$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/ADE3F5B635D611EB8466D634C4F9AE02.roa File: ADE3F5B635D611EB8466D634C4F9AE02.roa (raw, json) Hash identifier: 8U9EPbtMKIJ3PvMvZUbdIHhWDysnxRWcaHtBd734a+U= Subject key identifier: 1C:07:A2:83:F6:13:2E:8D:11:3F:8C:B8:BE:01:FE:3F:3B:D5:3E:87 Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Certificate serial: 06B4 Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/ADE3F5B635D611EB8466D634C4F9AE02.roa Signing time: Sat 28 Sep 2024 22:11:49 +0000 ROA not before: Sat 28 Sep 2024 22:11:49 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 53587 IP address blocks: 43.250.184.0/22 maxlen: 22 43.250.184.0/24 maxlen: 24 43.250.185.0/24 maxlen: 24 43.250.186.0/24 maxlen: 24 43.250.187.0/24 maxlen: 24 103.240.140.0/22 maxlen: 22 103.240.140.0/23 maxlen: 23 103.240.140.0/24 maxlen: 24 103.240.141.0/24 maxlen: 24 103.240.142.0/23 maxlen: 23 103.240.142.0/24 maxlen: 24 103.240.143.0/24 maxlen: 24 2401:a080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1716 (0x6b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Validity Not Before: Sep 28 22:11:49 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f87f25-2f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:7e:58:3c:b1:30:ab:e0:14:7b:84:43:95: 94:d5:4e:dc:ec:cc:f5:79:7c:5b:78:cd:b2:a3:46: 32:73:a5:69:cd:01:23:3b:d0:20:13:a6:1c:90:43: 88:a0:7f:04:67:88:60:9b:f6:32:1e:ea:25:72:48: bf:08:29:23:a0:7a:95:a4:39:d4:7a:2c:e1:9e:d8: e4:6b:0a:1c:3c:de:d4:d8:94:cc:95:c5:13:bc:58: 65:a2:39:57:22:0b:8d:af:1d:18:88:4a:70:2a:82: 0c:31:c7:4f:c6:69:1a:10:95:8d:6e:dd:fa:9f:80: 62:3a:39:c1:ed:99:33:16:50:a3:b9:b7:31:1e:c9: 8d:46:e5:ab:00:26:74:d9:12:14:8f:65:4b:94:30: 10:30:e0:f5:e3:a8:27:65:45:cd:74:73:e4:fa:5d: ba:a2:f4:26:27:52:39:82:9e:3b:e0:8f:57:99:3b: 6c:50:66:e8:0a:d4:9b:9e:df:ea:75:91:83:5b:ea: 57:e2:22:d1:61:24:16:17:61:d5:4d:22:2f:e5:97: ff:a5:0a:be:85:45:02:8c:76:0b:25:b5:d8:a0:66: 22:9e:db:88:b7:6f:8b:bd:9a:c2:b9:79:85:54:82: 35:7d:92:28:14:84:86:fb:ca:9a:07:96:55:51:e2: d1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:07:A2:83:F6:13:2E:8D:11:3F:8C:B8:BE:01:FE:3F:3B:D5:3E:87 X509v3 Authority Key Identifier: keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/ADE3F5B635D611EB8466D634C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.184.0/22 103.240.140.0/22 IPv6: 2401:a080::/32 Signature Algorithm: sha256WithRSAEncryption 6d:18:d0:93:46:31:ac:01:58:77:57:24:4f:4e:a6:d0:bf:23: 0a:b3:c1:24:39:5d:a1:df:1e:87:14:73:b1:b6:99:e1:89:0f: 9b:ae:5d:21:42:a6:cb:d3:3d:93:dc:a4:51:55:9f:78:93:32: 26:fe:56:ca:99:62:92:9d:e3:05:c0:0a:d0:7f:fd:6e:3f:fd: 73:c4:76:1a:29:54:bc:d4:b4:76:c2:d7:0c:62:b9:61:f3:c0: 8b:cb:6b:7a:99:24:22:bf:28:b9:1e:2f:7a:c6:90:e7:ea:b4: 05:ae:95:e6:1b:b7:57:10:d9:40:73:4b:b4:a0:82:20:6d:16: dd:01:ac:f9:a4:de:cc:e7:69:87:2c:3a:f1:1e:0d:c1:59:0f: f3:d1:2c:6b:2d:62:83:97:1c:84:5d:cd:80:93:5f:fa:4c:2d: 99:6d:fb:16:ee:1b:b4:f0:62:1c:16:fb:68:b6:d2:ad:45:dc: 07:29:32:1c:da:d5:8d:ce:3e:3d:45:dc:23:ec:a1:1c:45:f6: 70:41:c5:16:83:27:71:9b:ed:a6:c5:d3:67:a8:1d:de:73:7b: 84:0e:55:76:15:aa:18:ac:e2:7c:0a:97:bc:2d:b5:8e:2e:09: 2f:5d:cb:5a:b8:c2:55:92:fb:8c:ec:79:3a:56:65:8e:38:2b: 5b:c5:54:d5 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4RjMxMTAvBgNVBAUTKEYxNTlBQzA0QjVCODkzNzkwNUU2OUQxQkYyNUY0RDUz QjM1NDVDOTcwHhcNMjQwOTI4MjIxMTQ5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY4N2YyNS0yZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW5+WDyxMKvgFHuEQ5WU1U7c7Mz1eXxbeM2yo0Yyc6VpzQEjO9AgE6YckEOI oH8EZ4hgm/YyHuolcki/CCkjoHqVpDnUeizhntjkawocPN7U2JTMlcUTvFhlojlX IguNrx0YiEpwKoIMMcdPxmkaEJWNbt36n4BiOjnB7ZkzFlCjubcxHsmNRuWrACZ0 2RIUj2VLlDAQMOD146gnZUXNdHPk+l26ovQmJ1I5gp474I9XmTtsUGboCtSbnt/q dZGDW+pX4iLRYSQWF2HVTSIv5Zf/pQq+hUUCjHYLJbXYoGYintuIt2+LvZrCuXmF VII1fZIoFISG+8qaB5ZVUeLR6QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBwHooP2 Ey6NET+MuL4B/j871T6HMB8GA1UdIwQYMBaAFPFZrAS1uJN5BeadG/JfTVOzVFyX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhGMy9FOUQzMEM4MDM1 RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsza0Y1cDBiOGw5TlU3TlVY SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWbXNCTFc0azNrRjVwMGI4bDlOVTdOVVhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REM4RjMvRTlEMzBDODAzNUQ0MTFFQkJFMjc3RjMzQzRGOUFFMDIvQURFM0Y1QjYz NUQ2MTFFQjg0NjZENjM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr+rgDBAJn8IwwDQQCAAIwBwMFACQBoIAwDQYJKoZIhvcN AQELBQADggEBAG0Y0JNGMawBWHdXJE9OptC/IwqzwSQ5XaHfHocUc7G2meGJD5uu XSFCpsvTPZPcpFFVn3iTMib+VsqZYpKd4wXACtB//W4//XPEdhopVLzUtHbC1wxi uWHzwIvLa3qZJCK/KLkeL3rGkOfqtAWuleYbt1cQ2UBzS7SggiBtFt0BrPmk3szn aYcsOvEeDcFZD/PRLGstYoOXHIRdzYCTX/pMLZlt+xbuG7TwYhwW+2i20q1F3Acp Mhza1Y3OPj1F3CPsoRxF9nBBxRaDJ3Gb7abF02eoHd5ze4QOVXYVqhis4nwKl7wt tY4uCS9dy1q4wlWS+4zseTpWZY44K1vFVNU= -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:01 2024 by rpki-client on console-ams.rpki-client.org