$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/6D4A0AECAAA711EE9614335BC4F9AE02.roa File: 6D4A0AECAAA711EE9614335BC4F9AE02.roa (raw, json) Hash identifier: Hy4jhcpznzjolsEKoYq1vKCMOo/8ByQiYgElhuORAnQ= Subject key identifier: A9:34:30:09:76:F3:41:C7:4B:3B:9F:62:77:67:C2:D6:06:9B:60:57 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 1D40 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/6D4A0AECAAA711EE9614335BC4F9AE02.roa Signing time: Thu 04 Jan 2024 02:17:37 +0000 ROA not before: Thu 04 Jan 2024 02:17:37 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 58519 IP address blocks: 150.223.0.0/16 maxlen: 16 202.98.194.0/23 maxlen: 23 203.189.208.0/20 maxlen: 20 223.255.252.0/24 maxlen: 24 223.255.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7488 (0x1d40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Jan 4 02:17:37 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65961540-4858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:87:f1:54:f5:f1:75:c9:6b:2f:d7:68:cc:c5: 74:f0:e8:5c:86:e1:39:81:35:9a:63:20:66:b0:79: 5c:85:4c:13:56:1a:b5:07:7e:4a:ed:55:5a:06:c4: bf:73:53:ce:ec:29:c9:09:2b:3a:6e:73:27:8e:02: 8e:07:03:49:3c:e9:9f:98:21:bb:92:e1:37:43:3a: 49:74:77:03:85:9e:ee:34:38:2e:a7:be:b7:91:39: 2a:1b:35:fa:d6:4d:7c:a8:07:be:8d:4f:f4:77:8a: 52:69:ff:65:fd:c5:1e:ce:ea:c2:1b:4a:31:2a:d3: 7c:63:ae:4c:a3:0e:2c:6b:47:7f:23:ef:26:e3:fa: 8a:aa:0a:80:ad:79:2c:f3:6f:dc:61:53:da:58:ee: 31:35:17:10:f8:36:1d:da:59:9a:47:22:04:83:0e: ea:2d:7b:aa:dd:a2:04:a2:ca:c0:a4:e7:b8:ae:48: 09:80:17:31:28:65:cc:78:1a:78:18:4a:fd:d3:91: de:d3:f2:78:4f:44:25:a7:3d:5f:2c:b5:59:4d:91: 26:e5:61:e6:e5:82:39:bd:cd:dd:05:73:52:fc:04: 52:6f:56:6d:ce:79:9c:19:5e:fc:53:3d:cf:0c:39: 20:f1:bd:31:32:eb:23:79:43:32:a8:1b:55:32:4c: 22:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:34:30:09:76:F3:41:C7:4B:3B:9F:62:77:67:C2:D6:06:9B:60:57 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/6D4A0AECAAA711EE9614335BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.223.0.0/16 202.98.194.0/23 203.189.208.0/20 223.255.252.0/23 Signature Algorithm: sha256WithRSAEncryption 02:84:d3:c9:d0:11:5b:9c:5b:2e:eb:af:46:04:a2:b9:30:7a: 46:a6:5e:a2:3b:d0:8f:2b:de:a5:85:07:f3:d3:a0:5d:b7:03: cb:db:7d:dc:03:69:7e:3e:3a:02:05:bb:ab:55:c5:39:2d:e8: 57:da:ef:08:64:b4:22:90:5c:18:0a:f4:fe:e1:42:21:6b:25: 5c:27:ae:5c:56:e7:7d:e2:3a:cf:71:d0:17:d5:ca:26:4e:d3: 2c:8c:81:88:d5:5d:56:09:ef:89:6d:52:c0:36:3b:03:60:9a: 14:9b:8c:5a:70:0c:3e:a2:d4:22:7f:5f:8b:db:d8:81:dd:0e: 0f:a4:1e:1a:2f:f9:69:c5:a5:d0:cf:64:7c:24:83:67:b1:cf: 73:11:2d:95:4d:52:82:bf:f1:98:77:c8:61:df:7f:a8:17:ba: c1:d6:51:fb:fd:a8:e1:39:ab:f6:08:11:d9:a4:77:fc:99:e2: cf:3a:09:01:31:31:49:bc:0d:6b:6a:80:ba:4a:a0:7c:31:e2: f9:f5:b1:bb:93:9f:9e:67:3b:42:ce:41:33:42:fb:d0:9f:15: 1d:a5:12:4a:98:79:63:1b:df:29:64:25:fa:0f:c8:a8:25:65: 0e:c3:0f:ce:60:fa:b2:48:02:ad:c2:e4:cc:c9:97:f9:b8:58: 05:b2:01:b7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICHUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjQwMTA0MDIxNzM3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk2MTU0MC00ODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4fxVPXxdclrL9dozMV08OhchuE5gTWaYyBmsHlchUwTVhq1B35K7VVaBsS/ c1PO7CnJCSs6bnMnjgKOBwNJPOmfmCG7kuE3QzpJdHcDhZ7uNDgup763kTkqGzX6 1k18qAe+jU/0d4pSaf9l/cUezurCG0oxKtN8Y65Mow4sa0d/I+8m4/qKqgqArXks 82/cYVPaWO4xNRcQ+DYd2lmaRyIEgw7qLXuq3aIEosrApOe4rkgJgBcxKGXMeBp4 GEr905He0/J4T0Qlpz1fLLVZTZEm5WHm5YI5vc3dBXNS/ARSb1ZtznmcGV78Uz3P DDkg8b0xMusjeUMyqBtVMkwiyQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKk0MAl2 80HHSzufYndnwtYGm2BXMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvNkQ0QTBBRUNB QUE3MTFFRTk2MTQzMzVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMB0EAgABMBcDAwCW3wMEAcpiwgMEBMu90AMEAd///DANBgkqhkiG9w0BAQsF AAOCAQEAAoTTydARW5xbLuuvRgSiuTB6RqZeojvQjyvepYUH89OgXbcDy9t93ANp fj46AgW7q1XFOS3oV9rvCGS0IpBcGAr0/uFCIWslXCeuXFbnfeI6z3HQF9XKJk7T LIyBiNVdVgnviW1SwDY7A2CaFJuMWnAMPqLUIn9fi9vYgd0OD6QeGi/5acWl0M9k fCSDZ7HPcxEtlU1Sgr/xmHfIYd9/qBe6wdZR+/2o4Tmr9ggR2aR3/JnizzoJATEx SbwNa2qAukqgfDHi+fWxu5Ofnmc7Qs5BM0L70J8VHaUSSph5YxvfKWQl+g/IqCVl DsMPzmD6skgCrcLkzMmX+bhYBbIBtw== -----END CERTIFICATE-----Generated at Thu May 16 18:26:04 2024 by rpki-client on console-fra.rpki-client.org