$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6FB1CD6EE04211EC8F5BA126C4F9AE02.roa File: 6FB1CD6EE04211EC8F5BA126C4F9AE02.roa (raw, json) Hash identifier: SJAJGhVgBLgGlz5ztm9apaeOd+qOZsCab0ecM29rnUs= Subject key identifier: E3:22:6A:37:AE:B1:6C:85:73:C7:2F:E9:27:63:20:6A:56:2B:88:02 Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 0512 Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6FB1CD6EE04211EC8F5BA126C4F9AE02.roa Signing time: Wed 31 Jul 2024 02:33:43 +0000 ROA not before: Wed 31 Jul 2024 02:33:43 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 38444 IP address blocks: 203.146.62.0/23 maxlen: 23 203.146.62.0/24 maxlen: 24 203.146.63.0/24 maxlen: 24 203.170.228.0/24 maxlen: 24 203.170.229.0/24 maxlen: 24 203.170.230.0/24 maxlen: 24 203.170.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1298 (0x512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Jul 31 02:33:43 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a9a287-25e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:b3:4d:28:49:e5:cd:13:cc:c9:ff:e7:a5: 9e:4d:a5:b2:08:27:91:8f:2a:c3:b8:97:72:68:f1: 38:30:1f:fa:19:67:e8:40:d0:1d:4d:25:68:ab:5f: e7:bc:00:da:32:f2:3e:45:1f:f5:64:7c:72:b2:a4: aa:b0:47:c1:4b:b6:9a:38:c6:a9:32:02:26:f3:3a: b6:f7:15:ef:2c:a8:b3:b9:c1:fc:38:ad:e8:48:2e: af:9b:27:75:57:2e:de:e1:dc:f7:dc:69:ac:a9:d7: 02:b9:2e:fe:a7:44:d7:48:f4:aa:27:27:25:ad:b0: e1:5c:56:2e:d1:60:1a:99:81:99:81:87:cb:3c:97: 33:5b:79:ad:24:d0:59:ab:a1:01:57:65:94:b0:37: a0:36:39:8f:0c:0f:af:50:a4:c4:3d:66:2b:59:4f: 40:58:ce:cb:af:2a:b4:20:f6:c5:94:19:d4:84:9d: 25:10:d0:8b:26:f7:61:9c:cf:78:33:64:b2:71:d1: 50:f6:2d:92:62:ae:28:b6:5a:5f:1f:c0:ae:75:8e: 3d:70:a0:5e:55:06:26:22:5b:70:8d:4e:ad:35:46: 42:77:ed:cf:ad:bf:47:89:af:ea:0a:e0:d8:42:e3: 8b:25:cf:fb:8e:bd:1f:87:79:9a:63:c9:e9:fb:fd: 12:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:22:6A:37:AE:B1:6C:85:73:C7:2F:E9:27:63:20:6A:56:2B:88:02 X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6FB1CD6EE04211EC8F5BA126C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.146.62.0/23 203.170.228.0/22 Signature Algorithm: sha256WithRSAEncryption 43:54:49:b9:83:10:fe:17:c5:b6:a5:9a:e4:69:3f:9c:12:c4: e2:8c:22:47:f5:82:a0:d3:4e:44:3c:e0:46:e1:db:67:26:ed: 8c:c8:50:c6:95:24:ef:74:c3:11:4e:fe:5e:d6:fa:26:50:99: 15:11:f5:a1:67:98:f9:48:3f:71:49:ab:e4:c1:d5:2a:86:9f: 29:67:81:a7:44:8b:da:af:39:fe:ae:79:d5:30:69:a1:57:80: e1:20:bd:e4:cb:1c:69:b7:66:5e:7d:2c:12:b7:6e:8b:fa:ab: fc:f4:79:7e:9c:86:b9:ec:11:20:40:3b:f5:ff:17:d3:35:69: d5:d4:67:69:5c:cf:b2:1e:0a:e6:e4:d0:30:e2:48:84:db:ab: dd:98:56:89:87:23:10:bd:c8:98:61:b2:91:45:a7:5f:c8:90: ca:d1:d5:ac:d4:59:cf:64:af:c2:55:f0:4b:2e:d5:d1:58:09: 01:66:37:80:54:c2:39:b8:17:78:35:96:64:0d:e0:37:f4:ea: 42:81:2b:70:f7:12:77:1d:dc:15:2b:ea:d8:f3:c7:93:05:24: 63:e9:bb:6a:3b:96:bf:d0:c2:1c:3d:dc:61:ee:6d:1b:a1:5e: ae:3d:d6:87:4b:6f:a8:87:31:d7:c7:7e:bd:10:8c:ce:32:87: a7:ef:8d:86 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjQwNzMxMDIzMzQzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5YTI4Ny0yNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+uzTShJ5c0TzMn/56WeTaWyCCeRjyrDuJdyaPE4MB/6GWfoQNAdTSVoq1/n vADaMvI+RR/1ZHxysqSqsEfBS7aaOMapMgIm8zq29xXvLKizucH8OK3oSC6vmyd1 Vy7e4dz33GmsqdcCuS7+p0TXSPSqJyclrbDhXFYu0WAamYGZgYfLPJczW3mtJNBZ q6EBV2WUsDegNjmPDA+vUKTEPWYrWU9AWM7Lryq0IPbFlBnUhJ0lENCLJvdhnM94 M2SycdFQ9i2SYq4otlpfH8CudY49cKBeVQYmIltwjU6tNUZCd+3Prb9Hia/qCuDY QuOLJc/7jr0fh3maY8np+/0STwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOMiajeu sWyFc8cv6SdjIGpWK4gCMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvNkZCMUNENkVF MDQyMTFFQzhGNUJBMTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAHLkj4DBALLquQwDQYJKoZIhvcNAQELBQADggEBAENUSbmD EP4XxbalmuRpP5wSxOKMIkf1gqDTTkQ84Ebh22cm7YzIUMaVJO90wxFO/l7W+iZQ mRUR9aFnmPlIP3FJq+TB1SqGnylngadEi9qvOf6uedUwaaFXgOEgveTLHGm3Zl59 LBK3bov6q/z0eX6chrnsESBAO/X/F9M1adXUZ2lcz7IeCubk0DDiSITbq92YVomH IxC9yJhhspFFp1/IkMrR1azUWc9kr8JV8Esu1dFYCQFmN4BUwjm4F3g1lmQN4Df0 6kKBK3D3Encd3BUr6tjzx5MFJGPpu2o7lr/Qwhw93GHubRuhXq491odLb6iHMdfH fr0QjM4yh6fvjYY= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org