a:ad:b3: 02:68:4a:c0:5a:9f:bd:f3:dd:05:0e:f4:8e:05:ad:10:d4:a8: e1:01:9b:1a:57:7e:bf:a7:81:57:72:98:00:f7:cd:a5:09:3b: 46:9a:9b:6e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCNEMxMTAvBgNVBAUTKEUzODRBQTQwMjVBMTA2QjU0N0E3QzA4OUIxRERGRUVF NkNDQkEyMkYwHhcNMjQwODA5MDkyNjM3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI1ZTBjYy0xZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EiB9RXAhPYq16tDc+Uau3A2X1W8kJJEiS/cOr2eSAtb6kAl3KJOx1wzoOe2 JxwBuAW8C9TVsu19/rThLky2vQptEcW8Uml+tXlNNLghWae3GZejiFIepmRqEJns zTqj5GxTCOJpHPmNCn0BIMIpwXdvUQ+Ib3bJ9HIGySh6PolIQ9R0BwT9KZd5QJVb +81xrZw88VbyYnTY5miys3pFEsXfchSB6RZgGf1AQp5NJ2HGsSrle1Azz7grdoLY by3Kuj9A7dACvmanwMzsxMmpluNsEXRxURz058qcWTcKE9otsrxLQU59LCIcGNNU SwnBtxwyahOqmpHeYjgnkc/IYQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBykXt7m GRGZc3xbXdtn4l2fCOF3MB8GA1UdIwQYMBaAFOOEqkAloQa1R6fAibHd/u5sy6Iv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUI0Qy8yOTc5OTE1MjA0 MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJyVkhwOENKc2QzLTdtekxv aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0U3FRQ1doQnJWSHA4Q0pzZDMtN216TG9pOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFCNEMvMjk3OTkxNTIwNDMwMTFFRUIzNzMyQzVCQzRGOUFFMDIvNzlCOENFRjQ1 NjMxMTFFRkJERDNDNDJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnhtgDBAFn1gAwDQQCAAIwBwMFACQBByAwDQYJKoZIhvcN AQELBQADggEBABLpCU2s36/cvv0RNaIkPLqR9MZYSfNy8uMRaNbZakdrmJohF4gX lsYgoMZ8izVGyef7LXNJrHTD/rXBcsoCBnJxQz/yeQoxqH4P/HYMdUmhUU7F5Wos OOCtc0hQEe9UxFVz0rJaS8yYlf85pmBukxcEpw5EuSHgQglZ7ahWwT5Pt/6P0/eI YnTkTwHpqOStVw1vma0pwnxYDZ3vD1MMBu70wVnDLovjcsG9vKNr5nG+saPy7Itg ZHydi6G5b+Wr5twKjTOsnklSq7uLnSw7M3GWyKe6aQqtswJoSsBan73z3QUO9I4F rRDUqOEBmxpXfr+ngVdymAD3zaUJO0aam24= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org