$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa File: 6492D4985B9011EF8DB48C24C4F9AE02.roa (raw, json) Hash identifier: 7743qIFY07scIK22iamjBmZHzIYXKwA+l6o7XZIkJTY= Subject key identifier: BC:62:72:8D:5C:79:0A:41:67:F9:5F:C3:34:D7:1A:AC:EE:CB:B6:3A Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Certificate serial: 4B Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa Signing time: Fri 16 Aug 2024 05:28:40 +0000 ROA not before: Fri 16 Aug 2024 05:28:40 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 146943 IP address blocks: 43.230.203.0/24 maxlen: 24 45.113.224.0/24 maxlen: 24 45.113.226.0/24 maxlen: 24 45.113.227.0/24 maxlen: 24 45.120.137.0/24 maxlen: 24 45.120.138.0/24 maxlen: 24 2405:7140:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Validity Not Before: Aug 16 05:28:40 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66bee387-6307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5a:96:f6:d0:de:6a:7d:95:9a:01:60:c3:7c: 11:0c:b4:06:a2:64:9e:2d:fe:a9:07:3e:87:ae:cd: 6c:58:2d:32:80:0a:f9:51:e5:a4:14:b2:28:15:84: 66:be:dc:f8:33:02:2f:87:bd:1e:35:12:a0:6f:75: db:7b:8e:02:d5:d0:18:cd:ce:66:9a:3f:7d:03:2b: f5:66:b0:a3:20:7d:95:8a:a8:f2:d3:3d:ee:bf:6d: 0e:20:b7:d2:c0:a6:61:0d:a1:9d:19:da:24:a8:66: 0b:ff:da:2d:5b:0e:cc:cc:23:80:2b:5d:0a:5b:a3: 89:95:c1:d2:c0:3b:40:3d:97:81:c8:2d:50:cc:29: fd:7b:76:f9:65:f2:e4:34:33:52:90:ef:95:7b:24: a1:c7:98:0d:0d:68:6c:cd:0e:d9:9a:46:f5:35:92: 66:16:a7:8b:26:93:d1:d1:e2:87:48:86:f3:cd:57: 33:16:d4:3b:68:23:2c:78:0f:27:b3:d5:bf:07:b5: d1:06:9c:97:de:cd:3b:c8:85:54:3e:0f:ec:95:f0: 5d:1a:74:00:4f:1d:ba:0b:3e:c4:f2:bb:30:d7:71: 3b:00:52:e1:68:96:9c:f3:7a:ea:f4:7e:a9:06:ff: 8b:68:cc:f0:ed:95:30:d4:27:a0:f2:3e:25:90:e2: 70:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:62:72:8D:5C:79:0A:41:67:F9:5F:C3:34:D7:1A:AC:EE:CB:B6:3A X509v3 Authority Key Identifier: keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.203.0/24 45.113.224.0/24 45.113.226.0/23 45.120.137.0-45.120.138.255 IPv6: 2405:7140:2::/48 Signature Algorithm: sha256WithRSAEncryption a5:2f:48:ab:75:90:b0:0c:4f:d4:06:e4:21:b7:71:9b:6b:87: e7:52:5e:9a:50:15:0a:39:79:31:24:7e:09:bb:53:c0:fc:6e: 22:17:e2:f8:22:3a:6e:1c:d2:eb:f0:76:3d:b7:db:6c:4f:46: 72:ac:b7:dc:01:9b:c6:f0:cb:53:49:fe:17:38:df:4d:d5:21: ba:3c:f0:3e:9b:4a:8b:dc:2a:97:48:e3:aa:70:2d:99:23:d8: 0d:14:58:60:41:7f:61:88:f1:47:49:ae:42:8c:81:32:1c:c2: e4:63:13:09:59:4b:0a:46:1d:41:6e:50:af:f2:eb:ab:3e:97: 40:de:e8:9d:e0:ed:41:c0:e4:12:dd:c2:14:9b:55:dd:c0:8a: 97:a8:2f:ae:08:b2:f0:5d:0f:9f:e0:6f:63:3d:c9:76:5b:c0: 42:64:84:9d:ee:d0:39:1a:d2:a8:e1:55:03:21:c9:62:ad:51: 37:a3:51:24:49:3c:f1:10:00:ac:3e:9f:ca:31:fd:c6:cb:a1: e7:8f:41:1c:fa:68:7b:b8:15:47:fa:f5:21:9c:1f:bd:0d:bc: a4:69:83:73:87:e2:4c:cf:a6:d2:19:9e:57:ff:e9:3e:98:06: 41:92:c3:c3:6a:f7:55:18:06:0e:e0:fa:01:05:58:ea:a6:ab: f5:d2:b9:70 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzM2MjExMC8GA1UEBRMoRUE4M0FGNEEyMUNCQzIwNzFGNTY5NTZFNURERDU4NEM3 NjM4RkE1QjAeFw0yNDA4MTYwNTI4NDBaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmVlMzg3LTYzMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkWpb20N5qfZWaAWDDfBEMtAaiZJ4t/qkHPoeuzWxYLTKACvlR5aQUsigVhGa+ 3PgzAi+HvR41EqBvddt7jgLV0BjNzmaaP30DK/VmsKMgfZWKqPLTPe6/bQ4gt9LA pmENoZ0Z2iSoZgv/2i1bDszMI4ArXQpbo4mVwdLAO0A9l4HILVDMKf17dvll8uQ0 M1KQ75V7JKHHmA0NaGzNDtmaRvU1kmYWp4smk9HR4odIhvPNVzMW1DtoIyx4Dyez 1b8HtdEGnJfezTvIhVQ+D+yV8F0adABPHboLPsTyuzDXcTsAUuFolpzzeur0fqkG /4tozPDtlTDUJ6DyPiWQ4nCpAgMBAAGjggLAMIICvDAdBgNVHQ4EFgQUvGJyjVx5 CkFn+V/DNNcarO7LtjowHwYDVR0jBBgwFoAU6oOvSiHLwgcfVpVuXd1YTHY4+lsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDMzYyLzZBMDhGNDkyMjU3 NzExRUZCQjBCODI1MUM0RjlBRTAyLzZvT3ZTaUhMd2djZlZwVnVYZDFZVEhZNC1s cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNm9PdlNpSEx3Z2NmVnBWdVhkMVlUSFk0LWxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzM2Mi82QTA4RjQ5MjI1NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82NDkyRDQ5ODVC OTAxMUVGOERCNDhDMjRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBKBggrBgEFBQcBBwEB/wQ7 MDkwJgQCAAEwIAMEACvmywMEAC1x4AMEAS1x4jAMAwQALXiJAwQALXiKMA8EAgAC MAkDBwAkBXFAAAIwDQYJKoZIhvcNAQELBQADggEBAKUvSKt1kLAMT9QG5CG3cZtr h+dSXppQFQo5eTEkfgm7U8D8biIX4vgiOm4c0uvwdj2322xPRnKst9wBm8bwy1NJ /hc4303VIbo88D6bSovcKpdI46pwLZkj2A0UWGBBf2GI8UdJrkKMgTIcwuRjEwlZ SwpGHUFuUK/y66s+l0De6J3g7UHA5BLdwhSbVd3AipeoL64IsvBdD5/gb2M9yXZb wEJkhJ3u0Dka0qjhVQMhyWKtUTejUSRJPPEQAKw+n8ox/cbLoeePQRz6aHu4FUf6 9SGcH70NvKRpg3OH4kzPptIZnlf/6T6YBkGSw8Nq91UYBg7g+gEFWOqmq/XSuXA= -----END CERTIFICATE-----Generated at Tue Sep 17 06:07:25 2024 by rpki-client on console-fra.rpki-client.org