$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/F6C1C6C85F7611EFBFEE134FC4F9AE02.roa File: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (raw, json) Hash identifier: 1DhhlreUt8zg3cfxMSneWtvTg2HGZV+ffd2QwHY8Xbg= Subject key identifier: F5:75:05:B7:83:B4:1C:49:59:4E:C0:66:90:81:B7:4E:D0:2F:8E:3B Certificate issuer: /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Certificate serial: 0ABB Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/F6C1C6C85F7611EFBFEE134FC4F9AE02.roa Signing time: Sat 14 Sep 2024 20:38:25 +0000 ROA not before: Sat 14 Sep 2024 20:38:25 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 10084 IP address blocks: 43.250.232.0/23 maxlen: 24 43.250.234.0/24 maxlen: 24 103.2.116.0/24 maxlen: 24 103.2.117.0/24 maxlen: 24 103.2.118.0/24 maxlen: 24 103.2.119.0/24 maxlen: 24 103.79.72.0/24 maxlen: 24 218.100.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2747 (0xabb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417 Validity Not Before: Sep 14 20:38:25 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e5f440-1f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dd:35:3f:5c:da:c8:05:98:d0:be:2a:be:39: e6:9e:91:88:55:9f:b3:72:32:51:de:b0:31:0f:9b: 92:c5:ac:50:32:f5:96:a0:67:4e:88:4c:8a:ef:da: f8:4e:67:c2:b4:a2:ff:2e:83:1d:ea:bd:af:2b:3f: ce:e5:f5:15:53:6d:c5:f9:02:7f:b5:10:b5:8b:47: 22:67:d1:fa:fa:2a:01:c9:17:95:6e:40:ec:34:25: 48:27:e5:d7:ff:c6:a5:2b:72:76:e0:da:f4:29:db: d6:09:03:b5:ef:60:83:43:53:98:b7:61:e5:6f:97: 88:29:c1:af:a7:22:43:99:9d:ea:57:62:71:91:17: 4b:b3:f3:62:76:6a:b1:ce:10:03:e9:ff:c6:ed:46: 6d:b9:0c:da:16:d8:31:f7:63:3b:aa:21:86:69:55: 21:56:0b:23:3e:b8:3f:a9:e4:59:e9:2b:72:c8:fd: 19:c4:8e:16:46:8c:e4:8b:f2:23:d6:2b:38:ba:2a: f2:40:f7:2f:cd:57:5b:53:bd:08:2a:ba:5b:b0:fd: d3:8f:6f:e5:30:b8:dd:29:8c:d0:c2:b4:33:18:e2: 5f:9e:c4:a7:04:75:42:17:24:53:f4:88:a9:8f:54: 23:4b:13:c5:2e:24:49:c4:f0:9c:81:76:8e:cb:ac: a0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:75:05:B7:83:B4:1C:49:59:4E:C0:66:90:81:B7:4E:D0:2F:8E:3B X509v3 Authority Key Identifier: keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/F6C1C6C85F7611EFBFEE134FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.232.0-43.250.234.255 103.2.116.0/22 103.79.72.0/24 218.100.43.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:d7:3e:b7:cf:00:94:04:7f:87:26:9d:44:4a:4f:5a:1f:76: b7:90:dc:7e:51:bc:5e:9b:c9:86:95:5a:ce:f4:d2:de:34:53: f8:ae:a0:e4:54:98:bd:93:fc:77:b5:3f:94:54:38:09:da:87: 81:e7:6c:58:eb:16:f6:76:19:fa:66:49:d5:fc:af:c2:fa:aa: 05:03:17:be:0b:ba:c3:55:a0:f5:87:cf:2f:a4:72:9a:97:05: 3b:c8:a2:7a:37:0c:c3:8b:3b:0d:d5:ed:a4:22:74:9f:e8:c6: 63:21:68:ed:54:fe:ad:43:e6:2d:b1:3c:a8:b5:e7:78:1c:42: 62:0d:b0:d5:fe:81:99:d7:09:41:35:98:df:53:03:27:dd:c2: d0:59:54:97:55:67:7e:83:00:87:27:12:ad:8c:70:9a:34:06: 7d:6d:fa:21:f3:a6:92:6a:88:51:8f:ec:96:4b:aa:4f:d9:2f: 5e:ab:1a:5d:96:12:40:2b:00:c9:ac:55:00:3e:40:62:fc:ce: e3:4c:0d:2e:e5:ea:b9:08:01:aa:1c:e5:ee:aa:02:ae:68:6b: 45:32:72:f5:38:73:aa:fd:fe:3f:94:72:9e:fe:8f:b1:c0:7f: e1:c4:ef:d4:b3:73:86:23:18:fb:01:87:30:5a:a4:4a:c9:7e: f0:4b:8f:8e -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICCrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx RjI2NUQ0MTcwHhcNMjQwOTE0MjAzODI1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU1ZjQ0MC0xZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnN01P1zayAWY0L4qvjnmnpGIVZ+zcjJR3rAxD5uSxaxQMvWWoGdOiEyK79r4 TmfCtKL/LoMd6r2vKz/O5fUVU23F+QJ/tRC1i0ciZ9H6+ioByReVbkDsNCVIJ+XX /8alK3J24Nr0KdvWCQO172CDQ1OYt2Hlb5eIKcGvpyJDmZ3qV2JxkRdLs/Nidmqx zhAD6f/G7UZtuQzaFtgx92M7qiGGaVUhVgsjPrg/qeRZ6StyyP0ZxI4WRozki/Ij 1is4uiryQPcvzVdbU70IKrpbsP3Tj2/lMLjdKYzQwrQzGOJfnsSnBHVCFyRT9Iip j1QjSxPFLiRJxPCcgXaOy6yg/QIDAQABo4ICrzCCAqswHQYDVR0OBBYEFPV1BbeD tBxJWU7AZpCBt07QL447MB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVGNTEvQTg4M0U4MUMzRDgyMTFFQTlGMjY3MzcwQzRGOUFFMDIvRjZDMUM2Qzg1 Rjc2MTFFRkJGRUUxMzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCAwDAMEAyv66AMEACv66gMEAmcCdAMEAGdPSAMEANpkKzANBgkq hkiG9w0BAQsFAAOCAQEAH9c+t88AlAR/hyadREpPWh92t5DcflG8XpvJhpVazvTS 3jRT+K6g5FSYvZP8d7U/lFQ4CdqHgedsWOsW9nYZ+mZJ1fyvwvqqBQMXvgu6w1Wg 9YfPL6RympcFO8iiejcMw4s7DdXtpCJ0n+jGYyFo7VT+rUPmLbE8qLXneBxCYg2w 1f6BmdcJQTWY31MDJ93C0FlUl1VnfoMAhycSrYxwmjQGfW36IfOmkmqIUY/slkuq T9kvXqsaXZYSQCsAyaxVAD5AYvzO40wNLuXquQgBqhzl7qoCrmhrRTJy9Thzqv3+ P5Rynv6PscB/4cTv1LNzhiMY+wGHMFqkSsl+8EuPjg== -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:56 2024 by rpki-client on console-ams.rpki-client.org