$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/6D106CEE3AA011EB963B4842C4F9AE02.roa File: 6D106CEE3AA011EB963B4842C4F9AE02.roa (raw, json) Hash identifier: dIOO+N+ZrFHeKmWGUD9CmhvwX/HZ9yoGdGFIS58lszc= Subject key identifier: 73:3D:FB:7B:C5:7E:19:73:24:20:7B:C0:8A:64:9A:69:3A:5E:F4:4F Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 33AE Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/6D106CEE3AA011EB963B4842C4F9AE02.roa Signing time: Mon 18 Mar 2024 14:50:43 +0000 ROA not before: Mon 18 Mar 2024 14:50:43 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 37978 IP address blocks: 202.7.8.0/21 maxlen: 21 203.5.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13230 (0x33ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Mar 18 14:50:43 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f854c3-afd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cd:b2:58:70:26:df:23:15:b0:45:95:f7:5c: fe:aa:c9:88:16:65:f8:3a:5b:94:76:fc:d6:45:95: fb:58:78:3b:08:56:31:53:dd:28:01:38:55:90:29: 29:58:2f:9c:50:56:34:25:a7:19:7e:d1:33:f2:28: d4:19:9c:34:88:1b:c3:8b:04:83:29:ab:06:b3:78: 09:e0:11:56:46:ad:dc:64:0c:c9:b7:73:89:b2:4d: c7:b9:0a:f7:f5:a4:45:67:b3:df:4b:09:ca:a4:69: 6b:7b:e0:80:13:68:6b:66:c2:85:db:80:4e:0f:12: 22:02:a9:5f:5c:43:48:58:26:5b:c7:82:bf:d2:25: 67:5d:e2:f4:36:2e:23:8f:b0:94:c7:98:06:32:9f: a6:bc:ac:5b:cd:71:f6:01:b5:9b:5b:2d:a6:68:06: f5:5f:fa:cf:c2:15:4e:6e:6a:df:69:96:d1:c7:5a: 83:20:4c:fc:f0:78:8a:4e:6b:1c:7e:d6:3f:bf:a6: 12:c6:6c:5e:90:01:52:6a:c5:02:f8:fb:6f:85:a7: 10:04:96:4f:16:39:8b:52:92:6c:a6:57:ac:47:ea: 0b:ef:ed:f7:24:6f:1d:ac:58:67:b8:ea:30:04:3f: 23:8e:79:d0:90:5d:46:50:76:cf:0f:f5:3c:ac:a1: 2a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3D:FB:7B:C5:7E:19:73:24:20:7B:C0:8A:64:9A:69:3A:5E:F4:4F X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/6D106CEE3AA011EB963B4842C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.7.8.0/21 203.5.121.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:e7:f6:38:52:1e:b1:e1:1d:cc:5b:57:48:9f:51:01:df:56: 6b:c3:cb:25:8c:aa:0c:02:ff:ae:fa:84:44:5f:53:fa:51:2c: 1a:70:51:cc:7e:19:ce:0d:f5:15:4b:9a:b1:c0:32:55:60:5c: e3:fa:c7:77:fd:79:0b:b0:c7:9f:53:1d:72:5c:7b:32:c2:8c: 84:7a:a8:8a:68:e3:de:cb:aa:f0:bb:68:4d:76:47:ab:2f:5b: 32:95:01:56:4d:8b:0c:ca:59:ff:d2:e6:ad:91:e0:f2:3b:7f: 60:ff:1e:e0:8c:05:a7:72:ae:c1:11:46:04:13:a6:61:07:ef: 06:4b:e9:8c:9e:4c:4d:4b:c4:68:2b:ae:63:d7:0c:8b:27:7f: 16:91:24:7e:8a:da:ae:ac:51:0b:fc:e9:4f:07:0c:2a:2b:76: b5:6b:29:fa:bc:2f:57:a7:0a:59:32:50:01:90:05:4d:aa:5c: 8f:3c:a0:f9:d2:6f:dd:12:d5:b2:33:cc:4f:17:64:56:f1:1d: 04:4d:12:8f:9b:82:c5:f9:d0:a4:8c:f3:bc:01:f9:c0:b1:7c: ea:38:db:dc:90:cf:58:9d:59:57:42:a9:db:fb:21:77:50:b4: a1:e7:23:cb:b3:c2:c8:7e:e7:1c:8a:d2:22:5a:ab:bc:f0:aa: be:ce:4a:e0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICM64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjQwMzE4MTQ1MDQzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWY4NTRjMy1hZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2M2yWHAm3yMVsEWV91z+qsmIFmX4OluUdvzWRZX7WHg7CFYxU90oAThVkCkp WC+cUFY0JacZftEz8ijUGZw0iBvDiwSDKasGs3gJ4BFWRq3cZAzJt3OJsk3HuQr3 9aRFZ7PfSwnKpGlre+CAE2hrZsKF24BODxIiAqlfXENIWCZbx4K/0iVnXeL0Ni4j j7CUx5gGMp+mvKxbzXH2AbWbWy2maAb1X/rPwhVObmrfaZbRx1qDIEz88HiKTmsc ftY/v6YSxmxekAFSasUC+PtvhacQBJZPFjmLUpJsplesR+oL7+33JG8drFhnuOow BD8jjnnQkF1GUHbPD/U8rKEq5QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHM9+3vF fhlzJCB7wIpkmmk6XvRPMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzAzMDQvQUI4MjQ5QjIxRDhFMTFFMkIxODIyNkVEMDhCMDJDRDIvNkQxMDZDRUUz QUEwMTFFQjk2M0I0ODQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAPKBwgDBADLBXkwDQYJKoZIhvcNAQELBQADggEBAC7n9jhS HrHhHcxbV0ifUQHfVmvDyyWMqgwC/676hERfU/pRLBpwUcx+Gc4N9RVLmrHAMlVg XOP6x3f9eQuwx59THXJcezLCjIR6qIpo497LqvC7aE12R6svWzKVAVZNiwzKWf/S 5q2R4PI7f2D/HuCMBadyrsERRgQTpmEH7wZL6YyeTE1LxGgrrmPXDIsnfxaRJH6K 2q6sUQv86U8HDCordrVrKfq8L1enClkyUAGQBU2qXI88oPnSb90S1bIzzE8XZFbx HQRNEo+bgsX50KSM87wB+cCxfOo429yQz1idWVdCqdv7IXdQtKHnI8uzwsh+5xyK 0iJaq7zwqr7OSuA= -----END CERTIFICATE-----Generated at Tue May 14 17:00:15 2024 by rpki-client on console-fra.rpki-client.org