$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/DE137C362C7811EC97C8D979C4F9AE02.roa File: DE137C362C7811EC97C8D979C4F9AE02.roa (raw, json) Hash identifier: 1JrXRKrsJBaJ+/4+ml3Sz+iqG9fcskoIvUEpTyCTJxA= Subject key identifier: 92:B0:86:BA:50:45:31:8E:87:F9:C6:B7:87:B9:BC:74:6B:2B:5C:8E Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Certificate serial: 09D0 Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/DE137C362C7811EC97C8D979C4F9AE02.roa Signing time: Mon 24 Jun 2024 20:42:56 +0000 ROA not before: Mon 24 Jun 2024 20:42:56 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 56214 IP address blocks: 103.204.248.0/22 maxlen: 24 202.44.60.0/24 maxlen: 24 202.44.61.0/24 maxlen: 24 202.44.62.0/24 maxlen: 24 202.44.63.0/24 maxlen: 24 2400:7700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2512 (0x9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Validity Not Before: Jun 24 20:42:56 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6679da50-39df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f6:ae:51:89:16:1f:65:55:9f:37:bf:7f:3e: b2:67:e5:82:08:36:72:2c:87:2e:fc:ea:1d:da:31: 5c:ec:a5:cf:c6:40:5b:46:2e:bd:48:80:15:c8:6a: 76:ce:1b:32:ea:03:6f:5d:61:d9:5a:19:e2:ae:b1: b4:35:79:db:3d:2d:94:9b:b4:92:cb:7b:e4:8d:a3: 79:fb:bb:2b:9c:64:9d:22:e5:c1:a2:f9:01:65:2d: 0d:dc:99:d5:a2:8e:78:96:bb:fa:e5:e7:0d:e4:d6: 51:87:eb:92:47:e4:ec:13:ab:78:2f:9e:5d:f0:be: 74:9b:3d:e7:94:70:a6:4c:eb:ae:4e:45:66:52:0a: 47:ec:a0:62:6f:f6:1d:8e:f8:22:6b:06:c5:6f:92: 56:f6:73:f5:8d:23:b3:29:36:51:fb:b0:73:c2:ea: 05:e5:0d:c5:61:aa:6e:38:58:93:6f:38:20:10:bb: b9:8a:a6:c5:84:9c:e2:42:1e:44:35:da:28:d0:08: 7e:f3:0f:89:4a:78:84:5f:5f:ea:55:0d:62:c4:bb: 24:cf:70:26:93:1d:41:ab:61:79:74:e0:16:e8:1a: 37:1d:42:6e:69:7a:05:ce:bf:9b:36:a1:40:27:ab: 1a:78:e9:e6:c2:e6:a1:d4:36:3d:d9:8f:b9:b5:79: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B0:86:BA:50:45:31:8E:87:F9:C6:B7:87:B9:BC:74:6B:2B:5C:8E X509v3 Authority Key Identifier: keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/DE137C362C7811EC97C8D979C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.248.0/22 202.44.60.0/22 IPv6: 2400:7700::/32 Signature Algorithm: sha256WithRSAEncryption 0b:01:5b:33:86:fc:aa:15:16:f6:73:31:bd:ba:d5:c9:29:c1: a6:9b:e9:f9:fc:df:ae:bd:c0:1e:3d:57:c4:e7:cc:eb:aa:d0: 81:58:f5:c7:cf:20:2f:37:ad:a5:c6:35:a5:55:66:c8:6b:2e: 50:07:06:10:4b:70:23:53:8d:8b:13:1f:26:70:90:cc:ef:bd: 9a:f0:1d:0b:08:8f:a4:6d:7e:9d:e1:59:23:10:a5:cc:82:4c: 28:0d:9c:df:d4:1c:46:14:5c:29:27:da:b0:7e:dc:8e:1c:0e: ef:4b:d8:cb:2f:b0:e2:11:58:15:65:6b:68:7b:fe:bc:06:be: 34:89:e3:c9:9a:e7:bf:cf:50:f5:f6:1b:07:c3:2d:c3:e1:d7: 7a:32:58:01:a3:56:6c:9c:5d:28:0c:8c:4f:4f:84:fb:78:94: aa:53:78:e7:df:33:08:0c:77:85:aa:77:f7:94:44:11:d1:33: b8:0a:a0:57:f1:5f:c2:64:46:46:da:b5:3f:c2:37:98:96:94: a9:03:04:f5:5a:26:0f:34:50:55:c2:78:2d:b1:aa:8f:bf:7c: e2:f8:38:dd:0e:bb:82:1d:f8:06:df:f5:38:ab:75:ee:b0:3f: 92:10:d0:64:44:12:f9:f2:d2:6e:8d:48:b0:1a:4c:1a:fb:bf: 20:56:72:96 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0OEMxMTAvBgNVBAUTKDI4OTYyNEIyRTAwQjc3NEQzRDM5MEY1QTBBRDEwQjVC QzM1RjU2RDgwHhcNMjQwNjI0MjA0MjU2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc5ZGE1MC0zOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPauUYkWH2VVnze/fz6yZ+WCCDZyLIcu/Ood2jFc7KXPxkBbRi69SIAVyGp2 zhsy6gNvXWHZWhnirrG0NXnbPS2Um7SSy3vkjaN5+7srnGSdIuXBovkBZS0N3JnV oo54lrv65ecN5NZRh+uSR+TsE6t4L55d8L50mz3nlHCmTOuuTkVmUgpH7KBib/Yd jvgiawbFb5JW9nP1jSOzKTZR+7BzwuoF5Q3FYapuOFiTbzggELu5iqbFhJziQh5E Ndoo0Ah+8w+JSniEX1/qVQ1ixLskz3Amkx1Bq2F5dOAW6Bo3HUJuaXoFzr+bNqFA J6saeOnmwuah1DY92Y+5tXlFdwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJKwhrpQ RTGOh/nGt4e5vHRrK1yOMB8GA1UdIwQYMBaAFCiWJLLgC3dNPTkPWgrRC1vDX1bY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ4Qy9BNzREQTc3MjY0 QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQwMDlPUTlhQ3RFTFc4TmZW dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKWWtzdUFMZDAwOU9ROWFDdEVMVzhOZlZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc0OEMvQTc0REE3NzI2NEI0MTFFQUIzOEEzNDBEQzRGOUFFMDIvREUxMzdDMzYy Qzc4MTFFQzk3QzhEOTc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnzPgDBALKLDwwDQQCAAIwBwMFACQAdwAwDQYJKoZIhvcN AQELBQADggEBAAsBWzOG/KoVFvZzMb261ckpwaab6fn83669wB49V8TnzOuq0IFY 9cfPIC83raXGNaVVZshrLlAHBhBLcCNTjYsTHyZwkMzvvZrwHQsIj6Rtfp3hWSMQ pcyCTCgNnN/UHEYUXCkn2rB+3I4cDu9L2MsvsOIRWBVla2h7/rwGvjSJ48ma57/P UPX2GwfDLcPh13oyWAGjVmycXSgMjE9PhPt4lKpTeOffMwgMd4Wqd/eURBHRM7gK oFfxX8JkRkbatT/CN5iWlKkDBPVaJg80UFXCeC2xqo+/fOL4ON0Ou4Id+Abf9Tir de6wP5IQ0GREEvny0m6NSLAaTBr7vyBWcpY= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:33 2024 by rpki-client on console-ams.rpki-client.org