$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C62E9D4B1B811ED8DC4D42EC4F9AE02.roa File: 6C62E9D4B1B811ED8DC4D42EC4F9AE02.roa (raw, json) Hash identifier: bSSKg6t44i7ogvQAOgsSySEHmbvZbJaS8NwkY1U3r38= Subject key identifier: F7:6D:B8:79:F3:DF:F2:86:D2:E2:6E:0E:06:BC:8E:1B:D5:18:07:B5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8FB7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C62E9D4B1B811ED8DC4D42EC4F9AE02.roa Signing time: Thu 30 May 2024 16:24:58 +0000 ROA not before: Thu 30 May 2024 16:24:58 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150576 IP address blocks: 14.192.12.0/22 maxlen: 24 103.24.20.0/22 maxlen: 24 103.54.178.0/23 maxlen: 24 103.171.54.0/23 maxlen: 24 2001:df2:6ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36791 (0x8fb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:24:58 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a85a-379f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6e:ee:e2:82:66:be:3c:06:04:1e:92:95:a8: c6:da:78:b0:f6:db:b5:e1:2d:d1:3a:91:75:46:a6: 83:2e:bf:35:e2:c9:50:33:74:2e:2f:68:64:8e:42: 42:44:c6:b8:4d:61:cc:31:d4:66:fd:38:d3:b8:aa: 33:44:32:33:6b:3a:38:f1:02:b1:76:48:30:9e:c3: 22:42:52:6e:56:3f:42:9e:37:1b:4d:7f:c3:47:1f: 36:4c:f9:91:ac:e2:ba:5c:3d:54:d4:76:cf:33:5a: c7:0e:0a:c1:57:f9:ea:60:af:c8:d5:5a:3b:18:01: 53:bb:6a:ac:b0:5c:1f:b0:23:a5:87:bf:7e:57:10: cd:9e:f8:09:50:ae:f0:3f:db:36:50:e2:33:4e:b2: 5f:b8:f0:e4:07:e7:23:00:96:ab:43:50:0b:40:9d: e4:1d:85:f4:55:ae:59:e6:ec:0b:3c:f6:f9:08:d6: 42:bb:e3:b6:2b:84:06:b8:9e:7c:1c:96:27:40:0d: 07:0b:ef:a4:1f:69:85:2d:d5:61:e3:80:2f:d3:6e: cc:87:97:13:5d:d2:46:4f:ba:9c:ed:f8:95:dc:ba: 8d:66:1a:25:4a:a0:72:01:a7:bf:f7:c4:a6:ff:4f: b0:e7:d8:bc:e0:2a:bf:c9:f4:49:47:cd:fd:4f:2e: 25:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6D:B8:79:F3:DF:F2:86:D2:E2:6E:0E:06:BC:8E:1B:D5:18:07:B5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C62E9D4B1B811ED8DC4D42EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.12.0/22 103.24.20.0/22 103.54.178.0/23 103.171.54.0/23 IPv6: 2001:df2:6ac0::/48 Signature Algorithm: sha256WithRSAEncryption 16:a0:cd:82:02:18:04:cb:3f:f8:b1:db:43:3c:72:7f:5d:32: 24:5b:5b:87:4a:57:be:26:1d:2b:24:41:79:9e:43:5c:85:11: e0:76:bd:34:07:b7:5b:1e:4d:e1:48:e6:f7:71:e0:9f:49:9b: b9:71:5a:fd:dc:c7:f1:fb:6c:76:2c:9d:b5:c2:17:0f:e5:d5: af:71:63:39:c7:f0:bf:74:ca:03:8d:03:51:85:10:f5:b8:a9: ff:6f:d3:41:2f:c9:f8:87:e1:d0:73:92:74:90:19:23:b7:cc: 23:28:c5:f0:e2:e4:f3:57:b0:3f:e1:36:80:3f:c0:c9:18:fc: 4a:5a:c6:e3:0f:1f:f3:b4:d9:27:a0:63:c1:03:7a:a3:e5:40: cc:15:fa:cd:cb:9d:32:dc:db:b0:11:66:35:a9:01:52:51:ed: ce:67:3a:1e:c1:20:0e:a1:03:df:5f:30:1f:f6:47:a5:41:41: 2d:8e:64:e4:0e:b5:e0:51:f3:ac:14:5e:73:69:9d:1d:a6:b7: 9a:2e:fd:fd:6f:57:b0:96:f0:2f:48:38:10:b3:58:87:1b:f4: 87:d7:f1:65:09:d3:cd:b3:74:2b:c3:0c:73:8d:37:89:0b:4c: 08:b5:1a:9f:aa:c8:20:41:39:ac:b7:8b:69:eb:02:54:46:48: 54:56:6d:62 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIDAI+3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjQ1OFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE4NWEtMzc5ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOxu7uKCZr48BgQekpWoxtp4sPbbteEt0TqRdUamgy6/NeLJUDN0Li9oZI5C QkTGuE1hzDHUZv0407iqM0QyM2s6OPECsXZIMJ7DIkJSblY/Qp43G01/w0cfNkz5 kaziulw9VNR2zzNaxw4KwVf56mCvyNVaOxgBU7tqrLBcH7AjpYe/flcQzZ74CVCu 8D/bNlDiM06yX7jw5AfnIwCWq0NQC0Cd5B2F9FWuWebsCzz2+QjWQrvjtiuEBrie fByWJ0ANBwvvpB9phS3VYeOAL9NuzIeXE13SRk+6nO34ldy6jWYaJUqgcgGnv/fE pv9PsOfYvOAqv8n0SUfN/U8uJakCAwEAAaOCArgwggK0MB0GA1UdDgQWBBT3bbh5 89/yhtLibg4GvI4b1RgHtTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZDNjJFOUQ0 QjFCODExRUQ4REM0RDQyRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEIGCCsGAQUFBwEHAQH/ BDMwMTAeBAIAATAYAwQCDsAMAwQCZxgUAwQBZzayAwQBZ6s2MA8EAgACMAkDBwAg AQ3yasAwDQYJKoZIhvcNAQELBQADggEBABagzYICGATLP/ix20M8cn9dMiRbW4dK V74mHSskQXmeQ1yFEeB2vTQHt1seTeFI5vdx4J9Jm7lxWv3cx/H7bHYsnbXCFw/l 1a9xYznH8L90ygONA1GFEPW4qf9v00EvyfiH4dBzknSQGSO3zCMoxfDi5PNXsD/h NoA/wMkY/EpaxuMPH/O02SegY8EDeqPlQMwV+s3LnTLc27ARZjWpAVJR7c5nOh7B IA6hA99fMB/2R6VBQS2OZOQOteBR86wUXnNpnR2mt5ou/f1vV7CW8C9IOBCzWIcb 9IfX8WUJ082zdCvDDHONN4kLTAi1Gp+qyCBBOay3i2nrAlRGSFRWbWI= -----END CERTIFICATE-----Generated at Fri Nov 22 11:47:49 2024 by rpki-client on console-ams.rpki-client.org