$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/06239EBADFEA11ED835B4D0EC4F9AE02.roa File: 06239EBADFEA11ED835B4D0EC4F9AE02.roa (raw, json) Hash identifier: yndVn7hcuDMCdpxEcUDVR9meRxJpnYlQ5KdYems+Xe0= Subject key identifier: 1C:D0:69:D6:DF:9B:38:BD:0C:FC:76:EE:13:1A:05:D0:E8:6F:B2:7D Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96 Certificate serial: 2413 Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/06239EBADFEA11ED835B4D0EC4F9AE02.roa Signing time: Tue 20 Aug 2024 16:03:20 +0000 ROA not before: Tue 20 Aug 2024 16:03:20 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 63673 IP address blocks: 203.208.157.0/24 maxlen: 24 203.208.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9235 (0x2413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96 Validity Not Before: Aug 20 16:03:20 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c4be47-0816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c1:89:a5:5c:3a:dc:30:d9:5d:8c:70:1c:64: ed:4d:5b:c6:8c:20:f2:2d:25:30:27:15:0c:9c:b9: 3c:81:1e:11:31:01:61:94:d4:f8:0c:ea:b4:67:33: 13:d2:1c:0f:20:80:66:09:c7:d9:d4:3e:61:a3:c2: 47:39:ea:50:3b:c0:56:05:2b:bb:0f:eb:66:f8:73: a8:8d:19:ad:81:37:b0:7f:8a:dc:c0:92:c6:98:dd: 7d:b4:2e:ae:42:dc:dc:2c:0d:7f:da:d1:fd:d5:bd: 2b:9a:f0:cb:c7:fc:6f:bd:ed:5c:26:8f:ba:b1:d0: 36:10:99:66:5b:24:4e:d9:d3:39:84:6e:c9:80:ee: b7:eb:85:04:d1:76:73:da:40:a4:d7:84:f3:75:e2: 8f:ab:34:32:fc:a2:6b:e8:ff:ea:f3:09:27:eb:4e: 0a:a4:ac:fc:98:8c:82:80:e7:30:c0:5f:44:69:1b: f4:14:a6:ca:9d:97:fc:36:53:e4:c9:38:4b:7a:f7: f1:b7:de:d6:e1:25:17:0a:f6:19:97:99:a3:c6:82: 42:69:ce:7a:64:de:85:c9:0c:5f:1a:65:bd:a6:d2: 8a:23:56:88:6c:dd:da:27:c6:cd:18:a5:e8:9c:cc: 09:c6:6f:9f:18:9d:93:1b:bb:20:04:97:9b:09:14: 3f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D0:69:D6:DF:9B:38:BD:0C:FC:76:EE:13:1A:05:D0:E8:6F:B2:7D X509v3 Authority Key Identifier: keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/06239EBADFEA11ED835B4D0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.208.157.0/24 203.208.170.0/24 Signature Algorithm: sha256WithRSAEncryption 55:72:90:4c:75:2f:05:21:4b:64:5a:a1:4e:f0:99:80:05:77: a9:6c:97:09:85:20:8e:5d:7f:06:92:c6:46:68:26:a2:0a:7d: 87:f2:b8:1b:9e:31:e1:2c:9b:c8:89:f1:c6:19:0b:24:85:83: d6:e3:ae:ce:a3:5f:80:f4:31:25:fb:7c:cf:21:2e:b6:32:4c: 0f:cb:a9:b5:da:ff:a9:01:83:d2:9c:93:85:d1:bb:b0:ed:e3: 3c:c2:b3:77:c6:5e:eb:88:50:6d:fe:2b:3f:de:4c:3a:a5:e5: ff:c4:b5:62:ef:e8:06:bb:2c:ed:ba:61:dd:9d:68:29:5f:46: 7d:3d:4b:21:61:34:82:91:6c:fd:7d:13:86:4d:28:4c:23:b5: 99:84:98:2f:e4:ae:11:ea:6e:1d:ae:44:64:ea:1c:4e:04:e9: 42:f7:85:06:b4:c8:38:55:9b:3b:36:f8:2b:c7:9b:e5:17:59: 1b:6c:8f:73:2d:83:2f:82:63:a0:4e:8d:7e:a6:f1:55:c3:1d: 70:d9:22:85:ee:f5:9f:72:4d:10:53:8d:37:12:87:17:57:83: 12:66:c1:aa:31:ef:54:e8:bd:e1:20:7f:9b:02:b7:2b:1e:fc: 1c:b1:36:da:1e:88:15:9b:6d:b9:84:f3:8c:d6:cb:a4:2d:61: 0c:77:69:57 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICJBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2MkIxMTAvBgNVBAUTKDUwRjIwRUE5RTk3NUFFNEM0Qzg2NjdDQjU3RjdCQ0Y1 NzAyMTVDOTYwHhcNMjQwODIwMTYwMzIwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM0YmU0Ny0wODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMGJpVw63DDZXYxwHGTtTVvGjCDyLSUwJxUMnLk8gR4RMQFhlNT4DOq0ZzMT 0hwPIIBmCcfZ1D5ho8JHOepQO8BWBSu7D+tm+HOojRmtgTewf4rcwJLGmN19tC6u QtzcLA1/2tH91b0rmvDLx/xvve1cJo+6sdA2EJlmWyRO2dM5hG7JgO6364UE0XZz 2kCk14TzdeKPqzQy/KJr6P/q8wkn604KpKz8mIyCgOcwwF9EaRv0FKbKnZf8NlPk yThLevfxt97W4SUXCvYZl5mjxoJCac56ZN6FyQxfGmW9ptKKI1aIbN3aJ8bNGKXo nMwJxm+fGJ2TG7sgBJebCRQ/MQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBzQadbf mzi9DPx27hMaBdDob7J9MB8GA1UdIwQYMBaAFFDyDqnpda5MTIZny1f3vPVwIVyW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYyQi82NEEwNTE0NjYw MTIxMUU1QkU5MjUwNzBDNEY5QUUwMi9VUElPcWVsMXJreE1obWZMVl9lODlYQWhY SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQSU9xZWwxcmt4TWhtZkxWX2U4OVhBaFhKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUM2MkIvNjRBMDUxNDY2MDEyMTFFNUJFOTI1MDcwQzRGOUFFMDIvMDYyMzlFQkFE RkVBMTFFRDgzNUI0RDBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADL0J0DBADL0KowDQYJKoZIhvcNAQELBQADggEBAFVykEx1 LwUhS2RaoU7wmYAFd6lslwmFII5dfwaSxkZoJqIKfYfyuBueMeEsm8iJ8cYZCySF g9bjrs6jX4D0MSX7fM8hLrYyTA/LqbXa/6kBg9Kck4XRu7Dt4zzCs3fGXuuIUG3+ Kz/eTDql5f/EtWLv6Aa7LO26Yd2daClfRn09SyFhNIKRbP19E4ZNKEwjtZmEmC/k rhHqbh2uRGTqHE4E6UL3hQa0yDhVmzs2+CvHm+UXWRtsj3Mtgy+CY6BOjX6m8VXD HXDZIoXu9Z9yTRBTjTcShxdXgxJmwaox71ToveEgf5sCtyse/ByxNtoeiBWbbbmE 84zWy6QtYQx3aVc= -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:19 2024 by rpki-client on console-ams.rpki-client.org