$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/93C4474E085411EBB9F0635DC4F9AE02.roa File: 93C4474E085411EBB9F0635DC4F9AE02.roa (raw, json) Hash identifier: r4oGdwh1wAA/HZZJFxAlSneBYqCxvrvBZTgJ6fejU+A= Subject key identifier: 17:54:DD:28:BF:35:55:38:0A:A9:FF:FA:CD:F3:9B:0F:EA:C1:A1:E7 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 21CE Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/93C4474E085411EBB9F0635DC4F9AE02.roa Signing time: Tue 30 Apr 2024 16:23:48 +0000 ROA not before: Tue 30 Apr 2024 16:23:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141177 IP address blocks: 43.250.48.0/22 maxlen: 24 45.64.114.0/23 maxlen: 23 45.64.114.0/24 maxlen: 24 45.64.115.0/24 maxlen: 24 2404:7c00:2::/48 maxlen: 48 2404:7c00:2::/56 maxlen: 56 2404:7c00:2:100::/56 maxlen: 56 2404:7c00:2:200::/56 maxlen: 56 2404:7c00:2:300::/56 maxlen: 56 2404:7c00:2:400::/56 maxlen: 56 2404:7c00:10::/44 maxlen: 48 2404:7c00:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8654 (0x21ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Apr 30 16:23:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66311b13-7e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:f8:a1:26:6d:6a:17:c4:59:88:b3:1a:67: d7:1e:fa:2c:a5:08:e0:cb:93:8b:ae:43:4a:91:42: 77:4d:75:90:5a:d2:aa:bc:5a:d3:1a:88:99:8e:bd: b5:6c:fd:c1:da:9d:18:27:b4:8f:1b:51:db:4f:fe: ab:d6:04:ea:38:6c:e7:4e:2c:ee:47:a6:4f:21:ad: fb:60:35:ba:c7:5a:98:ba:61:f9:9f:45:b5:bd:a0: f0:67:c0:a2:f9:09:36:20:ec:54:a7:5b:f4:67:8c: dd:74:2b:bd:f0:d4:42:33:67:d5:7f:b1:c5:4e:19: ae:18:f6:31:4e:6a:6d:c8:e0:da:93:5a:2d:0d:e5: ba:47:88:48:53:be:fa:a2:60:48:a4:ce:79:86:dd: 70:55:ed:44:35:11:8f:09:bb:ef:81:52:8c:26:1e: 46:2a:43:a3:64:8f:e0:bb:6e:14:47:2c:c9:5c:d1: 8d:f2:48:00:bf:86:4c:2a:b7:0c:17:4d:39:54:70: 23:58:5e:85:de:59:e1:e8:34:8c:ae:a8:c7:72:c8: a9:2c:e1:86:cc:69:bb:c5:c6:cb:7a:3e:68:1d:1e: cb:50:5b:a4:03:9b:56:13:29:4b:65:97:ff:f6:4b: e1:c4:d3:51:35:90:ef:52:7b:a0:ff:d4:8b:f5:32: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:54:DD:28:BF:35:55:38:0A:A9:FF:FA:CD:F3:9B:0F:EA:C1:A1:E7 X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/93C4474E085411EBB9F0635DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.48.0/22 45.64.114.0/23 IPv6: 2404:7c00:2::/48 2404:7c00:10::-2404:7c00:2f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 16:ef:2a:99:9b:4d:42:41:d2:ad:c6:3c:26:92:25:7d:e3:64: 3f:d0:15:6c:0b:13:36:7c:ea:59:80:c9:89:5f:3c:57:73:e3: 5b:5b:a4:81:b5:17:19:cc:7c:cd:34:19:46:6f:11:d1:2a:3c: a8:7b:72:b3:cc:57:ac:b6:00:f6:60:e8:46:5b:bd:49:53:82: dc:3a:a3:bd:ee:90:72:e5:a5:6b:8d:b8:02:97:92:6c:19:86: 43:79:84:c6:44:d5:4d:5c:08:c4:a6:14:fb:94:38:c0:d1:15: f0:ce:9c:ff:6c:0a:de:3d:40:5c:88:10:dd:c5:0e:a8:a8:29: 02:8e:d3:69:c3:72:f4:ca:b8:a0:6f:39:81:36:c8:f0:17:34: f5:82:8b:f0:7e:80:fb:95:cd:a6:9c:28:dd:c4:5d:38:fc:a6: 07:fe:99:82:01:06:06:7b:7a:f6:43:bc:f9:cc:d2:57:d9:6e: de:49:df:03:e1:82:af:18:58:5b:7a:f2:0e:05:8f:1b:c1:f1: 81:28:3d:d6:86:05:7f:bb:e2:5f:1d:2b:f0:89:c7:72:7f:14: 84:a8:57:e6:94:dd:b9:12:5e:f7:4a:10:fa:e0:a7:89:fd:88: 06:70:ca:1b:e5:80:68:5e:29:e8:df:9b:60:24:1c:ae:6b:04: 37:ca:7c:25 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICIc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjQwNDMwMTYyMzQ4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxMWIxMy03ZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLr4oSZtahfEWYizGmfXHvospQjgy5OLrkNKkUJ3TXWQWtKqvFrTGoiZjr21 bP3B2p0YJ7SPG1HbT/6r1gTqOGznTizuR6ZPIa37YDW6x1qYumH5n0W1vaDwZ8Ci +Qk2IOxUp1v0Z4zddCu98NRCM2fVf7HFThmuGPYxTmptyODak1otDeW6R4hIU776 omBIpM55ht1wVe1ENRGPCbvvgVKMJh5GKkOjZI/gu24URyzJXNGN8kgAv4ZMKrcM F005VHAjWF6F3lnh6DSMrqjHcsipLOGGzGm7xcbLej5oHR7LUFukA5tWEylLZZf/ 9kvhxNNRNZDvUnug/9SL9TJu/wIDAQABo4ICwDCCArwwHQYDVR0OBBYEFBdU3Si/ NVU4Cqn/+s3zmw/qwaHnMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTkzMzMvMDY1REEzQkFCODQ0MTFFNUI1MzU3QjJGQzRGOUFFMDIvOTNDNDQ3NEUw ODU0MTFFQkI5RjA2MzVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E OzA5MBIEAgABMAwDBAIr+jADBAEtQHIwIwQCAAIwHQMHACQEfAAAAjASAwcEJAR8 AAAQAwcEJAR8AAAgMA0GCSqGSIb3DQEBCwUAA4IBAQAW7yqZm01CQdKtxjwmkiV9 42Q/0BVsCxM2fOpZgMmJXzxXc+NbW6SBtRcZzHzNNBlGbxHRKjyoe3KzzFestgD2 YOhGW71JU4LcOqO97pBy5aVrjbgCl5JsGYZDeYTGRNVNXAjEphT7lDjA0RXwzpz/ bArePUBciBDdxQ6oqCkCjtNpw3L0yrigbzmBNsjwFzT1govwfoD7lc2mnCjdxF04 /KYH/pmCAQYGe3r2Q7z5zNJX2W7eSd8D4YKvGFhbevIOBY8bwfGBKD3WhgV/u+Jf HSvwicdyfxSEqFfmlN25El73ShD64KeJ/YgGcMob5YBoXino35tgJByuawQ3ynwl -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:56 2024 by rpki-client on console-ams.rpki-client.org