$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa File: 6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa (raw, json) Hash identifier: EtDux/1s+X2yH1VSgNQ2Z9uhe6Rn1M1EShWbZlWx77o= Subject key identifier: 97:FD:EF:B8:79:82:00:6D:E5:66:D9:F1:6C:3A:5B:DF:92:21:E1:93 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 34D4 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa Signing time: Fri 24 Jan 2025 16:02:42 +0000 ROA not before: Fri 24 Jan 2025 16:02:42 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 55666 IP address blocks: 43.252.156.0/22 maxlen: 24 49.128.176.0/21 maxlen: 24 103.17.244.0/22 maxlen: 24 103.247.120.0/22 maxlen: 24 103.249.65.0/24 maxlen: 24 103.255.240.0/22 maxlen: 24 111.68.24.0/21 maxlen: 24 112.78.32.0/21 maxlen: 24 116.254.112.0/21 maxlen: 24 119.2.48.0/21 maxlen: 24 203.30.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 15:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214 Validity Not Before: Jan 24 16:02:42 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6793b9a2-323a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f3:ae:60:78:03:c1:81:a1:24:50:9f:4f:f7: 3f:5b:62:1d:67:aa:19:25:a2:e5:6d:73:ab:c4:ea: 40:81:0b:70:d5:1e:7b:a7:63:7d:a0:18:dd:85:43: 8d:5f:05:c7:d6:87:fc:09:d1:76:db:81:29:9c:15: de:ce:cd:b4:10:22:61:34:1c:01:67:6e:7f:66:40: cf:a8:de:6b:d7:58:63:08:92:ec:23:15:ef:ff:2d: 88:31:34:88:5c:23:4b:c4:22:c2:df:92:57:51:d4: 14:91:db:cb:c7:be:42:03:8c:10:fb:2f:6c:cd:37: 2d:8b:a1:f6:8c:58:cb:7b:61:db:eb:c6:3d:4b:71: 55:ef:bb:e1:aa:c2:d1:d3:4f:4a:d0:9d:ae:80:68: b6:59:10:88:00:f8:fe:1e:21:63:0a:16:61:cf:7a: 57:f8:af:3d:ca:07:11:cd:85:47:13:f2:17:03:6a: 34:f9:86:27:d9:6d:bc:d8:73:ae:50:44:f0:f9:2f: 94:e3:fb:dd:4e:b2:a3:48:e6:47:81:5a:79:2d:4c: 3a:6a:f2:b0:6a:b7:b0:23:0d:bb:fa:5d:d2:f8:72: 0b:98:0e:31:70:a8:bd:69:c1:ff:40:b5:ed:e5:73: f9:78:91:8b:1a:f2:b4:47:94:ae:7c:cc:bd:36:98: 16:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FD:EF:B8:79:82:00:6D:E5:66:D9:F1:6C:3A:5B:DF:92:21:E1:93 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.156.0/22 49.128.176.0/21 103.17.244.0/22 103.247.120.0/22 103.249.65.0/24 103.255.240.0/22 111.68.24.0/21 112.78.32.0/21 116.254.112.0/21 119.2.48.0/21 203.30.236.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:d8:bf:0d:02:6c:67:f7:1c:7c:4f:92:4d:d6:16:4f:33:df: f2:88:a1:82:17:30:3e:b5:94:d3:b1:e3:2a:37:ae:0f:45:8d: c3:c3:b8:a6:3b:27:e4:a1:72:5b:ec:40:ee:67:3a:6f:62:29: 4f:d7:ff:db:24:7a:cf:78:15:c1:58:63:3b:67:70:bd:9d:26: 6d:fa:6d:f7:21:3f:5a:2b:90:86:72:40:65:c6:1d:54:0b:eb: 63:e7:aa:70:b9:39:55:f7:5b:4a:85:c0:20:31:a5:fb:22:d0: 8d:47:0d:b3:a9:3d:71:8b:ba:8d:fa:10:ea:85:e2:e6:92:9a: 54:e6:41:bf:f7:93:2c:f4:a6:e2:d8:32:23:0e:6a:89:df:2a: 0a:8b:69:24:5b:d9:5b:3d:c0:da:3b:4e:f0:07:0e:cc:3e:80: 9e:87:48:73:8c:c0:d1:32:09:ed:c1:f5:a3:a7:bd:0d:dc:b8: d9:f0:07:3a:4a:b1:36:e1:58:72:08:ad:8c:fd:65:cd:75:91: b1:67:22:ea:c5:db:a4:cb:e1:fd:9e:fd:29:36:4d:f7:57:9a: 84:fc:65:f8:80:f1:32:bb:b9:c2:d3:db:87:b5:b4:17:5e:e8: 46:0e:d9:c4:f9:98:49:73:9a:bb:fd:a3:ba:31:7e:95:3d:32: 5a:46:3d:c7 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjUwMTI0MTYwMjQyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkzYjlhMi0zMjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPOuYHgDwYGhJFCfT/c/W2IdZ6oZJaLlbXOrxOpAgQtw1R57p2N9oBjdhUON XwXH1of8CdF224EpnBXezs20ECJhNBwBZ25/ZkDPqN5r11hjCJLsIxXv/y2IMTSI XCNLxCLC35JXUdQUkdvLx75CA4wQ+y9szTcti6H2jFjLe2Hb68Y9S3FV77vhqsLR 009K0J2ugGi2WRCIAPj+HiFjChZhz3pX+K89ygcRzYVHE/IXA2o0+YYn2W282HOu UETw+S+U4/vdTrKjSOZHgVp5LUw6avKwarewIw27+l3S+HILmA4xcKi9acH/QLXt 5XP5eJGLGvK0R5SufMy9NpgW4wIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFJf977h5 ggBt5WbZ8Ww6W9+SIeGTMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNkQ2QTZCN0FC RTdBMTFFOTlBRERGRDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWwYIKwYBBQUHAQcBAf8E TDBKMEgEAgABMEIDBAIr/JwDBAMxgLADBAJnEfQDBAJn93gDBABn+UEDBAJn//AD BANvRBgDBANwTiADBAN0/nADBAN3AjADBAHLHuwwDQYJKoZIhvcNAQELBQADggEB AGzYvw0CbGf3HHxPkk3WFk8z3/KIoYIXMD61lNOx4yo3rg9FjcPDuKY7J+Shclvs QO5nOm9iKU/X/9skes94FcFYYztncL2dJm36bfchP1orkIZyQGXGHVQL62PnqnC5 OVX3W0qFwCAxpfsi0I1HDbOpPXGLuo36EOqF4uaSmlTmQb/3kyz0puLYMiMOaonf KgqLaSRb2Vs9wNo7TvAHDsw+gJ6HSHOMwNEyCe3B9aOnvQ3cuNnwBzpKsTbhWHII rYz9Zc11kbFnIurF26TL4f2e/Sk2TfdXmoT8ZfiA8TK7ucLT24e1tBde6EYO2cT5 mElzmrv9o7oxfpU9MlpGPcc= -----END CERTIFICATE-----Generated at Thu Mar 13 21:51:47 2025 by rpki-client