$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa File: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (raw, json) Hash identifier: 3/Y1r0LMBII6zW5USQairn62r7Znj5u8VXmSgbR98nY= Subject key identifier: 9F:DB:7A:31:A2:4C:EB:14:52:AB:72:0A:8F:54:1E:67:6D:2D:E0:55 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 06D7 Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa Signing time: Thu 04 Jul 2024 23:00:47 +0000 ROA not before: Thu 04 Jul 2024 23:00:47 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 58507 IP address blocks: 103.1.188.0/22 maxlen: 24 103.19.172.0/22 maxlen: 24 103.232.160.0/22 maxlen: 24 113.212.168.0/21 maxlen: 24 163.47.120.0/22 maxlen: 24 163.47.136.0/22 maxlen: 24 163.47.168.0/22 maxlen: 24 182.237.4.0/22 maxlen: 24 203.32.77.0/24 maxlen: 24 2400:5d00::/32 maxlen: 34 2400:5d00::/33 maxlen: 40 2400:5d00:8000::/34 maxlen: 40 2400:5d00:c000::/35 maxlen: 36 2400:5d00:c000::/36 maxlen: 40 2400:5d00:d000::/37 maxlen: 38 2400:5d00:d000::/38 maxlen: 40 2400:5d00:d400::/39 maxlen: 40 2404:59c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1751 (0x6d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Jul 4 23:00:47 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6687299f-226b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:9e:49:f4:4d:20:89:66:08:fd:cd:1d:fc: 41:7b:5b:ab:4f:61:9b:46:c5:f2:e6:b0:e1:3d:eb: 9e:e6:9d:28:bd:7a:9f:76:01:d6:65:07:2b:ab:3f: 15:7b:92:f6:2e:19:4e:d3:5b:58:b1:13:1b:7a:0c: e8:71:d1:10:9d:4c:f3:de:96:3a:b4:62:d2:67:66: 4e:30:f7:65:b4:81:b5:b5:01:d5:6e:6d:75:a9:45: 4f:36:0a:02:df:3a:b9:81:aa:09:42:13:19:4b:f6: e6:c5:0a:e8:c0:79:3c:56:6e:5e:5e:3d:f9:2a:8b: 5d:f5:f4:d6:43:a4:cb:06:9a:75:6a:9d:db:33:d5: 48:33:16:71:0b:9f:8d:46:c1:99:0e:20:99:20:66: 7d:3c:4b:b7:8b:b6:4e:b3:73:a1:20:44:8f:f3:73: 83:f1:fc:fe:58:8c:e9:3f:ef:0f:93:33:2e:dd:36: 9b:eb:27:07:ef:63:db:2d:25:11:43:3c:a5:d2:31: ea:c7:9e:57:dc:11:3b:f7:0a:87:03:b2:bc:10:05: ef:88:d0:3f:70:2d:bb:a1:bb:b4:31:49:f4:ba:49: 45:12:dc:2b:81:84:43:dc:d0:34:a5:5a:a1:eb:e1: 38:65:f1:c3:61:08:92:f8:53:61:a8:ab:c6:e8:eb: 86:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DB:7A:31:A2:4C:EB:14:52:AB:72:0A:8F:54:1E:67:6D:2D:E0:55 X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.188.0/22 103.19.172.0/22 103.232.160.0/22 113.212.168.0/21 163.47.120.0/22 163.47.136.0/22 163.47.168.0/22 182.237.4.0/22 203.32.77.0/24 IPv6: 2400:5d00::/32 2404:59c0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:92:9d:f6:c4:b9:5c:a9:c8:9b:77:2b:d6:b6:bc:a1:6d:92: ce:6f:b0:50:b3:57:57:41:84:71:08:95:40:b5:51:ca:6e:b0: cd:73:b7:7b:ec:f4:c3:5c:d3:85:bd:7e:cb:b6:52:1a:ca:f3: 84:fa:90:69:89:e0:77:68:cd:8e:b6:00:b9:3c:57:8a:d5:df: 93:65:0e:9a:72:3b:d0:03:b9:1b:69:48:a1:fb:a6:a5:34:d6: 1a:76:39:db:83:6d:c0:c1:eb:ae:ed:86:be:da:19:86:61:72: 3c:6e:7a:06:d9:1c:59:60:ff:5d:24:55:c6:b6:c9:28:79:b0: c8:db:3d:4a:0c:bb:e4:9d:5c:5d:64:39:6b:28:4f:45:24:88: 83:2b:9f:6c:5b:6f:fb:ad:8d:f2:a4:1b:91:c0:2a:f2:d9:48: 18:80:8b:7e:42:2c:2b:4d:44:cc:9e:55:50:ef:9f:26:5b:5b: f0:7b:b0:de:3f:51:b5:18:6d:85:fc:65:5f:12:f1:3c:12:f6: 6d:19:bb:06:ca:e5:14:f5:ed:90:d8:f9:6b:ef:2e:a1:06:f5: 1f:d3:80:50:a9:59:59:b7:1f:df:39:c2:c0:36:ca:bb:fa:bd: e9:e8:6d:bb:4f:95:cb:fb:e6:81:b2:ed:88:45:fa:dc:6f:95: 70:13:c8:2d -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgICBtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjQwNzA0MjMwMDQ3WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg3Mjk5Zi0yMjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppOeSfRNIIlmCP3NHfxBe1urT2GbRsXy5rDhPeue5p0ovXqfdgHWZQcrqz8V e5L2LhlO01tYsRMbegzocdEQnUzz3pY6tGLSZ2ZOMPdltIG1tQHVbm11qUVPNgoC 3zq5gaoJQhMZS/bmxQrowHk8Vm5eXj35Kotd9fTWQ6TLBpp1ap3bM9VIMxZxC5+N RsGZDiCZIGZ9PEu3i7ZOs3OhIESP83OD8fz+WIzpP+8PkzMu3Tab6ycH72PbLSUR Qzyl0jHqx55X3BE79wqHA7K8EAXviNA/cC27obu0MUn0uklFEtwrgYRD3NA0pVqh 6+E4ZfHDYQiS+FNhqKvG6OuGNwIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFJ/bejGi TOsUUqtyCo9UHmdtLeBVMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzUwMjcvMjUwNUNFREMyNTY4MTFFQkFDMkNBQzVBQzRGOUFFMDIvMTJEQkFEM0NE QUZGMTFFQ0E2N0RBMTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZQYIKwYBBQUHAQcBAf8E VjBUMDwEAgABMDYDBAJnAbwDBAJnE6wDBAJn6KADBANx1KgDBAKjL3gDBAKjL4gD BAKjL6gDBAK27QQDBADLIE0wFAQCAAIwDgMFACQAXQADBQAkBFnAMA0GCSqGSIb3 DQEBCwUAA4IBAQAqkp32xLlcqcibdyvWtryhbZLOb7BQs1dXQYRxCJVAtVHKbrDN c7d77PTDXNOFvX7LtlIayvOE+pBpieB3aM2OtgC5PFeK1d+TZQ6acjvQA7kbaUih +6alNNYadjnbg23Aweuu7Ya+2hmGYXI8bnoG2RxZYP9dJFXGtskoebDI2z1KDLvk nVxdZDlrKE9FJIiDK59sW2/7rY3ypBuRwCry2UgYgIt+QiwrTUTMnlVQ758mW1vw e7DeP1G1GG2F/GVfEvE8EvZtGbsGyuUU9e2Q2Plr7y6hBvUf04BQqVlZtx/fOcLA Nsq7+r3p6G27T5XL++aBsu2IRfrcb5VwE8gt -----END CERTIFICATE-----Generated at Sun Nov 24 22:11:59 2024 by rpki-client on console-fra.rpki-client.org