$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/8518C04E9DAB11EF81B62215C4F9AE02.roa File: 8518C04E9DAB11EF81B62215C4F9AE02.roa (raw, json) Hash identifier: GdZ2TQfj0CwNiCT6qUPjCD2PuCO+fLkV+HKlKoezX+g= Subject key identifier: CD:FD:0B:CC:41:1F:3E:66:69:0B:C7:1B:E6:66:8F:EA:0B:67:DC:93 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 09A2 Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/8518C04E9DAB11EF81B62215C4F9AE02.roa Signing time: Tue 12 Nov 2024 08:06:25 +0000 ROA not before: Tue 12 Nov 2024 08:06:25 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 9908 IP address blocks: 61.10.0.0/16 maxlen: 16 61.10.0.0/17 maxlen: 17 61.10.0.0/18 maxlen: 20 61.10.64.0/18 maxlen: 18 61.10.64.0/19 maxlen: 20 61.10.96.0/19 maxlen: 20 61.10.128.0/17 maxlen: 20 61.15.0.0/16 maxlen: 16 61.15.0.0/17 maxlen: 20 61.15.128.0/17 maxlen: 20 61.18.0.0/16 maxlen: 20 125.59.0.0/16 maxlen: 20 203.83.64.0/18 maxlen: 18 203.168.192.0/18 maxlen: 20 203.168.208.0/21 maxlen: 22 218.252.0.0/16 maxlen: 16 218.252.0.0/17 maxlen: 20 218.252.128.0/17 maxlen: 20 218.253.0.0/18 maxlen: 20 218.254.0.0/16 maxlen: 16 222.166.0.0/16 maxlen: 20 222.167.0.0/16 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Nov 12 08:06:25 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=67330c80-eb34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:89:4b:17:95:56:68:0d:21:24:4d:85:1e: 17:f5:b8:64:a0:93:7d:0c:1c:00:db:77:2f:ec:51: 65:c4:35:84:e7:4c:b2:c2:40:79:f9:a1:13:63:41: 48:b7:1f:7a:34:8a:d9:40:51:a4:f3:e0:a5:81:8f: cc:ad:61:e1:ef:d0:78:ae:8d:7e:83:d4:86:3f:a0: 60:df:43:8d:32:32:3f:97:52:44:dc:be:c8:89:7f: fd:89:60:70:6e:6f:b9:de:5e:85:ad:80:28:f6:b7: e9:da:f7:92:c5:3c:66:99:e4:ec:bd:34:b4:25:9a: 98:83:27:88:8f:85:85:69:f8:4e:4f:e9:e4:e2:16: 32:3c:6e:67:a2:07:2e:3e:5a:25:7f:db:29:c3:d2: fc:4b:2c:7e:72:62:a6:20:cf:71:c6:14:ef:6a:ec: d0:30:5c:01:e0:13:d5:9b:7d:3e:8a:3d:07:33:90: 64:03:2b:c5:df:e4:b5:20:d5:11:0b:3d:8c:72:b3: 47:84:bd:26:54:13:ec:d0:2e:84:54:92:06:6e:98: 93:45:40:3b:74:d0:02:08:62:59:98:75:90:42:b0: 14:11:7a:00:b0:e8:a8:4e:68:6b:57:45:00:b2:ef: f9:91:ab:07:42:24:87:6f:4f:00:3f:25:b9:1a:7e: 61:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FD:0B:CC:41:1F:3E:66:69:0B:C7:1B:E6:66:8F:EA:0B:67:DC:93 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/8518C04E9DAB11EF81B62215C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.10.0.0/16 61.15.0.0/16 61.18.0.0/16 125.59.0.0/16 203.83.64.0/18 203.168.192.0/18 218.252.0.0-218.253.63.255 218.254.0.0/16 222.166.0.0/15 Signature Algorithm: sha256WithRSAEncryption 66:a4:a8:ef:3a:39:67:97:07:d9:fc:c6:32:f8:71:ad:af:d5: ae:4d:f2:2c:b5:1b:5e:35:9f:d9:2d:3d:c8:37:41:c1:b0:a7: 74:de:30:2b:5e:d0:31:85:d9:d1:5a:e3:de:20:08:6c:97:3a: be:5d:5a:5d:42:43:26:30:b9:08:64:81:0c:5b:d6:46:10:98: ca:9b:b7:cd:67:2a:c5:ff:80:2a:9e:e1:e4:31:9d:8e:7b:2e: c8:ab:e8:a1:c1:23:3e:de:cd:d9:0b:e8:75:0a:ce:e3:9a:b6: d1:df:ca:f4:48:c7:ed:fd:b7:31:e6:34:42:01:ae:f2:51:d5: 3c:65:7c:4f:6c:91:8f:67:1f:09:1c:f2:8c:fa:43:b2:e5:bb: f6:c7:15:4b:5b:ca:8b:21:a6:ca:5d:38:6a:f8:91:77:94:8e: b0:43:6f:e5:42:30:1d:75:d2:b3:5c:77:ec:85:60:91:d2:67: 91:92:d8:d6:67:f7:f1:81:1b:48:f5:70:0d:da:98:6a:9c:7e: e9:6a:31:85:4d:1d:8e:f3:6c:fb:47:67:b7:e7:dc:2b:85:f5: 12:6e:a6:7e:b8:b4:31:fc:5b:ac:e3:26:72:94:7e:07:73:20: c8:02:08:90:c2:75:2d:a5:7d:d7:b9:f9:85:58:28:0f:50:74: b0:ee:ef:69 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjQxMTEyMDgwNjI1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NzMzMGM4MC1lYjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyqJSxeVVmgNISRNhR4X9bhkoJN9DBwA23cv7FFlxDWE50yywkB5+aETY0FI tx96NIrZQFGk8+ClgY/MrWHh79B4ro1+g9SGP6Bg30ONMjI/l1JE3L7IiX/9iWBw bm+53l6FrYAo9rfp2veSxTxmmeTsvTS0JZqYgyeIj4WFafhOT+nk4hYyPG5nogcu Plolf9spw9L8Syx+cmKmIM9xxhTvauzQMFwB4BPVm30+ij0HM5BkAyvF3+S1INUR Cz2McrNHhL0mVBPs0C6EVJIGbpiTRUA7dNACCGJZmHWQQrAUEXoAsOioTmhrV0UA su/5kasHQiSHb08APyW5Gn5hlQIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFM39C8xB Hz5maQvHG+Zmj+oLZ9yTMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvODUxOEMwNEU5 REFCMTFFRjgxQjYyMjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUAYIKwYBBQUHAQcBAf8E QTA/MD0EAgABMDcDAwA9CgMDAD0PAwMAPRIDAwB9OwMEBstTQAMEBsuowDALAwMC 2vwDBAba/QADAwDa/gMDAd6mMA0GCSqGSIb3DQEBCwUAA4IBAQBmpKjvOjlnlwfZ /MYy+HGtr9WuTfIstRteNZ/ZLT3IN0HBsKd03jArXtAxhdnRWuPeIAhslzq+XVpd QkMmMLkIZIEMW9ZGEJjKm7fNZyrF/4AqnuHkMZ2Oey7Iq+ihwSM+3s3ZC+h1Cs7j mrbR38r0SMft/bcx5jRCAa7yUdU8ZXxPbJGPZx8JHPKM+kOy5bv2xxVLW8qLIabK XThq+JF3lI6wQ2/lQjAdddKzXHfshWCR0meRktjWZ/fxgRtI9XAN2phqnH7pajGF TR2O82z7R2e359wrhfUSbqZ+uLQx/Fus4yZylH4HcyDIAgiQwnUtpX3XufmFWCgP UHSw7u9p -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:46 2024 by rpki-client on console-ams.rpki-client.org