$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/1081C808941911EEA608BF44C4F9AE02.roa File: 1081C808941911EEA608BF44C4F9AE02.roa (raw, json) Hash identifier: NBA4xZn8b1QOMin/xcrcEz1Eu3qA0BG9Pn72hOy8VtE= Subject key identifier: 42:BF:16:22:2A:A6:F9:7A:69:FE:1F:9B:1E:14:01:32:B1:46:F3:13 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 064A Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/1081C808941911EEA608BF44C4F9AE02.roa Signing time: Tue 21 May 2024 11:29:10 +0000 ROA not before: Tue 21 May 2024 11:29:10 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 45820 IP address blocks: 14.194.0.0/18 maxlen: 24 14.194.64.0/18 maxlen: 24 14.194.128.0/18 maxlen: 24 14.194.208.0/20 maxlen: 24 14.194.240.0/20 maxlen: 24 14.195.0.0/18 maxlen: 24 14.195.64.0/19 maxlen: 24 14.195.96.0/19 maxlen: 24 49.200.0.0/14 maxlen: 14 49.202.208.0/24 maxlen: 24 49.249.0.0/17 maxlen: 24 49.249.128.0/18 maxlen: 24 115.160.217.0/24 maxlen: 24 182.156.0.0/18 maxlen: 22 182.156.0.0/22 maxlen: 24 182.156.4.0/23 maxlen: 24 182.156.8.0/21 maxlen: 24 182.156.16.0/22 maxlen: 24 182.156.22.0/23 maxlen: 24 182.156.24.0/23 maxlen: 24 182.156.28.0/22 maxlen: 24 182.156.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Jun 2024 00:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: May 21 11:29:10 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=664c8586-ebee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:bf:42:7a:fc:7c:dd:0f:22:4e:77:d9:81: ba:91:0e:54:a0:de:59:57:fe:60:1d:39:1b:51:7c: 9c:b1:a4:d8:48:dc:25:5e:5f:db:10:db:65:7a:9e: 53:26:c1:cc:39:f7:d0:1f:37:ba:50:aa:61:c8:d4: fe:0a:96:53:e7:86:9f:c7:3f:a1:de:d3:05:29:19: ad:b8:3c:c6:c5:70:2b:1f:13:87:47:11:c7:ac:88: 5d:46:17:24:cc:86:94:a1:c4:ae:d4:6c:12:ea:1c: ce:f9:88:99:43:a7:30:94:3a:b4:bc:87:c2:8d:74: 65:f3:2b:a7:65:8c:69:7d:0d:af:a6:62:e6:5f:a4: 34:cb:3a:29:33:f9:a6:35:b6:a3:8f:d0:b6:a1:f2: 44:82:ba:3b:aa:9d:28:07:c9:b0:48:1b:f8:f0:35: 1b:b9:ba:87:ba:e6:66:c3:c3:e3:0b:b3:f7:f9:30: 63:78:52:af:96:2e:cd:c0:b5:ed:ce:d6:c6:d0:2a: d0:c0:b6:b0:5d:7d:f7:ff:58:e4:3c:d5:d1:52:82: 6d:2e:32:cd:cd:fe:16:45:b7:be:81:18:56:00:dc: a3:81:22:26:15:18:c4:73:5d:aa:64:20:59:94:9d: f0:1d:79:f0:9c:8f:8f:10:e1:fa:59:65:ea:39:c9: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BF:16:22:2A:A6:F9:7A:69:FE:1F:9B:1E:14:01:32:B1:46:F3:13 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/1081C808941911EEA608BF44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.194.0.0-14.194.191.255 14.194.208.0/20 14.194.240.0-14.195.127.255 49.200.0.0/14 49.249.0.0-49.249.191.255 115.160.217.0/24 182.156.0.0/18 Signature Algorithm: sha256WithRSAEncryption c3:ae:1c:79:39:7f:f3:1c:8c:d4:6f:81:0e:5b:fd:3c:39:74: 03:59:8a:86:de:86:7b:b0:e3:00:82:f5:62:19:12:a5:cb:5c: d3:0b:76:30:57:96:79:d0:19:43:f0:c6:00:6b:45:d9:e6:3e: dd:60:52:a8:38:4b:af:af:ea:9c:33:f1:98:9b:5f:c0:2d:11: 0c:cd:79:98:bb:67:48:67:4c:0b:5f:61:e1:40:97:d1:e2:4d: 75:e3:a2:cc:18:5b:43:10:c6:75:49:4e:14:de:85:9b:d0:c6: b6:d3:0a:76:07:fd:e4:36:1d:c6:b5:e9:1b:a7:37:ad:3b:46: b7:0a:5a:05:de:8f:5f:51:0f:80:61:e9:89:3e:f7:7e:a2:1b: ea:6a:16:ab:21:22:05:90:6b:c3:c1:be:1a:2f:b5:d0:1a:b1: a2:e9:4d:af:d5:a5:f3:a0:eb:e3:6f:dd:ee:d6:60:cf:f6:6d: b1:72:36:c8:d5:09:28:16:8c:9a:03:f7:b0:31:4e:94:22:d0: 75:1d:d8:29:8a:d2:f4:87:f5:22:b4:6a:4e:d5:a7:ca:27:eb: a9:af:80:28:8d:9b:02:8f:61:98:83:fa:6b:f6:a7:85:81:e1: 6c:96:f5:12:f2:a5:ee:47:0f:2d:48:2f:d0:2b:a5:2e:a7:a4: 97:3b:80:9c -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjQwNTIxMTEyOTEwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjRjODU4Ni1lYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoe/Qnr8fN0PIk532YG6kQ5UoN5ZV/5gHTkbUXycsaTYSNwlXl/bENtlep5T JsHMOffQHze6UKphyNT+CpZT54afxz+h3tMFKRmtuDzGxXArHxOHRxHHrIhdRhck zIaUocSu1GwS6hzO+YiZQ6cwlDq0vIfCjXRl8yunZYxpfQ2vpmLmX6Q0yzopM/mm Nbajj9C2ofJEgro7qp0oB8mwSBv48DUbubqHuuZmw8PjC7P3+TBjeFKvli7NwLXt ztbG0CrQwLawXX33/1jkPNXRUoJtLjLNzf4WRbe+gRhWANyjgSImFRjEc12qZCBZ lJ3wHXnwnI+PEOH6WWXqOcmIMQIDAQABo4ICzjCCAsowHQYDVR0OBBYEFEK/FiIq pvl6af4fmx4UATKxRvMTMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvMTA4MUM4MDg5 NDE5MTFFRUE2MDhCRjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWAYIKwYBBQUHAQcBAf8E STBHMEUEAgABMD8wCwMDAQ7CAwQGDsKAAwQEDsLQMAwDBAQOwvADBAcOwwADAwIx yDALAwMAMfkDBAYx+YADBABzoNkDBAa2nAAwDQYJKoZIhvcNAQELBQADggEBAMOu HHk5f/McjNRvgQ5b/Tw5dANZiobehnuw4wCC9WIZEqXLXNMLdjBXlnnQGUPwxgBr RdnmPt1gUqg4S6+v6pwz8ZibX8AtEQzNeZi7Z0hnTAtfYeFAl9HiTXXjoswYW0MQ xnVJThTehZvQxrbTCnYH/eQ2Hca16RunN607RrcKWgXej19RD4Bh6Yk+936iG+pq FqshIgWQa8PBvhovtdAasaLpTa/VpfOg6+Nv3e7WYM/2bbFyNsjVCSgWjJoD97Ax TpQi0HUd2CmK0vSH9SK0ak7Vp8on66mvgCiNmwKPYZiD+mv2p4WB4WyW9RLype5H Dy1IL9ArpS6npJc7gJw= -----END CERTIFICATE-----Generated at Mon Jun 3 01:55:13 2024 by rpki-client on console-ams.rpki-client.org