$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FC7C6F54995911ECBA362E6BC4F9AE02.roa File: FC7C6F54995911ECBA362E6BC4F9AE02.roa (raw, json) Hash identifier: ghbPSGV5V4y7mXckwV6Fm4Aj86G1V9d0N7mH25Yha0s= Subject key identifier: 83:C6:48:A0:03:AD:F5:D0:1A:67:D1:9E:F0:BB:A5:1D:60:7E:A7:0C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4658 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FC7C6F54995911ECBA362E6BC4F9AE02.roa Signing time: Thu 05 Sep 2024 03:36:00 +0000 ROA not before: Thu 05 Sep 2024 03:36:00 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 45544 IP address blocks: 27.0.12.0/22 maxlen: 24 45.117.168.0/22 maxlen: 24 45.251.112.0/22 maxlen: 24 103.1.236.0/22 maxlen: 24 103.7.40.0/22 maxlen: 24 103.77.160.0/22 maxlen: 24 103.77.164.0/22 maxlen: 24 103.129.84.0/22 maxlen: 24 103.131.72.0/22 maxlen: 24 103.252.252.0/22 maxlen: 24 112.213.80.0/20 maxlen: 24 2406:9c80::/48 maxlen: 48 2406:9c80:af00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18008 (0x4658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:36:00 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92720-d4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4b:4b:b2:4b:27:89:7e:c9:fc:e1:76:d8:bc: ff:b8:30:5c:b1:6a:b6:f2:2c:15:a5:8f:32:54:80: 43:b5:56:34:6b:b1:ee:23:a3:32:cf:02:a4:d4:dd: 36:e4:f8:ed:19:d5:a5:a8:ff:1f:be:c4:c9:5a:26: 52:e4:8d:4e:38:11:cf:e7:f9:14:fd:72:f7:d5:9a: 14:ee:0a:c3:3a:a4:28:bf:2d:8e:47:4e:85:4b:60: 7b:a1:a1:d0:b2:5b:f5:7c:b5:7e:dc:5b:1f:b8:bb: f9:2b:e2:38:71:ee:3e:92:e1:9e:29:cd:dd:f7:56: 36:a2:16:55:84:19:8e:c1:ed:41:ff:fd:cf:f6:d2: bc:d0:30:5e:9b:90:58:62:c5:84:d1:75:c3:ab:b2: d3:fd:92:01:83:e1:46:8d:fc:df:fc:2c:bb:bf:7e: 5d:a1:34:e6:03:b1:26:47:79:8e:5e:d7:75:a7:53: 81:db:fd:f1:61:61:0f:3b:bd:ce:58:c6:8c:2c:bf: 18:01:63:26:f6:12:ed:b1:c1:b2:0f:4f:bc:5b:79: 6f:f5:7b:45:2e:6c:5c:46:3b:7c:81:ee:b8:82:14: 39:f5:93:1e:02:ac:05:e7:d0:24:86:6f:35:6b:69: 5c:da:20:1a:72:15:4a:4a:fa:bf:4c:a9:71:4c:50: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C6:48:A0:03:AD:F5:D0:1A:67:D1:9E:F0:BB:A5:1D:60:7E:A7:0C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FC7C6F54995911ECBA362E6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.0.12.0/22 45.117.168.0/22 45.251.112.0/22 103.1.236.0/22 103.7.40.0/22 103.77.160.0/21 103.129.84.0/22 103.131.72.0/22 103.252.252.0/22 112.213.80.0/20 IPv6: 2406:9c80::/48 2406:9c80:af00::/48 Signature Algorithm: sha256WithRSAEncryption a1:d8:ca:5d:2d:34:85:00:84:31:6d:89:2a:7e:52:6a:8a:d4: 50:56:1e:bc:f0:31:44:17:1a:e8:eb:a8:5e:06:b9:24:37:3f: 62:0c:1e:57:ef:70:f7:3c:43:69:3f:86:12:ec:82:27:d3:76: 69:6e:e8:44:50:04:e7:8f:61:61:c2:85:2e:e0:c7:16:ee:dc: 34:bf:2e:10:1f:52:63:87:8a:d1:23:0e:ee:f3:5e:cc:19:8d: 56:72:c3:35:f8:1d:e4:f8:2d:1d:52:a8:4b:80:ea:f9:2f:a1: ed:9b:ce:dd:19:31:95:88:a9:4d:8f:3e:aa:59:20:fa:ca:9e: c7:28:b8:b3:c9:de:5b:98:e2:02:29:f5:26:79:fe:aa:e8:63: 17:23:ed:41:c7:1f:4e:da:07:01:15:be:48:a2:cc:5f:12:1d: d1:73:a2:44:f9:ff:be:39:e3:9a:56:3c:57:47:fe:ca:28:0e: 24:2d:0f:cc:67:7b:bd:13:64:29:91:e9:7d:28:1b:9a:7e:25: e6:38:fe:32:ba:b1:4c:af:96:bf:57:06:6e:d4:66:a7:1f:2b: 35:07:a4:22:86:45:5b:8b:ee:40:92:58:53:47:58:49:c9:0f: cc:1e:ff:6a:57:ce:97:26:d5:b8:c3:7a:f2:fe:9f:49:f6:61: 4e:30:1c:36 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgICRlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNjAwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjcyMC1kNGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ktLsksniX7J/OF22Lz/uDBcsWq28iwVpY8yVIBDtVY0a7HuI6MyzwKk1N02 5PjtGdWlqP8fvsTJWiZS5I1OOBHP5/kU/XL31ZoU7grDOqQovy2OR06FS2B7oaHQ slv1fLV+3FsfuLv5K+I4ce4+kuGeKc3d91Y2ohZVhBmOwe1B//3P9tK80DBem5BY YsWE0XXDq7LT/ZIBg+FGjfzf/Cy7v35doTTmA7EmR3mOXtd1p1OB2/3xYWEPO73O WMaMLL8YAWMm9hLtscGyD0+8W3lv9XtFLmxcRjt8ge64ghQ59ZMeAqwF59Akhm81 a2lc2iAachVKSvq/TKlxTFDkBwIDAQABo4IC5TCCAuEwHQYDVR0OBBYEFIPGSKAD rfXQGmfRnvC7pR1gfqcMMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRkM3QzZGNTQ5 OTU5MTFFQ0JBMzYyRTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbwYIKwYBBQUHAQcBAf8E YDBeMEIEAgABMDwDBAIbAAwDBAItdagDBAIt+3ADBAJnAewDBAJnBygDBANnTaAD BAJngVQDBAJng0gDBAJn/PwDBARw1VAwGAQCAAIwEgMHACQGnIAAAAMHACQGnICv ADANBgkqhkiG9w0BAQsFAAOCAQEAodjKXS00hQCEMW2JKn5SaorUUFYevPAxRBca 6OuoXga5JDc/YgweV+9w9zxDaT+GEuyCJ9N2aW7oRFAE549hYcKFLuDHFu7cNL8u EB9SY4eK0SMO7vNezBmNVnLDNfgd5PgtHVKoS4Dq+S+h7ZvO3RkxlYipTY8+qlkg +sqexyi4s8neW5jiAin1Jnn+quhjFyPtQccfTtoHARW+SKLMXxId0XOiRPn/vjnj mlY8V0f+yigOJC0PzGd7vRNkKZHpfSgbmn4l5jj+MrqxTK+Wv1cGbtRmpx8rNQek IoZFW4vuQJJYU0dYSckPzB7/alfOlybVuMN68v6fSfZhTjAcNg== -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org