$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/59F5C224337811EAAD3FAA39C4F9AE02.roa File: 59F5C224337811EAAD3FAA39C4F9AE02.roa (raw, json) Hash identifier: Tm2jOTH45LNujDAccZpuNzL30sr0Ey2KDrxGTPi3VEo= Subject key identifier: 7B:D9:B5:41:EA:70:65:53:EB:52:3E:E4:63:1D:5E:B7:8A:B6:48:C2 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 335C Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/59F5C224337811EAAD3FAA39C4F9AE02.roa Signing time: Tue 30 Jan 2024 16:12:45 +0000 ROA not before: Tue 30 Jan 2024 16:12:45 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 24521 IP address blocks: 119.82.240.0/24 maxlen: 24 119.82.241.0/24 maxlen: 24 119.82.242.0/24 maxlen: 24 119.82.243.0/24 maxlen: 24 119.82.244.0/24 maxlen: 24 119.82.245.0/24 maxlen: 24 119.82.246.0/24 maxlen: 24 119.82.247.0/24 maxlen: 24 175.184.236.0/22 maxlen: 22 175.184.236.0/24 maxlen: 24 175.184.237.0/24 maxlen: 24 175.184.238.0/24 maxlen: 24 175.184.239.0/24 maxlen: 24 2403:ba00::/32 maxlen: 32 2403:ba00:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 15:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13148 (0x335c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 30 16:12:45 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65b91ffd-837a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:a3:9a:74:0f:cd:06:71:4d:2a:65:ce:b5: eb:16:aa:4e:e3:bf:7e:43:8f:03:7c:12:06:3f:fc: 63:4b:f0:1c:b0:d5:a7:26:b8:82:04:e9:1c:4a:01: 11:e9:fc:0b:61:fb:36:10:ec:ff:98:18:09:90:b3: 8f:bf:3b:5a:00:62:c0:69:79:a0:1c:51:13:e5:52: 4f:ef:1e:73:bd:1d:f3:a5:51:87:c5:93:e8:df:f0: bb:37:70:30:69:85:90:40:32:eb:eb:a7:00:f2:d4: 99:17:4c:7c:6b:fe:6a:ce:f8:b2:ca:2d:91:20:82: ed:0b:b1:04:86:23:43:43:e8:c4:34:67:c3:f1:e7: b5:a9:f5:09:00:97:3a:c1:c6:c0:14:4f:80:94:10: c3:03:fb:b9:65:32:17:59:1d:c7:b6:65:2b:7b:03: 2e:4f:45:d2:9f:d2:84:2a:77:75:00:61:c1:d5:75: 9f:35:eb:11:d0:92:58:a7:00:03:72:33:46:39:45: 48:f0:31:99:ba:62:e4:38:b7:a9:b8:b8:c1:09:63: 06:21:6b:1b:c7:85:57:d9:18:ab:90:cf:a1:89:6f: a4:88:b7:0e:0d:85:f3:c2:e3:e9:02:4b:87:a9:16: 50:59:01:ea:a3:01:c0:3f:9e:60:ad:19:1a:56:0b: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:B5:41:EA:70:65:53:EB:52:3E:E4:63:1D:5E:B7:8A:B6:48:C2 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/59F5C224337811EAAD3FAA39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.82.240.0/21 175.184.236.0/22 IPv6: 2403:ba00::/32 Signature Algorithm: sha256WithRSAEncryption bd:e0:ea:4d:2a:5d:d0:bb:ef:74:0d:95:07:16:df:12:ab:34: 34:94:4c:2d:47:43:b5:c9:93:33:53:90:a4:85:d3:7d:ff:d1: bb:b5:52:76:ac:12:8e:2c:94:dc:a8:6b:0f:6e:f2:5a:6b:30: 52:05:44:81:c8:c2:80:8f:96:b5:fd:40:2a:d0:2b:34:37:a8: d6:df:59:a0:c1:69:87:de:b3:78:83:9e:d2:47:f6:94:ed:b7: 2e:b2:b4:62:9b:94:57:13:dd:70:39:83:71:46:12:7f:39:dc: 9b:bf:47:3c:27:97:1b:6b:4d:30:6b:2a:0b:9c:cc:0c:71:fb: a9:a9:83:c6:6d:2f:83:80:57:d6:fc:6a:c0:f6:b2:6e:98:db: 42:25:56:76:a7:7a:cf:1d:82:d5:12:e6:bd:6e:81:9d:ec:92: 16:de:19:a8:0c:3b:35:f4:66:2e:9b:c5:ec:3e:3d:c9:52:2e: 93:21:5d:02:a0:22:1e:1f:f6:e6:b4:f8:a2:38:f2:11:35:4f: f5:de:d8:bd:4c:20:32:8c:68:04:7b:b4:e6:f6:1b:21:d3:34: 99:d4:d0:e5:25:5a:6d:c2:db:6c:4b:aa:b8:1f:ae:e0:62:63: 54:5c:cc:71:1f:4d:bb:e1:73:50:5a:d3:42:7c:e7:00:53:f5: 3a:2a:3c:c9 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICM1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjQwMTMwMTYxMjQ1WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5MWZmZC04MzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXajmnQPzQZxTSplzrXrFqpO479+Q48DfBIGP/xjS/AcsNWnJriCBOkcSgER 6fwLYfs2EOz/mBgJkLOPvztaAGLAaXmgHFET5VJP7x5zvR3zpVGHxZPo3/C7N3Aw aYWQQDLr66cA8tSZF0x8a/5qzviyyi2RIILtC7EEhiNDQ+jENGfD8ee1qfUJAJc6 wcbAFE+AlBDDA/u5ZTIXWR3HtmUrewMuT0XSn9KEKnd1AGHB1XWfNesR0JJYpwAD cjNGOUVI8DGZumLkOLepuLjBCWMGIWsbx4VX2RirkM+hiW+kiLcODYXzwuPpAkuH qRZQWQHqowHAP55grRkaVgszBwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHvZtUHq cGVT61I+5GMdXreKtkjCMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNTlGNUMyMjQz Mzc4MTFFQUFEM0ZBQTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAN3UvADBAKvuOwwDQQCAAIwBwMFACQDugAwDQYJKoZIhvcN AQELBQADggEBAL3g6k0qXdC773QNlQcW3xKrNDSUTC1HQ7XJkzNTkKSF033/0bu1 UnasEo4slNyoaw9u8lprMFIFRIHIwoCPlrX9QCrQKzQ3qNbfWaDBaYfes3iDntJH 9pTtty6ytGKblFcT3XA5g3FGEn853Ju/RzwnlxtrTTBrKguczAxx+6mpg8ZtL4OA V9b8asD2sm6Y20IlVnanes8dgtUS5r1ugZ3skhbeGagMOzX0Zi6bxew+PclSLpMh XQKgIh4f9ua0+KI48hE1T/Xe2L1MIDKMaAR7tOb2GyHTNJnU0OUlWm3C22xLqrgf ruBiY1RczHEfTbvhc1Ba00J85wBT9ToqPMk= -----END CERTIFICATE-----Generated at Wed Apr 24 18:36:02 2024 by rpki-client on console-ams.rpki-client.org