$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/214E67EA1EF911EDAAC3AE62C4F9AE02.roa File: 214E67EA1EF911EDAAC3AE62C4F9AE02.roa (raw, json) Hash identifier: P+oFsHSrz6Z40GVPmZYxBjW2akRghdlk5wpEVhVL1rI= Subject key identifier: D8:83:DA:19:C8:B9:74:7A:D4:0E:3E:75:36:B6:59:C5:A4:50:99:61 Certificate issuer: /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6 Certificate serial: 0209 Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/214E67EA1EF911EDAAC3AE62C4F9AE02.roa Signing time: Fri 19 Jul 2024 21:58:20 +0000 ROA not before: Fri 19 Jul 2024 21:58:20 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 62651 IP address blocks: 36.255.204.0/24 maxlen: 24 36.255.205.0/24 maxlen: 24 36.255.206.0/24 maxlen: 24 103.209.252.0/24 maxlen: 24 103.209.255.0/24 maxlen: 24 2404:5d80:6000::/40 maxlen: 40 2404:5d80:6100::/40 maxlen: 40 2404:5d80:6600::/40 maxlen: 40 2404:5d80:7200::/40 maxlen: 40 2404:5d80:7800::/40 maxlen: 40 2404:5d80:8200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6 Validity Not Before: Jul 19 21:58:20 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=669ae17b-3597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:75:13:4e:53:67:e4:ae:1c:25:84:bb:45: cd:f8:84:fc:e5:fd:0e:97:be:11:b4:4d:f5:42:fa: 5f:8b:91:fe:bf:a3:c9:26:61:79:3c:c0:22:ad:01: 6d:87:b9:af:5d:c5:09:03:ef:01:84:8d:47:90:64: 5c:88:23:ff:03:0b:71:ff:ab:8e:2f:ff:2f:52:8a: 73:58:e6:19:f6:bf:65:bd:a2:1d:7d:c7:7f:c9:fc: d0:8e:ae:be:d9:a1:7f:66:6f:33:c1:64:90:d9:0b: bd:c9:06:79:54:27:2d:a7:f8:34:13:b9:a7:86:8b: 7f:83:2b:21:1b:20:2f:e0:97:58:7e:e2:61:6d:8e: a8:94:d9:1c:bc:e1:06:44:a7:35:61:3f:f0:24:76: bf:06:da:b2:35:90:3e:c3:2f:11:bb:6d:9b:12:77: d4:a8:09:a9:f9:2e:64:db:95:77:28:0a:d5:22:94: 51:35:4e:9d:03:16:59:e7:5d:0c:30:65:91:62:ff: 27:bf:55:19:82:77:9f:2d:99:4a:11:bb:c0:de:55: 05:70:9f:c6:f1:42:bd:5a:a0:90:64:c8:01:26:d7: f6:54:b9:42:8f:f1:71:e3:2a:81:7c:e9:10:ec:9b: 20:2f:3c:8a:9f:72:c1:b9:2e:ac:b3:c1:28:b0:38: 9d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:83:DA:19:C8:B9:74:7A:D4:0E:3E:75:36:B6:59:C5:A4:50:99:61 X509v3 Authority Key Identifier: keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/214E67EA1EF911EDAAC3AE62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.204.0-36.255.206.255 103.209.252.0/24 103.209.255.0/24 IPv6: 2404:5d80:6000::/39 2404:5d80:6600::/40 2404:5d80:7200::/40 2404:5d80:7800::/40 2404:5d80:8200::/40 Signature Algorithm: sha256WithRSAEncryption 22:8a:1e:0c:11:70:8b:e3:49:8b:3b:c4:22:ce:58:21:42:22: 22:37:1c:e8:ca:5a:9a:2d:d9:ff:78:fc:3d:f2:ca:14:90:c2: 5b:9d:89:e2:d6:55:7d:dc:c0:19:f1:aa:c3:f7:69:7c:6a:9f: 5c:20:d2:12:f0:8f:54:4f:e7:0e:8c:66:0a:98:ad:87:f5:2d: 1e:20:d2:52:75:47:b7:e8:9e:58:97:81:9a:09:ce:35:61:4a: ff:73:2a:70:dd:fa:ab:23:6a:3b:e5:f2:56:62:1d:cd:3a:22: 08:ab:48:61:5e:82:d9:a5:8b:bd:46:b6:64:9b:9b:aa:54:66: a6:cb:df:ad:27:9c:83:5e:2c:1d:ec:99:5b:63:00:ae:ce:90: 09:f4:65:71:fc:ce:d0:61:68:7c:a3:08:c5:2f:52:ca:38:ee: b8:53:d2:7f:cc:34:53:79:b4:3b:df:bd:d0:3f:0d:33:29:95: 9b:3e:c7:68:b5:58:0d:f7:7a:f4:d7:26:63:92:b7:9a:3c:01: 12:d8:6d:e2:6d:fc:f0:25:a1:dd:c8:f4:f6:14:9d:e2:af:69: 7a:5e:c1:96:9d:66:ba:35:8a:1d:d0:f5:e6:43:89:75:7e:a8: 6a:25:7d:02:f5:fd:8b:68:34:d5:e7:86:f5:7a:cc:7a:c4:c1: 93:c3:35:72 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJDRUUxMTAvBgNVBAUTKEY0MEJFOEI1QUQxNkIxODQ3RkMwRDRGNDcwOEY5RDQx NDkzMUFCQTYwHhcNMjQwNzE5MjE1ODIwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjlhZTE3Yi0zNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJd1E05TZ+SuHCWEu0XN+IT85f0Ol74RtE31Qvpfi5H+v6PJJmF5PMAirQFt h7mvXcUJA+8BhI1HkGRciCP/Awtx/6uOL/8vUopzWOYZ9r9lvaIdfcd/yfzQjq6+ 2aF/Zm8zwWSQ2Qu9yQZ5VCctp/g0E7mnhot/gyshGyAv4JdYfuJhbY6olNkcvOEG RKc1YT/wJHa/BtqyNZA+wy8Ru22bEnfUqAmp+S5k25V3KArVIpRRNU6dAxZZ510M MGWRYv8nv1UZgnefLZlKEbvA3lUFcJ/G8UK9WqCQZMgBJtf2VLlCj/Fx4yqBfOkQ 7JsgLzyKn3LBuS6ss8EosDidLwIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFNiD2hnI uXR61A4+dTa2WcWkUJlhMB8GA1UdIwQYMBaAFPQL6LWtFrGEf8DU9HCPnUFJMaum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkNFRS82OEMzNTYzMDEz RkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZUl93TlQwY0ktZFFVa3hx NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBdm90YTBXc1lSX3dOVDBjSS1kUVVreHE2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJDRUUvNjhDMzU2MzAxM0ZGMTFFREEzRjMzOTQxQzRGOUFFMDIvMjE0RTY3RUEx RUY5MTFFREFBQzNBRTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYwYIKwYBBQUHAQcBAf8E VDBSMCAEAgABMBowDAMEAiT/zAMEACT/zgMEAGfR/AMEAGfR/zAuBAIAAjAoAwYB JARdgGADBgAkBF2AZgMGACQEXYByAwYAJARdgHgDBgAkBF2AgjANBgkqhkiG9w0B AQsFAAOCAQEAIooeDBFwi+NJizvEIs5YIUIiIjcc6Mpami3Z/3j8PfLKFJDCW52J 4tZVfdzAGfGqw/dpfGqfXCDSEvCPVE/nDoxmCpith/UtHiDSUnVHt+ieWJeBmgnO NWFK/3MqcN36qyNqO+XyVmIdzToiCKtIYV6C2aWLvUa2ZJubqlRmpsvfrSecg14s HeyZW2MArs6QCfRlcfzO0GFofKMIxS9SyjjuuFPSf8w0U3m0O9+90D8NMymVmz7H aLVYDfd69NcmY5K3mjwBEtht4m388CWh3cj09hSd4q9pel7Blp1mujWKHdD15kOJ dX6oaiV9AvX9i2g01eeG9XrMesTBk8M1cg== -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:23 2024 by rpki-client on console-fra.rpki-client.org