$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa File: E206DF40E79011E699B81D0FC4F9AE02.roa (raw, json) Hash identifier: 05JiHZhW4FX5F4m2ta1eoZQOXujb14zXuKofXn8V9ts= Subject key identifier: 6A:6B:B7:0E:FB:A5:C3:B6:B9:2F:D0:7F:C9:6C:E8:C1:7A:07:18:96 Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1C5F Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa Signing time: Mon 28 Oct 2024 14:40:44 +0000 ROA not before: Mon 28 Oct 2024 14:40:44 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 9387 IP address blocks: 119.73.14.0/24 maxlen: 24 119.73.15.0/24 maxlen: 24 119.73.32.0/24 maxlen: 24 119.73.33.0/24 maxlen: 24 119.73.34.0/24 maxlen: 24 119.73.35.0/24 maxlen: 24 119.73.36.0/24 maxlen: 24 119.73.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7263 (0x1c5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Oct 28 14:40:44 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=671fa26c-591e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:60:0c:0f:58:5a:11:09:0e:7a:7c:a7:0d:4b: 28:8f:de:78:13:aa:df:0d:3b:cb:19:be:53:38:8f: a1:28:4e:ef:44:52:09:92:df:0c:cc:79:80:29:2e: e6:bd:94:e1:d7:be:fd:d9:02:fe:9a:d0:29:11:6e: 7b:29:81:32:64:41:ec:e1:24:2a:c8:94:4f:5a:b7: f8:b5:11:34:cd:b0:9a:ac:99:1e:53:a4:30:38:d9: 89:45:1a:b5:73:e8:c9:a4:78:0d:b9:e1:17:48:15: a1:be:67:e5:ed:6f:54:7b:0d:bb:33:08:52:98:6e: 2e:f6:83:f6:a0:01:1a:51:ad:1e:1a:df:d4:be:9e: 27:78:cb:21:97:73:66:78:f7:b8:9b:70:fe:90:04: e9:d5:fc:0a:09:17:b8:37:49:3a:7e:85:99:3b:7b: 31:81:44:fc:02:25:3c:e6:27:31:09:ca:70:50:91: 16:6b:5c:7e:73:3c:50:c6:01:1c:2c:a9:56:b9:27: ba:b2:34:76:38:c8:d7:56:e2:5d:84:65:e0:53:ed: e3:39:7d:72:46:04:95:f4:94:f1:43:55:ec:c9:4a: 07:1c:cc:d9:9a:72:8e:54:e6:bb:1a:dc:63:c3:c6: b2:2d:4d:96:49:b5:30:af:1c:b4:43:aa:72:9f:89: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6B:B7:0E:FB:A5:C3:B6:B9:2F:D0:7F:C9:6C:E8:C1:7A:07:18:96 X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.73.14.0/23 119.73.32.0-119.73.37.255 Signature Algorithm: sha256WithRSAEncryption 7a:72:a2:e4:ef:a3:b1:1a:24:31:ef:24:9f:e7:28:c6:76:f7: 68:d9:f9:bd:1c:99:2e:65:c5:87:6d:9f:84:8b:61:c0:3f:d7: 2c:bc:2f:92:2c:2c:49:f1:a7:5a:d3:3f:5e:7a:b0:94:9f:4d: 9a:65:87:0c:a7:9a:f8:92:e3:15:e2:c1:0d:cf:be:2f:77:86: 18:f6:8e:57:a7:9b:c3:8f:01:9c:f7:2e:e8:09:b3:e6:69:bf: 5b:4b:25:77:03:3e:fe:38:a9:ab:8f:77:68:f6:3a:3a:4a:16: 4f:dc:34:bc:6d:4f:9f:ce:88:b9:1e:fe:45:c4:49:76:5a:d3: 2b:6d:ab:5c:e9:ed:40:56:e8:6e:69:a5:ec:2d:c1:83:5e:c0: 0d:c3:33:4e:9d:a9:05:3b:3f:f2:c4:c6:22:f9:72:b8:5a:f9: bd:eb:bc:5b:49:99:ae:48:9c:bf:95:64:5f:f5:ce:26:51:94: ea:54:d4:3a:c5:c1:1d:92:80:45:3c:07:a7:49:56:bb:1b:23: 0d:73:a8:81:b3:64:ee:24:e3:2a:33:82:0a:bd:52:00:3b:29: b4:b4:c9:7a:dd:f1:d4:55:42:33:ef:1a:c1:ec:ae:29:0c:d9: 20:df:2c:40:e4:79:a5:ca:e0:28:99:11:a2:a5:e3:f8:0e:c5: 5c:26:e8:8a -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICHF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjQxMDI4MTQ0MDQ0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFmYTI2Yy01OTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62AMD1haEQkOenynDUsoj954E6rfDTvLGb5TOI+hKE7vRFIJkt8MzHmAKS7m vZTh17792QL+mtApEW57KYEyZEHs4SQqyJRPWrf4tRE0zbCarJkeU6QwONmJRRq1 c+jJpHgNueEXSBWhvmfl7W9Uew27MwhSmG4u9oP2oAEaUa0eGt/Uvp4neMshl3Nm ePe4m3D+kATp1fwKCRe4N0k6foWZO3sxgUT8AiU85icxCcpwUJEWa1x+czxQxgEc LKlWuSe6sjR2OMjXVuJdhGXgU+3jOX1yRgSV9JTxQ1XsyUoHHMzZmnKOVOa7Gtxj w8ayLU2WSbUwrxy0Q6pyn4nx+QIDAQABo4ICozCCAp8wHQYDVR0OBBYEFGprtw77 pcO2uS/Qf8ls6MF6BxiWMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvRTIwNkRGNDBF NzkwMTFFNjk5QjgxRDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAF3SQ4wDAMEBXdJIAMEAXdJJDANBgkqhkiG9w0BAQsFAAOC AQEAenKi5O+jsRokMe8kn+coxnb3aNn5vRyZLmXFh22fhIthwD/XLLwvkiwsSfGn WtM/XnqwlJ9NmmWHDKea+JLjFeLBDc++L3eGGPaOV6ebw48BnPcu6Amz5mm/W0sl dwM+/jipq493aPY6OkoWT9w0vG1Pn86IuR7+RcRJdlrTK22rXOntQFbobmml7C3B g17ADcMzTp2pBTs/8sTGIvlyuFr5veu8W0mZrkicv5VkX/XOJlGU6lTUOsXBHZKA RTwHp0lWuxsjDXOogbNk7iTjKjOCCr1SADsptLTJet3x1FVCM+8aweyuKQzZIN8s QOR5pcrgKJkRoqXj+A7FXCboig== -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:21 2024 by rpki-client on console-ams.rpki-client.org