$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/6DAF87AA21BA11ECB2027C56C4F9AE02.roa File: 6DAF87AA21BA11ECB2027C56C4F9AE02.roa (raw, json) Hash identifier: qwkFPw4Rc2+jY6s2aO6HPfgbL0rdxDEn0Izi2UbjB9s= Subject key identifier: DE:B7:98:E6:90:97:8D:6D:40:46:D2:35:CC:6F:E6:38:FD:93:FF:8F Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 06AE Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/6DAF87AA21BA11ECB2027C56C4F9AE02.roa Signing time: Sat 02 Sep 2023 21:48:38 +0000 ROA not before: Sat 02 Sep 2023 21:48:38 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 21859 IP address blocks: 43.249.10.0/24 maxlen: 24 43.249.11.0/24 maxlen: 24 103.40.102.0/24 maxlen: 24 103.40.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1710 (0x6ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Sep 2 21:48:38 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=64f3adb6-6330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2c:d4:fc:c9:7e:a5:aa:e4:e8:87:84:13:c8: a0:f5:c3:d9:d0:15:a8:24:be:38:3e:78:9f:a6:a3: 0c:94:92:ca:11:6f:c0:97:d5:9f:d9:a9:41:ad:5a: a2:87:98:80:d4:f9:93:6e:9b:72:f5:69:43:eb:ea: 69:8f:3a:80:ef:4a:67:cd:f1:73:38:57:cb:94:70: ad:06:b8:c9:7c:54:2c:6b:54:59:48:b8:d4:91:ad: 9c:44:07:88:1f:08:87:a7:df:ef:76:72:d9:8c:ac: 14:81:65:9c:b9:02:a7:87:f2:a4:82:9c:06:c8:a3: 02:8d:c7:03:58:e9:8b:80:da:78:7e:2f:fc:4a:0f: 28:32:d6:e5:33:61:c3:20:19:e8:0e:16:7e:44:bb: 7a:e6:dc:f7:35:69:59:11:42:b0:3d:05:ea:2f:13: 27:e4:d3:8e:04:9d:f3:26:2a:b8:94:70:b0:79:e3: 5d:1c:1b:96:e3:6e:3e:86:61:fc:84:3e:2a:2c:90: 14:c9:a0:9b:6f:05:c8:27:a1:f8:d3:5f:08:a2:17: 96:e7:ac:09:6c:15:1c:dc:44:dd:3c:84:bb:16:30: 41:83:b9:ae:35:5f:3d:e7:52:b2:97:b9:05:ea:c9: 94:b7:61:ad:2c:49:8f:08:15:e3:e0:71:11:16:38: ca:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B7:98:E6:90:97:8D:6D:40:46:D2:35:CC:6F:E6:38:FD:93:FF:8F X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/6DAF87AA21BA11ECB2027C56C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.10.0/23 103.40.102.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:c3:94:f3:81:a8:9a:89:fe:d7:e3:8c:8c:06:b2:43:51:b8: 14:aa:d0:75:fc:07:48:ca:4b:1d:59:2a:15:51:78:99:17:fd: 16:fc:76:83:eb:31:4c:97:06:77:ad:94:52:7e:57:d9:c9:68: 86:d2:e2:0a:24:ca:a3:61:c4:df:e7:99:b6:e6:a6:b2:be:f9: 77:eb:32:94:f2:68:0f:ed:4a:d7:16:96:49:79:b6:36:4c:e0: 23:a8:96:68:94:9c:3b:da:c5:53:9d:4c:50:18:e2:86:e6:82: 75:f8:b6:14:45:f6:87:0a:f3:05:38:35:06:4a:e2:3b:52:54: a1:7a:02:a5:f0:e9:8e:96:6f:3f:4b:41:bc:9b:ba:35:91:e4: ac:7c:93:75:e5:22:19:09:5b:54:8a:64:ee:b9:71:07:98:05: bb:76:c9:33:22:9d:6a:bb:cb:31:e2:eb:ad:7b:2d:c0:a9:3a: 73:0d:f6:2d:e5:4c:85:20:0c:4a:c9:7c:84:b8:b2:f3:22:d4: e6:76:69:8a:17:26:52:eb:88:f5:b1:e5:56:95:7f:5f:7a:25: c4:df:05:57:fc:ca:a6:c1:fb:fa:0f:28:b2:96:60:67:f5:c0: 41:b8:11:5f:03:6e:f9:99:4e:4d:ae:ba:c8:3c:b8:e3:24:5f: 3a:d9:e0:89 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjMwOTAyMjE0ODM4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGYzYWRiNi02MzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CzU/Ml+park6IeEE8ig9cPZ0BWoJL44PnifpqMMlJLKEW/Al9Wf2alBrVqi h5iA1PmTbpty9WlD6+ppjzqA70pnzfFzOFfLlHCtBrjJfFQsa1RZSLjUka2cRAeI HwiHp9/vdnLZjKwUgWWcuQKnh/KkgpwGyKMCjccDWOmLgNp4fi/8Sg8oMtblM2HD IBnoDhZ+RLt65tz3NWlZEUKwPQXqLxMn5NOOBJ3zJiq4lHCweeNdHBuW424+hmH8 hD4qLJAUyaCbbwXIJ6H4018IoheW56wJbBUc3ETdPIS7FjBBg7muNV8951Kyl7kF 6smUt2GtLEmPCBXj4HERFjjK3QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFN63mOaQ l41tQEbSNcxv5jj9k/+PMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE5MEYvQjNDQTc2QzBGQTMxMTFFQUJEMjQ5RTdBQzRGOUFFMDIvNkRBRjg3QUEy MUJBMTFFQ0IyMDI3QzU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEr+QoDBAFnKGYwDQYJKoZIhvcNAQELBQADggEBADzDlPOB qJqJ/tfjjIwGskNRuBSq0HX8B0jKSx1ZKhVReJkX/Rb8doPrMUyXBnetlFJ+V9nJ aIbS4gokyqNhxN/nmbbmprK++XfrMpTyaA/tStcWlkl5tjZM4COolmiUnDvaxVOd TFAY4obmgnX4thRF9ocK8wU4NQZK4jtSVKF6AqXw6Y6Wbz9LQbybujWR5Kx8k3Xl IhkJW1SKZO65cQeYBbt2yTMinWq7yzHi6617LcCpOnMN9i3lTIUgDErJfIS4svMi 1OZ2aYoXJlLriPWx5VaVf196JcTfBVf8yqbB+/oPKLKWYGf1wEG4EV8DbvmZTk2u usg8uOMkXzrZ4Ik= -----END CERTIFICATE-----Generated at Wed Apr 24 23:34:26 2024 by rpki-client on console-ams.rpki-client.org