$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/15ABECB27AE311EF9E1B0741C4F9AE02.roa File: 15ABECB27AE311EF9E1B0741C4F9AE02.roa (raw, json) Hash identifier: PPxTiu0HuTnV15nJLWxoQRGMwl1+HbVxOpDpDPhTeJw= Subject key identifier: A4:C3:33:52:EF:91:8E:10:5E:78:DD:59:5F:3E:0A:6A:E5:BE:1F:12 Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Certificate serial: 2419 Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/15ABECB27AE311EF9E1B0741C4F9AE02.roa Signing time: Wed 25 Sep 2024 02:08:41 +0000 ROA not before: Wed 25 Sep 2024 02:08:41 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 132730 IP address blocks: 103.24.32.0/22 maxlen: 22 103.24.32.0/22 maxlen: 24 103.24.32.0/24 maxlen: 24 103.24.33.0/24 maxlen: 24 103.24.34.0/24 maxlen: 24 103.24.35.0/24 maxlen: 24 103.224.28.0/22 maxlen: 24 150.107.4.0/24 maxlen: 24 150.107.5.0/24 maxlen: 24 150.107.6.0/24 maxlen: 24 150.107.7.0/24 maxlen: 24 160.202.32.0/22 maxlen: 24 163.53.28.0/22 maxlen: 22 163.53.28.0/22 maxlen: 24 163.53.28.0/24 maxlen: 24 163.53.29.0/24 maxlen: 24 163.53.30.0/24 maxlen: 24 163.53.31.0/24 maxlen: 24 2406:b100::/32 maxlen: 32 2406:b100::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9241 (0x2419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Validity Not Before: Sep 25 02:08:41 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66f370a9-fe6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:68:b3:d1:af:22:a2:9b:90:b6:0e:e4:63:3a: 9e:2d:f3:b0:24:c3:6f:bb:05:9a:71:38:d7:03:68: 57:f4:82:ef:39:2f:4b:13:a6:8a:7f:c4:a5:3e:a4: 6d:ef:66:8f:c9:86:09:c7:c8:76:20:77:19:67:e0: a9:65:f0:3c:03:af:be:7d:f5:d6:5d:a1:64:cf:77: 54:aa:46:bf:69:56:0b:c2:05:50:b6:67:e9:62:58: 03:c3:ec:40:c4:ff:8e:7b:96:8c:45:9f:65:e9:a0: 74:09:f1:12:ee:cf:cb:cd:e5:60:35:f4:7e:a6:f3: 09:6e:9c:e4:33:cf:4e:44:23:3d:cf:fe:24:57:7d: 40:f9:00:2b:67:ff:c3:3a:60:c1:32:e2:7e:2f:01: c8:6f:db:89:48:41:7f:3b:c7:d2:fa:a1:97:f3:f9: bb:6d:b8:97:86:76:1c:f1:fd:3a:cb:b5:d4:fa:38: cc:eb:3d:ad:12:c8:89:d4:94:19:e7:aa:35:94:79: 1c:83:c4:d4:f7:4c:fd:b5:6d:f4:43:78:8e:43:ba: 38:85:58:ec:10:38:e1:fa:26:c0:a4:24:8d:66:a8: 1d:8b:0e:78:a5:0b:4e:d6:dc:be:ef:31:89:3a:20: 27:40:9c:db:09:35:3c:c8:7f:16:1b:8d:64:05:13: 8b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C3:33:52:EF:91:8E:10:5E:78:DD:59:5F:3E:0A:6A:E5:BE:1F:12 X509v3 Authority Key Identifier: keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/15ABECB27AE311EF9E1B0741C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.32.0/22 103.224.28.0/22 150.107.4.0/22 160.202.32.0/22 163.53.28.0/22 IPv6: 2406:b100::/32 Signature Algorithm: sha256WithRSAEncryption 34:d3:1c:21:50:74:9e:0f:e9:2a:7f:ae:c3:cc:c9:98:9b:8f: c6:0f:70:f0:00:08:af:df:57:3a:35:84:ce:d9:a0:25:2e:da: 3f:9c:be:0c:26:a3:b9:66:6d:8b:4a:00:9d:4d:b7:75:b0:0c: 2f:f3:9d:c3:5a:26:5f:e8:29:de:5c:d3:3c:33:fe:41:94:f6: 13:ed:11:32:45:e2:f0:34:36:1a:5a:2f:06:94:55:40:f2:57: 38:62:ee:d6:13:30:ee:9b:6c:44:50:49:33:7d:3d:33:e2:89: 33:9e:a8:21:5a:e3:35:e9:4e:0a:c3:71:a6:25:88:da:04:12: ff:61:4d:82:67:56:4d:68:be:15:eb:15:a9:1d:1c:46:4d:c9: 2c:0c:df:7b:6e:3d:38:9e:43:aa:63:79:62:a5:83:aa:73:da: fd:50:da:13:9a:f4:68:5a:e9:d9:31:0b:a5:12:38:68:f6:ce: 8c:30:40:10:06:3f:1a:f0:ea:99:8a:8b:ba:7d:46:11:1d:02: 78:5d:80:6e:af:cd:0f:f3:a0:e3:0a:b2:4e:9a:6b:89:4b:a0: c1:8b:b7:9e:e0:50:74:9e:f9:d8:ac:df:e8:75:86:8b:19:63: 25:c8:33:c0:e4:7d:50:91:a4:11:15:a8:fc:f8:c0:ff:24:55: 1b:2e:36:fe -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICJBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND OEYyRDkxQjUwHhcNMjQwOTI1MDIwODQxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYzNzBhOS1mZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Giz0a8iopuQtg7kYzqeLfOwJMNvuwWacTjXA2hX9ILvOS9LE6aKf8SlPqRt 72aPyYYJx8h2IHcZZ+CpZfA8A6++ffXWXaFkz3dUqka/aVYLwgVQtmfpYlgDw+xA xP+Oe5aMRZ9l6aB0CfES7s/LzeVgNfR+pvMJbpzkM89ORCM9z/4kV31A+QArZ//D OmDBMuJ+LwHIb9uJSEF/O8fS+qGX8/m7bbiXhnYc8f06y7XU+jjM6z2tEsiJ1JQZ 56o1lHkcg8TU90z9tW30Q3iOQ7o4hVjsEDjh+ibApCSNZqgdiw54pQtO1ty+7zGJ OiAnQJzbCTU8yH8WG41kBROLnwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFKTDM1Lv kY4QXnjdWV8+Cmrlvh8SMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3 MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlDRDMvODEyMjg2RDI0NzExMTFFNUE0NDk2MzM1QzRGOUFFMDIvMTVBQkVDQjI3 QUUzMTFFRjlFMUIwNzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAJnGCADBAJn4BwDBAKWawQDBAKgyiADBAKjNRwwDQQCAAIw BwMFACQGsQAwDQYJKoZIhvcNAQELBQADggEBADTTHCFQdJ4P6Sp/rsPMyZibj8YP cPAACK/fVzo1hM7ZoCUu2j+cvgwmo7lmbYtKAJ1Nt3WwDC/zncNaJl/oKd5c0zwz /kGU9hPtETJF4vA0NhpaLwaUVUDyVzhi7tYTMO6bbERQSTN9PTPiiTOeqCFa4zXp TgrDcaYliNoEEv9hTYJnVk1ovhXrFakdHEZNySwM33tuPTieQ6pjeWKlg6pz2v1Q 2hOa9Gha6dkxC6USOGj2zowwQBAGPxrw6pmKi7p9RhEdAnhdgG6vzQ/zoOMKsk6a a4lLoMGLt57gUHSe+dis3+h1hosZYyXIM8DkfVCRpBEVqPz4wP8kVRsuNv4= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:48 2024 by rpki-client on console-fra.rpki-client.org