$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/AC1FAF84432211EEB1984F73C4F9AE02.roa File: AC1FAF84432211EEB1984F73C4F9AE02.roa (raw, json) Hash identifier: mgj1815xVXc+pk38VYUybraiA6atJYsIUKYOApcGY04= Subject key identifier: 05:BD:F0:3F:D5:E5:75:DB:F2:01:1A:05:CB:E8:0A:07:ED:32:D9:CB Certificate issuer: /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC Certificate serial: 16 Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/AC1FAF84432211EEB1984F73C4F9AE02.roa Signing time: Tue 29 Aug 2023 05:45:45 +0000 ROA not before: Tue 29 Aug 2023 05:45:45 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 10118 IP address blocks: 203.145.72.0/21 maxlen: 24 203.145.80.0/20 maxlen: 24 2407:3100::/32 maxlen: 32 2407:3100::/36 maxlen: 36 2407:3100:1000::/36 maxlen: 36 2407:3100:2000::/36 maxlen: 36 2407:3100:3000::/36 maxlen: 36 2407:3100:4000::/36 maxlen: 36 2407:3100:5000::/36 maxlen: 36 2407:3100:6000::/36 maxlen: 36 2407:3100:7000::/36 maxlen: 36 2407:3100:8000::/36 maxlen: 36 2407:3100:8113::/48 maxlen: 48 2407:3100:9000::/36 maxlen: 36 2407:3100:a000::/36 maxlen: 36 2407:3100:b000::/36 maxlen: 36 2407:3100:c000::/36 maxlen: 36 2407:3100:d000::/36 maxlen: 36 2407:3100:e000::/36 maxlen: 36 2407:3100:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC Validity Not Before: Aug 29 05:45:45 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ed8609-1788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:6b:4d:7a:6b:57:8b:95:1b:e3:9e:81:c4: bc:fa:5d:41:d1:65:6b:76:9e:6e:6f:a3:3d:0d:17: 65:5c:9f:be:7a:14:4d:9f:d1:8d:21:d8:05:88:52: ba:fa:59:59:2d:4d:2b:aa:ca:aa:6d:7a:f6:1d:5b: 51:5a:85:27:a6:a5:e2:3d:13:f8:ee:d1:ee:8f:4e: b1:2d:59:fa:b9:c7:22:d9:5d:27:e9:99:8b:e1:78: 2f:6b:3e:e7:83:0c:1e:ae:c2:19:e4:29:ab:15:c9: c3:5f:f5:ed:44:27:1e:90:25:12:de:15:91:bd:d3: f4:6f:a5:89:7f:aa:fb:12:e5:ad:5e:89:c9:d1:7b: dd:14:3b:8c:ed:23:58:d2:18:e7:a5:8f:bf:31:74: 19:cf:1b:91:6f:d4:6a:1b:69:ed:c1:72:f8:e7:1e: a1:1e:ba:57:41:8e:17:8e:59:e2:30:b8:10:02:6c: 07:66:ce:36:0e:7c:e5:47:89:d4:19:dd:76:3c:2a: 02:d0:2c:26:6d:2f:49:37:11:1d:cf:6a:cf:9c:4f: 55:97:cb:b3:63:3d:44:98:59:5b:a3:dc:d2:da:fc: 66:3c:4d:1e:58:06:a1:ae:96:dc:b7:ca:e1:04:d7: e0:1b:9a:e2:6f:04:72:44:92:0b:76:16:f0:18:9a: f2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BD:F0:3F:D5:E5:75:DB:F2:01:1A:05:CB:E8:0A:07:ED:32:D9:CB X509v3 Authority Key Identifier: keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/AC1FAF84432211EEB1984F73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.145.72.0-203.145.95.255 IPv6: 2407:3100::/32 Signature Algorithm: sha256WithRSAEncryption bd:48:af:a8:4d:50:16:53:4f:ce:2e:03:30:bd:16:ad:7a:1c: 15:b4:73:d0:7b:49:ce:2a:46:08:f4:5a:7f:c7:40:7e:80:a3: a0:4e:d5:9d:9f:35:46:1a:40:5f:a8:50:ba:db:f1:50:a9:b4: 09:30:63:9d:ad:1e:a6:34:51:e2:75:7a:94:2c:2f:54:67:54: 2b:53:31:00:91:c2:c0:97:32:71:b2:13:bc:e4:72:f9:3c:01: 20:0c:0a:5b:8d:92:9c:29:d9:7c:fc:19:39:50:81:f3:6b:5f: 68:5f:8d:9c:70:48:b2:7d:7a:97:4e:db:8e:c8:c3:75:16:7b: 9b:ea:80:4c:52:76:3e:f2:e4:f0:35:2c:ca:a2:9a:d4:45:8a: cd:06:6c:91:c9:1f:f1:3b:a4:a1:53:bc:2e:43:06:72:03:ba: 39:21:2f:56:1d:ab:dd:33:29:69:a4:7f:c3:e2:0b:e8:42:fe: 19:d5:46:fe:00:d3:6f:50:9d:9d:2e:36:f6:df:24:17:d0:0c: 66:bc:79:50:61:75:1f:37:fd:89:75:db:6b:13:f5:e0:98:65: 0f:93:3a:a5:67:76:d3:01:92:60:a0:b2:0c:18:06:2e:18:35: 44:da:89:dd:de:ac:14:0a:e3:b2:af:b1:3a:16:c4:60:77:de: 39:23:d6:5f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NEY0NTExMC8GA1UEBRMoMjQzMjBFQUZGOUE4MjBCOEVEQTU5RTAzRTQwNTU1QzVG MzRGRUZDQzAeFw0yMzA4MjkwNTQ1NDVaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY0ZWQ4NjA5LTE3ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDdWtNemtXi5Ub456BxLz6XUHRZWt2nm5voz0NF2Vcn756FE2f0Y0h2AWIUrr6 WVktTSuqyqptevYdW1FahSempeI9E/ju0e6PTrEtWfq5xyLZXSfpmYvheC9rPueD DB6uwhnkKasVycNf9e1EJx6QJRLeFZG90/RvpYl/qvsS5a1eicnRe90UO4ztI1jS GOelj78xdBnPG5Fv1Gobae3BcvjnHqEeuldBjheOWeIwuBACbAdmzjYOfOVHidQZ 3XY8KgLQLCZtL0k3ER3Pas+cT1WXy7NjPUSYWVuj3NLa/GY8TR5YBqGulty3yuEE 1+AbmuJvBHJEkgt2FvAYmvKLAgMBAAGjggKsMIICqDAdBgNVHQ4EFgQUBb3wP9Xl ddvyARoFy+gKB+0y2cswHwYDVR0jBBgwFoAUJDIOr/moILjtpZ4D5AVVxfNP78ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0RjQ1LzMzNjExOUM0NDJG NjExRUVBMjUyNEQ2M0M0RjlBRTAyL0pESU9yX21vSUxqdHBaNEQ1QVZWeGZOUDc4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkRJT3JfbW9JTGp0cFo0RDVBVlZ4Zk5QNzh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEY0NS8zMzYxMTlDNDQyRjYxMUVFQTI1MjRENjNDNEY5QUUwMi9BQzFGQUY4NDQz MjIxMUVFQjE5ODRGNzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA2BggrBgEFBQcBBwEB/wQn MCUwFAQCAAEwDjAMAwQDy5FIAwQFy5FAMA0EAgACMAcDBQAkBzEAMA0GCSqGSIb3 DQEBCwUAA4IBAQC9SK+oTVAWU0/OLgMwvRatehwVtHPQe0nOKkYI9Fp/x0B+gKOg TtWdnzVGGkBfqFC62/FQqbQJMGOdrR6mNFHidXqULC9UZ1QrUzEAkcLAlzJxshO8 5HL5PAEgDApbjZKcKdl8/Bk5UIHza19oX42ccEiyfXqXTtuOyMN1Fnub6oBMUnY+ 8uTwNSzKoprURYrNBmyRyR/xO6ShU7wuQwZyA7o5IS9WHavdMylppH/D4gvoQv4Z 1Ub+ANNvUJ2dLjb23yQX0AxmvHlQYXUfN/2JddtrE/XgmGUPkzqlZ3bTAZJgoLIM GAYuGDVE2ond3qwUCuOyr7E6FsRgd945I9Zf -----END CERTIFICATE-----Generated at Fri Jun 7 08:56:40 2024 by rpki-client on console-fra.rpki-client.org