$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/82E0D450BC5011E6B01A8D4CC4F9AE02.roa File: 82E0D450BC5011E6B01A8D4CC4F9AE02.roa (raw, json) Hash identifier: 0pFtdAh/nKnP5eoxsGxODsFcMEqhXHUTJ4P3f5IMFhU= Subject key identifier: 50:2D:0F:68:C1:63:9D:E6:B8:B1:CF:08:C9:A4:69:3E:2B:B8:82:A0 Certificate issuer: /CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Certificate serial: 1CAD Authority key identifier: 53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/82E0D450BC5011E6B01A8D4CC4F9AE02.roa Signing time: Wed 20 Nov 2024 16:33:47 +0000 ROA not before: Wed 20 Nov 2024 16:33:47 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 134976 IP address blocks: 103.204.100.0/22 maxlen: 22 103.204.100.0/24 maxlen: 24 103.204.101.0/24 maxlen: 24 103.204.102.0/24 maxlen: 24 103.204.103.0/24 maxlen: 24 202.53.156.0/22 maxlen: 22 202.53.156.0/24 maxlen: 24 202.53.157.0/24 maxlen: 24 202.53.158.0/24 maxlen: 24 202.53.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7341 (0x1cad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC Validity Not Before: Nov 20 16:33:47 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=673e0f6a-f470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:97:b2:39:63:7a:98:25:ff:b5:0b:10:48: d3:ae:dc:ff:7f:d1:f8:3c:67:fc:32:5e:47:d4:e1: 32:58:43:12:d6:27:1d:e6:c1:b0:d6:64:66:09:5d: e4:b2:05:c5:b5:07:e0:99:54:c7:05:62:a1:aa:5f: 72:41:ce:41:be:99:a8:9f:ac:9a:69:9f:44:bb:1f: 57:15:b4:de:b3:7b:54:13:1f:ab:e0:bf:b6:1a:44: 09:cf:51:8a:58:e0:0f:78:c4:b2:75:1b:3f:5e:e4: c1:6c:07:bf:ca:cc:c6:39:d8:82:40:d4:e1:26:2e: 67:90:78:74:ef:0b:84:cf:98:c2:f6:34:37:58:7a: b2:ff:70:1b:58:e8:81:ec:87:99:ff:e8:39:54:50: 60:df:33:5d:a6:90:c6:81:27:97:a8:96:69:00:c3: 90:2b:5f:f5:27:1d:6b:b8:7a:df:87:83:41:67:ec: cf:01:cd:5f:2c:a6:a2:8c:54:52:2f:3b:7b:5f:e5: 25:2f:24:52:a7:f2:ad:98:7c:7c:cb:e3:79:3f:57: 11:b3:69:ca:ca:a0:16:69:01:8f:62:83:65:b4:cb: 30:ff:db:18:6a:62:2c:b8:58:dc:9d:62:28:48:f3: a1:28:10:4e:50:42:0f:aa:88:1b:68:95:1b:4f:02: 32:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2D:0F:68:C1:63:9D:E6:B8:B1:CF:08:C9:A4:69:3E:2B:B8:82:A0 X509v3 Authority Key Identifier: keyid:53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/82E0D450BC5011E6B01A8D4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.100.0/22 202.53.156.0/22 Signature Algorithm: sha256WithRSAEncryption 73:44:55:39:70:e7:7f:a5:d3:34:e9:2e:2f:ae:ad:1e:fc:fa: 5d:28:8a:ec:7d:e1:3f:c4:0f:d6:33:9e:30:89:0d:a4:3e:70: 0e:2f:91:1f:55:3e:9a:7a:c4:1e:0b:90:a5:19:10:b0:19:6c: 40:9e:7f:76:10:35:16:3d:d4:0c:bc:0e:0a:5b:fd:42:5b:25: 50:af:22:e0:67:ae:e9:d0:04:18:59:57:f5:81:00:2a:5d:39: 6b:03:f9:f2:b2:0e:c6:89:75:a4:d1:18:c9:ab:ae:0d:35:11: a8:be:b0:ce:1d:7f:b4:d2:76:d3:ed:66:3f:ce:83:1f:43:36: 0b:8a:ea:93:88:79:40:3e:b0:6d:fe:19:e5:8d:d5:1a:fd:22: 14:f9:2f:19:68:ec:18:7b:0b:dd:fe:84:7e:e2:ba:95:8b:c0: c1:82:3f:a4:11:c4:b5:9c:db:de:c0:c3:a8:12:64:be:6d:08: bb:a4:ee:2e:12:19:41:a7:90:29:af:5f:65:a7:b5:20:28:7f: 6e:71:44:77:fe:67:0b:aa:06:fa:d5:bd:b5:57:6a:e8:49:a4: 80:d8:5d:cb:18:af:53:b6:36:53:30:70:c2:2c:e7:c5:31:cf: 81:be:01:14:4e:46:3c:10:8c:26:6a:87:0b:cf:cb:fc:79:71: fb:5a:88:9d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTAxMTAvBgNVBAUTKDUzMjg2MTZFNzc5NDU0N0VCOUNFOTJCNEE4RjA0NUU0 QjJDQ0MwRkMwHhcNMjQxMTIwMTYzMzQ3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNlMGY2YS1mNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVuXsjljepgl/7ULEEjTrtz/f9H4PGf8Ml5H1OEyWEMS1icd5sGw1mRmCV3k sgXFtQfgmVTHBWKhql9yQc5Bvpmon6yaaZ9Eux9XFbTes3tUEx+r4L+2GkQJz1GK WOAPeMSydRs/XuTBbAe/yszGOdiCQNThJi5nkHh07wuEz5jC9jQ3WHqy/3AbWOiB 7IeZ/+g5VFBg3zNdppDGgSeXqJZpAMOQK1/1Jx1ruHrfh4NBZ+zPAc1fLKaijFRS Lzt7X+UlLyRSp/KtmHx8y+N5P1cRs2nKyqAWaQGPYoNltMsw/9sYamIsuFjcnWIo SPOhKBBOUEIPqogbaJUbTwIyIwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFAtD2jB Y53muLHPCMmkaT4ruIKgMB8GA1UdIwQYMBaAFFMoYW53lFR+uc6StKjwReSyzMD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMC8wRTRBRDEyOEJD NEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZINjV6cEswcVBCRjVMTE13 UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5aGhibmVVVkg2NXpwSzBxUEJGNUxMTXdQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ3QTAvMEU0QUQxMjhCQzRGMTFFNkJBRjFDMjRBQzRGOUFFMDIvODJFMEQ0NTBC QzUwMTFFNkIwMUE4RDRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnzGQDBALKNZwwDQYJKoZIhvcNAQELBQADggEBAHNEVTlw 53+l0zTpLi+urR78+l0oiux94T/ED9YznjCJDaQ+cA4vkR9VPpp6xB4LkKUZELAZ bECef3YQNRY91Ay8Dgpb/UJbJVCvIuBnrunQBBhZV/WBACpdOWsD+fKyDsaJdaTR GMmrrg01Eai+sM4df7TSdtPtZj/Ogx9DNguK6pOIeUA+sG3+GeWN1Rr9IhT5Lxlo 7Bh7C93+hH7iupWLwMGCP6QRxLWc297Aw6gSZL5tCLuk7i4SGUGnkCmvX2WntSAo f25xRHf+ZwuqBvrVvbVXauhJpIDYXcsYr1O2NlMwcMIs58Uxz4G+ARRORjwQjCZq hwvPy/x5cftaiJ0= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:51 2024 by rpki-client on console-fra.rpki-client.org