$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/7B3163F0072A11EA9E314D4CC4F9AE02.roa File: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (raw, json) Hash identifier: 8KRCIYlWeIU1RFVFOTA+MnkOIQ/xaefXlo2pRQaFi20= Subject key identifier: 40:B8:0E:04:21:14:67:2A:87:41:84:DE:BC:9D:4C:27:0A:BF:A9:A2 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0C62 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/7B3163F0072A11EA9E314D4CC4F9AE02.roa Signing time: Tue 24 Sep 2024 18:26:43 +0000 ROA not before: Tue 24 Sep 2024 18:26:43 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 4764 IP address blocks: 103.115.208.0/22 maxlen: 24 117.20.64.0/21 maxlen: 24 119.17.128.0/19 maxlen: 24 202.153.208.0/20 maxlen: 24 2403:640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Sep 24 18:26:43 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f30463-4391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:32:d8:16:d8:4d:bf:e2:34:f8:c4:cc:9b:25: 63:0d:b2:ae:0b:45:a9:e1:19:a1:50:ed:24:94:c1: 69:dc:00:10:e3:8c:ef:d5:55:72:38:3a:22:92:d4: 57:07:15:e7:74:79:2f:d4:c1:6e:16:06:c2:26:95: d1:84:a7:fa:2a:3c:21:b3:10:79:0b:19:78:92:79: c3:53:fa:08:fb:07:4c:2e:bb:07:7f:85:ce:96:a7: 3b:a6:ea:9f:58:9d:42:83:34:f3:7e:2d:02:92:5d: 4b:ce:af:66:01:e9:d3:65:f5:c8:3e:ea:0c:d8:19: 96:8e:32:63:22:f4:cb:7e:16:d6:ba:81:ea:5f:c7: e4:88:8f:38:50:3b:3c:a6:47:a5:5e:ed:5a:96:5d: f0:1b:3d:28:85:d4:71:0e:46:13:1d:ad:be:b6:5f: 30:b1:6e:45:38:fe:a7:b2:2c:0e:f0:71:e4:1a:eb: f9:e9:b4:02:0f:ff:b4:1c:66:85:65:33:ca:9e:b7: 65:c7:e8:28:89:0d:d2:a2:83:64:17:e1:6b:5a:8e: 3b:39:fc:8b:f2:46:b8:a8:e6:ac:55:a0:a4:58:3c: 96:a1:7c:54:56:b5:1f:61:ba:a2:4f:17:67:c7:4d: 97:2d:f2:21:67:f9:7e:02:97:58:59:7e:22:76:69: ed:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B8:0E:04:21:14:67:2A:87:41:84:DE:BC:9D:4C:27:0A:BF:A9:A2 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/7B3163F0072A11EA9E314D4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.208.0/22 117.20.64.0/21 119.17.128.0/19 202.153.208.0/20 IPv6: 2403:640::/32 Signature Algorithm: sha256WithRSAEncryption 9e:d1:c6:fd:0e:08:ba:ba:e9:92:37:bf:94:07:4d:0c:63:d3: 79:9c:9d:ff:a9:6b:45:2b:79:d2:45:bb:01:13:c5:4d:ce:0b: 40:bb:c0:49:c6:76:e1:fd:47:cc:2e:34:57:4d:2a:30:6b:1f: 9c:37:aa:2a:7f:4e:bb:7b:a8:aa:0f:4c:52:6b:59:bf:4f:53: de:5a:3c:dd:e9:0e:65:e1:28:d6:4c:c8:96:bd:20:af:a2:fc: 09:00:db:d8:38:03:09:7d:af:4c:93:2a:63:a0:f2:3d:e1:d7: 9f:ce:f6:08:81:f3:d1:54:56:85:d7:b1:10:96:5e:2d:51:ca: 3b:81:8b:ae:e1:50:6b:26:26:b4:dd:a9:3c:c8:d5:60:53:25: 56:6a:4b:5e:e5:55:5b:6b:69:ca:78:b6:c5:3a:5b:8e:6a:66: 3c:96:34:71:3f:6f:8b:c6:6d:f7:bf:ee:56:01:f5:c0:1d:52: 97:fa:54:d5:04:13:99:f1:71:2d:6c:a0:e9:18:91:db:a0:09: 65:75:e4:0c:6c:20:bd:e0:5a:4b:d1:0e:93:f3:70:26:da:6c: ff:ad:4f:ba:1b:bf:09:64:0c:84:d5:f2:32:4a:ef:0b:a9:63: 7e:74:88:03:f2:c7:be:99:83:51:d9:4d:30:7d:b6:2c:00:be: 0e:34:0f:58 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjQwOTI0MTgyNjQzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYzMDQ2My00MzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DLYFthNv+I0+MTMmyVjDbKuC0Wp4RmhUO0klMFp3AAQ44zv1VVyODoiktRX BxXndHkv1MFuFgbCJpXRhKf6KjwhsxB5Cxl4knnDU/oI+wdMLrsHf4XOlqc7puqf WJ1CgzTzfi0Ckl1Lzq9mAenTZfXIPuoM2BmWjjJjIvTLfhbWuoHqX8fkiI84UDs8 pkelXu1all3wGz0ohdRxDkYTHa2+tl8wsW5FOP6nsiwO8HHkGuv56bQCD/+0HGaF ZTPKnrdlx+goiQ3SooNkF+FrWo47OfyL8ka4qOasVaCkWDyWoXxUVrUfYbqiTxdn x02XLfIhZ/l+ApdYWX4idmnt6QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFEC4DgQh FGcqh0GE3rydTCcKv6miMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTM0MzAvODZBQzg5RDBFODdCMTFFOUExRUQ1QjQ3QzRGOUFFMDIvN0IzMTYzRjAw NzJBMTFFQTlFMzE0RDRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAJnc9ADBAN1FEADBAV3EYADBATKmdAwDQQCAAIwBwMFACQD BkAwDQYJKoZIhvcNAQELBQADggEBAJ7Rxv0OCLq66ZI3v5QHTQxj03mcnf+pa0Ur edJFuwETxU3OC0C7wEnGduH9R8wuNFdNKjBrH5w3qip/Trt7qKoPTFJrWb9PU95a PN3pDmXhKNZMyJa9IK+i/AkA29g4Awl9r0yTKmOg8j3h15/O9giB89FUVoXXsRCW Xi1RyjuBi67hUGsmJrTdqTzI1WBTJVZqS17lVVtracp4tsU6W45qZjyWNHE/b4vG bfe/7lYB9cAdUpf6VNUEE5nxcS1soOkYkdugCWV15AxsIL3gWkvRDpPzcCbabP+t T7obvwlkDITV8jJK7wupY350iAPyx76Zg1HZTTB9tiwAvg40D1g= -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:04 2024 by rpki-client on console-ams.rpki-client.org