$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa File: 6ED5481209DF11EAA6052433C4F9AE02.roa (raw, json) Hash identifier: m+JE5pCglgWFiHYLAbZNmBupgcN+FxTJD3mSp1g3gfo= Subject key identifier: 1C:D5:0A:60:8A:71:89:C5:5F:F8:D6:73:3D:3E:C6:EB:DA:28:4D:00 Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Certificate serial: 0BB1 Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa Signing time: Tue 10 Sep 2024 19:57:34 +0000 ROA not before: Tue 10 Sep 2024 19:57:34 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 9441 IP address blocks: 43.224.116.0/22 maxlen: 24 43.225.148.0/24 maxlen: 24 43.225.149.0/24 maxlen: 24 43.225.150.0/24 maxlen: 24 43.225.151.0/24 maxlen: 24 45.124.168.0/22 maxlen: 24 103.4.144.0/22 maxlen: 24 103.230.60.0/22 maxlen: 24 103.245.204.0/22 maxlen: 24 103.250.68.0/24 maxlen: 24 103.250.69.0/24 maxlen: 24 103.250.70.0/24 maxlen: 24 103.250.71.0/24 maxlen: 24 2404:9900::/32 maxlen: 40 2404:9900:1::/48 maxlen: 48 2404:9900:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2993 (0xbb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Validity Not Before: Sep 10 19:57:34 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e0a4ae-d6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:32:52:f5:c1:2a:eb:91:57:8b:93:53:46:53: 6c:16:f8:f4:c7:e0:b9:a0:32:b9:18:a5:17:5b:c8: 6c:70:c1:32:05:a8:9a:53:5b:51:9e:49:66:60:28: 46:45:28:82:e0:89:8c:87:75:0f:51:83:de:fa:74: cd:60:02:20:a8:45:d0:46:9d:54:db:39:5e:df:fa: c4:6a:a2:dd:32:5c:14:32:e9:24:b8:8d:ae:9e:0f: 4b:61:76:ea:e6:5b:bd:08:5e:89:46:7a:5a:03:24: b0:a0:c4:b1:48:78:f8:db:ef:da:98:20:88:1f:f5: 21:c1:96:18:21:73:41:f0:54:a1:7e:ad:37:56:da: af:b4:7e:79:f8:df:1f:84:fe:55:39:cf:25:f1:2f: 84:67:c5:ce:03:f6:46:f9:06:f2:5f:d1:23:5e:ba: b0:ae:2d:ab:31:a0:5c:a8:be:23:29:de:5e:07:70: 98:f9:6f:f8:f9:13:1e:f4:9a:56:f2:8b:d1:31:43: df:c0:ed:dd:f3:98:90:2c:9d:17:be:22:44:b4:7e: ff:4b:63:39:9c:99:70:5b:38:7c:ff:83:f5:ce:aa: 42:02:f7:ac:bf:93:87:05:84:83:28:03:96:78:cf: 77:3e:11:1b:f6:9c:f6:6c:ac:e3:4a:e5:d8:81:f1: 63:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D5:0A:60:8A:71:89:C5:5F:F8:D6:73:3D:3E:C6:EB:DA:28:4D:00 X509v3 Authority Key Identifier: keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/6ED5481209DF11EAA6052433C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.116.0/22 43.225.148.0/22 45.124.168.0/22 103.4.144.0/22 103.230.60.0/22 103.245.204.0/22 103.250.68.0/22 IPv6: 2404:9900::/32 Signature Algorithm: sha256WithRSAEncryption 49:46:54:5b:f8:27:27:e6:7a:0d:e7:4f:13:1f:5a:6c:5d:31: 31:1a:af:01:1e:63:20:af:6d:36:da:be:bd:c8:b2:a7:98:71: 1e:31:95:11:6c:ac:04:9f:25:03:17:38:95:1f:6c:0f:64:22: 65:d3:f3:fd:e4:cc:5f:29:52:4d:ee:aa:12:3a:d7:be:36:76: b0:7f:ec:93:02:3a:36:47:43:7f:2e:83:44:8d:79:b3:b9:c1: 92:b1:86:55:b3:76:8f:6e:c1:7b:87:ba:6d:ea:44:a4:af:e5: 6d:f0:cd:b6:6f:c9:68:6a:d4:35:2d:f5:8b:66:2f:53:92:c6: 62:61:f7:ef:5e:49:fd:94:aa:cb:e6:40:cd:29:2e:99:cd:ff: 50:f5:62:4d:44:c4:0f:69:d0:c0:a3:af:5d:c3:8a:71:1b:f0: f6:36:94:04:bb:17:b2:d1:f0:75:af:2a:29:2c:1d:19:00:d5: 71:1d:70:04:0d:87:7f:e3:f1:be:9b:41:96:a8:7d:94:c9:17: ed:21:bf:2a:ac:06:c2:ba:dd:3a:03:fa:81:dd:b4:20:00:f4: 59:d8:58:93:40:0d:36:d7:56:98:da:d7:f1:6a:47:45:b7:64: d5:de:fc:3a:7b:52:81:c0:b3:be:63:00:9a:d9:41:18:b0:c4: 1b:24:1f:3a -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICC7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1RkIxMTAvBgNVBAUTKEIwN0EwQTQwMTlFOEI4MjAwMjEzQkYyRENDRkM2ODcw Rjg1RTA0NjYwHhcNMjQwOTEwMTk1NzM0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUwYTRhZS1kNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTJS9cEq65FXi5NTRlNsFvj0x+C5oDK5GKUXW8hscMEyBaiaU1tRnklmYChG RSiC4ImMh3UPUYPe+nTNYAIgqEXQRp1U2zle3/rEaqLdMlwUMukkuI2ung9LYXbq 5lu9CF6JRnpaAySwoMSxSHj42+/amCCIH/UhwZYYIXNB8FShfq03VtqvtH55+N8f hP5VOc8l8S+EZ8XOA/ZG+QbyX9EjXrqwri2rMaBcqL4jKd5eB3CY+W/4+RMe9JpW 8ovRMUPfwO3d85iQLJ0XviJEtH7/S2M5nJlwWzh8/4P1zqpCAvesv5OHBYSDKAOW eM93PhEb9pz2bKzjSuXYgfFjiQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFBzVCmCK cYnFX/jWcz0+xuvaKE0AMB8GA1UdIwQYMBaAFLB6CkAZ6LggAhO/Lcz8aHD4XgRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTVGQi9DMTU2REY4RTA5 REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VDQUNFNzh0elB4b2NQaGVC R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NIb0tRQm5vdUNBQ0U3OHR6UHhvY1BoZUJHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkU1RkIvQzE1NkRGOEUwOURFMTFFQTlFNEU3RDMyQzRGOUFFMDIvNkVENTQ4MTIw OURGMTFFQUE2MDUyNDMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMDAEAgABMCoDBAIr4HQDBAIr4ZQDBAItfKgDBAJnBJADBAJn5jwDBAJn9cwD BAJn+kQwDQQCAAIwBwMFACQEmQAwDQYJKoZIhvcNAQELBQADggEBAElGVFv4Jyfm eg3nTxMfWmxdMTEarwEeYyCvbTbavr3IsqeYcR4xlRFsrASfJQMXOJUfbA9kImXT 8/3kzF8pUk3uqhI61742drB/7JMCOjZHQ38ug0SNebO5wZKxhlWzdo9uwXuHum3q RKSv5W3wzbZvyWhq1DUt9YtmL1OSxmJh9+9eSf2UqsvmQM0pLpnN/1D1Yk1ExA9p 0MCjr13DinEb8PY2lAS7F7LR8HWvKiksHRkA1XEdcAQNh3/j8b6bQZaofZTJF+0h vyqsBsK63ToD+oHdtCAA9FnYWJNADTbXVpja1/FqR0W3ZNXe/Dp7UoHAs75jAJrZ QRiwxBskHzo= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org