$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/214E67EA1EF911EDAAC3AE62C4F9AE02.roa File: 214E67EA1EF911EDAAC3AE62C4F9AE02.roa (raw, json) Hash identifier: nPaDrK6C9XUq6kR/93/V/keDThsg4K4QDwZWkEU2XWM= Subject key identifier: 12:FE:85:A4:0E:65:33:85:6A:53:3D:42:AD:76:B0:D0:4A:69:1E:5F Certificate issuer: /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6 Certificate serial: 01B7 Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/214E67EA1EF911EDAAC3AE62C4F9AE02.roa Signing time: Wed 13 Mar 2024 04:06:27 +0000 ROA not before: Wed 13 Mar 2024 04:06:27 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 62651 IP address blocks: 36.255.204.0/24 maxlen: 24 36.255.206.0/24 maxlen: 24 103.209.252.0/24 maxlen: 24 103.209.255.0/24 maxlen: 24 2404:5d80:6600::/40 maxlen: 40 2404:5d80:7200::/40 maxlen: 40 2404:5d80:7800::/40 maxlen: 40 2404:5d80:8200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 04:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6 Validity Not Before: Mar 13 04:06:27 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f12642-c56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:5d:67:c4:96:b2:25:20:00:ea:bc:31:5f: 4a:9a:59:61:b3:74:50:89:62:0e:0a:dd:8d:85:73: ae:21:94:47:f6:6e:9f:72:3a:a6:e7:d0:95:9f:59: dd:ee:eb:18:e4:21:05:94:c5:f1:98:43:e3:d3:b8: c6:3e:db:e1:26:2b:8a:04:43:30:6d:52:aa:42:1a: 83:6d:65:eb:04:6a:7e:02:cc:ed:59:59:de:55:f7: fd:46:ca:35:40:0c:a2:23:90:83:23:ad:6e:1f:8f: f4:7e:e6:ce:cb:37:8d:6a:0e:f2:02:b3:ad:59:28: a0:0e:9b:9c:f1:4c:3a:c1:2b:5c:b9:8a:60:53:f9: 28:56:8c:e1:d4:96:60:ed:73:38:fb:66:7d:d0:a3: 35:ab:54:b8:3f:81:7f:ec:0b:c8:aa:b3:1a:ab:c1: 6d:7a:b0:49:d9:8e:50:c3:55:90:d3:9e:f1:e2:af: ff:59:87:8d:28:0a:5f:41:a7:6f:27:71:5a:b3:43: 45:fa:42:a6:88:aa:24:d9:e5:b9:3a:0a:1b:64:3a: 8b:62:dd:a0:99:54:95:d6:4c:0c:97:68:97:70:3b: 7e:03:61:7f:ea:19:b2:b1:ee:23:6d:c0:37:90:7c: be:2c:ea:e8:21:0b:0b:4a:ce:e5:91:01:75:93:2a: c2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FE:85:A4:0E:65:33:85:6A:53:3D:42:AD:76:B0:D0:4A:69:1E:5F X509v3 Authority Key Identifier: keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/214E67EA1EF911EDAAC3AE62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.204.0/24 36.255.206.0/24 103.209.252.0/24 103.209.255.0/24 IPv6: 2404:5d80:6600::/40 2404:5d80:7200::/40 2404:5d80:7800::/40 2404:5d80:8200::/40 Signature Algorithm: sha256WithRSAEncryption 69:8e:39:2b:bb:2d:3c:0f:c4:55:5e:33:55:ca:d8:80:79:bd: f2:1f:67:08:64:e3:2d:a1:33:92:c0:c8:12:0e:66:31:bf:22: c5:38:aa:02:f8:72:94:44:d7:2e:40:83:ba:d9:3b:64:62:45: cc:0b:f5:81:39:70:a9:4b:3d:0a:d8:03:eb:72:19:ce:13:bb: 40:77:11:f5:5a:18:2f:e4:3f:21:7d:fe:65:1e:8e:55:c6:69: f7:c6:1c:8c:35:70:2e:30:d8:ed:b0:14:5e:cf:05:d7:18:8a: b7:73:cd:76:9e:2d:8f:d8:48:d1:82:8d:74:e4:75:14:87:a4: 73:fe:75:63:50:c8:ef:15:9c:f9:b3:9f:08:80:21:9e:19:5d: a0:db:7c:05:74:ed:98:ec:f6:7b:5c:f4:42:30:37:9e:7c:a4: fa:cc:1b:09:74:5b:d7:c8:15:06:8c:2a:3e:78:96:fb:94:70: 3b:e1:d2:85:cc:04:b4:7a:58:88:65:dc:ec:0d:40:f1:57:3e: ba:26:5f:2f:a3:34:15:fe:b6:44:90:70:21:7a:73:51:5c:a9: 73:37:af:1c:0f:a8:54:27:e9:c7:37:d2:42:90:6d:50:ac:92: db:21:de:5a:2f:08:ee:dd:6a:84:3b:49:7e:60:89:ae:b8:fc: 79:99:e0:43 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJDRUUxMTAvBgNVBAUTKEY0MEJFOEI1QUQxNkIxODQ3RkMwRDRGNDcwOEY5RDQx NDkzMUFCQTYwHhcNMjQwMzEzMDQwNjI3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWYxMjY0Mi1jNTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArH1dZ8SWsiUgAOq8MV9Kmllhs3RQiWIOCt2NhXOuIZRH9m6fcjqm59CVn1nd 7usY5CEFlMXxmEPj07jGPtvhJiuKBEMwbVKqQhqDbWXrBGp+AsztWVneVff9Rso1 QAyiI5CDI61uH4/0fubOyzeNag7yArOtWSigDpuc8Uw6wStcuYpgU/koVozh1JZg 7XM4+2Z90KM1q1S4P4F/7AvIqrMaq8FterBJ2Y5Qw1WQ057x4q//WYeNKApfQadv J3Fas0NF+kKmiKok2eW5OgobZDqLYt2gmVSV1kwMl2iXcDt+A2F/6hmyse4jbcA3 kHy+LOroIQsLSs7lkQF1kyrCFQIDAQABo4ICzzCCAsswHQYDVR0OBBYEFBL+haQO ZTOFalM9Qq12sNBKaR5fMB8GA1UdIwQYMBaAFPQL6LWtFrGEf8DU9HCPnUFJMaum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkNFRS82OEMzNTYzMDEz RkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZUl93TlQwY0ktZFFVa3hx NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBdm90YTBXc1lSX3dOVDBjSS1kUVVreHE2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJDRUUvNjhDMzU2MzAxM0ZGMTFFREEzRjMzOTQxQzRGOUFFMDIvMjE0RTY3RUEx RUY5MTFFREFBQzNBRTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWQYIKwYBBQUHAQcBAf8E SjBIMB4EAgABMBgDBAAk/8wDBAAk/84DBABn0fwDBABn0f8wJgQCAAIwIAMGACQE XYBmAwYAJARdgHIDBgAkBF2AeAMGACQEXYCCMA0GCSqGSIb3DQEBCwUAA4IBAQBp jjkruy08D8RVXjNVytiAeb3yH2cIZOMtoTOSwMgSDmYxvyLFOKoC+HKURNcuQIO6 2TtkYkXMC/WBOXCpSz0K2APrchnOE7tAdxH1Whgv5D8hff5lHo5Vxmn3xhyMNXAu MNjtsBRezwXXGIq3c812ni2P2EjRgo105HUUh6Rz/nVjUMjvFZz5s58IgCGeGV2g 23wFdO2Y7PZ7XPRCMDeefKT6zBsJdFvXyBUGjCo+eJb7lHA74dKFzAS0eliIZdzs DUDxVz66Jl8vozQV/rZEkHAhenNRXKlzN68cD6hUJ+nHN9JCkG1QrJLbId5aLwju 3WqEO0l+YImuuPx5meBD -----END CERTIFICATE-----Generated at Fri May 17 06:18:07 2024 by rpki-client on console-fra.rpki-client.org