$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3E640EE917811ED904ACF83C4F9AE02.roa File: C3E640EE917811ED904ACF83C4F9AE02.roa (raw, json) Hash identifier: U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0= Subject key identifier: 59:D2:C8:A6:ED:81:03:DC:DF:2B:62:E6:CA:76:9E:2E:5A:10:B5:E9 Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 0196 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3E640EE917811ED904ACF83C4F9AE02.roa Signing time: Fri 13 Dec 2024 02:36:15 +0000 ROA not before: Fri 13 Dec 2024 02:36:15 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 133321 IP address blocks: 203.214.197.0/24 maxlen: 24 203.214.198.0/24 maxlen: 24 203.214.199.0/24 maxlen: 24 2404:c400:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6 Validity Not Before: Dec 13 02:36:15 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=675b9d9f-e55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:51:b2:d9:3f:72:fd:2c:8e:00:16:95:f9:bc: 36:96:e2:f8:d7:cf:d9:6f:60:2b:52:38:c7:6a:0f: 6c:ab:b7:4e:35:f1:9f:d8:68:90:cd:b1:5c:ed:04: 51:4a:1c:c6:86:1f:5f:8d:c3:ad:be:8f:82:88:0b: 03:9b:1c:bd:d6:4a:cd:5a:37:a8:ce:57:7f:3c:ed: 39:54:87:0c:be:5e:4f:98:32:27:94:93:5e:d6:51: fd:77:f0:f7:ef:0e:3f:cb:37:ce:0b:b7:9b:8e:f0: 47:fe:33:56:a3:0c:77:9b:f7:ae:be:49:08:22:c8: 87:5c:c0:6c:7a:55:8b:73:3f:1b:4e:13:fb:6e:9d: 3f:f8:97:b0:51:72:c1:ce:6f:82:74:0f:9d:b0:66: 54:fd:79:d6:82:9d:dd:5c:3b:c9:4d:95:41:ef:37: 06:b1:fd:27:d3:7a:66:d4:b8:d0:61:db:5a:54:f3: 24:58:21:e8:f7:11:29:49:c7:bf:c4:dd:fc:ce:eb: fd:5e:2d:cb:c2:a4:be:f9:79:d8:67:1a:f3:f7:d7: be:4d:f1:86:1d:a8:2c:e4:c3:1e:c9:d4:03:46:35: 85:1e:c0:6d:f2:bc:58:75:d2:fa:b5:69:f0:f5:5a: 0a:b7:ad:5a:a4:28:35:f5:79:35:4d:73:93:19:33: 42:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D2:C8:A6:ED:81:03:DC:DF:2B:62:E6:CA:76:9E:2E:5A:10:B5:E9 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3E640EE917811ED904ACF83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.214.197.0-203.214.199.255 IPv6: 2404:c400:9000::/36 Signature Algorithm: sha256WithRSAEncryption 93:f2:69:08:eb:0a:c1:1d:1a:9e:26:64:4f:ed:10:b5:60:59: fc:25:f0:38:2f:2c:44:89:9a:3b:67:9b:48:ed:b6:f7:65:e7: c7:ad:0e:2b:a5:35:35:c7:0b:e5:21:4d:ac:1e:86:58:c6:87: 6f:05:65:a3:83:f4:0b:1f:eb:e8:80:a6:39:89:4c:ee:93:28: c5:35:e3:a5:14:f2:d7:c7:89:fc:7b:48:d3:a0:82:21:11:09: 37:ff:45:1c:51:94:45:ee:95:9c:26:ea:70:b7:69:e1:70:91: 2c:a2:25:61:09:b0:fc:21:51:26:83:e6:a0:6b:48:60:ca:9d: f3:2c:9c:e9:2f:6c:90:0a:97:86:ef:8f:38:c7:47:1a:21:d8: 95:0e:07:6e:f4:0e:cd:f1:19:7c:ff:40:1a:f4:58:24:3c:52: b4:a9:8e:1f:43:a6:82:be:81:d2:f6:66:f3:c5:78:b4:36:ac: 9f:00:1e:56:d8:6e:99:6a:a6:aa:cb:e2:4d:1c:04:0e:6e:f6: 37:6e:2b:8d:21:91:f7:87:bf:f9:39:4b:6d:1a:fb:23:b4:34: bb:21:46:8f:16:5c:31:29:90:4e:af:bd:6e:e3:42:16:4d:b2: d0:b0:24:06:0f:8c:e7:a5:16:0a:40:6c:8f:b1:fc:90:94:f6: b7:6a:3d:bd -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjQxMjEzMDIzNjE1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzViOWQ5Zi1lNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11Gy2T9y/SyOABaV+bw2luL418/Zb2ArUjjHag9sq7dONfGf2GiQzbFc7QRR ShzGhh9fjcOtvo+CiAsDmxy91krNWjeozld/PO05VIcMvl5PmDInlJNe1lH9d/D3 7w4/yzfOC7ebjvBH/jNWowx3m/euvkkIIsiHXMBselWLcz8bThP7bp0/+JewUXLB zm+CdA+dsGZU/XnWgp3dXDvJTZVB7zcGsf0n03pm1LjQYdtaVPMkWCHo9xEpSce/ xN38zuv9Xi3LwqS++XnYZxrz99e+TfGGHags5MMeydQDRjWFHsBt8rxYddL6tWnw 9VoKt61apCg19Xk1TXOTGTNC/wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFnSyKbt gQPc3yti5sp2ni5aELXpMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU5QjYvNzkxOENCMEM3RkY1MTFFRDlFRDQ2NDFEQzRGOUFFMDIvQzNFNjQwRUU5 MTc4MTFFRDkwNEFDRjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMBQEAgABMA4wDAMEAMvWxQMEA8vWwDAOBAIAAjAIAwYEJATEAJAwDQYJKoZI hvcNAQELBQADggEBAJPyaQjrCsEdGp4mZE/tELVgWfwl8DgvLESJmjtnm0jttvdl 58etDiulNTXHC+UhTawehljGh28FZaOD9Asf6+iApjmJTO6TKMU146UU8tfHifx7 SNOggiERCTf/RRxRlEXulZwm6nC3aeFwkSyiJWEJsPwhUSaD5qBrSGDKnfMsnOkv bJAKl4bvjzjHRxoh2JUOB270Ds3xGXz/QBr0WCQ8UrSpjh9DpoK+gdL2ZvPFeLQ2 rJ8AHlbYbplqpqrL4k0cBA5u9jduK40hkfeHv/k5S20a+yO0NLshRo8WXDEpkE6v vW7jQhZNstCwJAYPjOelFgpAbI+x/JCU9rdqPb0= -----END CERTIFICATE-----Generated at Sat Apr 5 07:43:56 2025 by rpki-client