$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa File: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (raw, json) Hash identifier: ttroBuzpyNHaJs78T3ge8SIPw8AYDGc7mDgWt6Iq9qM= Subject key identifier: 70:2B:8D:8D:73:C5:04:85:CA:D1:21:7C:33:EC:7F:B6:4A:66:17:1D Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Certificate serial: 016B Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa Signing time: Thu 19 Oct 2023 05:49:43 +0000 ROA not before: Thu 19 Oct 2023 05:49:43 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 137831 IP address blocks: 143.92.64.0/19 maxlen: 19 143.92.71.0/24 maxlen: 24 143.92.92.0/24 maxlen: 24 143.92.93.0/24 maxlen: 24 143.92.96.0/24 maxlen: 24 143.92.97.0/24 maxlen: 24 143.92.98.0/24 maxlen: 24 143.92.100.0/23 maxlen: 23 143.92.108.0/23 maxlen: 23 143.92.108.0/24 maxlen: 24 147.136.132.0/24 maxlen: 24 147.136.134.0/24 maxlen: 24 147.136.135.0/24 maxlen: 24 147.136.184.0/22 maxlen: 22 147.136.184.0/24 maxlen: 24 147.136.185.0/24 maxlen: 24 147.136.186.0/24 maxlen: 24 147.136.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Validity Not Before: Oct 19 05:49:43 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6530c376-85ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:fe:98:b0:6c:cf:37:95:29:8f:f9:2b:5d: b1:9d:12:55:23:9f:bb:76:ce:1b:d3:89:6d:78:ca: a4:0c:f6:9f:45:d1:ed:93:b8:df:27:0c:5d:c4:48: 43:d7:4c:f8:4b:4f:a1:d0:ec:64:0c:2f:4d:14:1d: 1d:77:f5:02:4b:80:b8:88:49:f1:b8:02:09:99:e5: a1:9b:38:8d:d9:8a:99:92:05:96:26:80:2a:19:a3: 36:90:ae:ef:f7:ed:46:b9:48:e9:83:5d:87:73:55: cb:17:f9:9e:d2:36:72:0c:30:1a:40:28:b4:35:e0: 51:6c:5c:7b:12:0b:02:dd:e6:79:0d:32:3b:6a:62: 8e:47:2e:98:43:dc:c0:c6:fc:ce:6f:77:6b:8f:25: 0e:58:f1:49:0a:2c:23:1f:6d:57:43:08:d1:b0:59: 2f:09:a2:97:35:21:cb:ff:d2:2b:1c:ca:17:4c:24: be:bf:4f:14:fa:91:be:fa:7d:d2:1a:e4:33:b1:f1: 6a:92:ca:84:1c:98:46:53:b5:d2:08:f4:31:f3:82: 7a:cd:4b:38:6b:61:82:63:a4:40:10:c4:92:6f:df: 91:3a:e8:11:aa:67:03:b2:37:ca:11:0b:fe:f6:64: d8:03:cb:71:08:5f:05:33:e3:98:5a:29:7a:0e:97: d8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2B:8D:8D:73:C5:04:85:CA:D1:21:7C:33:EC:7F:B6:4A:66:17:1D X509v3 Authority Key Identifier: keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.92.64.0-143.92.98.255 143.92.100.0/23 143.92.108.0/23 147.136.132.0/24 147.136.134.0/23 147.136.184.0/22 Signature Algorithm: sha256WithRSAEncryption 78:16:7f:c0:a2:09:4f:00:f9:73:81:ae:c6:f7:33:4b:17:28: f1:af:dd:6f:a8:5a:f9:48:aa:56:d9:4e:d9:fa:da:f3:0b:2f: 89:0b:98:65:64:3c:e7:83:81:70:13:aa:b9:eb:51:56:f8:10: b9:2d:6d:50:b5:7b:bf:5a:a7:f9:80:81:e4:2b:b2:1a:70:d0: 84:2c:1c:c6:69:98:0b:d7:33:18:58:da:a1:91:8b:04:dd:bb: 8f:86:50:5a:b5:24:55:aa:a9:ef:97:92:36:04:8f:a4:e3:41: 2a:22:02:61:16:c5:8d:4c:04:66:47:08:5b:f5:e0:65:bc:11: 33:fc:ec:20:87:36:45:b8:80:ed:48:52:27:0e:71:8d:79:78: 1e:c2:8d:8b:1d:37:40:4a:e1:1a:d4:fe:a3:c0:28:34:69:b0: 5e:b9:9b:02:c7:2c:fa:47:df:92:c7:76:24:e8:4c:68:fe:1f: 7c:62:96:bb:84:ab:87:52:85:b2:12:d4:79:78:79:66:83:d4: 0d:a3:e6:4a:e0:c2:02:4b:f9:98:7a:40:f3:26:82:53:03:e7: 1b:6b:9b:6e:57:51:13:e1:a4:d1:94:f4:b1:c9:88:4b:e4:cd: d2:bd:9f:f8:a8:c8:49:3e:20:91:ac:ac:61:ce:03:33:af:89: 6c:a4:09:a5 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw MjM4MzZCQTAwHhcNMjMxMDE5MDU0OTQzWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMwYzM3Ni04NWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJz+mLBszzeVKY/5K12xnRJVI5+7ds4b04lteMqkDPafRdHtk7jfJwxdxEhD 10z4S0+h0OxkDC9NFB0dd/UCS4C4iEnxuAIJmeWhmziN2YqZkgWWJoAqGaM2kK7v 9+1GuUjpg12Hc1XLF/me0jZyDDAaQCi0NeBRbFx7EgsC3eZ5DTI7amKORy6YQ9zA xvzOb3drjyUOWPFJCiwjH21XQwjRsFkvCaKXNSHL/9IrHMoXTCS+v08U+pG++n3S GuQzsfFqksqEHJhGU7XSCPQx84J6zUs4a2GCY6RAEMSSb9+ROugRqmcDsjfKEQv+ 9mTYA8txCF8FM+OYWil6DpfYuwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFHArjY1z xQSFytEhfDPsf7ZKZhcdMB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM5OTgvMzBDQzA4NEEwOERDMTFFREJFREU2MTJCQzRGOUFFMDIvMUVBNTk4NEEw QkUxMTFFRDlFM0FBMTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwwDAMEBo9cQAMEAI9cYgMEAY9cZAMEAY9cbAMEAJOIhAMEAZOI hgMEApOIuDANBgkqhkiG9w0BAQsFAAOCAQEAeBZ/wKIJTwD5c4GuxvczSxco8a/d b6ha+UiqVtlO2fra8wsviQuYZWQ854OBcBOquetRVvgQuS1tULV7v1qn+YCB5Cuy GnDQhCwcxmmYC9czGFjaoZGLBN27j4ZQWrUkVaqp75eSNgSPpONBKiICYRbFjUwE ZkcIW/XgZbwRM/zsIIc2RbiA7UhSJw5xjXl4HsKNix03QErhGtT+o8AoNGmwXrmb Ascs+kffksd2JOhMaP4ffGKWu4Srh1KFshLUeXh5ZoPUDaPmSuDCAkv5mHpA8yaC UwPnG2ubbldRE+Gk0ZT0scmIS+TN0r2f+KjIST4gkaysYc4DM6+JbKQJpQ== -----END CERTIFICATE-----Generated at Fri May 17 06:46:23 2024 by rpki-client on console-ams.rpki-client.org