$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa File: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (raw, json) Hash identifier: 83uKV8NOL2BY9kc7wJyQMfTaq8IDhnRH5V2vY6Igkd8= Subject key identifier: 11:95:98:19:E6:F5:91:A0:92:5B:86:7B:A0:A8:64:7E:1D:93:F3:3F Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 067D Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa Signing time: Tue 26 Sep 2023 22:20:18 +0000 ROA not before: Tue 26 Sep 2023 22:20:18 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 134518 IP address blocks: 43.246.132.0/22 maxlen: 22 43.246.132.0/23 maxlen: 23 43.246.134.0/23 maxlen: 23 103.194.236.0/22 maxlen: 22 2402:c680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 23:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Sep 26 22:20:18 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65135922-fed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:c3:a5:ce:ff:ec:2f:8a:8f:1a:3b:1c:ea: 3a:58:db:c3:df:3c:8f:9c:73:d7:1c:81:ab:ee:f2: 5d:a8:94:0f:49:ff:08:ba:4f:d3:21:e4:45:f4:f4: f9:49:fa:c8:52:a3:5b:d7:2c:9f:6f:30:4c:a2:a8: 2c:2f:8d:8d:2a:67:d5:43:32:00:72:7e:bc:d7:af: a3:9c:3e:fd:56:bb:38:12:d9:43:36:24:24:95:65: ed:3f:71:1e:0a:9c:4c:ab:ff:cf:43:cc:83:11:d8: b4:01:67:94:4b:9c:15:1b:c5:53:18:4c:03:d2:d4: 82:3f:7e:8c:66:e1:83:2e:f8:88:7b:f3:f4:61:d3: 87:36:4c:77:73:4a:1e:ac:8a:4c:b6:27:88:ae:56: c9:24:b9:33:cc:74:b2:a3:90:0e:3e:3d:53:61:d8: c2:91:25:b3:f3:10:da:dc:52:9b:ba:86:be:cb:d8: d4:7d:18:4a:95:67:5a:29:a2:77:db:09:04:1c:5e: 71:62:cd:28:b4:04:55:ac:7a:42:5a:cb:e7:33:93: 96:24:ee:82:2c:6a:be:1a:32:fb:44:b5:52:ec:c2: 14:cc:97:6b:ec:80:e8:dc:47:81:b9:0e:b1:30:5e: 50:04:b1:5f:97:e2:6c:b6:46:5b:2b:7e:24:c9:3b: 63:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:95:98:19:E6:F5:91:A0:92:5B:86:7B:A0:A8:64:7E:1D:93:F3:3F X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.132.0/22 103.194.236.0/22 IPv6: 2402:c680::/32 Signature Algorithm: sha256WithRSAEncryption 65:6a:67:c4:ba:d1:63:2a:f6:42:18:07:10:e2:9d:21:1a:e1: 0a:cd:ee:4f:54:7a:1a:a1:d5:f7:88:14:e7:6e:96:3c:38:74: 2d:3a:db:10:b6:8d:c4:99:6e:ac:7e:12:82:10:dd:e5:f1:2e: 95:ea:82:10:20:1a:7c:6c:aa:fb:24:0a:12:12:5c:d4:8c:89: fe:05:4c:88:7e:0e:62:63:df:2e:93:63:6f:f3:45:9c:5a:15: 20:4b:c9:2d:9c:fc:9d:a7:b8:ef:87:ef:56:3d:ca:39:09:75: 46:80:1f:05:e9:1e:73:49:94:d1:a2:41:23:03:35:6e:c6:fd: 97:52:db:1f:84:bb:10:e9:9f:f8:2d:09:aa:d4:97:d4:30:67: 27:79:7c:65:2d:7f:eb:a2:9d:13:f1:1a:d3:8f:aa:7f:6f:1a: 2d:ac:94:0f:28:89:ee:b0:20:a9:e4:b1:80:b9:20:d1:91:97: b5:34:4a:65:d3:d5:58:63:eb:bb:43:55:69:0e:08:e7:f3:f2: 27:a9:d8:9b:5f:d2:54:db:b6:59:f6:52:48:49:5e:c8:8d:8b: f9:5d:64:8d:a1:65:70:55:d4:9e:a6:27:5a:15:e1:26:3a:0d: 7f:4f:62:20:03:01:79:39:e9:12:95:e2:01:46:cd:9c:ad:3b: 09:be:6c:f9 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjMwOTI2MjIyMDE4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEzNTkyMi1mZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUPDpc7/7C+Kjxo7HOo6WNvD3zyPnHPXHIGr7vJdqJQPSf8Iuk/TIeRF9PT5 SfrIUqNb1yyfbzBMoqgsL42NKmfVQzIAcn6816+jnD79Vrs4EtlDNiQklWXtP3Ee CpxMq//PQ8yDEdi0AWeUS5wVG8VTGEwD0tSCP36MZuGDLviIe/P0YdOHNkx3c0oe rIpMtieIrlbJJLkzzHSyo5AOPj1TYdjCkSWz8xDa3FKbuoa+y9jUfRhKlWdaKaJ3 2wkEHF5xYs0otARVrHpCWsvnM5OWJO6CLGq+GjL7RLVS7MIUzJdr7IDo3EeBuQ6x MF5QBLFfl+JstkZbK34kyTtjoQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBGVmBnm 9ZGgkluGe6CoZH4dk/M/MB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTgxNjYvMjhDMUQwMjJGRDg5MTFFQTk0NjNCNjM1QzRGOUFFMDIvNkFGOEY4MjJG REFCMTFFQUFBQjFGQjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr9oQDBAJnwuwwDQQCAAIwBwMFACQCxoAwDQYJKoZIhvcN AQELBQADggEBAGVqZ8S60WMq9kIYBxDinSEa4QrN7k9Uehqh1feIFOduljw4dC06 2xC2jcSZbqx+EoIQ3eXxLpXqghAgGnxsqvskChISXNSMif4FTIh+DmJj3y6TY2/z RZxaFSBLyS2c/J2nuO+H71Y9yjkJdUaAHwXpHnNJlNGiQSMDNW7G/ZdS2x+EuxDp n/gtCarUl9QwZyd5fGUtf+uinRPxGtOPqn9vGi2slA8oie6wIKnksYC5INGRl7U0 SmXT1Vhj67tDVWkOCOfz8iep2Jtf0lTbtln2UkhJXsiNi/ldZI2hZXBV1J6mJ1oV 4SY6DX9PYiADAXk56RKV4gFGzZytOwm+bPk= -----END CERTIFICATE-----Generated at Fri Jun 7 00:09:13 2024 by rpki-client on console-fra.rpki-client.org