$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/11EC50B48B8F11EF8DE96E60C4F9AE02.roa File: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (raw, json) Hash identifier: dBzmelJqZJRJwarLr24Qo4vmuBT6QmKRJnEzxT0UO6A= Subject key identifier: 1D:DE:8C:DD:16:CB:21:AD:B1:34:FA:B3:3A:41:94:D3:8D:51:44:89 Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Certificate serial: 018E Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/11EC50B48B8F11EF8DE96E60C4F9AE02.roa Signing time: Wed 16 Oct 2024 07:20:07 +0000 ROA not before: Wed 16 Oct 2024 07:20:07 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 4658 IP address blocks: 202.81.224.0/19 maxlen: 24 2401:300::/35 maxlen: 35 2401:300:2000::/35 maxlen: 35 2401:300:4000::/35 maxlen: 35 2401:300:6000::/35 maxlen: 35 2401:300:8000::/35 maxlen: 35 2401:300:a000::/35 maxlen: 35 2401:300:c000::/35 maxlen: 35 2401:300:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Validity Not Before: Oct 16 07:20:07 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=670f6927-7646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:13:7a:40:19:02:bd:0a:29:99:45:c3:13:86: 05:19:1f:f4:3c:a1:f8:e3:ff:bb:7c:76:a5:cc:a3: 6a:71:72:6b:04:4a:c6:97:4c:05:2e:b4:e1:7a:b1: 2c:46:e3:b1:88:dd:32:3b:5f:26:7a:05:60:53:b9: 18:79:06:4e:f8:be:9f:d5:84:3c:db:d3:0c:ce:73: 85:ae:8d:1b:2a:ea:30:7c:a9:98:9a:20:c9:cb:f3: 17:cc:24:c8:41:33:cf:67:95:26:ef:f8:24:99:7e: 95:1b:7f:00:7d:6b:16:0f:eb:fc:5c:96:b4:cf:59: 8f:e3:38:c2:0c:7d:0d:f3:cd:15:2d:b0:37:3d:05: c0:35:78:d9:db:84:75:7b:c4:2a:5d:55:81:7a:28: c3:2c:36:6c:ad:d2:91:56:5b:8f:1c:d5:3b:48:30: 34:21:f1:36:77:dd:0e:08:e5:1c:43:3c:ba:ed:01: a4:be:b3:20:95:94:21:13:61:52:15:19:e3:0c:cb: 69:a6:05:ae:62:92:43:0b:34:45:b2:c3:fc:14:fe: a9:4f:e5:90:55:b0:d5:9a:3d:54:e2:35:16:68:0c: b4:c6:20:8f:a9:36:6d:33:6b:ac:48:0c:d1:8c:0c: fc:98:d3:29:61:9d:29:b1:a0:fe:73:ed:6f:c4:27: e6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DE:8C:DD:16:CB:21:AD:B1:34:FA:B3:3A:41:94:D3:8D:51:44:89 X509v3 Authority Key Identifier: keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/11EC50B48B8F11EF8DE96E60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.81.224.0/19 IPv6: 2401:300::/32 Signature Algorithm: sha256WithRSAEncryption 6e:93:55:1f:a8:30:98:e2:d6:92:06:2c:85:86:31:14:e4:b7: 91:6d:30:27:58:14:fb:58:3b:49:c6:57:c3:55:9f:8e:d7:cc: e9:3c:94:8a:d5:fe:ac:b4:14:27:00:fa:26:d1:b4:be:7a:c1: ed:cd:6b:03:9c:8d:51:c7:51:22:cf:93:3c:d7:8b:c8:2e:c2: 44:22:86:b2:f7:b8:7b:8d:56:3e:d9:a4:af:7e:86:0a:fb:9a: 20:25:be:cc:51:fe:c6:0e:f9:27:0d:09:e5:3d:6f:43:c8:f3: 89:53:18:a9:78:85:a4:4b:c4:a9:30:0c:45:d9:ed:3b:16:00: f6:59:ef:68:64:9c:7e:e5:d3:97:7a:69:ef:1f:b9:4e:d1:35: 91:84:98:1c:a9:21:da:4c:3d:8b:9d:45:78:9e:a9:4d:56:bd: 4c:c2:27:93:64:eb:8f:9d:ba:74:43:87:d2:7c:f5:19:c8:de: a7:ac:21:1d:d5:1f:46:dc:2f:41:db:d6:2e:81:2b:e5:fa:b0: f8:83:31:46:c9:6d:4c:01:24:da:7d:46:e8:16:aa:f1:1f:19: 0e:f6:53:ba:a5:6d:9d:38:bd:ca:d2:82:3a:02:27:06:b2:41: ee:8c:55:54:1f:be:c2:97:f8:61:46:22:61:5c:06:6e:2f:19: aa:44:53:68 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ2RkMxMTAvBgNVBAUTKEE4QkY1NEY2MDgxOTY3MjIxOTM1Q0IxN0NDMTNFQkZC ODQxQTYwQzIwHhcNMjQxMDE2MDcyMDA3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBmNjkyNy03NjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BN6QBkCvQopmUXDE4YFGR/0PKH44/+7fHalzKNqcXJrBErGl0wFLrTherEs RuOxiN0yO18megVgU7kYeQZO+L6f1YQ829MMznOFro0bKuowfKmYmiDJy/MXzCTI QTPPZ5Um7/gkmX6VG38AfWsWD+v8XJa0z1mP4zjCDH0N880VLbA3PQXANXjZ24R1 e8QqXVWBeijDLDZsrdKRVluPHNU7SDA0IfE2d90OCOUcQzy67QGkvrMglZQhE2FS FRnjDMtppgWuYpJDCzRFssP8FP6pT+WQVbDVmj1U4jUWaAy0xiCPqTZtM2usSAzR jAz8mNMpYZ0psaD+c+1vxCfmZQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFB3ejN0W yyGtsTT6szpBlNONUUSJMB8GA1UdIwQYMBaAFKi/VPYIGWciGTXLF8wT6/uEGmDC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDZGQy84ODc1OTE4MjQz MkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5SVpOY3NYekJQci00UWFZ TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FMOVU5Z2daWnlJWk5jc1h6QlByLTRRYVlNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEQ2RkMvODg3NTkxODI0MzJGMTFFREJCRDk4RjVDQzRGOUFFMDIvMTFFQzUwQjQ4 QjhGMTFFRjhERTk2RTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAXKUeAwDQQCAAIwBwMFACQBAwAwDQYJKoZIhvcNAQELBQAD ggEBAG6TVR+oMJji1pIGLIWGMRTkt5FtMCdYFPtYO0nGV8NVn47XzOk8lIrV/qy0 FCcA+ibRtL56we3NawOcjVHHUSLPkzzXi8guwkQihrL3uHuNVj7ZpK9+hgr7miAl vsxR/sYO+ScNCeU9b0PI84lTGKl4haRLxKkwDEXZ7TsWAPZZ72hknH7l05d6ae8f uU7RNZGEmBypIdpMPYudRXieqU1WvUzCJ5Nk64+dunRDh9J89RnI3qesIR3VH0bc L0Hb1i6BK+X6sPiDMUbJbUwBJNp9RugWqvEfGQ72U7qlbZ04vcrSgjoCJwayQe6M VVQfvsKX+GFGImFcBm4vGapEU2g= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org