$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0259CB6ABE7911E990831772C4F9AE02.roa File: 0259CB6ABE7911E990831772C4F9AE02.roa (raw, json) Hash identifier: CX5nWUVPlduAdHlJM33jymeyweVTXx9Mmo0hVm1BJ3o= Subject key identifier: 2A:BF:70:F0:CE:43:2C:5B:33:29:7D:84:67:EF:B1:F1:4D:C8:4E:B6 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 336A Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0259CB6ABE7911E990831772C4F9AE02.roa Signing time: Tue 30 Jan 2024 16:12:58 +0000 ROA not before: Tue 30 Jan 2024 16:12:58 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 55674 IP address blocks: 101.203.168.0/22 maxlen: 24 2405:b40::/32 maxlen: 32 2405:b40::/48 maxlen: 48 2405:b40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 15:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13162 (0x336a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 30 16:12:58 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65b9200a-b6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:7a:4d:c6:a3:98:61:79:af:f3:81:69:ee: c9:ce:38:40:a8:cf:53:8d:5d:a0:39:5a:bb:44:a8: 4b:db:de:6c:3f:2f:aa:93:f4:8c:12:51:ee:27:9d: 4f:9b:14:b6:b7:c5:28:91:2c:eb:b8:04:b6:94:22: e2:40:36:4d:c6:72:90:c6:9c:9d:b9:48:db:b5:45: 08:3b:0f:eb:1e:98:d7:8a:9d:37:67:36:54:c0:c5: ef:1c:a7:b0:1b:9d:30:08:9d:98:3c:63:6e:87:a7: b8:42:2e:83:e3:db:46:6e:46:ba:c8:da:66:c1:ec: 15:47:46:3a:28:e4:f8:3c:54:a2:7d:7b:ae:2a:9a: 9b:29:41:ff:84:04:f2:7b:77:6d:19:3d:78:67:11: db:2c:14:e0:8f:73:c6:10:5b:59:88:e4:39:a9:f9: 9e:da:3c:ae:a9:75:f2:f8:44:83:81:fe:1b:b1:68: 2a:dd:e0:af:72:62:4f:13:d6:44:f7:42:ef:24:20: 26:50:c3:4f:c9:5c:37:f9:df:32:15:fe:8a:b4:33: 09:39:df:47:fa:a2:6a:23:bc:76:35:ed:47:d0:92: 04:e1:76:b9:1a:84:29:3e:9f:f1:35:39:4c:e7:7a: 3c:82:86:37:d0:4d:83:dc:4f:27:55:02:85:c2:45: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BF:70:F0:CE:43:2C:5B:33:29:7D:84:67:EF:B1:F1:4D:C8:4E:B6 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0259CB6ABE7911E990831772C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.203.168.0/22 IPv6: 2405:b40::/32 Signature Algorithm: sha256WithRSAEncryption c2:7a:14:00:a5:51:89:30:b8:58:7e:f5:8b:38:11:78:2c:8e: da:c8:fb:7d:b0:ba:aa:2d:53:3d:1c:77:59:44:be:b6:a2:e1: aa:5d:5d:da:f7:9a:c7:d1:97:60:2c:81:fa:03:1a:28:8e:d6: 83:65:51:4a:f4:2f:65:f5:fd:f5:2e:db:14:ee:70:1e:c1:7c: c6:22:4c:a7:0b:9f:0a:5e:e6:44:42:d9:a7:dc:81:0e:b7:3c: 6d:38:f4:a8:3a:00:c6:40:8a:38:9b:23:86:ab:34:0e:92:a1: d0:f4:da:48:e0:3d:58:cf:55:94:05:0e:eb:e3:fc:4b:a5:aa: ff:d9:5b:2c:5f:f6:5f:72:81:36:65:f4:90:ce:ea:25:f4:97: ce:10:6c:86:b0:4b:c0:55:29:c6:1d:bd:87:66:ff:91:b3:3e: bd:64:b2:5f:0b:01:a7:4e:57:95:47:ae:58:cc:e0:94:ff:d7: 3b:f6:9a:04:05:b3:56:7d:13:48:c5:91:54:20:ad:98:c4:b1: 47:90:56:17:64:ca:96:37:3e:e1:dc:d2:0d:bd:7a:50:29:e5: 34:2b:92:7f:c8:00:ff:2f:8b:a5:44:bf:9f:40:f0:43:7d:b5: 85:e7:68:4a:a3:53:16:aa:2d:7d:84:62:b1:86:10:50:a0:0d: f2:6c:f5:ca -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICM2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjQwMTMwMTYxMjU4WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5MjAwYS1iNmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Vh6TcajmGF5r/OBae7JzjhAqM9TjV2gOVq7RKhL295sPy+qk/SMElHuJ51P mxS2t8UokSzruAS2lCLiQDZNxnKQxpyduUjbtUUIOw/rHpjXip03ZzZUwMXvHKew G50wCJ2YPGNuh6e4Qi6D49tGbka6yNpmwewVR0Y6KOT4PFSifXuuKpqbKUH/hATy e3dtGT14ZxHbLBTgj3PGEFtZiOQ5qfme2jyuqXXy+ESDgf4bsWgq3eCvcmJPE9ZE 90LvJCAmUMNPyVw3+d8yFf6KtDMJOd9H+qJqI7x2Ne1H0JIE4Xa5GoQpPp/xNTlM 53o8goY30E2D3E8nVQKFwkXnSQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCq/cPDO QyxbMyl9hGfvsfFNyE62MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMDI1OUNCNkFC RTc5MTFFOTkwODMxNzcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJly6gwDQQCAAIwBwMFACQFC0AwDQYJKoZIhvcNAQELBQAD ggEBAMJ6FAClUYkwuFh+9Ys4EXgsjtrI+32wuqotUz0cd1lEvrai4apdXdr3msfR l2AsgfoDGiiO1oNlUUr0L2X1/fUu2xTucB7BfMYiTKcLnwpe5kRC2afcgQ63PG04 9Kg6AMZAijibI4arNA6SodD02kjgPVjPVZQFDuvj/Eulqv/ZWyxf9l9ygTZl9JDO 6iX0l84QbIawS8BVKcYdvYdm/5GzPr1ksl8LAadOV5VHrljM4JT/1zv2mgQFs1Z9 E0jFkVQgrZjEsUeQVhdkypY3PuHc0g29elAp5TQrkn/IAP8vi6VEv59A8EN9tYXn aEqjUxaqLX2EYrGGEFCgDfJs9co= -----END CERTIFICATE-----Generated at Wed Apr 24 16:35:47 2024 by rpki-client on console-fra.rpki-client.org