$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6C2D5320FDC511ECAEF22950C4F9AE02.roa File: 6C2D5320FDC511ECAEF22950C4F9AE02.roa (raw, json) Hash identifier: noRb9msiz2pm9/luGcV0m+5J63BL46ey7R6bOwz11zo= Subject key identifier: 1F:C1:42:77:55:16:92:19:E3:5F:BE:D0:67:37:0B:07:E3:AB:41:08 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1A36 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6C2D5320FDC511ECAEF22950C4F9AE02.roa Signing time: Thu 30 May 2024 15:53:42 +0000 ROA not before: Thu 30 May 2024 15:53:41 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 7633 IP address blocks: 164.164.0.0/16 maxlen: 23 164.164.0.0/17 maxlen: 24 164.164.128.0/19 maxlen: 24 164.164.160.0/20 maxlen: 24 164.164.176.0/21 maxlen: 24 164.164.185.0/24 maxlen: 24 164.164.186.0/23 maxlen: 24 164.164.188.0/22 maxlen: 24 164.164.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6710 (0x1a36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 30 15:53:41 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a105-39c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:12:e1:0f:f9:c7:2f:09:d4:2b:17:0a:a1:4b: e7:3f:bf:aa:5f:b0:54:4d:9e:dc:15:c0:70:f8:52: fc:10:d8:a6:16:1f:49:79:c3:a9:87:c8:5e:53:a2: d0:87:f4:37:6c:56:da:ae:3b:90:12:ba:f0:9a:a8: 2b:1f:6d:15:b7:93:62:0f:07:55:05:52:5a:33:19: 0b:b8:ef:d3:f6:eb:97:55:d4:07:95:d5:bd:ca:93: d3:84:5b:e8:2f:e8:c4:65:84:eb:e3:5d:1e:46:6b: 26:af:c3:cc:ca:6d:46:05:cf:df:4e:f6:55:76:ea: 6f:dc:75:e0:e5:e7:8b:3c:0e:8f:d4:ab:0e:00:14: 10:53:ad:45:cc:b3:9e:a4:1f:e9:70:5a:a8:39:f0: 82:16:6d:9c:30:7a:91:76:ef:61:0e:d8:29:4f:cc: 8d:50:72:e1:f2:7b:59:1a:f5:53:35:ab:51:45:fb: ce:a5:a1:89:d2:12:32:fb:10:e9:97:17:95:94:4a: cc:bc:76:90:e5:6e:5b:74:9c:10:ae:08:5d:3a:8a: a5:a6:fa:89:d8:85:80:c4:d4:43:6e:78:14:86:72: 34:33:40:ab:a9:ce:8c:28:aa:88:fb:e3:ef:a0:0d: 3f:73:e1:e8:32:87:45:d1:71:7c:e1:92:5f:fa:84: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C1:42:77:55:16:92:19:E3:5F:BE:D0:67:37:0B:07:E3:AB:41:08 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6C2D5320FDC511ECAEF22950C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 164.164.0.0/16 Signature Algorithm: sha256WithRSAEncryption b3:3c:90:1a:ba:86:bc:ba:b9:65:e0:18:c3:45:f1:88:24:06: 81:e0:5f:76:09:2b:78:80:14:7e:10:ac:d1:c8:61:9c:78:86: 5c:9c:74:3c:1e:01:df:d2:72:b4:3b:00:2e:88:03:67:7b:ec: 2d:d0:a2:33:39:11:54:1d:4a:c3:9e:28:d4:0f:e7:8b:34:4c: c4:51:1a:cf:30:bb:ac:9d:b9:18:56:76:45:19:5f:c0:f3:e4: 3e:d5:fc:ac:ec:5c:cb:28:ca:34:5b:74:51:62:b2:3b:d0:ec: d1:48:6f:bb:46:a7:5e:a7:ae:50:4b:e5:1f:af:43:fe:6e:7d: 75:0e:14:29:04:1e:a5:56:43:c3:c8:07:07:7e:c3:a6:1c:de: 63:d6:06:46:dc:79:20:63:d1:a4:65:14:18:1e:d3:c0:10:1c: 78:8f:d6:17:27:3a:d9:e2:8a:e6:d1:61:fb:7f:fa:0a:f7:21: 33:81:8d:84:1a:6d:3b:56:55:20:93:eb:17:77:41:57:4b:c2: 8a:5b:1b:fd:8f:17:8d:74:53:18:0a:90:42:30:5a:ee:f6:45: 77:6c:09:f9:57:d0:4b:0e:85:20:1e:d0:31:56:59:b4:a6:26: 2e:9f:f3:da:8e:8f:e3:9e:f2:c6:3e:87:59:2b:06:85:90:7f: c8:f2:d6:62 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICGjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwNTMwMTU1MzQxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4YTEwNS0zOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RLhD/nHLwnUKxcKoUvnP7+qX7BUTZ7cFcBw+FL8ENimFh9JecOph8heU6LQ h/Q3bFbarjuQErrwmqgrH20Vt5NiDwdVBVJaMxkLuO/T9uuXVdQHldW9ypPThFvo L+jEZYTr410eRmsmr8PMym1GBc/fTvZVdupv3HXg5eeLPA6P1KsOABQQU61FzLOe pB/pcFqoOfCCFm2cMHqRdu9hDtgpT8yNUHLh8ntZGvVTNatRRfvOpaGJ0hIy+xDp lxeVlErMvHaQ5W5bdJwQrghdOoqlpvqJ2IWAxNRDbngUhnI0M0Crqc6MKKqI++Pv oA0/c+HoModF0XF84ZJf+oS3KwIDAQABo4IClDCCApAwHQYDVR0OBBYEFB/BQndV FpIZ41++0Gc3Cwfjq0EIMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkMyRDUzMjBG REM1MTFFQ0FFRjIyOTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwCkpDANBgkqhkiG9w0BAQsFAAOCAQEAszyQGrqGvLq5ZeAY w0XxiCQGgeBfdgkreIAUfhCs0chhnHiGXJx0PB4B39JytDsALogDZ3vsLdCiMzkR VB1Kw54o1A/nizRMxFEazzC7rJ25GFZ2RRlfwPPkPtX8rOxcyyjKNFt0UWKyO9Ds 0Uhvu0anXqeuUEvlH69D/m59dQ4UKQQepVZDw8gHB37DphzeY9YGRtx5IGPRpGUU GB7TwBAceI/WFyc62eKK5tFh+3/6CvchM4GNhBptO1ZVIJPrF3dBV0vCilsb/Y8X jXRTGAqQQjBa7vZFd2wJ+VfQSw6FIB7QMVZZtKYmLp/z2o6P457yxj6HWSsGhZB/ yPLWYg== -----END CERTIFICATE-----Generated at Fri May 31 16:40:59 2024 by rpki-client on console-ams.rpki-client.org