$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/74087358355111E99EC82E0AC4F9AE02.roa File: 74087358355111E99EC82E0AC4F9AE02.roa (raw, json) Hash identifier: tyb0mMEVFvr0b00WBN86r+sNpOhKC86WXh33owud0/w= Subject key identifier: B7:4A:4B:0D:85:5D:03:E5:A7:1A:20:E1:3D:88:F4:9F:ED:DF:F0:47 Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Certificate serial: 0FFC Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/74087358355111E99EC82E0AC4F9AE02.roa Signing time: Sat 02 Nov 2024 17:26:31 +0000 ROA not before: Sat 02 Nov 2024 17:26:31 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 132449 IP address blocks: 43.249.196.0/24 maxlen: 24 43.249.197.0/24 maxlen: 24 43.249.198.0/24 maxlen: 24 43.249.199.0/24 maxlen: 24 103.21.172.0/23 maxlen: 23 103.21.174.0/24 maxlen: 24 103.21.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4092 (0xffc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Validity Not Before: Nov 2 17:26:31 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672660c7-3d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:06:2f:4b:70:65:5a:f8:4b:1d:54:8f:2e: 80:54:46:c8:5f:e6:2c:33:e5:ca:2b:32:58:ec:b1: ca:65:c7:fc:a3:bc:7e:e3:b0:f6:17:72:74:67:bd: 7c:f8:eb:fd:90:d5:31:4e:5e:a7:a8:ee:e6:77:fb: 78:e4:6b:53:bb:13:4d:75:08:db:df:2f:e5:b7:f3: ae:19:4c:1d:4b:d4:9b:99:52:16:cd:07:59:c1:3a: ff:8f:de:21:7d:a9:7c:60:cd:2d:5e:08:c8:27:57: c3:83:b9:ad:87:1a:20:c2:cf:26:b4:a4:a3:53:34: 7c:66:88:ba:ab:16:0c:c9:c0:df:ce:bf:bb:82:0f: 8f:fd:d6:35:e8:27:42:9d:a7:b3:97:b1:8d:aa:bf: be:2e:aa:f6:75:52:0c:dd:e5:4b:b9:1a:24:44:e3: e4:e1:a7:8e:5a:c6:75:cd:41:61:c6:32:07:86:c4: c2:79:c5:a1:2e:24:0c:fa:13:79:44:70:4b:56:44: 8e:df:bc:01:c7:99:81:5b:89:68:2d:7b:21:5a:9b: 8c:3c:fd:68:2c:34:22:7d:98:70:0d:da:bc:d4:d0: 0f:2e:c0:47:e3:dc:53:82:d8:3a:32:df:8c:de:4c: 79:f7:71:24:b2:26:86:32:ad:d2:04:5d:09:25:b4: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4A:4B:0D:85:5D:03:E5:A7:1A:20:E1:3D:88:F4:9F:ED:DF:F0:47 X509v3 Authority Key Identifier: keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/74087358355111E99EC82E0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.196.0/22 103.21.172.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:67:5c:da:8e:3b:00:81:ac:79:0f:67:49:48:60:f3:89:9e: dd:e6:58:73:f1:f5:21:7a:26:93:24:6a:48:61:18:9c:45:6c: 9f:48:1f:2d:d3:4b:8d:85:34:03:cf:9f:61:26:a7:1c:73:1e: 9b:72:61:ed:82:19:fe:a9:43:79:67:7c:89:51:7e:aa:d4:e6: 67:14:19:21:98:c7:f2:e1:e3:8b:9f:fe:56:75:e0:30:11:75: d5:d0:2c:27:61:19:6d:e8:1a:d4:30:31:1b:e3:b2:1f:33:dd: 6c:e0:3d:fb:d2:0e:be:2d:4f:88:95:fa:82:08:43:95:11:e0: f5:4b:ce:d3:e5:e7:2a:b8:ea:0a:e7:4f:a0:4a:0b:3b:05:92: 65:25:fa:f8:ce:04:8e:7e:69:d1:54:30:4e:77:91:46:1d:24: 0a:db:42:12:7d:e3:f4:f4:2d:76:b3:4c:7d:46:3c:4f:bf:e6: 19:1a:6a:47:65:d1:7e:0a:f4:5c:d9:19:45:96:8e:b0:32:8f: 57:ed:22:34:66:d1:50:69:16:8e:ad:ea:df:5b:a1:dd:fc:87: 71:ff:59:29:16:1d:58:2b:c5:74:dc:86:c7:99:fc:53:2b:e0: a6:a4:8f:47:51:5d:24:db:98:8c:7d:6a:91:8f:77:03:cc:35: d4:33:3f:17 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICD/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ0OUYxMTAvBgNVBAUTKDcwN0Q0ODYwNUEwRDg1NzcyRjkwREM0QjExNzJCRUYz MDI5NEEwODcwHhcNMjQxMTAyMTcyNjMxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2NjBjNy0zZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWwGL0twZVr4Sx1Ujy6AVEbIX+YsM+XKKzJY7LHKZcf8o7x+47D2F3J0Z718 +Ov9kNUxTl6nqO7md/t45GtTuxNNdQjb3y/lt/OuGUwdS9SbmVIWzQdZwTr/j94h fal8YM0tXgjIJ1fDg7mthxogws8mtKSjUzR8Zoi6qxYMycDfzr+7gg+P/dY16CdC naezl7GNqr++Lqr2dVIM3eVLuRokROPk4aeOWsZ1zUFhxjIHhsTCecWhLiQM+hN5 RHBLVkSO37wBx5mBW4loLXshWpuMPP1oLDQifZhwDdq81NAPLsBH49xTgtg6Mt+M 3kx593EksiaGMq3SBF0JJbSbaQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLdKSw2F XQPlpxog4T2I9J/t3/BHMB8GA1UdIwQYMBaAFHB9SGBaDYV3L5DcSxFyvvMClKCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDQ5Ri8wQkFDODU1NjM1 NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhYY3ZrTnhMRVhLLTh3S1Vv SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIMUlZRm9OaFhjdmtOeExFWEstOHdLVW9JYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ0OUYvMEJBQzg1NTYzNTUxMTFFOTk4QTUwQTBBQzRGOUFFMDIvNzQwODczNTgz NTUxMTFFOTlFQzgyRTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+cQDBAJnFawwDQYJKoZIhvcNAQELBQADggEBADxnXNqO OwCBrHkPZ0lIYPOJnt3mWHPx9SF6JpMkakhhGJxFbJ9IHy3TS42FNAPPn2Empxxz HptyYe2CGf6pQ3lnfIlRfqrU5mcUGSGYx/Lh44uf/lZ14DARddXQLCdhGW3oGtQw MRvjsh8z3WzgPfvSDr4tT4iV+oIIQ5UR4PVLztPl5yq46grnT6BKCzsFkmUl+vjO BI5+adFUME53kUYdJArbQhJ94/T0LXazTH1GPE+/5hkaakdl0X4K9FzZGUWWjrAy j1ftIjRm0VBpFo6t6t9bod38h3H/WSkWHVgrxXTchseZ/FMr4Kakj0dRXSTbmIx9 apGPdwPMNdQzPxc= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org