$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa File: E206DF40E79011E699B81D0FC4F9AE02.roa (raw, json) Hash identifier: SAA6G9YqOhy0hnk+8K9zJxRbTp07Kne93pAeDS5gSfg= Subject key identifier: C7:A2:4F:C7:A4:72:0F:35:23:5D:00:7A:80:0D:2B:D0:06:0B:E6:A4 Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1B8D Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa Signing time: Fri 20 Oct 2023 14:40:40 +0000 ROA not before: Fri 20 Oct 2023 14:40:40 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 9387 IP address blocks: 119.73.14.0/24 maxlen: 24 119.73.15.0/24 maxlen: 24 119.73.32.0/24 maxlen: 24 119.73.33.0/24 maxlen: 24 119.73.34.0/24 maxlen: 24 119.73.35.0/24 maxlen: 24 119.73.36.0/24 maxlen: 24 119.73.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7053 (0x1b8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Oct 20 14:40:40 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65329167-af83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:79:ab:ee:e1:74:5b:62:c3:5a:ef:63:38: 66:f7:f1:d1:29:ad:f3:71:78:3f:d6:6d:58:de:bb: 22:e8:97:70:82:15:17:0b:b2:67:8c:5d:05:aa:83: d1:a2:75:b8:4f:b5:fe:47:6a:23:21:01:85:be:52: 84:bb:28:67:e1:eb:e0:c9:31:61:e0:c1:23:b0:70: 6e:dc:73:23:c4:32:77:e8:81:32:e2:49:8d:ab:67: 83:be:31:1d:5e:e1:e4:86:6a:6e:10:65:d2:f7:f5: 1c:58:07:01:3d:11:0b:40:d0:36:2c:9f:14:2c:84: e9:1d:18:40:60:fb:cf:af:c5:61:be:48:87:66:67: 14:20:31:1a:2c:fe:c9:7b:63:7a:f4:3f:ab:ff:c8: 0e:8b:2b:75:8a:a1:65:ac:f1:e3:b8:a7:20:e5:33: ac:77:f5:bf:2f:9b:98:d9:7a:f9:b4:d6:a3:80:5d: a7:a6:f5:d3:ac:82:00:6a:26:2f:6c:87:11:29:96: ca:1b:f7:7d:07:a8:6d:f6:b6:c0:6c:5e:b5:18:13: 72:64:f9:c3:0d:c7:95:66:79:2c:7b:44:12:74:90: fb:c9:c2:12:b7:c6:03:5b:70:e2:d2:ec:e8:55:ad: 16:2c:af:ef:af:fc:1e:bb:3b:bd:a3:4a:f7:1e:2c: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A2:4F:C7:A4:72:0F:35:23:5D:00:7A:80:0D:2B:D0:06:0B:E6:A4 X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.73.14.0/23 119.73.32.0-119.73.37.255 Signature Algorithm: sha256WithRSAEncryption 6b:e4:1a:52:de:c5:ac:a4:bb:6b:cc:ba:4b:7e:e3:b2:cd:dc: da:fc:ba:aa:87:61:4e:46:6c:39:5c:7a:3a:a2:c7:4a:0e:64: 5c:9b:6f:95:d4:af:16:a6:4d:58:23:f8:67:90:8b:97:51:51: 99:c3:a6:ca:6b:13:a1:c4:63:07:9e:61:21:36:51:c5:ed:7f: 07:76:3a:40:24:55:28:2e:38:05:ac:3d:5e:0b:c3:82:ff:a9: aa:c0:4c:40:0b:4b:2a:4f:7a:10:86:03:d2:4a:7b:e0:57:bf: 3d:66:aa:c8:15:09:62:2c:5d:63:c4:46:33:60:e1:d2:bb:85: df:c8:a8:e4:40:39:8f:88:77:b5:ea:72:5e:81:b2:53:b7:5a: a5:29:74:40:53:8c:04:f3:ab:02:84:59:fb:72:56:5f:11:5a: 40:ce:1e:8a:ea:6e:ef:7c:5c:f8:65:00:9e:e6:e7:14:fe:7c: ba:e4:ca:ab:60:dc:82:e1:e7:cd:89:f3:0a:2e:46:2c:88:bd: 58:75:8f:49:15:87:b8:d1:c5:d3:af:df:94:a3:59:b9:50:8c: d7:3f:4a:52:42:d4:0e:6f:b4:55:69:b1:c5:9f:cc:d9:31:56: f5:1e:1f:ed:95:42:12:d6:22:fb:b4:ca:25:df:f3:f3:af:a6: ba:bc:10:9f -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICG40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjMxMDIwMTQ0MDQwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMyOTE2Ny1hZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzJ5q+7hdFtiw1rvYzhm9/HRKa3zcXg/1m1Y3rsi6JdwghUXC7JnjF0FqoPR onW4T7X+R2ojIQGFvlKEuyhn4evgyTFh4MEjsHBu3HMjxDJ36IEy4kmNq2eDvjEd XuHkhmpuEGXS9/UcWAcBPRELQNA2LJ8ULITpHRhAYPvPr8VhvkiHZmcUIDEaLP7J e2N69D+r/8gOiyt1iqFlrPHjuKcg5TOsd/W/L5uY2Xr5tNajgF2npvXTrIIAaiYv bIcRKZbKG/d9B6ht9rbAbF61GBNyZPnDDceVZnkse0QSdJD7ycISt8YDW3Di0uzo Va0WLK/vr/weuzu9o0r3HiyeyQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFMeiT8ek cg81I10AeoANK9AGC+akMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvRTIwNkRGNDBF NzkwMTFFNjk5QjgxRDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAF3SQ4wDAMEBXdJIAMEAXdJJDANBgkqhkiG9w0BAQsFAAOC AQEAa+QaUt7FrKS7a8y6S37jss3c2vy6qodhTkZsOVx6OqLHSg5kXJtvldSvFqZN WCP4Z5CLl1FRmcOmymsTocRjB55hITZRxe1/B3Y6QCRVKC44Baw9XgvDgv+pqsBM QAtLKk96EIYD0kp74Fe/PWaqyBUJYixdY8RGM2Dh0ruF38io5EA5j4h3tepyXoGy U7dapSl0QFOMBPOrAoRZ+3JWXxFaQM4eiupu73xc+GUAnubnFP58uuTKq2DcguHn zYnzCi5GLIi9WHWPSRWHuNHF06/flKNZuVCM1z9KUkLUDm+0VWmxxZ/M2TFW9R4f 7ZVCEtYi+7TKJd/z86+murwQnw== -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org