$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0259CB6ABE7911E990831772C4F9AE02.roa File: 0259CB6ABE7911E990831772C4F9AE02.roa (raw, json) Hash identifier: 9qnecdxplgEAeXpJj7SpFpmpz1QDv2PPu9BQf79cpCg= Subject key identifier: AB:C2:FA:96:26:24:5A:39:A0:34:80:D2:60:7D:20:FA:EE:23:E7:05 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3424 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0259CB6ABE7911E990831772C4F9AE02.roa Signing time: Tue 30 Jul 2024 16:02:54 +0000 ROA not before: Tue 30 Jul 2024 16:02:54 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 55674 IP address blocks: 101.203.168.0/22 maxlen: 24 2405:b40::/32 maxlen: 32 2405:b40::/48 maxlen: 48 2405:b40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 20:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13348 (0x3424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jul 30 16:02:54 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66a90eae-4cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:be:fb:50:19:d9:8c:fd:7f:ac:ef:7f:6e:46: ef:e3:6f:14:be:19:12:2f:d5:36:55:f5:69:e9:b8: ba:39:37:f3:ad:ae:62:6c:71:d4:98:8e:b9:c6:f8: f6:1d:5e:16:58:8f:b9:a2:d8:99:b0:a4:7b:77:44: b8:19:88:11:7e:c6:c9:85:67:37:75:13:36:1f:ed: f0:1c:30:45:bc:23:39:35:55:ac:54:f8:bb:b7:7f: 77:59:a1:4a:e4:59:8c:97:84:99:8e:b0:dc:a3:16: a0:f6:f7:01:af:88:34:b2:46:7d:4d:2a:8a:68:e1: e2:0d:5a:8c:5f:c7:e2:2d:0a:d0:87:e8:17:bb:f0: 0b:c6:2e:79:98:61:8f:a1:df:d5:5a:39:a2:a5:cb: 70:1c:e0:86:06:1f:83:3a:92:e9:f4:59:cb:a1:7f: 0d:fc:74:21:20:4a:af:50:52:fc:87:35:a8:42:f5: 41:fc:4d:fe:2a:18:6f:14:14:d1:c1:a1:80:2b:1b: f7:ac:ac:0a:b6:47:7e:47:16:2e:11:2c:46:96:05: 6f:4c:a3:5b:88:4d:62:8b:a9:2f:c9:08:25:5f:ba: 1d:f3:c9:9e:32:43:a0:7c:64:ee:cf:7c:be:66:5f: 26:29:9d:7b:96:a6:53:2a:92:2e:88:09:1d:19:30: ed:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C2:FA:96:26:24:5A:39:A0:34:80:D2:60:7D:20:FA:EE:23:E7:05 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0259CB6ABE7911E990831772C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.203.168.0/22 IPv6: 2405:b40::/32 Signature Algorithm: sha256WithRSAEncryption 30:de:7a:13:11:79:d0:0e:b9:47:6a:34:3e:d2:c9:74:74:ae: 7f:12:09:e9:64:aa:92:d3:8f:5c:74:94:19:bb:67:8b:47:d3: 40:1f:ca:8c:ae:2c:a6:90:9a:01:f1:ba:da:8f:fa:90:33:d8: 1f:fd:e5:32:c7:4e:33:03:07:c0:82:55:f3:bf:10:31:d1:4d: 16:81:63:6a:ec:6e:92:14:b8:8f:f6:70:39:90:c8:bc:3e:8b: 3c:43:dd:76:27:4f:d4:05:c7:e8:37:01:d2:2a:29:40:59:5b: 81:56:ec:ed:d4:ec:bf:17:04:ec:f1:67:fa:f9:26:b2:51:df: 45:a5:98:dd:8c:d3:75:c1:c8:9b:cf:58:79:ee:b2:2e:a4:12: b0:69:c0:53:d1:f7:ed:6e:80:1b:43:d4:3f:de:5f:3f:d1:d0: c6:fd:49:42:5b:fa:e2:95:e1:62:2c:28:f4:f9:72:5d:05:57: 80:85:b4:5e:e8:95:39:71:4d:a5:b9:28:da:f6:eb:01:73:7d: 70:e5:20:23:9a:0e:d1:a7:79:ab:f8:8c:2e:d0:41:e0:b3:2a: c4:eb:df:e9:df:d8:a0:e9:a3:df:4c:7b:03:7b:64:38:d2:26: 71:58:f6:e0:b9:4f:ac:bd:77:31:f0:7e:c0:d3:3a:4a:b1:f6: 53:4d:3d:55 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICNCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjQwNzMwMTYwMjU0WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5MGVhZS00Y2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9L77UBnZjP1/rO9/bkbv428UvhkSL9U2VfVp6bi6OTfzra5ibHHUmI65xvj2 HV4WWI+5otiZsKR7d0S4GYgRfsbJhWc3dRM2H+3wHDBFvCM5NVWsVPi7t393WaFK 5FmMl4SZjrDcoxag9vcBr4g0skZ9TSqKaOHiDVqMX8fiLQrQh+gXu/ALxi55mGGP od/VWjmipctwHOCGBh+DOpLp9FnLoX8N/HQhIEqvUFL8hzWoQvVB/E3+KhhvFBTR waGAKxv3rKwKtkd+RxYuESxGlgVvTKNbiE1ii6kvyQglX7od88meMkOgfGTuz3y+ Zl8mKZ17lqZTKpIuiAkdGTDtVQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKvC+pYm JFo5oDSA0mB9IPruI+cFMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMDI1OUNCNkFC RTc5MTFFOTkwODMxNzcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJly6gwDQQCAAIwBwMFACQFC0AwDQYJKoZIhvcNAQELBQAD ggEBADDeehMRedAOuUdqND7SyXR0rn8SCelkqpLTj1x0lBm7Z4tH00AfyoyuLKaQ mgHxutqP+pAz2B/95TLHTjMDB8CCVfO/EDHRTRaBY2rsbpIUuI/2cDmQyLw+izxD 3XYnT9QFx+g3AdIqKUBZW4FW7O3U7L8XBOzxZ/r5JrJR30WlmN2M03XByJvPWHnu si6kErBpwFPR9+1ugBtD1D/eXz/R0Mb9SUJb+uKV4WIsKPT5cl0FV4CFtF7olTlx TaW5KNr26wFzfXDlICOaDtGneav4jC7QQeCzKsTr3+nf2KDpo99MewN7ZDjSJnFY 9uC5T6y9dzHwfsDTOkqx9lNNPVU= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:21 2024 by rpki-client on console-fra.rpki-client.org