$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa File: 6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa (raw, json) Hash identifier: oQ14XpQ0MO/clWFWPTUq4WuDngumYCY2vqSgo5QgnWE= Subject key identifier: 43:C0:37:4A:CB:8F:0B:95:CF:0F:B9:F3:97:C4:3D:C2:87:A9:9A:A4 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3369 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa Signing time: Tue 30 Jan 2024 16:12:57 +0000 ROA not before: Tue 30 Jan 2024 16:12:57 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 55666 IP address blocks: 43.252.156.0/22 maxlen: 24 49.128.176.0/21 maxlen: 24 103.17.244.0/22 maxlen: 24 103.247.120.0/22 maxlen: 24 103.249.65.0/24 maxlen: 24 103.255.240.0/22 maxlen: 24 111.68.24.0/21 maxlen: 24 112.78.32.0/21 maxlen: 24 116.254.112.0/21 maxlen: 24 119.2.48.0/21 maxlen: 24 203.30.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13161 (0x3369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 30 16:12:57 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65b92009-8ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:07:6e:28:83:50:2d:09:77:dc:21:5c:59: e2:24:3d:c6:ee:fe:8f:b9:2e:46:25:92:c1:57:4b: d3:e3:6a:ec:ea:ca:e7:df:66:1f:dc:f4:46:70:aa: 10:89:71:34:5c:d1:e9:8d:38:02:46:7a:5b:c0:9c: 67:fa:f4:e8:3c:ec:3c:19:ff:2f:d2:e7:9e:60:d6: b7:21:4b:c4:35:c1:dd:22:b7:d8:b7:e9:7a:90:63: 19:b8:58:36:c2:20:0c:89:78:a3:e8:92:27:d3:27: b1:43:81:36:c5:0c:e8:34:4b:d8:98:4a:96:87:57: 76:68:2d:da:c2:df:fe:50:17:2e:74:6b:83:e7:30: 20:98:02:d0:01:1f:9d:a2:9c:eb:a3:2e:29:72:bb: 2b:c7:8e:ba:1f:cd:2d:e5:16:56:9d:d3:26:bf:34: b2:53:50:4b:ba:90:c6:4c:16:55:3c:0b:80:67:07: 9e:6d:bc:b5:bb:83:57:c3:9d:06:d0:5d:6e:9d:23: 30:79:1c:cd:ec:f6:30:06:eb:af:87:f4:0d:8f:8b: 21:11:e7:93:5c:a2:ad:9e:fa:a1:26:c8:b2:d9:48: d0:17:03:9b:ca:8e:c9:d0:51:84:c1:99:3a:01:17: 80:4a:52:a8:a6:41:14:7f:64:b7:8a:a5:5d:ff:0b: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C0:37:4A:CB:8F:0B:95:CF:0F:B9:F3:97:C4:3D:C2:87:A9:9A:A4 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.156.0/22 49.128.176.0/21 103.17.244.0/22 103.247.120.0/22 103.249.65.0/24 103.255.240.0/22 111.68.24.0/21 112.78.32.0/21 116.254.112.0/21 119.2.48.0/21 203.30.236.0/23 Signature Algorithm: sha256WithRSAEncryption 85:ff:d2:ea:a7:ff:62:8c:8a:06:38:cc:93:43:aa:9b:c2:c9: 2f:fc:b2:26:c5:4c:d5:5a:82:b3:21:ea:b9:b4:f5:dd:fd:1a: c7:3e:90:03:16:0a:d1:04:c3:9d:64:94:0b:0d:ae:d1:bf:0f: 44:1f:94:67:18:af:39:80:3b:ff:71:eb:0d:0d:b5:cb:96:d4: 5c:1b:ed:81:3a:44:39:63:7f:95:bc:9d:6b:30:7a:a6:8c:46: 9b:1a:72:b1:cb:88:c4:8e:06:3a:9e:46:93:92:eb:16:79:3e: ef:9f:3a:54:27:6d:45:c3:f2:ec:bc:f8:a4:3a:c9:c2:5b:58: b2:c6:41:f9:96:d1:ad:ec:bc:25:cc:9b:5b:1f:9e:47:34:3b: 58:a7:e4:a9:9f:72:6e:66:60:d3:d6:2e:8b:3d:6a:ef:bd:13: aa:eb:68:68:d3:3a:f4:67:09:07:48:f7:d6:28:f7:17:56:2a: 05:c7:9f:b8:46:fe:46:61:9a:05:7e:39:84:f0:57:e7:21:04: 35:2e:42:6c:c2:a3:f0:6a:70:ee:40:71:47:93:b6:e0:bb:78: 76:0b:4c:94:87:6e:d3:12:5d:ce:c1:30:ef:73:4a:11:2f:13: 27:04:bd:2c:a4:61:fc:ea:00:d3:a6:5b:07:e5:2f:d9:71:03: 87:f6:e4:4a -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgICM2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjQwMTMwMTYxMjU3WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5MjAwOS04ZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYoHbiiDUC0Jd9whXFniJD3G7v6PuS5GJZLBV0vT42rs6srn32Yf3PRGcKoQ iXE0XNHpjTgCRnpbwJxn+vToPOw8Gf8v0ueeYNa3IUvENcHdIrfYt+l6kGMZuFg2 wiAMiXij6JIn0yexQ4E2xQzoNEvYmEqWh1d2aC3awt/+UBcudGuD5zAgmALQAR+d opzroy4pcrsrx466H80t5RZWndMmvzSyU1BLupDGTBZVPAuAZweebby1u4NXw50G 0F1unSMweRzN7PYwBuuvh/QNj4shEeeTXKKtnvqhJsiy2UjQFwObyo7J0FGEwZk6 AReASlKopkEUf2S3iqVd/wuDtwIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFEPAN0rL jwuVzw+585fEPcKHqZqkMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNkQ2QTZCN0FC RTdBMTFFOTlBRERGRDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWwYIKwYBBQUHAQcBAf8E TDBKMEgEAgABMEIDBAIr/JwDBAMxgLADBAJnEfQDBAJn93gDBABn+UEDBAJn//AD BANvRBgDBANwTiADBAN0/nADBAN3AjADBAHLHuwwDQYJKoZIhvcNAQELBQADggEB AIX/0uqn/2KMigY4zJNDqpvCyS/8sibFTNVagrMh6rm09d39Gsc+kAMWCtEEw51k lAsNrtG/D0QflGcYrzmAO/9x6w0NtcuW1Fwb7YE6RDljf5W8nWsweqaMRpsacrHL iMSOBjqeRpOS6xZ5Pu+fOlQnbUXD8uy8+KQ6ycJbWLLGQfmW0a3svCXMm1sfnkc0 O1in5Kmfcm5mYNPWLos9au+9E6rraGjTOvRnCQdI99Yo9xdWKgXHn7hG/kZhmgV+ OYTwV+chBDUuQmzCo/BqcO5AcUeTtuC7eHYLTJSHbtMSXc7BMO9zShEvEycEvSyk YfzqANOmWwflL9lxA4f25Eo= -----END CERTIFICATE-----Generated at Thu May 2 17:18:31 2024 by rpki-client on console-ams.rpki-client.org