$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa File: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (raw, json) Hash identifier: VJmNEduqkZiEGi1xGAFyFFiL246WcTWspaksMGhusvM= Subject key identifier: C9:B2:A9:1F:11:EA:3F:67:3F:CF:E7:F8:C1:AE:14:2B:7E:1D:75:C9 Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Certificate serial: 0205 Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa Signing time: Thu 11 Jul 2024 03:35:08 +0000 ROA not before: Thu 11 Jul 2024 03:35:08 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 137831 IP address blocks: 143.92.64.0/19 maxlen: 19 143.92.71.0/24 maxlen: 24 143.92.92.0/24 maxlen: 24 143.92.93.0/24 maxlen: 24 143.92.96.0/24 maxlen: 24 143.92.97.0/24 maxlen: 24 143.92.98.0/24 maxlen: 24 143.92.100.0/23 maxlen: 23 143.92.108.0/23 maxlen: 23 143.92.108.0/24 maxlen: 24 147.136.132.0/24 maxlen: 24 147.136.134.0/24 maxlen: 24 147.136.135.0/24 maxlen: 24 147.136.184.0/22 maxlen: 22 147.136.184.0/24 maxlen: 24 147.136.185.0/24 maxlen: 24 147.136.186.0/24 maxlen: 24 147.136.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 01:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Validity Not Before: Jul 11 03:35:08 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=668f52eb-405b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:46:d9:f2:31:dc:9d:ed:56:ac:53:08:a0:f3: ad:57:7e:1f:9f:83:15:7f:1f:1d:03:de:cb:7f:95: c3:20:35:60:ce:a4:c1:60:dd:93:f1:b8:ea:08:65: 35:26:70:98:5b:0c:1c:dc:e5:1e:22:13:88:73:bd: 7c:44:a3:59:48:d9:cd:0d:f8:30:4d:f4:e8:d4:37: 1f:a4:ab:d4:2c:63:11:9a:84:a9:7a:8a:47:e3:9c: 7e:f2:11:94:07:a5:f8:b2:d7:f6:e3:00:c3:5e:5c: 64:18:ae:d1:c6:51:e2:bb:35:b2:cc:af:10:a4:79: 56:ab:70:6c:15:b6:56:3a:5a:bf:84:4a:b9:24:3d: ed:65:c5:3c:48:9f:c0:6d:45:b0:0c:1d:b9:34:59: 88:2d:3e:7c:e2:98:a2:29:dd:a5:47:01:fc:81:5b: e2:09:d0:b8:bb:70:92:ee:c7:ee:09:2c:14:38:9a: c2:24:12:99:64:d3:05:7e:c6:18:2f:e9:b5:58:b1: 87:7a:c1:f8:65:48:8e:8e:15:39:73:62:9b:5a:bd: e6:bc:5b:12:59:72:4f:66:46:45:d8:ef:6a:af:2e: 7d:b2:d2:5e:c2:1a:bc:bf:a2:24:21:1d:2e:35:be: 80:c5:f9:33:87:6c:3c:b9:c6:8b:03:7e:10:70:69: fc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B2:A9:1F:11:EA:3F:67:3F:CF:E7:F8:C1:AE:14:2B:7E:1D:75:C9 X509v3 Authority Key Identifier: keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.92.64.0-143.92.98.255 143.92.100.0/23 143.92.108.0/23 147.136.132.0/24 147.136.134.0/23 147.136.184.0/22 Signature Algorithm: sha256WithRSAEncryption 83:ff:c6:4d:31:8d:6c:5e:b0:dc:8e:c2:36:da:c8:e0:7e:f0: 84:a5:ac:64:df:63:9f:a5:6c:b6:4e:07:39:7b:28:bd:9e:f5: 84:f5:be:e6:eb:bc:93:78:b3:65:af:40:65:42:cb:70:50:a9: 9f:c9:28:3b:1c:1b:d9:80:c6:2e:75:b6:4a:13:5e:6a:fe:50: 3b:97:d3:91:91:d7:d5:8c:0d:9a:74:79:42:e4:ce:ba:c0:5d: 08:a6:85:d0:6d:2a:fa:99:e4:21:8a:50:a0:f3:f3:99:fe:54: 82:b1:20:69:2b:a5:73:35:56:c0:aa:87:e2:ab:63:51:2d:16: 9f:55:fb:fe:85:ce:a9:5b:f4:a1:29:bb:ff:08:7d:14:65:10: 55:ab:27:ee:20:4d:04:9d:bc:06:2c:b7:23:ad:c3:a7:87:a2: 5a:f3:1b:88:7f:d0:aa:f8:28:13:aa:05:64:ae:53:d7:38:cb: ed:02:50:91:dc:ed:ad:07:11:16:c1:a3:4c:22:e0:0e:3f:ec: ae:78:54:6f:7e:7f:7e:5e:7e:a0:e0:f4:9a:70:0d:b7:09:8c: 35:9a:65:b5:9f:c9:ab:a1:57:04:cb:80:a8:15:84:71:fa:e9: 95:57:6f:81:8c:63:68:6d:6e:bd:10:2a:47:40:ed:98:ba:5a: ee:c0:6b:bf -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw MjM4MzZCQTAwHhcNMjQwNzExMDMzNTA4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjhmNTJlYi00MDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEbZ8jHcne1WrFMIoPOtV34fn4MVfx8dA97Lf5XDIDVgzqTBYN2T8bjqCGU1 JnCYWwwc3OUeIhOIc718RKNZSNnNDfgwTfTo1DcfpKvULGMRmoSpeopH45x+8hGU B6X4stf24wDDXlxkGK7RxlHiuzWyzK8QpHlWq3BsFbZWOlq/hEq5JD3tZcU8SJ/A bUWwDB25NFmILT584piiKd2lRwH8gVviCdC4u3CS7sfuCSwUOJrCJBKZZNMFfsYY L+m1WLGHesH4ZUiOjhU5c2KbWr3mvFsSWXJPZkZF2O9qry59stJewhq8v6IkIR0u Nb6Axfkzh2w8ucaLA34QcGn8EwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFMmyqR8R 6j9nP8/n+MGuFCt+HXXJMB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM5OTgvMzBDQzA4NEEwOERDMTFFREJFREU2MTJCQzRGOUFFMDIvMUVBNTk4NEEw QkUxMTFFRDlFM0FBMTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwwDAMEBo9cQAMEAI9cYgMEAY9cZAMEAY9cbAMEAJOIhAMEAZOI hgMEApOIuDANBgkqhkiG9w0BAQsFAAOCAQEAg//GTTGNbF6w3I7CNtrI4H7whKWs ZN9jn6Vstk4HOXsovZ71hPW+5uu8k3izZa9AZULLcFCpn8koOxwb2YDGLnW2ShNe av5QO5fTkZHX1YwNmnR5QuTOusBdCKaF0G0q+pnkIYpQoPPzmf5UgrEgaSulczVW wKqH4qtjUS0Wn1X7/oXOqVv0oSm7/wh9FGUQVasn7iBNBJ28Biy3I63Dp4eiWvMb iH/QqvgoE6oFZK5T1zjL7QJQkdztrQcRFsGjTCLgDj/srnhUb35/fl5+oOD0mnAN twmMNZpltZ/Jq6FXBMuAqBWEcfrplVdvgYxjaG1uvRAqR0DtmLpa7sBrvw== -----END CERTIFICATE-----Generated at Thu Sep 19 05:04:03 2024 by rpki-client on console-ams.rpki-client.org