$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/9DC06B6E36A211E893BF3061C4F9AE02.roa File: 9DC06B6E36A211E893BF3061C4F9AE02.roa (raw, json) Hash identifier: hlCAOqdM82iuB3BtNLbjrR+eENtQp+VFzUFQxq5vFhE= Subject key identifier: 87:5C:88:11:48:C9:A5:1C:FB:F2:AF:A0:4A:6F:32:B2:08:6A:4E:A1 Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Certificate serial: 1CCE Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/9DC06B6E36A211E893BF3061C4F9AE02.roa Signing time: Tue 06 Aug 2024 16:33:38 +0000 ROA not before: Tue 06 Aug 2024 16:33:38 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 59374 IP address blocks: 43.255.240.0/22 maxlen: 22 43.255.240.0/24 maxlen: 24 43.255.241.0/24 maxlen: 24 43.255.242.0/24 maxlen: 24 43.255.243.0/24 maxlen: 24 103.233.192.0/22 maxlen: 22 103.233.192.0/24 maxlen: 24 103.233.193.0/24 maxlen: 24 103.233.194.0/24 maxlen: 24 103.233.195.0/24 maxlen: 24 160.238.12.0/22 maxlen: 22 160.238.12.0/24 maxlen: 24 160.238.13.0/24 maxlen: 24 160.238.14.0/24 maxlen: 24 160.238.15.0/24 maxlen: 24 2401:1a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7374 (0x1cce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Validity Not Before: Aug 6 16:33:38 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b25062-b641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:50:8f:6c:ef:28:11:86:59:60:fe:ad:d6: a6:4e:51:45:70:e4:b5:b8:a6:f3:f0:c3:ce:be:92: 59:35:d5:e1:0d:71:b8:32:2a:b0:a7:d1:0e:46:4b: eb:a6:08:40:7b:ff:6e:e4:25:4b:9a:f5:c7:bd:bc: 30:01:19:df:69:f2:49:be:c1:37:7c:8f:59:46:34: ce:ae:55:b6:a2:cc:c3:d0:2a:ab:4e:43:ec:45:96: d5:43:e9:4d:35:49:63:ce:1a:65:13:30:52:67:e4: b9:4e:74:9b:ae:6d:e1:c9:a7:e5:62:da:96:71:64: c9:86:7e:d7:9f:ae:c8:64:ae:72:07:57:c4:11:93: fd:f3:59:24:da:82:a8:ef:af:62:db:56:a2:91:7a: 7d:7a:83:fa:74:0b:7c:43:d4:b8:86:d0:8d:02:56: e2:7d:70:52:9c:b6:7a:95:41:17:d4:7c:e9:85:55: 48:01:d7:b8:15:bf:1a:10:69:03:8d:b0:f0:36:d4: e7:8e:96:f6:26:f1:29:88:d4:5f:d4:28:fc:34:04: 21:48:9d:8f:64:a9:f9:66:67:5b:c6:bf:51:3a:1d: 22:76:80:09:bd:e1:6e:b0:07:47:57:a6:3e:df:17: fc:3b:5a:e0:21:82:ed:f9:43:b5:07:75:5a:47:25: 59:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5C:88:11:48:C9:A5:1C:FB:F2:AF:A0:4A:6F:32:B2:08:6A:4E:A1 X509v3 Authority Key Identifier: keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/9DC06B6E36A211E893BF3061C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.240.0/22 103.233.192.0/22 160.238.12.0/22 IPv6: 2401:1a80::/32 Signature Algorithm: sha256WithRSAEncryption 6c:53:f6:91:61:8e:1f:fa:fb:3f:bf:01:a4:b6:f8:54:75:02: 8d:e9:4a:07:3d:bd:b1:57:bb:3e:d8:03:17:7b:35:3b:55:81: 0d:58:3a:64:5d:ee:14:b3:fa:13:c6:88:9a:34:13:54:8c:c6: 0b:2b:4e:87:4e:cc:e0:ef:1f:24:7f:25:64:a2:da:4e:6b:50: ef:f2:6a:03:fe:44:68:17:fd:af:95:bc:17:28:0f:19:20:12: ea:33:26:0d:db:8a:e3:93:10:95:92:68:be:3c:9a:57:ad:cd: ac:c3:ab:59:c0:91:4e:2b:c9:55:f8:95:d6:b8:be:ec:4f:be: de:fe:38:60:7b:6a:55:82:90:61:87:e6:20:53:09:87:b9:39: 09:05:24:d4:32:be:41:c0:42:77:e3:5d:b2:c3:75:7d:90:9c: 7e:1e:ce:df:6c:06:fb:c5:65:7d:75:56:a8:0d:a6:7f:48:f5: ad:26:28:48:2d:f8:7e:8b:64:50:41:92:aa:90:93:27:e2:6b: a6:79:4a:79:22:af:b9:4e:41:7e:45:c4:98:51:76:ac:21:a3: 6b:53:98:3f:66:28:3a:7e:bc:d7:3b:9e:a7:73:a9:2a:9f:96: 5a:25:dd:ff:45:91:6c:f1:35:2f:f9:bb:a9:7c:ea:e4:9e:e9: 31:74:da:1d -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICHM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwOTUxMTAvBgNVBAUTKDMyRjI2Q0YzOUY5RkJDQTdGMzFGNTM5NUY4OEREOTdE OTQ3MEQxOTcwHhcNMjQwODA2MTYzMzM4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIyNTA2Mi1iNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOdQj2zvKBGGWWD+rdamTlFFcOS1uKbz8MPOvpJZNdXhDXG4Miqwp9EORkvr pghAe/9u5CVLmvXHvbwwARnfafJJvsE3fI9ZRjTOrlW2oszD0CqrTkPsRZbVQ+lN NUljzhplEzBSZ+S5TnSbrm3hyaflYtqWcWTJhn7Xn67IZK5yB1fEEZP981kk2oKo 769i21aikXp9eoP6dAt8Q9S4htCNAlbifXBSnLZ6lUEX1HzphVVIAde4Fb8aEGkD jbDwNtTnjpb2JvEpiNRf1Cj8NAQhSJ2PZKn5Zmdbxr9ROh0idoAJveFusAdHV6Y+ 3xf8O1rgIYLt+UO1B3VaRyVZPwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIdciBFI yaUc+/KvoEpvMrIIak6hMB8GA1UdIwQYMBaAFDLybPOfn7yn8x9TlfiN2X2UcNGX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjA5NS84Qzg5OUE0MkFC NTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZLZnpIMU9WLUkzWmZaUncw WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012SnM4NS1mdktmekgxT1YtSTNaZlpSdzBaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYwOTUvOEM4OTlBNDJBQjU2MTFFNkIzMjlDNDg0QzRGOUFFMDIvOURDMDZCNkUz NkEyMTFFODkzQkYzMDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr//ADBAJn6cADBAKg7gwwDQQCAAIwBwMFACQBGoAwDQYJ KoZIhvcNAQELBQADggEBAGxT9pFhjh/6+z+/AaS2+FR1Ao3pSgc9vbFXuz7YAxd7 NTtVgQ1YOmRd7hSz+hPGiJo0E1SMxgsrTodOzODvHyR/JWSi2k5rUO/yagP+RGgX /a+VvBcoDxkgEuozJg3biuOTEJWSaL48mletzazDq1nAkU4ryVX4lda4vuxPvt7+ OGB7alWCkGGH5iBTCYe5OQkFJNQyvkHAQnfjXbLDdX2QnH4ezt9sBvvFZX11VqgN pn9I9a0mKEgt+H6LZFBBkqqQkyfia6Z5Snkir7lOQX5FxJhRdqwho2tTmD9mKDp+ vNc7nqdzqSqfllol3f9FkWzxNS/5u6l86uSe6TF02h0= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org