$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5A87E8B01A7E11EAB32DB717C4F9AE02.roa File: 5A87E8B01A7E11EAB32DB717C4F9AE02.roa (raw, json) Hash identifier: CWvmbk/VkQ6hOcMTKVG0hE3sCjOTKuja0uQ3zo8RRtk= Subject key identifier: 93:CF:FF:1D:7A:90:B7:53:7C:A5:81:6E:61:75:12:21:18:CF:10:E1 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3359 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5A87E8B01A7E11EAB32DB717C4F9AE02.roa Signing time: Tue 30 Jan 2024 16:12:42 +0000 ROA not before: Tue 30 Jan 2024 16:12:42 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 24206 IP address blocks: 110.44.168.0/22 maxlen: 22 110.44.168.0/23 maxlen: 23 110.44.168.0/24 maxlen: 24 110.44.169.0/24 maxlen: 24 110.44.170.0/23 maxlen: 23 110.44.170.0/24 maxlen: 24 110.44.171.0/24 maxlen: 24 110.44.173.0/24 maxlen: 24 110.44.174.0/24 maxlen: 24 203.84.136.0/21 maxlen: 21 203.84.136.0/22 maxlen: 22 203.84.136.0/23 maxlen: 23 203.84.136.0/24 maxlen: 24 203.84.137.0/24 maxlen: 24 203.84.138.0/23 maxlen: 23 203.84.138.0/24 maxlen: 24 203.84.139.0/24 maxlen: 24 203.84.140.0/22 maxlen: 22 203.84.140.0/23 maxlen: 23 203.84.140.0/24 maxlen: 24 203.84.141.0/24 maxlen: 24 203.84.142.0/23 maxlen: 23 203.84.142.0/24 maxlen: 24 203.84.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13145 (0x3359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 30 16:12:42 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65b91ffa-dc6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:bb:ef:d6:d0:6b:4e:0f:6f:7c:f1:c9:d2: 02:a1:0e:85:30:2f:2c:bc:9f:e7:59:7b:e4:6d:6a: ae:1b:09:27:9f:3e:ee:db:a6:57:62:99:fa:9a:1e: ec:23:2a:95:88:7d:cd:24:13:09:68:29:7e:49:52: 15:af:dd:e9:20:4f:9b:a4:d2:ae:14:c1:17:d0:fc: 58:09:fe:19:58:61:dc:38:68:3b:07:d1:8b:7b:35: 1a:44:be:22:72:e5:03:89:94:72:88:49:a6:36:fb: 6e:7e:5e:3c:dc:e6:79:5b:f6:d0:5c:a7:50:33:85: 07:3b:0b:b1:a4:23:27:df:77:35:ec:4e:9c:0c:69: 63:8a:09:00:7d:e5:8e:e9:ad:63:e6:d6:4f:dd:d0: 68:34:47:33:d6:c4:43:00:ab:73:59:d0:f5:2f:f5: 0a:58:f7:20:ab:03:9b:24:02:19:48:d3:bf:4d:f8: 74:c9:06:b9:c3:c5:0a:76:db:38:21:bb:97:33:5e: 49:86:3b:96:80:2c:08:48:19:2e:8f:44:cf:d0:aa: 09:df:d9:b0:c7:ce:6f:fa:55:9c:3e:51:eb:2d:ee: ed:f6:66:c8:d6:09:e9:43:cb:06:2c:ae:15:89:33: 59:25:75:e1:e5:56:f1:af:c1:1e:3f:28:aa:d2:00: 49:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CF:FF:1D:7A:90:B7:53:7C:A5:81:6E:61:75:12:21:18:CF:10:E1 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5A87E8B01A7E11EAB32DB717C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.44.168.0/22 110.44.173.0-110.44.174.255 203.84.136.0/21 Signature Algorithm: sha256WithRSAEncryption 9f:94:48:9c:eb:a0:f8:af:17:d9:0f:77:42:0d:44:4d:b7:95: c8:8e:ad:5e:5f:3f:81:48:3c:db:bc:a5:bd:fb:60:0d:cd:1e: c7:21:55:91:e3:96:9d:74:a8:85:2b:8f:d9:e5:be:fc:7b:0c: 74:04:43:3e:c3:ba:a8:57:a5:e1:79:ac:91:59:37:58:08:5d: f2:07:6b:32:cd:59:1a:c2:20:b3:1e:c9:e7:cc:6f:fa:dd:6a: bd:7a:d4:2d:0f:69:da:51:99:6e:3d:b1:54:47:45:01:b0:ca: 3a:6f:d8:cc:c4:89:57:a8:a2:91:93:e5:56:99:f9:38:0f:65: d7:e7:14:e3:3b:7a:57:63:c4:a1:c6:04:80:f6:42:27:93:b8: 35:6e:6c:22:b6:91:a7:0f:4f:24:b5:8a:c8:f4:e7:54:60:a4: 43:6c:b6:e6:7c:0d:0c:7e:cd:99:6a:0a:a5:aa:bd:40:c8:65: 0a:b7:8d:75:ec:da:d9:20:bc:b3:bd:29:30:85:83:2a:55:ff: 48:d2:2a:87:5a:fa:4d:eb:52:2b:69:b9:94:39:19:5a:d4:09: ef:49:7b:ad:32:e8:36:df:54:62:0d:05:58:e1:d9:04:19:92: cb:6f:a0:16:c8:9c:62:58:b7:3f:d3:c2:a9:80:d6:2b:93:4e: c5:f8:d5:8d -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICM1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjQwMTMwMTYxMjQyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5MWZmYS1kYzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FG779bQa04Pb3zxydICoQ6FMC8svJ/nWXvkbWquGwknnz7u26ZXYpn6mh7s IyqViH3NJBMJaCl+SVIVr93pIE+bpNKuFMEX0PxYCf4ZWGHcOGg7B9GLezUaRL4i cuUDiZRyiEmmNvtufl483OZ5W/bQXKdQM4UHOwuxpCMn33c17E6cDGljigkAfeWO 6a1j5tZP3dBoNEcz1sRDAKtzWdD1L/UKWPcgqwObJAIZSNO/Tfh0yQa5w8UKdts4 IbuXM15JhjuWgCwISBkuj0TP0KoJ39mwx85v+lWcPlHrLe7t9mbI1gnpQ8sGLK4V iTNZJXXh5Vbxr8EePyiq0gBJ3QIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFJPP/x16 kLdTfKWBbmF1EiEYzxDhMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNUE4N0U4QjAx QTdFMTFFQUIzMkRCNzE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBAJuLKgwDAMEAG4srQMEAG4srgMEA8tUiDANBgkqhkiG9w0B AQsFAAOCAQEAn5RInOug+K8X2Q93Qg1ETbeVyI6tXl8/gUg827ylvftgDc0exyFV keOWnXSohSuP2eW+/HsMdARDPsO6qFel4XmskVk3WAhd8gdrMs1ZGsIgsx7J58xv +t1qvXrULQ9p2lGZbj2xVEdFAbDKOm/YzMSJV6iikZPlVpn5OA9l1+cU4zt6V2PE ocYEgPZCJ5O4NW5sIraRpw9PJLWKyPTnVGCkQ2y25nwNDH7NmWoKpaq9QMhlCreN deza2SC8s70pMIWDKlX/SNIqh1r6TetSK2m5lDkZWtQJ70l7rTLoNt9UYg0FWOHZ BBmSy2+gFsicYli3P9PCqYDWK5NOxfjVjQ== -----END CERTIFICATE-----Generated at Thu May 2 17:43:11 2024 by rpki-client on console-fra.rpki-client.org