$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/206969823B9411EB9F059D7EC4F9AE02.roa File: 206969823B9411EB9F059D7EC4F9AE02.roa (raw, json) Hash identifier: bCnEGwf5LD7neGa0atn1Npn9cznKZ5NMSfgS5ShjKiU= Subject key identifier: 0B:94:B2:64:87:81:3A:4A:92:A0:E4:8B:90:B2:62:46:4E:6C:8F:80 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0AFE Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/206969823B9411EB9F059D7EC4F9AE02.roa Signing time: Fri 16 Aug 2024 20:28:23 +0000 ROA not before: Fri 16 Aug 2024 20:28:23 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 0 IP address blocks: 203.190.227.0/24 maxlen: 24 203.190.230.0/24 maxlen: 24 2001:de8:4::/64 maxlen: 64 2001:de8:5::/64 maxlen: 64 2001:de8:5:1::/64 maxlen: 64 2001:de8:6::/64 maxlen: 64 2001:de8:6:1::/64 maxlen: 64 2001:de8:6:2::/64 maxlen: 64 2001:de8:7::/64 maxlen: 64 2001:de8:7:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Aug 16 20:28:23 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66bfb666-eafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:2f:a3:8b:48:fc:91:20:a5:c7:be:22:ec: a3:22:62:57:3f:b6:16:43:94:5c:1f:df:c3:c9:ed: 1f:64:74:d0:73:4c:34:4c:43:06:63:f3:2e:f0:e5: 33:c9:a2:31:df:9e:23:57:9c:6b:17:a0:bb:8c:f5: ca:cb:7c:33:a3:8e:aa:de:d2:b9:28:c8:92:e6:a4: 85:6b:dc:49:88:6f:84:fd:4f:8c:71:8e:ac:8c:5e: 22:25:51:12:9a:86:70:4a:f6:14:64:8c:e8:6f:4f: 42:64:82:90:3c:b8:2f:ba:4a:3c:1c:14:2e:05:b2: 8e:d6:53:a4:ce:2d:bf:4d:1e:90:ca:4d:f0:2e:f6: 1b:0d:76:dd:94:aa:f7:00:9d:da:4e:81:9e:f3:25: e2:8b:cc:ab:b7:5a:f3:d9:fb:a0:ec:12:40:da:b3: e7:3a:e3:53:b1:24:76:75:69:5d:5d:95:b0:9c:5b: 53:46:6d:ab:60:92:9b:fc:f2:51:02:bc:b3:51:3c: 89:28:a0:da:ff:a2:f9:47:15:dd:08:3d:f1:c8:21: 08:4a:53:9f:05:73:a1:8c:24:4d:a2:f0:4b:2c:1a: 53:7b:51:f7:b7:d5:f2:0c:7d:d8:14:1f:3b:14:9c: 57:c9:07:0b:76:24:e1:b1:6f:0d:30:c2:83:e6:5c: 3b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:94:B2:64:87:81:3A:4A:92:A0:E4:8B:90:B2:62:46:4E:6C:8F:80 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/206969823B9411EB9F059D7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.190.227.0/24 203.190.230.0/24 IPv6: 2001:de8:4::/64 2001:de8:5::/63 2001:de8:6::-2001:de8:6:2:ffff:ffff:ffff:ffff 2001:de8:7::/63 Signature Algorithm: sha256WithRSAEncryption 62:50:70:da:3e:e1:38:5c:0a:82:18:01:72:01:5c:7f:47:f0: 9a:29:3a:42:b5:13:22:82:9a:d1:80:e7:75:9e:f6:5b:90:e2: 8f:9f:e0:3d:28:69:3b:ff:96:b0:78:df:fd:a5:51:31:e0:04: cf:41:c9:85:e7:db:7e:2b:8c:bf:19:d4:66:c8:bb:21:cb:cc: d8:7d:03:bd:55:b9:c4:43:46:ff:be:fc:6f:9b:af:bb:44:a0: e1:2c:c5:20:03:14:25:b8:b2:8f:69:0c:b2:84:3d:7a:01:ac: 4b:22:1f:6c:db:be:3d:00:74:42:50:83:53:5f:26:6a:0f:9d: 15:0f:4f:68:4d:dc:2a:b8:55:30:bb:a7:63:e6:ad:f1:42:ad: d4:7d:d0:22:4e:bd:1c:a0:ef:c4:35:5f:91:66:ed:c7:bc:6f: d4:8c:30:c4:56:3a:79:11:34:ff:19:c9:1f:e5:ed:99:6f:5b: 2d:f6:46:94:bb:1f:ab:60:70:97:79:09:d3:23:7e:0f:ce:cc: 06:bd:2c:a9:bb:ce:1a:cf:f1:b4:64:98:bc:2f:bc:ae:5a:55: e9:30:5e:84:85:ef:3a:3b:5f:b3:06:88:a0:29:d4:c0:cb:ba: a8:23:98:5f:b5:69:d5:59:08:9e:00:51:42:b2:fe:37:d2:5c: b4:2e:ae:09 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjQwODE2MjAyODIzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmYjY2Ni1lYWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwogvo4tI/JEgpce+IuyjImJXP7YWQ5RcH9/Dye0fZHTQc0w0TEMGY/Mu8OUz yaIx354jV5xrF6C7jPXKy3wzo46q3tK5KMiS5qSFa9xJiG+E/U+McY6sjF4iJVES moZwSvYUZIzob09CZIKQPLgvuko8HBQuBbKO1lOkzi2/TR6Qyk3wLvYbDXbdlKr3 AJ3aToGe8yXii8yrt1rz2fug7BJA2rPnOuNTsSR2dWldXZWwnFtTRm2rYJKb/PJR AryzUTyJKKDa/6L5RxXdCD3xyCEISlOfBXOhjCRNovBLLBpTe1H3t9XyDH3YFB87 FJxXyQcLdiThsW8NMMKD5lw7WwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFAuUsmSH gTpKkqDki5CyYkZObI+AMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvMjA2OTY5ODIz Qjk0MTFFQjlGMDU5RDdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZAYIKwYBBQUHAQcBAf8E VTBTMBIEAgABMAwDBADLvuMDBADLvuYwPQQCAAIwNwMJACABDegABAAAAwkBIAEN 6AAFAAAwFAMHASABDegABgMJACABDegABgACAwkBIAEN6AAHAAAwDQYJKoZIhvcN AQELBQADggEBAGJQcNo+4ThcCoIYAXIBXH9H8JopOkK1EyKCmtGA53We9luQ4o+f 4D0oaTv/lrB43/2lUTHgBM9ByYXn234rjL8Z1GbIuyHLzNh9A71VucRDRv++/G+b r7tEoOEsxSADFCW4so9pDLKEPXoBrEsiH2zbvj0AdEJQg1NfJmoPnRUPT2hN3Cq4 VTC7p2PmrfFCrdR90CJOvRyg78Q1X5Fm7ce8b9SMMMRWOnkRNP8ZyR/l7ZlvWy32 RpS7H6tgcJd5CdMjfg/OzAa9LKm7zhrP8bRkmLwvvK5aVekwXoSF7zo7X7MGiKAp 1MDLuqgjmF+1adVZCJ4AUUKy/jfSXLQurgk= -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:49 2024 by rpki-client on console-ams.rpki-client.org