$ rpki-client -vvf rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/B2356D1A180911EB962CB216C4F9AE02.roa File: B2356D1A180911EB962CB216C4F9AE02.roa (raw, json) Hash identifier: Fp1TJ1Mbd3VWESMXXvk8el1Q1QgoDrJME4tHr7SUS8U= Subject key identifier: 11:D1:0A:1F:38:0C:22:E1:DC:D3:8E:C6:FE:E0:E5:CA:0C:91:BF:6D Certificate issuer: /CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221 Certificate serial: 06C1 Authority key identifier: 19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/B2356D1A180911EB962CB216C4F9AE02.roa Signing time: Wed 05 Jun 2024 00:12:19 +0000 ROA not before: Wed 05 Jun 2024 00:12:19 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 135423 IP address blocks: 45.250.156.0/22 maxlen: 22 45.250.156.0/24 maxlen: 24 45.250.157.0/24 maxlen: 24 45.250.158.0/24 maxlen: 24 45.250.159.0/24 maxlen: 24 103.219.68.0/22 maxlen: 22 103.219.68.0/24 maxlen: 24 103.219.69.0/24 maxlen: 24 103.219.70.0/24 maxlen: 24 103.219.71.0/24 maxlen: 24 2405:4d80::/32 maxlen: 37 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221 Validity Not Before: Jun 5 00:12:19 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=665fad63-759c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:9b:12:c9:95:db:3c:4e:6f:33:48:76:73: 52:9b:c8:65:b4:31:0f:02:b4:4b:43:2d:1f:26:c4: 58:a6:cf:37:f7:8d:45:7e:4c:9c:f7:86:9c:23:00: f2:63:d1:47:62:5f:86:93:96:dd:ed:b1:6f:87:86: 7d:3d:78:40:fb:4b:19:12:4b:68:2a:c4:2b:10:6c: 7e:d7:23:83:db:1d:89:52:c1:67:1b:59:e7:2a:a9: 81:e6:7d:43:cd:7a:94:5c:83:9e:1e:52:85:91:94: 52:ca:37:ec:8f:ce:d7:9e:6f:6f:be:ba:41:d2:63: 29:e7:fc:9f:da:92:2a:e2:9c:d9:d9:03:51:5c:41: 46:50:5f:35:9e:99:2f:86:92:94:c3:ad:f9:4e:67: 4e:5d:03:dc:21:6a:0c:41:e8:cd:01:4f:15:8b:2e: 5f:4c:32:b1:d3:d9:9e:3e:88:4a:9f:93:87:33:b0: e7:31:d9:3e:77:8a:27:a2:e4:cf:54:e2:30:d8:83: 66:ea:a0:86:6d:00:a1:e8:f1:4a:7b:13:b4:34:ab: 60:2d:81:fa:fb:22:75:0d:7f:39:a2:ec:b3:ef:b4: c7:9a:dc:cd:60:72:46:fe:f5:be:0a:c6:21:60:33: f9:e8:be:26:59:1d:19:a3:75:14:ea:14:f7:77:cd: cf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D1:0A:1F:38:0C:22:E1:DC:D3:8E:C6:FE:E0:E5:CA:0C:91:BF:6D X509v3 Authority Key Identifier: keyid:19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/B2356D1A180911EB962CB216C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.250.156.0/22 103.219.68.0/22 IPv6: 2405:4d80::/32 Signature Algorithm: sha256WithRSAEncryption 22:a0:5d:27:49:35:0b:22:1d:86:35:f0:1a:f8:89:f9:36:6c: f3:7d:5d:6d:df:94:ea:1f:99:55:d0:1e:d6:d7:6b:49:89:f6: da:cc:d0:a7:59:bd:09:b8:bc:d5:e7:ed:ba:1c:cd:75:a7:f5: ea:07:6c:33:53:af:e8:a1:9e:c4:9a:ef:54:f3:c3:03:c8:34: 01:a4:af:0f:df:b3:ef:5e:72:61:f9:56:40:81:9d:1b:cd:80: d9:b4:c8:04:e9:33:74:f9:ac:e9:26:fe:07:97:d7:de:e9:86: 62:07:bc:83:31:9e:8a:5a:e8:31:62:97:e0:22:56:a8:b8:5e: 44:ac:cc:6a:ea:a2:5a:99:8f:4d:c1:b5:84:30:2c:70:ea:a2: 9b:ac:f9:b4:8c:46:88:e4:61:ca:bf:72:7d:d1:10:2a:bf:ff: b9:72:49:76:84:38:35:f6:5b:16:f0:55:6f:a8:4b:ce:d7:14: 42:76:f9:cb:bf:8b:c0:95:6c:07:14:d2:da:7f:3a:1f:7e:e8: 97:65:0c:6c:26:38:97:31:bd:46:dc:b2:f0:9e:7d:e4:93:19: df:7a:a2:bb:34:de:94:8c:2a:ce:4e:fd:d2:eb:09:52:4d:00: e1:00:5d:c4:d9:f6:7f:8e:c2:22:c4:f5:68:a7:0b:d1:16:e2: d2:fc:1c:0c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0QxMTAvBgNVBAUTKDE5RUE1QjQ1RjAxRTgwQkUwQTc2RENEQUM5OTI2QjZF Njc0MkYyMjEwHhcNMjQwNjA1MDAxMjE5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVmYWQ2My03NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLKbEsmV2zxObzNIdnNSm8hltDEPArRLQy0fJsRYps83941Ffkyc94acIwDy Y9FHYl+Gk5bd7bFvh4Z9PXhA+0sZEktoKsQrEGx+1yOD2x2JUsFnG1nnKqmB5n1D zXqUXIOeHlKFkZRSyjfsj87Xnm9vvrpB0mMp5/yf2pIq4pzZ2QNRXEFGUF81npkv hpKUw635TmdOXQPcIWoMQejNAU8Viy5fTDKx09mePohKn5OHM7DnMdk+d4onouTP VOIw2INm6qCGbQCh6PFKexO0NKtgLYH6+yJ1DX85ouyz77THmtzNYHJG/vW+CsYh YDP56L4mWR0Zo3UU6hT3d83PoQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBHRCh84 DCLh3NOOxv7g5coMkb9tMB8GA1UdIwQYMBaAFBnqW0XwHoC+Cnbc2smSa25nQvIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RC8xOERDNTc0MjE4 MDgxMUVCQTg1NzMwMTJDNEY5QUUwMi9HZXBiUmZBZWdMNEtkdHpheVpKcmJtZEM4 aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dlcGJSZkFlZ0w0S2R0emF5WkpyYm1kQzhpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTYxN0QvMThEQzU3NDIxODA4MTFFQkE4NTczMDEyQzRGOUFFMDIvQjIzNTZEMUEx ODA5MTFFQjk2MkNCMjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIt+pwDBAJn20QwDQQCAAIwBwMFACQFTYAwDQYJKoZIhvcN AQELBQADggEBACKgXSdJNQsiHYY18Br4ifk2bPN9XW3flOofmVXQHtbXa0mJ9trM 0KdZvQm4vNXn7boczXWn9eoHbDNTr+ihnsSa71TzwwPINAGkrw/fs+9ecmH5VkCB nRvNgNm0yATpM3T5rOkm/geX197phmIHvIMxnopa6DFil+AiVqi4XkSszGrqolqZ j03BtYQwLHDqopus+bSMRojkYcq/cn3RECq//7lySXaEODX2WxbwVW+oS87XFEJ2 +cu/i8CVbAcU0tp/Oh9+6JdlDGwmOJcxvUbcsvCefeSTGd96ors03pSMKs5O/dLr CVJNAOEAXcTZ9n+OwiLE9WinC9EW4tL8HAw= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org