$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/6E042EFCABF011EC92152E22C4F9AE02.roa File: 6E042EFCABF011EC92152E22C4F9AE02.roa (raw, json) Hash identifier: ffEWhmrNXjBc0Nb4WuWVQZiVVzyHTO8bmJ3skIR6GwI= Subject key identifier: C3:11:79:17:37:4A:3E:0B:D3:7B:EC:24:5F:96:D8:75:4F:53:C5:CC Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 258C Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/6E042EFCABF011EC92152E22C4F9AE02.roa Signing time: Fri 28 Jun 2024 16:33:49 +0000 ROA not before: Fri 28 Jun 2024 16:33:49 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 19905 IP address blocks: 58.146.128.0/20 maxlen: 24 58.146.144.0/21 maxlen: 24 59.189.0.0/16 maxlen: 24 222.165.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 15:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9612 (0x258c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53 Validity Not Before: Jun 28 16:33:49 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667ee5ec-14fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4d:bd:0e:a5:da:a0:d4:a5:d2:5d:a1:b5:89: 4a:c2:9d:f1:74:70:a2:c2:96:1e:36:e7:14:c2:7e: c4:84:d2:53:aa:e1:53:07:dc:09:7b:bf:4f:e4:19: 45:af:ac:13:ff:35:b2:9e:35:ca:c3:90:3b:1f:85: 33:80:5f:bb:43:a1:a4:71:d2:c5:71:19:af:c7:05: 31:c1:6f:2b:a2:19:78:6b:66:73:28:df:fb:15:1c: d4:15:f0:78:68:08:3d:31:63:b3:e7:5d:ef:a5:bf: 1e:71:28:64:34:5b:ae:94:54:70:c4:9f:52:fa:1a: ac:c2:b6:f4:54:5e:c5:8b:b4:01:51:7e:b9:5d:a0: aa:a3:5f:9c:fe:7b:46:40:e4:3f:46:2a:ec:56:17: fc:1e:fe:5a:df:a7:dc:2a:85:ff:c3:86:1b:be:80: 97:20:bc:f0:7b:56:88:28:a3:db:9c:7e:1b:60:da: 9f:df:47:93:0d:c2:25:e4:6e:52:0e:45:8d:24:b3: 8c:34:96:06:06:33:c9:b4:04:96:e2:04:54:a7:7e: 4e:d5:b4:fa:c9:26:76:1b:4b:23:d7:3b:19:a9:f5: 83:c5:02:94:f1:2e:45:58:9b:e8:e6:6c:f5:e3:94: b9:b5:38:c9:e9:8a:6d:9f:dc:41:b0:da:84:57:48: 13:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:11:79:17:37:4A:3E:0B:D3:7B:EC:24:5F:96:D8:75:4F:53:C5:CC X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/6E042EFCABF011EC92152E22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.146.128.0-58.146.151.255 59.189.0.0/16 222.165.0.0/17 Signature Algorithm: sha256WithRSAEncryption 61:64:31:d0:52:68:ae:b4:f4:c9:f0:29:46:a6:04:c8:d3:98: 72:1b:2d:68:25:35:a5:3b:db:da:7c:5c:fc:5e:74:38:54:d8: b8:b1:35:a6:3b:25:48:e8:d5:de:8d:12:04:24:b5:be:3e:0d: eb:38:47:dd:0a:93:5c:6f:69:dc:52:1c:d2:6d:04:2f:60:eb: 5e:bf:49:ea:70:09:75:22:aa:cc:d4:d5:b5:97:69:a1:1e:83: 2b:7c:40:d3:a6:97:de:49:27:c9:2d:8f:07:21:e1:c0:c2:2b: 14:35:f6:4d:a6:cc:b1:be:b8:5b:c1:1d:de:ad:77:5a:88:9b: 27:d0:e9:e7:bd:4a:1a:a3:0d:e9:92:8d:00:76:7a:b0:0d:70: f3:fe:d2:04:33:c6:6f:63:d5:33:ed:0f:11:12:21:4b:0e:75: 56:0b:c3:52:25:56:b1:7c:e7:29:94:6c:d9:5a:42:b6:7a:a4: 84:0b:9e:a0:55:62:95:c5:53:68:b5:4f:33:0e:bd:40:e2:75: d6:47:3a:26:76:c2:e1:11:fb:15:d2:e1:17:f3:ea:ea:81:78: 4d:db:5b:ca:aa:6e:61:bb:91:0d:00:b6:1b:c8:68:a8:6d:07: bd:2b:59:33:56:0c:ab:d3:ac:f8:f5:15:de:ac:5e:9f:e7:2f: 1b:48:0f:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjQwNjI4MTYzMzQ5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdlZTVlYy0xNGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv029DqXaoNSl0l2htYlKwp3xdHCiwpYeNucUwn7EhNJTquFTB9wJe79P5BlF r6wT/zWynjXKw5A7H4UzgF+7Q6GkcdLFcRmvxwUxwW8rohl4a2ZzKN/7FRzUFfB4 aAg9MWOz513vpb8ecShkNFuulFRwxJ9S+hqswrb0VF7Fi7QBUX65XaCqo1+c/ntG QOQ/RirsVhf8Hv5a36fcKoX/w4YbvoCXILzwe1aIKKPbnH4bYNqf30eTDcIl5G5S DkWNJLOMNJYGBjPJtASW4gRUp35O1bT6ySZ2G0sj1zsZqfWDxQKU8S5FWJvo5mz1 45S5tTjJ6Yptn9xBsNqEV0gTBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMReRc3 Sj4L03vsJF+W2HVPU8XMMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvNkUwNDJFRkNB QkYwMTFFQzkyMTUyRTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMgYIKwYBBQUHAQcBAf8E IzAhMB8EAgABMBkwDAMEBzqSgAMEAzqSkAMDADu9AwQH3qUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhZDHQUmiutPTJ8ClGpgTI05hyGy1oJTWlO9vafFz8XnQ4VNi4sTWm OyVI6NXejRIEJLW+Pg3rOEfdCpNcb2ncUhzSbQQvYOtev0nqcAl1IqrM1NW1l2mh HoMrfEDTppfeSSfJLY8HIeHAwisUNfZNpsyxvrhbwR3erXdaiJsn0OnnvUoaow3p ko0AdnqwDXDz/tIEM8ZvY9Uz7Q8REiFLDnVWC8NSJVaxfOcplGzZWkK2eqSEC56g VWKVxVNotU8zDr1A4nXWRzomdsLhEfsV0uEX8+rqgXhN21vKqm5hu5ENALYbyGio bQe9K1kzVgyr06z49RXerF6f5y8bSA/6 -----END CERTIFICATE-----Generated at Thu Mar 13 21:54:14 2025 by rpki-client