$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa File: 29BE072046FF11EF9A76C461C4F9AE02.roa (raw, json) Hash identifier: fcDSO/sb2ishtHrFu2bzf2l9xwmLRSMg0lfcyJWjJ+k= Subject key identifier: 6B:69:B2:92:2F:74:E0:34:C6:29:70:06:54:21:05:3B:2C:58:8D:24 Certificate issuer: /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Certificate serial: 084A Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa Signing time: Mon 02 Sep 2024 21:29:56 +0000 ROA not before: Mon 02 Sep 2024 21:29:56 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139468 IP address blocks: 45.116.134.0/23 maxlen: 23 45.116.134.0/24 maxlen: 24 103.9.94.0/23 maxlen: 23 103.28.28.0/22 maxlen: 22 103.37.132.0/22 maxlen: 22 103.37.134.0/23 maxlen: 23 103.240.12.0/22 maxlen: 22 103.240.13.0/24 maxlen: 24 103.245.4.0/22 maxlen: 22 103.245.4.0/23 maxlen: 23 103.245.7.0/24 maxlen: 24 2405:9e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2122 (0x84a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Validity Not Before: Sep 2 21:29:56 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d62e54-1cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:2c:64:ac:78:5d:f4:bd:91:d8:3f:42:e1: be:b9:18:20:59:d2:a8:60:09:f8:c9:c4:1b:b0:d6: 93:12:5b:58:50:86:e6:cb:bd:56:b8:86:ec:8b:d1: bd:50:17:b6:74:9e:44:06:60:c3:f4:10:00:03:e9: 86:55:e8:17:41:9f:64:81:41:07:be:1b:21:ff:62: 22:99:f9:d3:81:d8:ef:0b:16:15:ba:4a:f6:67:08: 18:79:40:8a:e6:a6:20:24:9e:0e:1a:89:7d:52:08: f0:a2:a9:3d:9f:4e:7e:0e:a4:9e:43:ff:94:00:78: 12:9d:1a:1c:76:8c:7f:df:33:06:58:df:4c:03:d6: 9c:14:f3:02:5b:62:09:77:f4:f0:50:31:28:e8:68: 34:75:91:e3:a0:64:3c:d7:28:6b:3f:00:14:14:bc: 25:38:36:5d:d3:59:ac:a7:a2:64:93:f3:7b:6b:12: 80:a8:64:f5:d2:4b:b5:62:17:ff:4d:4b:e6:0d:de: 18:48:c9:9a:88:03:18:be:64:56:bf:e4:69:a7:86: b1:fe:21:5a:54:35:22:13:64:20:37:8e:3c:1b:f0: 7f:db:20:af:13:e6:08:93:65:e1:5a:f3:c0:62:48: 5f:f3:e4:16:2a:e5:9a:70:52:db:b5:33:3a:3e:a9: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:69:B2:92:2F:74:E0:34:C6:29:70:06:54:21:05:3B:2C:58:8D:24 X509v3 Authority Key Identifier: keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.116.134.0/23 103.9.94.0/23 103.28.28.0/22 103.37.132.0/22 103.240.12.0/22 103.245.4.0/22 IPv6: 2405:9e40::/32 Signature Algorithm: sha256WithRSAEncryption 44:47:3b:44:56:59:e7:4a:5b:d0:6c:48:2c:53:59:e5:c5:d4: c3:76:de:3b:82:45:50:7f:03:ec:d2:d1:9e:ce:dc:b6:5e:fb: 75:13:f9:d2:f0:00:62:29:fe:3e:e9:45:0f:46:b5:e8:89:27: c6:74:30:ce:e7:e0:15:7e:40:c4:c6:ae:88:af:9e:4e:a5:a4: 10:0d:19:3f:b9:e6:aa:f8:e0:2f:21:05:5b:93:a8:a9:88:82: 19:ea:f0:f3:b0:d2:17:4b:e9:ab:b4:5c:68:dd:3a:1a:8d:cd: b3:ab:7b:ec:ad:de:9a:51:8f:79:08:f3:42:68:72:c8:44:b0: de:81:2d:8f:f1:2d:66:0b:e5:b6:d5:cb:cf:9f:e9:65:f0:cc: c0:b5:fe:53:ea:36:1c:5e:90:90:38:e1:1d:57:c8:08:91:56: 74:21:76:c3:00:bd:fe:eb:29:73:b9:75:a6:ef:07:23:17:e4: 82:0a:41:d1:eb:ee:4b:b3:74:cd:c7:36:c2:a1:e1:3c:88:03: 15:61:89:ff:c6:7c:34:54:2b:25:ee:e1:28:6a:57:09:73:9d: c2:a0:eb:2e:f3:61:a5:e3:34:96:43:16:e3:24:c8:f3:d6:f4: 43:bf:d4:ad:49:8c:81:b7:e9:0e:0a:4c:29:11:9e:cf:2a:50: 9b:99:03:f5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICCEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDQjExMTAvBgNVBAUTKDA3MkNERjY1MUIzMTJDQUZCREIwNDlBMzM1NjlGRUE2 RUY2Qzk1MTcwHhcNMjQwOTAyMjEyOTU2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2MmU1NC0xY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSMsZKx4XfS9kdg/QuG+uRggWdKoYAn4ycQbsNaTEltYUIbmy71WuIbsi9G9 UBe2dJ5EBmDD9BAAA+mGVegXQZ9kgUEHvhsh/2IimfnTgdjvCxYVukr2ZwgYeUCK 5qYgJJ4OGol9Ugjwoqk9n05+DqSeQ/+UAHgSnRocdox/3zMGWN9MA9acFPMCW2IJ d/TwUDEo6Gg0dZHjoGQ81yhrPwAUFLwlODZd01msp6Jkk/N7axKAqGT10ku1Yhf/ TUvmDd4YSMmaiAMYvmRWv+Rpp4ax/iFaVDUiE2QgN448G/B/2yCvE+YIk2XhWvPA Ykhf8+QWKuWacFLbtTM6PqmT9wIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFGtpspIv dOA0xilwBlQhBTssWI0kMB8GA1UdIwQYMBaAFAcs32UbMSyvvbBJozVp/qbvbJUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNCMS9EMDBERDQ5OEJD MDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExLLTlzRW1qTlduLXB1OXNs UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J5emZaUnN4TEstOXNFbWpOV24tcHU5c2xSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJDQjEvRDAwREQ0OThCQzAyMTFFQUI4Qzc5MDQ4QzRGOUFFMDIvMjlCRTA3MjA0 NkZGMTFFRjlBNzZDNDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDBAEtdIYDBAFnCV4DBAJnHBwDBAJnJYQDBAJn8AwDBAJn9QQw DQQCAAIwBwMFACQFnkAwDQYJKoZIhvcNAQELBQADggEBAERHO0RWWedKW9BsSCxT WeXF1MN23juCRVB/A+zS0Z7O3LZe+3UT+dLwAGIp/j7pRQ9GteiJJ8Z0MM7n4BV+ QMTGroivnk6lpBANGT+55qr44C8hBVuTqKmIghnq8POw0hdL6au0XGjdOhqNzbOr e+yt3ppRj3kI80JocshEsN6BLY/xLWYL5bbVy8+f6WXwzMC1/lPqNhxekJA44R1X yAiRVnQhdsMAvf7rKXO5dabvByMX5IIKQdHr7kuzdM3HNsKh4TyIAxVhif/GfDRU KyXu4ShqVwlzncKg6y7zYaXjNJZDFuMkyPPW9EO/1K1JjIG36Q4KTCkRns8qUJuZ A/U= -----END CERTIFICATE-----Generated at Sat Apr 26 08:04:45 2025 by rpki-client