$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/06CAA9C230C211ECBB5A4116C4F9AE02.roa File: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (raw, json) Hash identifier: 3qMZp3+M5FZ80FGb08CJJYblZdMa5d9OyBUjhn/KCgc= Subject key identifier: 34:76:7C:AA:D1:4B:50:31:AD:57:7A:6A:C6:52:20:E1:0D:AD:0D:FC Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 03CE Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/06CAA9C230C211ECBB5A4116C4F9AE02.roa Signing time: Sat 09 Mar 2024 01:53:55 +0000 ROA not before: Sat 09 Mar 2024 01:53:55 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 9744 IP address blocks: 203.33.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 974 (0x3ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Mar 9 01:53:55 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65ebc133-60af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ce:5f:9c:9c:35:0f:20:5a:b2:06:12:ed:03: f1:bc:d7:67:ef:c7:ce:35:31:11:31:e8:40:aa:c8: 6b:ab:9a:0b:e9:96:e5:9b:71:61:cc:c8:bd:d6:a3: 4f:5b:33:ff:31:bc:91:6b:36:30:9c:01:3e:65:14: 3d:ab:c9:3e:fd:a4:b4:b3:21:dd:43:e3:44:39:87: e9:9f:a8:ac:47:38:3e:5e:3c:52:55:bf:c0:3f:b9: 6a:43:07:54:54:bd:72:62:3e:bd:3c:74:22:0b:00: ab:8f:29:9f:bd:e0:f3:c1:f4:e6:eb:22:94:2f:8a: 01:d8:85:83:db:4f:94:35:ee:44:21:b0:37:9b:7f: 5c:84:4c:d4:78:25:ef:ae:6f:75:6c:32:17:91:64: 87:8e:9f:3d:3b:e3:f7:17:d1:d6:a8:68:65:9f:7d: 93:92:d6:a1:80:49:f9:ba:b1:da:98:b3:d2:eb:23: d3:8c:d3:4f:42:09:69:54:4a:6c:af:fc:86:f5:59: b7:eb:8c:9e:18:18:a6:ff:8e:fa:79:c5:f0:15:dc: d0:20:8d:19:db:e4:c6:fa:44:ac:47:45:23:c9:d6: 86:3d:2b:ca:4d:b2:a8:91:59:ab:ec:da:27:1b:91: 60:4f:67:4d:e6:f6:f5:46:cc:1a:51:b2:5d:87:14: 17:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:76:7C:AA:D1:4B:50:31:AD:57:7A:6A:C6:52:20:E1:0D:AD:0D:FC X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/06CAA9C230C211ECBB5A4116C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.33.189.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:5d:2d:03:97:d4:72:e1:1d:2b:e8:94:2b:ae:e2:46:5d:90: 83:71:66:5f:62:88:1f:d8:39:38:cf:29:dd:a0:ed:5f:ed:4e: 5a:65:f7:81:0a:b1:f0:a9:5e:14:58:4c:0c:d2:f3:54:fc:a6: 8b:47:21:ba:74:f4:8f:66:d9:c7:4e:93:df:8b:cb:09:05:84: 44:95:3d:d7:75:e9:55:5c:76:d2:df:c7:12:a6:c7:6e:2b:86: a7:85:46:31:56:f3:e0:3d:a3:3a:43:75:e7:fa:16:00:e6:f6: 64:c6:a6:33:05:a4:b9:39:fe:a7:92:b5:52:d7:bf:be:82:fd: c7:26:dd:9d:e6:35:58:f3:f8:33:af:60:83:c9:85:59:0a:2c: f9:79:ed:1f:47:e1:4b:e6:2b:e9:9c:25:1f:79:11:00:9d:9b: 80:d7:f2:05:e2:c0:e7:0b:ca:a3:fd:b9:99:0a:43:fe:81:b5: 60:4c:e3:21:4e:2a:03:83:39:e2:64:04:d9:57:af:53:50:b9: ed:f0:91:3e:6b:49:5f:2f:37:09:a8:2a:22:a6:37:1a:2e:98: 12:b4:9f:ae:ba:a3:94:68:1f:c8:cb:a3:92:0a:4d:03:03:83: 5e:91:5d:c9:f9:46:37:6c:11:51:a9:69:c3:4a:c9:f7:76:e1: 57:14:de:6a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjQwMzA5MDE1MzU1WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWViYzEzMy02MGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy85fnJw1DyBasgYS7QPxvNdn78fONTERMehAqshrq5oL6Zblm3FhzMi91qNP WzP/MbyRazYwnAE+ZRQ9q8k+/aS0syHdQ+NEOYfpn6isRzg+XjxSVb/AP7lqQwdU VL1yYj69PHQiCwCrjymfveDzwfTm6yKUL4oB2IWD20+UNe5EIbA3m39chEzUeCXv rm91bDIXkWSHjp89O+P3F9HWqGhln32TktahgEn5urHamLPS6yPTjNNPQglpVEps r/yG9Vm364yeGBim/476ecXwFdzQII0Z2+TG+kSsR0UjydaGPSvKTbKokVmr7Non G5FgT2dN5vb1RswaUbJdhxQXnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDR2fKrR S1AxrVd6asZSIOENrQ38MB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBCQkYvRTQ5MTEyM0EzMEJGMTFFQ0E4NUM0NDE0QzRGOUFFMDIvMDZDQUE5QzIz MEMyMTFFQ0JCNUE0MTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLIb0wDQYJKoZIhvcNAQELBQADggEBAHtdLQOX1HLhHSvo lCuu4kZdkINxZl9iiB/YOTjPKd2g7V/tTlpl94EKsfCpXhRYTAzS81T8potHIbp0 9I9m2cdOk9+LywkFhESVPdd16VVcdtLfxxKmx24rhqeFRjFW8+A9ozpDdef6FgDm 9mTGpjMFpLk5/qeStVLXv76C/ccm3Z3mNVjz+DOvYIPJhVkKLPl57R9H4UvmK+mc JR95EQCdm4DX8gXiwOcLyqP9uZkKQ/6BtWBM4yFOKgODOeJkBNlXr1NQue3wkT5r SV8vNwmoKiKmNxoumBK0n666o5RoH8jLo5IKTQMDg16RXcn5RjdsEVGpacNKyfd2 4VcU3mo= -----END CERTIFICATE-----Generated at Tue May 7 03:10:20 2024 by rpki-client on console-ams.rpki-client.org