$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa File: 85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa (raw, json) Hash identifier: R8BTOL86V2lkOQsbW+rQ8pt2tHQCxt6FoHVMOBZZhL4= Subject key identifier: 58:5F:21:A9:85:4D:11:FB:73:50:CB:D2:3A:2B:45:C6:46:92:C4:25 Certificate issuer: /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A Certificate serial: 0244 Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa Signing time: Fri 15 Nov 2024 07:32:56 +0000 ROA not before: Fri 15 Nov 2024 07:32:56 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 138341 IP address blocks: 103.115.76.0/22 maxlen: 22 103.115.76.0/24 maxlen: 24 103.115.77.0/24 maxlen: 24 103.115.78.0/24 maxlen: 24 202.181.88.0/21 maxlen: 24 2402:e340::/32 maxlen: 32 2402:e340::/48 maxlen: 48 2402:e340::/64 maxlen: 64 2402:e340:0:1::/64 maxlen: 64 2402:e340:1::/48 maxlen: 48 2402:e340:2::/48 maxlen: 48 2402:e340:3::/48 maxlen: 48 2402:e340:4::/48 maxlen: 48 2402:e340:5::/48 maxlen: 48 2402:e340:6::/48 maxlen: 48 2402:e340:7::/48 maxlen: 48 2402:e340:f::/48 maxlen: 48 2402:e340:10::/48 maxlen: 48 2402:e340:11::/48 maxlen: 48 2402:e340:12::/48 maxlen: 48 2402:e340:3004::/48 maxlen: 48 2402:e340:6004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A Validity Not Before: Nov 15 07:32:56 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6736f928-6501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:05:25:6c:c7:2c:03:69:27:45:b4:a5:23: 1b:0e:dc:0b:09:5d:20:53:ed:70:55:5a:14:1d:1a: a7:af:b1:64:67:eb:c4:4f:10:e4:a4:d1:8f:3a:16: df:22:8a:e7:d0:2d:8e:ca:a3:95:a6:00:72:2b:12: fe:da:e2:51:d4:e2:b7:b7:3a:d4:db:0b:ae:4e:1e: 9b:dc:4b:8d:41:d2:b3:cb:e6:d9:fc:5b:9f:1d:22: 7d:11:54:4d:6a:df:12:5d:5b:4e:bf:6c:be:78:55: f2:4c:8b:64:8f:30:fd:6e:37:cc:da:a0:03:3f:95: 27:d6:e4:59:02:e3:b8:08:d4:78:3c:c1:6b:56:0b: 93:1d:25:a8:e5:cd:e9:ea:d9:f3:fe:27:b8:1e:4f: 16:58:0e:a2:fa:77:c7:06:ad:02:cc:f9:9b:91:54: e0:11:da:7c:4c:64:3b:c0:a7:05:d6:fa:cb:ff:d6: c1:be:a4:d9:74:6b:95:8a:cf:a0:a2:d3:c3:fa:d6: 88:e1:7c:60:a8:50:f7:d9:48:d7:d1:45:25:14:d8: 03:31:81:49:f5:84:9e:db:65:04:38:54:65:b8:37: 02:ac:cb:7a:92:fa:4c:ae:5e:51:6b:d8:a6:77:f2: 94:59:ea:7e:3f:de:7d:d8:16:69:cf:b8:67:36:48: c5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5F:21:A9:85:4D:11:FB:73:50:CB:D2:3A:2B:45:C6:46:92:C4:25 X509v3 Authority Key Identifier: keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.76.0/22 202.181.88.0/21 IPv6: 2402:e340::/32 Signature Algorithm: sha256WithRSAEncryption 97:1b:0b:00:0f:7d:87:55:a6:46:0d:5a:9f:5b:7a:a5:c8:34: 8b:11:b8:44:fd:32:32:6a:8a:09:d0:3e:ec:1c:b5:88:89:65: 1d:8f:d8:87:e9:9d:5f:89:a3:80:a1:96:1e:d7:20:32:17:61: 72:6a:a1:85:9a:fe:7a:0e:67:e3:32:f2:5c:f5:7d:b4:94:fa: 46:89:59:d5:82:44:cc:cc:1c:95:aa:4d:29:41:e8:07:5d:27: 9a:79:50:c8:3f:40:6e:54:c5:79:93:05:13:e7:6c:e8:9c:9f: 8c:79:99:6c:eb:8b:f0:f5:97:6b:a0:d3:e4:50:6c:4b:52:90: ec:b5:98:53:79:d5:6e:5f:91:a2:65:23:87:75:b6:31:2c:cc: 63:14:f8:d2:96:04:e2:fa:4e:2e:95:e4:a7:64:fc:97:68:28: 59:3f:b9:ca:74:73:28:72:b2:82:11:c4:44:c7:f9:1d:ad:ba: 64:24:1f:c2:f3:88:0c:3a:a6:52:38:23:a1:39:9b:e6:3b:13: 47:f7:24:1b:1f:0a:68:2b:39:8e:81:f0:0a:e0:af:0f:c1:88: 42:f9:9f:e6:c1:10:20:76:f2:10:ec:b5:24:97:92:c5:8e:18: a5:85:97:5f:4a:7e:6d:3e:23:c0:7c:d8:d1:57:05:ce:1a:1c: cd:28:9b:20 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDRBOTkzRkY4NEY2MDI5MDNBMzE3RTI4OEJEMTlCOURB MjA5MzU1OEEwHhcNMjQxMTE1MDczMjU2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM2ZjkyOC02NTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwIFJWzHLANpJ0W0pSMbDtwLCV0gU+1wVVoUHRqnr7FkZ+vETxDkpNGPOhbf Iorn0C2OyqOVpgByKxL+2uJR1OK3tzrU2wuuTh6b3EuNQdKzy+bZ/FufHSJ9EVRN at8SXVtOv2y+eFXyTItkjzD9bjfM2qADP5Un1uRZAuO4CNR4PMFrVguTHSWo5c3p 6tnz/ie4Hk8WWA6i+nfHBq0CzPmbkVTgEdp8TGQ7wKcF1vrL/9bBvqTZdGuVis+g otPD+taI4XxgqFD32UjX0UUlFNgDMYFJ9YSe22UEOFRluDcCrMt6kvpMrl5Ra9im d/KUWep+P9592BZpz7hnNkjFcwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFhfIamF TRH7c1DL0jorRcZGksQlMB8GA1UdIwQYMBaAFEqZP/hPYCkDoxfiiL0Zudogk1WK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zQTQxN0Q3NDA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tRT2pGLUtJdlJtNTJpQ1RW WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nwa18tRTlnS1FPakYtS0l2Um01MmlDVFZZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM5OTgvM0E0MTdENzQwOERDMTFFREJFREU2MTJCQzRGOUFFMDIvODVDMkZEQUEw OEUwMTFFRDlDM0RDQjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnc0wDBAPKtVgwDQQCAAIwBwMFACQC40AwDQYJKoZIhvcN AQELBQADggEBAJcbCwAPfYdVpkYNWp9beqXINIsRuET9MjJqignQPuwctYiJZR2P 2IfpnV+Jo4Chlh7XIDIXYXJqoYWa/noOZ+My8lz1fbSU+kaJWdWCRMzMHJWqTSlB 6AddJ5p5UMg/QG5UxXmTBRPnbOicn4x5mWzri/D1l2ug0+RQbEtSkOy1mFN51W5f kaJlI4d1tjEszGMU+NKWBOL6Ti6V5Kdk/JdoKFk/ucp0cyhysoIRxETH+R2tumQk H8LziAw6plI4I6E5m+Y7E0f3JBsfCmgrOY6B8Argrw/BiEL5n+bBECB28hDstSSX ksWOGKWFl19Kfm0+I8B82NFXBc4aHM0omyA= -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:57 2024 by rpki-client on console-fra.rpki-client.org