$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa File: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (raw, json) Hash identifier: GmayiKETIiZ9Dddn74jDtmFnrHu5tuYrorPKMD9Py2g= Subject key identifier: 82:1A:C1:34:23:C4:16:9B:CD:2F:FF:0B:49:8E:3B:63:F2:81:AE:DF Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Certificate serial: 09F2 Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa Signing time: Sat 24 Aug 2024 20:38:53 +0000 ROA not before: Sat 24 Aug 2024 20:38:53 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 137969 IP address blocks: 39.109.66.0/23 maxlen: 23 39.109.66.0/24 maxlen: 24 39.109.67.0/24 maxlen: 24 39.109.68.0/22 maxlen: 22 39.109.68.0/24 maxlen: 24 39.109.69.0/24 maxlen: 24 39.109.70.0/24 maxlen: 24 39.109.71.0/24 maxlen: 24 39.109.72.0/21 maxlen: 21 39.109.72.0/24 maxlen: 24 39.109.73.0/24 maxlen: 24 39.109.74.0/24 maxlen: 24 39.109.75.0/24 maxlen: 24 39.109.79.0/24 maxlen: 24 39.109.80.0/21 maxlen: 21 39.109.80.0/24 maxlen: 24 39.109.88.0/22 maxlen: 22 39.109.88.0/24 maxlen: 24 39.109.89.0/24 maxlen: 24 103.98.14.0/24 maxlen: 24 103.119.132.0/23 maxlen: 23 103.119.132.0/24 maxlen: 24 103.119.133.0/24 maxlen: 24 2403:e840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2546 (0x9f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Validity Not Before: Aug 24 20:38:53 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ca44dd-7293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:58:98:da:5c:a5:ae:68:37:79:22:ed:e3: df:ac:fe:b6:76:8d:8f:50:9f:15:a0:85:8d:cc:b7: d1:47:0f:b3:bc:25:14:20:97:0f:da:fc:cc:2e:cc: f3:58:45:c0:b7:e6:54:06:28:3b:6f:de:07:c4:af: 3d:d1:e8:c4:3f:dc:51:a8:96:d6:e9:99:7f:3e:3c: ba:54:c5:a8:c8:3b:72:72:25:0b:fd:67:fd:16:03: 06:09:c4:4d:7b:ef:d3:f1:d9:d0:2d:ed:5e:e5:97: 59:f7:29:7e:3d:05:6e:24:e3:b3:90:e0:bd:73:d3: 0e:1a:6c:fe:08:3d:03:3a:e9:76:e1:83:dc:f4:65: de:db:61:f6:aa:22:01:e4:9f:55:6a:69:45:93:ad: 2e:a4:af:21:3a:4a:88:90:b4:17:70:16:ea:5b:ce: 07:19:1f:b7:c0:1d:ba:2c:f6:8f:01:49:8b:83:34: 6a:8f:f5:9d:3d:27:1e:37:e0:79:e1:4e:74:67:2b: 4f:d8:4c:fe:a8:b4:58:81:73:6d:ce:55:a5:38:43: 6f:b0:cc:15:b9:58:c8:d8:8b:14:11:05:09:e1:8b: cb:f4:85:0f:0d:25:cf:ac:ff:c7:70:5c:b0:38:5a: 5a:cb:d3:f4:52:f9:13:7f:5e:8a:1f:eb:3e:73:4e: 33:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1A:C1:34:23:C4:16:9B:CD:2F:FF:0B:49:8E:3B:63:F2:81:AE:DF X509v3 Authority Key Identifier: keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 39.109.66.0-39.109.91.255 103.98.14.0/24 103.119.132.0/23 IPv6: 2403:e840::/32 Signature Algorithm: sha256WithRSAEncryption 72:99:c5:39:7a:f3:16:52:be:08:19:28:6b:8f:28:4e:54:d9: 25:8f:c0:7c:bb:e9:c5:c5:dd:de:98:4c:fa:61:82:6b:6b:d1: c8:a0:97:43:06:12:61:3e:90:c0:ed:6a:b0:93:5e:f2:d8:d0: 29:d0:79:17:40:32:0b:29:96:26:c6:04:63:0b:62:0e:26:82: 00:2e:a9:08:98:37:b5:2e:bf:2e:7a:19:b7:f1:97:b9:ac:6c: 78:c1:51:2a:b1:f4:01:a5:e3:c5:36:dd:65:08:df:03:bc:0e: 0e:b7:eb:f5:81:f5:e5:a5:8b:5c:35:7c:79:8c:53:cd:ec:b3: 99:c3:e5:f6:09:38:dd:6c:5d:cc:f7:a7:4b:b5:9e:e5:c2:a7: 8e:d4:f1:12:23:19:ae:3e:94:96:cd:21:71:f7:f0:a3:b0:68: ff:b1:13:61:c9:ab:05:4b:ae:d3:7c:10:47:6e:8a:c0:aa:d9: 4a:38:2b:38:f6:de:44:11:14:84:ad:e8:c2:49:18:12:1c:94: b7:05:09:96:96:f6:56:43:3e:f6:68:ef:69:a6:bd:79:b4:01: 25:2d:b0:e5:37:eb:c5:83:5d:fc:a3:5e:3d:2a:56:58:25:c5: f3:27:cf:63:94:e7:c9:93:f5:02:80:86:aa:b5:21:ae:c5:ac: 03:e5:bd:f8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICCfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4 MDZBNTIxOEEwHhcNMjQwODI0MjAzODUzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNhNDRkZC03MjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1JYmNpcpa5oN3ki7ePfrP62do2PUJ8VoIWNzLfRRw+zvCUUIJcP2vzMLszz WEXAt+ZUBig7b94HxK890ejEP9xRqJbW6Zl/Pjy6VMWoyDtyciUL/Wf9FgMGCcRN e+/T8dnQLe1e5ZdZ9yl+PQVuJOOzkOC9c9MOGmz+CD0DOul24YPc9GXe22H2qiIB 5J9VamlFk60upK8hOkqIkLQXcBbqW84HGR+3wB26LPaPAUmLgzRqj/WdPSceN+B5 4U50ZytP2Ez+qLRYgXNtzlWlOENvsMwVuVjI2IsUEQUJ4YvL9IUPDSXPrP/HcFyw OFpay9P0UvkTf16KH+s+c04zfQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFIIawTQj xBabzS//C0mOO2Pyga7fMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODI1MDIvREExNkM2M0E3M0NDMTFFQUEzOTk1MzI2QzRGOUFFMDIvMEE1NzczRjZC QkJDMTFFQ0IyRTdGRjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMCAEAgABMBowDAMEASdtQgMEAidtWAMEAGdiDgMEAWd3hDANBAIAAjAHAwUA JAPoQDANBgkqhkiG9w0BAQsFAAOCAQEAcpnFOXrzFlK+CBkoa48oTlTZJY/AfLvp xcXd3phM+mGCa2vRyKCXQwYSYT6QwO1qsJNe8tjQKdB5F0AyCymWJsYEYwtiDiaC AC6pCJg3tS6/LnoZt/GXuaxseMFRKrH0AaXjxTbdZQjfA7wODrfr9YH15aWLXDV8 eYxTzeyzmcPl9gk43WxdzPenS7We5cKnjtTxEiMZrj6Uls0hcffwo7Bo/7ETYcmr BUuu03wQR26KwKrZSjgrOPbeRBEUhK3owkkYEhyUtwUJlpb2VkM+9mjvaaa9ebQB JS2w5TfrxYNd/KNePSpWWCXF8yfPY5TnyZP1AoCGqrUhrsWsA+W9+A== -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:33 2024 by rpki-client on console-ams.rpki-client.org