$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa File: EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa (raw, json) Hash identifier: kHSR6kC5DPUetZW7pUVrcpNm7yMeTjwlxtXCRtwapdI= Subject key identifier: CB:07:35:02:39:41:DA:4E:3C:BE:D2:CF:F6:A2:F2:92:A6:72:55:F9 Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Certificate serial: 18FE Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa Signing time: Sat 18 May 2024 17:25:07 +0000 ROA not before: Sat 18 May 2024 17:25:07 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 17808 IP address blocks: 121.73.16.0/22 maxlen: 22 121.73.28.0/22 maxlen: 22 218.101.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6398 (0x18fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Validity Not Before: May 18 17:25:07 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6648e472-42f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:97:c9:6d:79:59:64:96:ac:2f:9a:57:43: f8:a5:9b:80:5b:e2:16:ca:39:6a:9c:e5:03:c8:2a: b2:52:97:59:ff:ae:b6:20:24:40:fe:78:62:6a:c8: c5:a9:df:f3:3e:36:5b:5f:64:8b:f6:b5:ed:67:35: 18:61:2d:13:61:83:e0:c6:bb:04:d3:c4:3e:7a:45: 58:1b:3d:46:73:27:fc:d8:19:9d:4f:64:85:19:f3: 9d:f1:4a:b3:72:f4:07:b8:9c:c8:8f:65:6f:3c:2f: 6d:6f:84:61:0c:ec:fd:f8:33:1a:3d:44:0c:b8:ea: 7b:97:c9:08:61:ab:cc:9a:2d:93:04:c2:39:12:d4: c0:d9:4f:5c:3f:5d:6b:c6:db:d2:2e:ac:aa:4e:8c: 37:75:ee:de:3a:62:38:17:72:f6:4a:1e:7e:8c:44: b6:7f:a0:94:69:98:76:be:4d:f0:6d:70:6f:65:c1: 10:47:d4:84:b7:50:e2:c0:f5:07:30:d7:19:b9:5d: bf:1b:cf:05:84:eb:41:9e:c1:83:a3:cb:98:e1:1e: a2:d1:8d:0f:4c:cb:9f:34:bd:41:eb:2f:e6:bd:65: c8:0d:4c:38:6b:b8:e8:f7:29:a5:ef:5a:0c:e9:34: 47:8a:79:f8:1c:d2:1f:09:d7:a2:17:bc:bf:4c:af: fe:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:07:35:02:39:41:DA:4E:3C:BE:D2:CF:F6:A2:F2:92:A6:72:55:F9 X509v3 Authority Key Identifier: keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.73.16.0/22 121.73.28.0/22 218.101.16.0/20 Signature Algorithm: sha256WithRSAEncryption bd:b8:08:f2:38:54:c2:02:fe:7b:58:ca:7b:b3:60:83:af:e7: f4:9c:e7:81:29:e9:de:45:d3:0f:33:b0:f3:e6:7c:b7:83:8d: 58:3e:50:32:10:70:fb:c1:6d:ea:2b:51:1e:f7:74:b9:8d:19: ba:9e:ce:f6:9a:76:28:a0:a9:94:e3:25:90:63:b0:16:87:de: 5c:db:96:cb:03:27:5c:96:a4:43:b0:37:83:76:cc:2a:aa:5f: 26:cb:6d:43:3d:c6:f2:13:b6:8b:f0:50:32:08:37:fb:eb:9c: 32:06:d4:26:20:85:3a:ef:8a:6a:a0:ee:2d:ed:53:d0:ac:08: e6:41:b4:a7:f6:d6:29:38:95:aa:15:63:4e:9b:7b:76:b7:e7: 79:84:01:9b:87:01:38:22:c0:92:e2:12:82:03:a3:dc:fd:2e: 52:08:ef:8b:87:66:90:9c:cd:97:c7:80:7a:bb:08:bb:71:f5: e8:07:5b:0d:cc:b4:2a:ef:a7:fa:68:be:2e:56:f7:c2:54:9f: cb:94:cf:89:2d:10:05:8b:ff:03:d2:08:ce:c0:92:7c:0f:05: cf:7f:20:bb:0e:0c:e9:fa:7f:9c:f4:9c:b8:e2:a1:9b:9c:94: 8e:38:74:a9:72:11:81:61:a0:64:b1:99:8d:b7:dd:57:3c:67: 02:ff:f9:94 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICGP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2 RjhFRDkwMDUwHhcNMjQwNTE4MTcyNTA3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ4ZTQ3Mi00MmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqmXyW15WWSWrC+aV0P4pZuAW+IWyjlqnOUDyCqyUpdZ/662ICRA/nhiasjF qd/zPjZbX2SL9rXtZzUYYS0TYYPgxrsE08Q+ekVYGz1Gcyf82BmdT2SFGfOd8Uqz cvQHuJzIj2VvPC9tb4RhDOz9+DMaPUQMuOp7l8kIYavMmi2TBMI5EtTA2U9cP11r xtvSLqyqTow3de7eOmI4F3L2Sh5+jES2f6CUaZh2vk3wbXBvZcEQR9SEt1DiwPUH MNcZuV2/G88FhOtBnsGDo8uY4R6i0Y0PTMufNL1B6y/mvWXIDUw4a7jo9yml71oM 6TRHinn4HNIfCdeiF7y/TK/+8QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMsHNQI5 QdpOPL7Sz/ai8pKmclX5MB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBRDcvRjhCQUJBQ0E4Qjg5MTFFNzkwMTE1QzNGQzRGOUFFMDIvRUI2MUJGMzJG RENEMTFFRUIwRUFCQzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJ5SRADBAJ5SRwDBATaZRAwDQYJKoZIhvcNAQELBQADggEB AL24CPI4VMIC/ntYynuzYIOv5/Sc54Ep6d5F0w8zsPPmfLeDjVg+UDIQcPvBbeor UR73dLmNGbqezvaadiigqZTjJZBjsBaH3lzblssDJ1yWpEOwN4N2zCqqXybLbUM9 xvITtovwUDIIN/vrnDIG1CYghTrvimqg7i3tU9CsCOZBtKf21ik4laoVY06be3a3 53mEAZuHATgiwJLiEoIDo9z9LlII74uHZpCczZfHgHq7CLtx9egHWw3MtCrvp/po vi5W98JUn8uUz4ktEAWL/wPSCM7AknwPBc9/ILsODOn6f5z0nLjioZuclI44dKly EYFhoGSxmY233Vc8ZwL/+ZQ= -----END CERTIFICATE-----Generated at Fri May 31 20:34:02 2024 by rpki-client on console-ams.rpki-client.org