$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa File: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (raw, json) Hash identifier: UuPwuIeTjohMOX9eFmpeIez6sJHzI9RwlcD5tmgLAN8= Subject key identifier: D7:EA:A8:B0:E3:CA:3D:75:C1:C7:68:C5:FE:D1:B1:64:72:F3:0F:22 Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Certificate serial: 245C Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa Signing time: Sat 10 Aug 2024 16:02:45 +0000 ROA not before: Sat 10 Aug 2024 16:02:45 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 134431 IP address blocks: 36.255.106.0/23 maxlen: 23 36.255.106.0/24 maxlen: 24 103.62.30.0/23 maxlen: 29 103.82.46.0/23 maxlen: 23 185.146.208.0/22 maxlen: 22 185.146.210.0/23 maxlen: 23 2407:c540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9308 (0x245c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Validity Not Before: Aug 10 16:02:45 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b78f24-278c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:c8:76:a8:c6:8f:9c:fd:46:fa:e3:db:0e: b8:d4:49:26:09:26:6c:ea:4c:3f:16:7d:2e:9d:4c: 2a:ed:ed:59:3b:eb:76:ae:b8:40:1c:71:39:89:b5: 0f:fd:ee:08:f6:b3:7e:6a:89:4e:af:91:6a:04:a6: 67:bb:51:d2:66:cd:34:2d:b1:04:d9:33:d0:fb:54: 9e:6a:96:4c:a6:09:c0:9b:26:87:8a:7a:9f:42:7e: a9:12:89:00:6a:14:ac:02:c3:b1:40:17:93:88:c2: eb:06:09:45:a7:76:c6:e0:f1:37:73:25:ea:1f:bb: 6c:46:63:83:6b:4b:94:e6:45:83:dc:7c:e1:c2:24: f6:f8:06:8a:ab:f1:71:dd:fb:f1:9e:dd:f4:9a:e1: 25:dd:7d:9d:27:0a:65:15:43:57:7c:95:59:81:73: 8a:4e:38:c7:d9:bd:ea:13:9e:58:95:9a:1f:59:7c: 63:55:d2:d4:06:9c:3e:39:be:15:86:84:0e:ed:2e: 8a:96:8d:57:4a:57:2e:73:f2:f7:fb:0e:fa:e7:08: c8:54:b8:c4:a3:b0:6e:5e:81:b1:c0:ff:56:2e:11: 98:33:15:04:f5:09:ab:b6:fd:9d:f2:dd:39:ed:91: 37:2f:81:57:6e:33:da:f0:cc:4f:7d:1c:6f:75:bb: 21:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EA:A8:B0:E3:CA:3D:75:C1:C7:68:C5:FE:D1:B1:64:72:F3:0F:22 X509v3 Authority Key Identifier: keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.106.0/23 103.62.30.0/23 103.82.46.0/23 185.146.208.0/22 IPv6: 2407:c540::/32 Signature Algorithm: sha256WithRSAEncryption 09:41:31:ba:2a:d3:8e:d1:72:8a:55:4f:0d:12:a2:be:15:e9: a3:89:08:7c:72:16:ec:16:14:95:74:40:94:5b:d4:9a:be:63: 75:25:fd:99:38:6e:54:f3:e8:ba:dd:e1:41:ca:38:54:9a:35: c1:77:5b:26:ea:bf:a8:2c:88:f4:74:71:f8:91:22:fa:09:81: 78:80:c9:6d:ac:19:49:7e:ae:4b:db:af:cb:a9:4d:0e:e8:38: 6e:2b:11:95:93:e6:fc:21:f8:c1:85:a0:f3:5f:0f:c0:f1:97: 9a:e5:75:fd:ea:80:30:03:02:1f:df:d4:31:db:fc:31:dc:ba: 68:40:0f:0a:ae:47:35:af:5d:c9:06:27:26:f5:9b:6d:16:3c: 36:8f:82:0f:fe:9d:dc:71:46:60:a7:0f:34:04:6f:92:a1:5d: 1e:c3:0b:b2:de:94:5a:aa:dc:d5:a8:ec:1f:ae:7c:95:8a:61: c7:8b:f1:ba:11:73:e1:94:5b:0f:8f:3c:e0:0e:e1:e2:b1:77: a9:aa:fb:a5:aa:0c:1c:8a:f8:58:34:0d:c8:0f:d5:b0:58:e4: d5:00:c2:e6:bf:c3:e2:5a:11:de:d0:52:7b:1b:5b:c2:2c:fd: 9c:88:3f:b7:e4:f0:ba:fe:a5:1d:9d:98:cd:79:36:a4:55:73: cd:cd:59:37 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICJFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFBMEYxMTAvBgNVBAUTKDI1NTlDRjVDODBDQkZENDU0NzIwM0JEMDUxNjhDQzM2 NDlENTY0QzQwHhcNMjQwODEwMTYwMjQ1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI3OGYyNC0yNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyinIdqjGj5z9Rvrj2w641EkmCSZs6kw/Fn0unUwq7e1ZO+t2rrhAHHE5ibUP /e4I9rN+aolOr5FqBKZnu1HSZs00LbEE2TPQ+1SeapZMpgnAmyaHinqfQn6pEokA ahSsAsOxQBeTiMLrBglFp3bG4PE3cyXqH7tsRmODa0uU5kWD3HzhwiT2+AaKq/Fx 3fvxnt30muEl3X2dJwplFUNXfJVZgXOKTjjH2b3qE55YlZofWXxjVdLUBpw+Ob4V hoQO7S6Klo1XSlcuc/L3+w765wjIVLjEo7BuXoGxwP9WLhGYMxUE9Qmrtv2d8t05 7ZE3L4FXbjPa8MxPfRxvdbshPwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFNfqqLDj yj11wcdoxf7RsWRy8w8iMB8GA1UdIwQYMBaAFCVZz1yAy/1FRyA70FFozDZJ1WTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUEwRi8yMjc3NDI1MjM1 QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9VVkhJRHZRVVdqTU5rblZa TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWblBYSURMX1VWSElEdlFVV2pNTmtuVlpNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkFBMEYvMjI3NzQyNTIzNUExMTFFNUIwNTNEOTI3QzRGOUFFMDIvREZBN0ZBQ0E1 NEY3MTFFN0JGQjQ4MDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAEk/2oDBAFnPh4DBAFnUi4DBAK5ktAwDQQCAAIwBwMFACQH xUAwDQYJKoZIhvcNAQELBQADggEBAAlBMboq047RcopVTw0Sor4V6aOJCHxyFuwW FJV0QJRb1Jq+Y3Ul/Zk4blTz6Lrd4UHKOFSaNcF3Wybqv6gsiPR0cfiRIvoJgXiA yW2sGUl+rkvbr8upTQ7oOG4rEZWT5vwh+MGFoPNfD8Dxl5rldf3qgDADAh/f1DHb /DHcumhADwquRzWvXckGJyb1m20WPDaPgg/+ndxxRmCnDzQEb5KhXR7DC7LelFqq 3NWo7B+ufJWKYceL8boRc+GUWw+PPOAO4eKxd6mq+6WqDByK+Fg0DcgP1bBY5NUA wua/w+JaEd7QUnsbW8Is/ZyIP7fk8Lr+pR2dmM15NqRVc83NWTc= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:21 2024 by rpki-client on console-ams.rpki-client.org