$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa File: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (raw, json) Hash identifier: 70V2cII6ULY6BBWf+9zyNcfzJhH0MCllEioHlbtCrmY= Subject key identifier: BC:71:B6:E7:D4:43:6B:AE:82:57:66:5F:3F:B4:B5:24:80:E6:8F:A9 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: DA Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa Signing time: Sat 13 Jan 2024 04:54:46 +0000 ROA not before: Sat 13 Jan 2024 04:54:46 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 9898 IP address blocks: 202.36.16.0/21 maxlen: 24 202.36.24.0/22 maxlen: 24 2400:d0e0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Validity Not Before: Jan 13 04:54:46 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65a21796-088d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:df:cd:2e:2a:d8:1a:70:aa:d5:42:21:34: 58:46:8a:82:09:09:2d:69:e4:47:7c:4c:24:86:6d: d2:f4:6a:33:6c:1c:0b:84:26:49:40:fe:d0:28:02: 43:c0:9b:1a:67:31:2e:22:9d:69:5e:a6:15:80:e3: 65:f7:1d:0d:88:8a:76:3c:a5:84:80:0a:d5:3a:6d: fa:7a:40:67:35:30:c0:6f:60:03:c0:d3:63:f1:42: f8:36:e4:bf:51:16:bd:03:2e:a6:b7:54:51:ba:b7: 21:75:77:50:22:c7:8e:28:3d:a8:04:b7:28:70:fe: fd:65:3d:8e:d8:44:0f:b8:20:5a:91:02:dd:ec:b7: df:af:f1:3c:2c:a5:a8:fa:ad:69:d2:be:d6:90:6d: 77:9f:a0:25:6a:d0:2b:9c:05:87:2c:e6:af:95:a7: 97:d0:2c:47:e1:2c:b8:ee:12:64:c8:b2:1b:3b:90: 47:85:f6:06:f4:20:ee:69:b1:3e:47:f4:e1:ca:f8: 9b:5f:d9:42:2d:3c:59:45:19:1c:f9:f4:c8:94:6d: db:a1:98:c3:d6:a9:0c:f0:d0:bb:43:8a:df:10:21: 2d:7b:eb:b9:94:81:ad:68:c0:ec:ca:b0:ed:79:c9: 1c:9d:92:fa:34:66:00:dc:aa:f6:32:47:99:e4:7d: d6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:71:B6:E7:D4:43:6B:AE:82:57:66:5F:3F:B4:B5:24:80:E6:8F:A9 X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.36.16.0-202.36.27.255 IPv6: 2400:d0e0::/32 Signature Algorithm: sha256WithRSAEncryption 12:98:d9:d2:08:9c:5b:e5:24:31:bb:e2:84:df:25:b2:f3:ba: 11:35:b4:f0:02:be:9f:a7:23:9a:6c:36:07:d4:c8:f2:31:9b: 86:59:13:52:9e:88:38:44:98:61:5b:e1:b0:50:0d:c7:72:57: f7:28:a0:01:ab:a1:9d:e7:e5:98:a4:31:a6:e0:a1:b9:b8:75: 7c:7b:03:a5:11:2b:53:a1:fe:24:41:7c:9d:f7:68:fc:99:6b: 36:b8:a5:18:d0:42:44:b7:0d:57:6c:cd:16:df:d6:8b:3b:54: d6:82:08:d8:12:8b:c0:be:0f:03:f9:84:76:22:1f:b6:21:29: 54:6e:90:1b:8e:15:9c:fd:e0:5a:05:33:9e:b2:db:fe:a5:33: 22:30:88:23:69:59:e4:11:27:bb:27:d7:8a:fa:71:76:10:90: 50:ad:b8:a1:30:70:a2:7b:79:60:36:b5:c8:61:ce:d8:3c:01: dc:5e:8b:15:91:16:ac:ce:02:ea:c7:45:91:55:eb:96:05:ae: b2:ce:60:b0:8a:82:d6:3d:51:de:28:30:86:cb:b1:f4:19:06: f4:1b:24:b9:17:a0:3a:70:2c:18:b5:f6:41:9a:38:b4:16:14: 9e:20:0a:04:22:f1:ea:85:43:b1:6a:d9:5a:ec:56:b2:9b:b6: f2:58:b8:38 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjQwMTEzMDQ1NDQ2WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWEyMTc5Ni0wODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNjfzS4q2BpwqtVCITRYRoqCCQktaeRHfEwkhm3S9GozbBwLhCZJQP7QKAJD wJsaZzEuIp1pXqYVgONl9x0NiIp2PKWEgArVOm36ekBnNTDAb2ADwNNj8UL4NuS/ URa9Ay6mt1RRurchdXdQIseOKD2oBLcocP79ZT2O2EQPuCBakQLd7Lffr/E8LKWo +q1p0r7WkG13n6AlatArnAWHLOavlaeX0CxH4Sy47hJkyLIbO5BHhfYG9CDuabE+ R/ThyvibX9lCLTxZRRkc+fTIlG3boZjD1qkM8NC7Q4rfECEte+u5lIGtaMDsyrDt eckcnZL6NGYA3Kr2MkeZ5H3WNwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFLxxtufU Q2uugldmXz+0tSSA5o+pMB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTRFQzAvREFFNjc0MEM3RjNCMTFFREE3QTNFQzY4QzRGOUFFMDIvMTZERkMyNTQ4 RDZDMTFFREJCMUIxQzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEBMokEAMEAsokGDANBAIAAjAHAwUAJADQ4DANBgkqhkiG 9w0BAQsFAAOCAQEAEpjZ0gicW+UkMbvihN8lsvO6ETW08AK+n6cjmmw2B9TI8jGb hlkTUp6IOESYYVvhsFANx3JX9yigAauhneflmKQxpuChubh1fHsDpRErU6H+JEF8 nfdo/JlrNrilGNBCRLcNV2zNFt/WiztU1oII2BKLwL4PA/mEdiIftiEpVG6QG44V nP3gWgUznrLb/qUzIjCII2lZ5BEnuyfXivpxdhCQUK24oTBwont5YDa1yGHO2DwB 3F6LFZEWrM4C6sdFkVXrlgWuss5gsIqC1j1R3igwhsux9BkG9BskuRegOnAsGLX2 QZo4tBYUniAKBCLx6oVDsWrZWuxWspu28li4OA== -----END CERTIFICATE-----Generated at Tue May 7 06:29:47 2024 by rpki-client on console-ams.rpki-client.org