$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BE6B7B76337911EA8016C03DC4F9AE02.roa File: BE6B7B76337911EA8016C03DC4F9AE02.roa (raw, json) Hash identifier: t0t2H41OSs9bcuWnHLre1o5kYbLG5xg69/nQyymgcE4= Subject key identifier: D1:ED:BC:2C:1A:E3:97:BE:66:CB:31:1F:15:38:0B:F8:A4:63:4A:3A Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 34B4 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BE6B7B76337911EA8016C03DC4F9AE02.roa Signing time: Fri 24 Jan 2025 16:02:13 +0000 ROA not before: Fri 24 Jan 2025 16:02:13 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 132651 IP address blocks: 175.184.236.0/22 maxlen: 22 175.184.236.0/24 maxlen: 24 175.184.237.0/24 maxlen: 24 175.184.238.0/24 maxlen: 24 175.184.239.0/24 maxlen: 24 2403:ba00:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 15:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13492 (0x34b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214 Validity Not Before: Jan 24 16:02:13 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6793b985-b417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:68:92:c8:b7:a9:5d:96:3b:0e:1e:8a:63:02: 54:bb:18:bb:bd:3c:14:ca:93:b2:6a:65:0e:0a:d0: 9d:6f:fd:52:c5:13:2b:95:0a:08:04:45:db:ee:44: 82:53:b8:4c:3c:63:92:10:3c:1d:9a:f1:6f:d2:62: ba:70:6a:97:e1:82:c3:91:21:0b:3c:97:dd:b5:84: 97:7f:01:d9:fa:f8:5d:96:97:e8:53:4a:6a:90:48: 5f:2c:bb:52:3c:66:5a:ae:e9:fd:26:ef:64:9d:8b: c3:29:36:21:02:7f:f6:fb:3b:54:54:56:ca:ca:1a: 8e:10:49:f6:7b:be:9f:ae:e7:68:81:b5:1b:9e:65: 59:c8:67:9a:af:d7:b7:1b:b3:7b:55:e3:60:de:e3: 35:37:ee:46:08:ec:34:ee:fa:cb:dd:29:b9:81:57: 24:22:35:fd:f3:8f:36:77:6c:b5:e8:e7:f1:7f:9c: ad:9a:e8:2a:4e:a6:bc:42:43:c2:db:2e:36:13:89: d8:bd:d3:80:01:ce:5e:ab:7d:3a:fa:c1:ab:04:eb: d8:d6:de:95:ac:a3:ea:ba:4a:65:74:1a:dd:58:6a: 0d:4d:21:d6:e7:54:d0:55:4d:32:fc:16:0d:69:72: f1:8c:cb:af:57:cd:6d:a0:c9:38:0c:f9:a5:86:d8: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:ED:BC:2C:1A:E3:97:BE:66:CB:31:1F:15:38:0B:F8:A4:63:4A:3A X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BE6B7B76337911EA8016C03DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.184.236.0/22 IPv6: 2403:ba00:2000::/40 Signature Algorithm: sha256WithRSAEncryption 2b:78:ac:bc:89:d5:aa:f8:92:a6:2e:43:b0:92:05:77:34:bc: fc:9f:96:5c:e4:c6:00:7a:41:41:e4:e0:a3:41:38:57:b7:33: 2f:4d:b4:a2:c1:67:6e:88:13:fe:bc:d7:04:f3:5c:30:ae:37: 72:8c:c5:20:48:b1:6a:fa:4b:f4:73:62:0b:aa:d2:f8:e6:63: e5:e2:54:ff:b3:87:4d:82:1a:ca:e3:a5:f7:05:57:dc:a0:cd: 19:17:14:7b:b2:a0:91:a6:f8:25:53:d2:e2:31:18:fd:f9:ec: e4:ba:27:c9:52:c1:65:80:50:ee:bd:bd:06:77:66:bb:66:1c: f5:58:b6:2e:6f:49:53:68:09:a2:5a:9c:20:a4:7f:20:94:5e: 38:4d:0f:83:df:be:c0:51:dc:13:48:4d:a5:50:39:7b:f7:7f: 4c:b2:8d:e0:4c:aa:db:37:bd:1c:4d:48:b0:bb:e7:de:ac:1e: ec:e1:cf:50:bd:8e:99:08:4d:c3:80:11:b6:0c:d7:0d:13:28: 01:12:39:f3:9f:67:8b:49:88:67:17:8d:97:2c:f9:ac:3b:ad: 9b:da:5b:7a:f8:a9:94:5e:56:5c:25:a7:80:90:41:36:88:f6: 78:45:1d:1f:1d:47:62:7d:4b:0c:b3:25:1a:40:97:d7:30:0b: 7d:6f:c4:bb -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICNLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjUwMTI0MTYwMjEzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkzYjk4NS1iNDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWiSyLepXZY7Dh6KYwJUuxi7vTwUypOyamUOCtCdb/1SxRMrlQoIBEXb7kSC U7hMPGOSEDwdmvFv0mK6cGqX4YLDkSELPJfdtYSXfwHZ+vhdlpfoU0pqkEhfLLtS PGZarun9Ju9knYvDKTYhAn/2+ztUVFbKyhqOEEn2e76frudogbUbnmVZyGear9e3 G7N7VeNg3uM1N+5GCOw07vrL3Sm5gVckIjX98482d2y16Ofxf5ytmugqTqa8QkPC 2y42E4nYvdOAAc5eq306+sGrBOvY1t6VrKPqukpldBrdWGoNTSHW51TQVU0y/BYN aXLxjMuvV81toMk4DPmlhtgS6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNHtvCwa 45e+ZssxHxU4C/ikY0o6MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQkU2QjdCNzYz Mzc5MTFFQTgwMTZDMDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAKvuOwwDgQCAAIwCAMGACQDugAgMA0GCSqGSIb3DQEBCwUA A4IBAQAreKy8idWq+JKmLkOwkgV3NLz8n5Zc5MYAekFB5OCjQThXtzMvTbSiwWdu iBP+vNcE81wwrjdyjMUgSLFq+kv0c2ILqtL45mPl4lT/s4dNghrK46X3BVfcoM0Z FxR7sqCRpvglU9LiMRj9+ezkuifJUsFlgFDuvb0Gd2a7Zhz1WLYub0lTaAmiWpwg pH8glF44TQ+D377AUdwTSE2lUDl7939Mso3gTKrbN70cTUiwu+ferB7s4c9QvY6Z CE3DgBG2DNcNEygBEjnzn2eLSYhnF42XLPmsO62b2lt6+KmUXlZcJaeAkEE2iPZ4 RR0fHUdifUsMsyUaQJfXMAt9b8S7 -----END CERTIFICATE-----Generated at Mon Apr 7 16:58:44 2025 by rpki-client