$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C7226A3EA80111EF8102393CC4F9AE02.roa File: C7226A3EA80111EF8102393CC4F9AE02.roa (raw, json) Hash identifier: 5y+4wVS2C7gX4oowe4HlKjwD7FEPq9nQX0H+1a5LSck= Subject key identifier: 20:62:8D:C2:E4:62:87:FD:A4:C3:B7:21:CC:67:5F:62:1C:EE:34:C6 Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 0206 Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C7226A3EA80111EF8102393CC4F9AE02.roa Signing time: Thu 21 Nov 2024 12:11:46 +0000 ROA not before: Thu 21 Nov 2024 12:11:46 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 212238 IP address blocks: 218.33.80.0/22 maxlen: 22 218.33.84.0/22 maxlen: 22 218.33.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 12:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: Nov 21 12:11:46 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=673f2382-dc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8d:5b:cc:c2:5c:49:ad:f2:d0:80:fc:56:63: 83:d5:5a:2d:dc:b1:f2:a8:66:9a:f4:44:7b:d7:03: 1a:cb:9a:d4:3b:2e:11:ad:49:fc:85:ce:ae:94:06: b5:79:88:1d:87:d8:b7:4c:e6:b9:01:52:8b:ff:09: 8b:c0:e5:9c:1d:1c:f8:8b:fe:f6:a9:e7:c8:ea:be: a1:08:d8:4d:ab:d4:80:7a:30:c7:68:d5:0c:cf:5b: d9:7c:12:e1:0f:bb:e2:f7:f9:f1:d2:f4:6e:65:d6: 2f:21:c9:bb:80:43:67:ce:a4:9e:8e:12:6a:bd:ac: 0c:ec:b1:d9:a9:7e:61:81:8a:b4:52:6a:c1:cd:35: 9d:c9:9f:04:31:5b:d2:48:af:e8:e4:97:9e:59:7c: 36:16:70:e1:87:71:a3:c9:1a:d9:a0:d3:fc:a3:c3: 83:78:53:c9:23:88:7d:a6:05:9f:ac:5e:9a:30:37: 25:fd:fd:fa:30:05:39:22:86:91:7d:28:df:83:8c: 8b:42:ff:6a:cc:3c:58:6a:2a:06:b0:c1:81:ff:ef: d9:24:7e:c0:7e:ff:e7:d8:93:16:9e:7c:7a:bb:1a: 0b:1e:f2:51:6a:77:68:f5:9f:94:24:76:7e:76:10: 68:11:07:43:85:40:1e:32:39:3a:1e:19:fa:d1:dd: 2f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:62:8D:C2:E4:62:87:FD:A4:C3:B7:21:CC:67:5F:62:1C:EE:34:C6 X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C7226A3EA80111EF8102393CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.33.80.0-218.33.91.255 Signature Algorithm: sha256WithRSAEncryption a3:b1:ec:78:e3:ed:12:ba:41:e9:45:3e:38:b3:09:f9:47:46: 5c:69:2b:7f:a6:18:da:12:53:2b:ce:7a:7d:20:4e:0e:b1:43: 91:64:ea:75:bf:8f:26:ec:99:6f:64:39:62:0a:18:b1:39:a3: 0e:5a:31:41:67:01:5b:a1:35:72:8b:8f:49:ef:ab:12:1b:70: 01:84:0e:6f:57:c4:4a:1e:48:e2:e7:38:66:d6:70:2b:f7:b1: 94:05:47:08:96:f5:a7:3f:ab:67:7c:8c:6b:2d:a5:ff:c1:af: c0:60:86:91:56:c2:fb:80:32:54:f0:0d:9d:0b:83:8e:35:28: 64:af:0a:23:c7:4d:ed:4b:a8:3b:63:e7:25:34:d7:9e:bc:db: 89:e4:d5:3b:ed:ca:06:da:c2:d9:13:fc:62:c7:38:08:1c:1f: cb:e2:b7:59:a6:9f:1a:42:2d:c8:91:66:45:c4:01:a8:ed:f9: ab:95:76:39:31:f6:9e:15:48:01:53:1d:38:aa:a9:7d:d8:a6: 88:0a:e9:78:76:d9:99:48:53:66:41:8d:28:dd:04:69:a8:ef: 0a:9a:73:11:60:c2:e8:8b:bb:a6:36:51:7f:94:9e:22:66:93: 26:3e:17:04:eb:03:a2:3f:e0:c5:9c:71:74:76:fc:3b:c4:07: 3c:13:b7:e8 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjQxMTIxMTIxMTQ2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNmMjM4Mi1kYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA541bzMJcSa3y0ID8VmOD1Vot3LHyqGaa9ER71wMay5rUOy4RrUn8hc6ulAa1 eYgdh9i3TOa5AVKL/wmLwOWcHRz4i/72qefI6r6hCNhNq9SAejDHaNUMz1vZfBLh D7vi9/nx0vRuZdYvIcm7gENnzqSejhJqvawM7LHZqX5hgYq0UmrBzTWdyZ8EMVvS SK/o5JeeWXw2FnDhh3GjyRrZoNP8o8ODeFPJI4h9pgWfrF6aMDcl/f36MAU5IoaR fSjfg4yLQv9qzDxYaioGsMGB/+/ZJH7Afv/n2JMWnnx6uxoLHvJRando9Z+UJHZ+ dhBoEQdDhUAeMjk6Hhn60d0vSQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFCBijcLk Yof9pMO3IcxnX2Ic7jTGMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvQzcyMjZBM0VB ODAxMTFFRjgxMDIzOTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBNohUAMEAtohWDANBgkqhkiG9w0BAQsFAAOCAQEAo7Hs eOPtErpB6UU+OLMJ+UdGXGkrf6YY2hJTK856fSBODrFDkWTqdb+PJuyZb2Q5YgoY sTmjDloxQWcBW6E1couPSe+rEhtwAYQOb1fESh5I4uc4ZtZwK/exlAVHCJb1pz+r Z3yMay2l/8GvwGCGkVbC+4AyVPANnQuDjjUoZK8KI8dN7UuoO2PnJTTXnrzbieTV O+3KBtrC2RP8Ysc4CBwfy+K3WaafGkItyJFmRcQBqO35q5V2OTH2nhVIAVMdOKqp fdimiArpeHbZmUhTZkGNKN0EaajvCppzEWDC6Iu7pjZRf5SeImaTJj4XBOsDoj/g xZxxdHb8O8QHPBO36A== -----END CERTIFICATE-----Generated at Thu Nov 21 13:40:14 2024 by rpki-client on console-ams.rpki-client.org