$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3E640EE917811ED904ACF83C4F9AE02.roa File: C3E640EE917811ED904ACF83C4F9AE02.roa (raw, json) Hash identifier: A4+/CvAq5mHbP+AOxvkMWdzg7e9oQgnalc06bQnNQUQ= Subject key identifier: A7:97:62:5A:E0:85:C1:9C:EB:DF:E6:59:6C:4A:12:29:CB:8D:B4:75 Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: D2 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3E640EE917811ED904ACF83C4F9AE02.roa Signing time: Sat 09 Dec 2023 04:54:32 +0000 ROA not before: Sat 09 Dec 2023 04:54:32 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 133321 IP address blocks: 203.214.197.0/24 maxlen: 24 203.214.198.0/24 maxlen: 24 203.214.199.0/24 maxlen: 24 2404:c400:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Dec 9 04:54:32 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6573f308-b2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c5:02:7c:ba:da:33:89:d2:e6:03:d2:0a:8e: e6:cf:fc:a5:27:71:a9:ed:74:80:d6:fd:c8:b8:8e: 85:ae:05:03:d6:75:7a:53:13:bd:d9:38:48:87:e5: 79:d6:76:e6:5e:d8:38:74:7e:fd:f5:a6:ed:23:a5: c5:b3:87:0a:58:19:49:1f:00:87:3b:fd:8e:10:c1: 1e:36:92:96:cc:2e:33:2f:48:2c:d7:20:c1:1c:79: 35:67:9b:60:34:8e:04:76:47:fd:d6:30:2f:0b:ea: bc:6f:36:df:aa:fd:62:13:7b:73:bf:0c:64:fb:c9: 9d:da:c4:95:9b:f4:2f:32:3a:1c:a5:7f:81:ea:f6: cf:a5:69:98:48:46:34:b1:7d:a9:bb:02:59:4b:38: f1:4b:ac:4c:2f:9c:df:59:fd:55:bd:51:66:8a:5c: 6e:5b:ce:13:4f:b9:b3:fe:7a:3a:99:bd:be:3e:07: 86:9a:f8:2b:31:61:f1:d0:cc:2d:d0:d2:71:7f:a8: 86:35:d2:0f:c4:a4:a8:fd:4b:e7:50:8b:fd:b6:e9: 30:17:88:d8:25:ba:1c:9d:18:f5:bb:c5:be:81:1d: c7:03:84:e3:68:d9:50:3f:8a:65:43:b5:60:7d:49: f6:6f:69:f7:ea:ee:cc:76:5d:49:a2:38:9b:06:1e: 09:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:97:62:5A:E0:85:C1:9C:EB:DF:E6:59:6C:4A:12:29:CB:8D:B4:75 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3E640EE917811ED904ACF83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.214.197.0-203.214.199.255 IPv6: 2404:c400:9000::/36 Signature Algorithm: sha256WithRSAEncryption 2d:06:26:cf:53:26:41:2f:24:8a:38:81:61:3a:e3:7e:fe:34: 7b:4d:4a:cc:c5:77:73:7f:ab:5d:e9:24:e2:ff:df:fd:19:f7: 36:eb:5a:85:a7:4f:8c:5f:64:0b:3e:0a:c2:11:1d:c5:25:5a: 3f:e2:04:b2:00:d6:29:c9:8b:6c:74:b6:be:e9:91:79:d4:f3: 6d:94:88:bc:8e:49:b8:2d:a3:8f:92:91:5f:9b:a2:1f:52:8e: bc:ec:62:f9:7e:bf:35:56:9e:f0:27:75:eb:e0:bb:1e:b3:f6: 44:67:cd:c2:27:51:d9:58:36:a6:d4:84:f6:5b:f7:42:0d:6b: 0d:41:57:55:3f:4a:89:78:57:00:6e:2d:17:cb:35:66:28:6c: 83:c1:58:e7:59:14:ec:29:e3:d5:6a:dd:23:fd:0c:81:49:fb: d3:17:e9:02:5d:ab:78:48:00:f5:68:17:30:b1:51:34:6d:a5: 51:77:d9:85:fc:95:b8:43:52:19:12:c1:83:df:22:a0:90:32: 6e:cf:60:c8:19:22:c0:bf:ac:ec:c6:5a:33:09:f9:30:0e:55: da:55:ae:a4:79:b8:49:16:6d:ae:30:dc:96:7f:2c:f7:1b:70: 2a:bb:7e:77:fa:f6:ee:05:e3:2a:4d:9b:c9:d1:11:80:1c:6d: 49:b1:3a:90 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjMxMjA5MDQ1NDMyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczZjMwOC1iMmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMUCfLraM4nS5gPSCo7mz/ylJ3Gp7XSA1v3IuI6FrgUD1nV6UxO92ThIh+V5 1nbmXtg4dH799abtI6XFs4cKWBlJHwCHO/2OEMEeNpKWzC4zL0gs1yDBHHk1Z5tg NI4Edkf91jAvC+q8bzbfqv1iE3tzvwxk+8md2sSVm/QvMjocpX+B6vbPpWmYSEY0 sX2puwJZSzjxS6xML5zfWf1VvVFmilxuW84TT7mz/no6mb2+PgeGmvgrMWHx0Mwt 0NJxf6iGNdIPxKSo/UvnUIv9tukwF4jYJbocnRj1u8W+gR3HA4TjaNlQP4plQ7Vg fUn2b2n36u7Mdl1JojibBh4J1QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKeXYlrg hcGc69/mWWxKEinLjbR1MB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU5QjYvNzkxOENCMEM3RkY1MTFFRDlFRDQ2NDFEQzRGOUFFMDIvQzNFNjQwRUU5 MTc4MTFFRDkwNEFDRjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMBQEAgABMA4wDAMEAMvWxQMEA8vWwDAOBAIAAjAIAwYEJATEAJAwDQYJKoZI hvcNAQELBQADggEBAC0GJs9TJkEvJIo4gWE6437+NHtNSszFd3N/q13pJOL/3/0Z 9zbrWoWnT4xfZAs+CsIRHcUlWj/iBLIA1inJi2x0tr7pkXnU822UiLyOSbgto4+S kV+boh9SjrzsYvl+vzVWnvAndevgux6z9kRnzcInUdlYNqbUhPZb90INaw1BV1U/ Sol4VwBuLRfLNWYobIPBWOdZFOwp49Vq3SP9DIFJ+9MX6QJdq3hIAPVoFzCxUTRt pVF32YX8lbhDUhkSwYPfIqCQMm7PYMgZIsC/rOzGWjMJ+TAOVdpVrqR5uEkWba4w 3JZ/LPcbcCq7fnf69u4F4ypNm8nREYAcbUmxOpA= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:44 2024 by rpki-client on console-fra.rpki-client.org