$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa File: 6492D4985B9011EF8DB48C24C4F9AE02.roa (raw, json) Hash identifier: y6JplgLlrKLfJ1ux+K4G+509EeMxpJbjGXvNcWvnMvg= Subject key identifier: E4:E3:7F:54:0B:04:81:B5:32:D5:D9:4F:14:26:D7:85:D5:F7:CD:BE Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Certificate serial: 7A Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa Signing time: Wed 06 Nov 2024 12:39:06 +0000 ROA not before: Wed 06 Nov 2024 12:39:06 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 146943 IP address blocks: 43.230.203.0/24 maxlen: 24 45.113.224.0/24 maxlen: 24 45.113.226.0/24 maxlen: 24 45.113.227.0/24 maxlen: 24 45.120.137.0/24 maxlen: 24 45.120.138.0/24 maxlen: 24 157.119.41.0/24 maxlen: 24 2405:7140:2::/48 maxlen: 48 2405:7140:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Validity Not Before: Nov 6 12:39:06 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=672b636a-c7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fe:1c:1e:5b:42:6b:7d:f8:61:62:42:d9:a2: a9:27:b0:1e:f4:89:2b:58:4c:5f:b9:18:0f:19:5b: da:cc:21:bf:78:ae:c9:dd:3d:6d:ee:1b:8e:49:f8: c6:53:3d:88:fe:65:2f:04:94:fd:f4:a3:8f:9d:e9: c1:56:42:fc:d8:f0:56:87:2b:1a:d0:41:f9:5d:d8: 15:f7:e2:47:2d:a0:a4:b9:4f:f7:6e:e4:22:b5:c8: 57:8b:14:9a:20:c4:e7:2c:db:b5:2e:b7:bc:d1:ff: 9f:69:89:33:5e:4c:62:e8:3d:69:ea:2a:22:8d:1a: 24:b3:84:43:b3:2e:30:b1:0e:38:7c:81:af:a4:c7: 93:10:47:56:22:a0:ec:a1:80:73:07:f7:c7:75:b7: 23:17:0b:f6:bf:8f:e7:b9:f4:1c:eb:44:63:31:3a: c8:49:aa:67:fc:cb:13:10:84:6f:b8:f9:da:4e:93: f6:0c:04:d0:38:6f:c3:a3:4d:57:9d:f0:e8:77:74: ec:9a:cc:c9:eb:bb:0b:a0:10:2c:a4:23:17:3b:c3: 5a:c8:f5:7e:cd:da:14:56:06:e3:1a:d9:8a:c1:1e: 5c:48:1b:8f:1e:bd:b4:2a:46:e9:4a:1e:55:67:8e: 9b:aa:50:6a:de:d8:e8:16:9e:78:45:da:74:5b:04: 65:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E3:7F:54:0B:04:81:B5:32:D5:D9:4F:14:26:D7:85:D5:F7:CD:BE X509v3 Authority Key Identifier: keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.203.0/24 45.113.224.0/24 45.113.226.0/23 45.120.137.0-45.120.138.255 157.119.41.0/24 IPv6: 2405:7140:2::/48 2405:7140:4::/48 Signature Algorithm: sha256WithRSAEncryption 92:b3:d2:64:88:b6:58:5e:9b:37:a3:be:dd:2a:b4:b3:57:f7: ba:1b:b2:0d:3f:2a:9d:45:69:2b:c7:0f:ce:50:72:28:61:ef: 80:be:44:0e:ab:ba:97:ee:d4:10:a4:a4:85:ad:9d:3c:64:32: 43:a3:65:c7:9b:7b:3b:4a:dd:3e:7c:0e:6a:2c:2c:bf:64:2f: 4b:df:ce:9c:6d:38:fd:d6:bf:73:b5:4c:21:d8:61:1b:25:a8: c4:9c:80:28:35:03:a3:f8:87:a7:e1:e5:3c:46:9d:27:7e:19: cd:23:e5:5c:2f:d4:2f:29:94:0b:62:62:69:a5:38:a5:70:43: 0f:fe:05:56:34:84:cd:9f:b3:de:cc:b8:3e:d4:dd:4f:b7:a8: 64:77:26:be:25:0a:29:cc:e7:0d:d3:bb:7c:31:f6:44:c6:05: bd:60:de:91:b9:18:55:f4:f3:bd:97:39:5d:90:1b:06:93:f9: 4e:3d:3f:7c:16:7b:58:33:80:a7:59:2c:79:0e:9b:6a:16:97: 5f:4a:b1:8b:04:2f:4a:d7:91:59:5f:8b:80:f3:cf:02:83:16: 76:fb:55:60:e0:0d:5a:c9:f7:56:9f:95:e3:8e:bc:44:27:6e: e7:af:9e:d5:29:58:37:3d:e6:4b:aa:17:b6:1b:00:fd:db:98: 12:87:45:cc -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzM2MjExMC8GA1UEBRMoRUE4M0FGNEEyMUNCQzIwNzFGNTY5NTZFNURERDU4NEM3 NjM4RkE1QjAeFw0yNDExMDYxMjM5MDZaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MmI2MzZhLWM3Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL/hweW0JrffhhYkLZoqknsB70iStYTF+5GA8ZW9rMIb94rsndPW3uG45J+MZT PYj+ZS8ElP30o4+d6cFWQvzY8FaHKxrQQfld2BX34kctoKS5T/du5CK1yFeLFJog xOcs27Uut7zR/59piTNeTGLoPWnqKiKNGiSzhEOzLjCxDjh8ga+kx5MQR1YioOyh gHMH98d1tyMXC/a/j+e59BzrRGMxOshJqmf8yxMQhG+4+dpOk/YMBNA4b8OjTVed 8Oh3dOyazMnruwugECykIxc7w1rI9X7N2hRWBuMa2YrBHlxIG48evbQqRulKHlVn jpuqUGre2OgWnnhF2nRbBGXzAgMBAAGjggLPMIICyzAdBgNVHQ4EFgQU5ON/VAsE gbUy1dlPFCbXhdX3zb4wHwYDVR0jBBgwFoAU6oOvSiHLwgcfVpVuXd1YTHY4+lsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDMzYyLzZBMDhGNDkyMjU3 NzExRUZCQjBCODI1MUM0RjlBRTAyLzZvT3ZTaUhMd2djZlZwVnVYZDFZVEhZNC1s cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNm9PdlNpSEx3Z2NmVnBWdVhkMVlUSFk0LWxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzM2Mi82QTA4RjQ5MjI1NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82NDkyRDQ5ODVC OTAxMUVGOERCNDhDMjRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBZBggrBgEFBQcBBwEB/wRK MEgwLAQCAAEwJgMEACvmywMEAC1x4AMEAS1x4jAMAwQALXiJAwQALXiKAwQAnXcp MBgEAgACMBIDBwAkBXFAAAIDBwAkBXFAAAQwDQYJKoZIhvcNAQELBQADggEBAJKz 0mSItlhemzejvt0qtLNX97obsg0/Kp1FaSvHD85Qcihh74C+RA6rupfu1BCkpIWt nTxkMkOjZcebeztK3T58DmosLL9kL0vfzpxtOP3Wv3O1TCHYYRslqMScgCg1A6P4 h6fh5TxGnSd+Gc0j5Vwv1C8plAtiYmmlOKVwQw/+BVY0hM2fs97MuD7U3U+3qGR3 Jr4lCinM5w3Tu3wx9kTGBb1g3pG5GFX0872XOV2QGwaT+U49P3wWe1gzgKdZLHkO m2oWl19KsYsEL0rXkVlfi4DzzwKDFnb7VWDgDVrJ91afleOOvEQnbuevntUpWDc9 5kuqF7YbAP3bmBKHRcw= -----END CERTIFICATE-----Generated at Mon Nov 25 06:04:09 2024 by rpki-client on console-ams.rpki-client.org