$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/F22CC508A01811EFA1D64F09C4F9AE02.roa File: F22CC508A01811EFA1D64F09C4F9AE02.roa (raw, json) Hash identifier: 42lol7ocjMoRIFNb/jOjDU3dvQhE5zJeP2U3nNQhg/s= Subject key identifier: 40:69:D9:01:26:29:1D:7A:35:DE:26:6D:D5:CF:B7:79:0F:56:C4:32 Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Certificate serial: 0BD2 Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/F22CC508A01811EFA1D64F09C4F9AE02.roa Signing time: Mon 11 Nov 2024 10:37:27 +0000 ROA not before: Mon 11 Nov 2024 10:37:27 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 137432 IP address blocks: 103.108.90.0/23 maxlen: 24 2402:68c0::/32 maxlen: 32 2402:68c0::/36 maxlen: 36 2402:68c0:1000::/36 maxlen: 36 2402:68c0:2000::/36 maxlen: 36 2402:68c0:3000::/36 maxlen: 36 2402:68c0:4000::/36 maxlen: 36 2402:68c0:5000::/36 maxlen: 36 2402:68c0:6000::/36 maxlen: 36 2402:68c0:7000::/36 maxlen: 36 2402:68c0:8000::/36 maxlen: 36 2402:68c0:9000::/36 maxlen: 36 2402:68c0:a000::/36 maxlen: 36 2402:68c0:a000::/48 maxlen: 48 2402:68c0:a001::/48 maxlen: 48 2402:68c0:b000::/36 maxlen: 36 2402:68c0:c000::/36 maxlen: 36 2402:68c0:d000::/36 maxlen: 36 2402:68c0:e000::/36 maxlen: 36 2402:68c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3026 (0xbd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Validity Not Before: Nov 11 10:37:27 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=6731de67-adb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:64:7b:18:fc:19:c5:a9:c8:b3:8d:03:54: 68:04:56:0c:ac:36:0a:5e:80:28:3c:69:8f:c1:f0: 2f:8e:26:ed:f7:08:cd:d8:f3:5a:a8:6d:2f:ee:f0: c0:1c:d5:31:1e:89:7c:ca:c1:a5:75:72:2c:f5:2e: ef:66:b3:a6:6c:15:16:fd:8c:55:f2:9e:b6:ac:f1: a7:6e:ba:65:82:34:44:a3:43:74:5c:5b:58:31:9f: 56:4e:3f:ac:8b:55:c8:28:9a:a1:fe:bf:bb:cb:3d: c8:28:b6:c9:6d:22:16:ab:2a:58:bc:a3:76:fa:40: 65:94:3f:04:06:5f:8b:d8:3f:c9:d5:a5:79:36:a1: b7:e8:4a:6b:6c:a8:f0:9d:0a:b8:0c:dd:61:0f:9d: 43:6a:9d:58:64:0b:97:b5:97:c6:58:90:54:4f:c1: 5a:8e:98:bb:35:21:bc:94:23:db:76:c8:45:b2:65: 37:2a:be:7c:58:16:3b:58:5d:c9:d8:47:ac:db:35: e3:64:e4:a0:74:36:1a:b9:7b:03:07:3c:d2:04:5f: 8a:a7:0f:c8:af:a7:d0:76:82:4a:ea:c9:93:79:c2: bb:92:0d:08:98:8c:5c:d0:c4:11:ee:99:ab:85:15: 0b:b3:48:d0:ad:04:c3:df:a5:aa:e4:e3:f6:cc:ef: 0e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:69:D9:01:26:29:1D:7A:35:DE:26:6D:D5:CF:B7:79:0F:56:C4:32 X509v3 Authority Key Identifier: keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/F22CC508A01811EFA1D64F09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.90.0/23 IPv6: 2402:68c0::/32 Signature Algorithm: sha256WithRSAEncryption 0c:95:1f:d3:76:2b:f4:bc:8c:86:72:a2:40:ab:e5:16:9a:8c: 68:1a:75:d4:88:ae:51:02:3c:6c:bd:8c:e7:a6:7d:87:aa:24: 22:91:5c:fe:60:bb:b8:a8:f9:1c:7a:5a:89:83:b2:51:d4:87: 0e:56:ef:65:2f:1f:70:7d:ae:7d:c2:02:0c:c5:df:e7:85:ef: 35:c5:1b:33:df:df:89:3e:c5:82:7e:74:b7:7d:9c:7f:3a:52: cd:a4:0c:ca:0a:e3:5c:80:10:36:ac:e2:a1:9a:f9:dc:2e:27: 00:ca:ee:b1:28:6c:3d:3d:9e:12:5d:9f:39:2c:d3:21:be:68: 5b:82:6c:22:e5:04:59:19:d4:e6:57:71:db:cf:e1:db:b8:ea: 84:2b:5f:51:0f:77:6d:6c:f1:53:72:17:99:c1:25:e4:6c:65: 05:7a:39:a1:7c:74:36:ac:90:4a:83:a9:1a:b6:24:ea:ee:37: 79:c5:e8:cd:63:57:ac:53:30:8c:29:e8:88:d5:11:e3:83:41: b8:04:13:18:3b:26:6b:5a:8c:2d:b1:40:f5:04:eb:68:22:6f: c6:a1:ed:d0:71:63:b4:5c:7f:58:bc:e2:e7:e4:ca:b3:cd:e3: a2:0d:e4:6b:db:68:ad:2f:de:31:2c:ba:4a:91:a4:eb:44:76: 83:0a:04:be -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE MjQ2MEExMDQwHhcNMjQxMTExMTAzNzI3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMxZGU2Ny1hZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj9kexj8GcWpyLONA1RoBFYMrDYKXoAoPGmPwfAvjibt9wjN2PNaqG0v7vDA HNUxHol8ysGldXIs9S7vZrOmbBUW/YxV8p62rPGnbrplgjREo0N0XFtYMZ9WTj+s i1XIKJqh/r+7yz3IKLbJbSIWqypYvKN2+kBllD8EBl+L2D/J1aV5NqG36EprbKjw nQq4DN1hD51Dap1YZAuXtZfGWJBUT8Fajpi7NSG8lCPbdshFsmU3Kr58WBY7WF3J 2Ees2zXjZOSgdDYauXsDBzzSBF+Kpw/Ir6fQdoJK6smTecK7kg0ImIxc0MQR7pmr hRULs0jQrQTD36Wq5OP2zO8O2wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEBp2QEm KR16Nd4mbdXPt3kPVsQyMB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTBGRUEvMjQwREFDRUEwQjcyMTFFQUFDRkI2OTE2QzRGOUFFMDIvRjIyQ0M1MDhB MDE4MTFFRkExRDY0RjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnbFowDQQCAAIwBwMFACQCaMAwDQYJKoZIhvcNAQELBQAD ggEBAAyVH9N2K/S8jIZyokCr5RaajGgaddSIrlECPGy9jOemfYeqJCKRXP5gu7io +Rx6WomDslHUhw5W72UvH3B9rn3CAgzF3+eF7zXFGzPf34k+xYJ+dLd9nH86Us2k DMoK41yAEDas4qGa+dwuJwDK7rEobD09nhJdnzks0yG+aFuCbCLlBFkZ1OZXcdvP 4du46oQrX1EPd21s8VNyF5nBJeRsZQV6OaF8dDaskEqDqRq2JOruN3nF6M1jV6xT MIwp6IjVEeODQbgEExg7JmtajC2xQPUE62gib8ah7dBxY7Rcf1i84ufkyrPN46IN 5GvbaK0v3jEsukqRpOtEdoMKBL4= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org