$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/438C7C387D6F11ECBCDC721DC4F9AE02.roa File: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (raw, json) Hash identifier: c2QsjvxJtydLLoad0ereLNJmmVF8IBQhrQgpfGdgdxI= Subject key identifier: E8:4C:82:35:23:36:B7:F8:3F:32:84:BF:EC:1E:C7:67:CE:61:06:CA Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 034C Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/438C7C387D6F11ECBCDC721DC4F9AE02.roa Signing time: Sun 07 Jul 2024 02:14:22 +0000 ROA not before: Sun 07 Jul 2024 02:14:22 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 149305 IP address blocks: 203.22.214.0/24 maxlen: 24 2401:2fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: Jul 7 02:14:22 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6689f9fe-f4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:5b:a0:df:31:c5:a7:6c:df:18:ef:64:b7: 91:8b:a4:eb:6e:7b:23:4b:38:90:af:52:1a:73:91: 41:cd:73:2d:35:e2:b6:59:34:05:73:af:d9:6d:ef: b4:75:c9:cb:e6:3a:db:1c:de:7e:24:fa:c4:46:c7: 28:3a:13:0c:30:98:4b:cf:65:bb:df:97:d0:7f:ed: c6:c4:72:12:9f:88:b1:53:dc:24:a8:63:8d:26:22: 90:96:30:3f:16:16:5a:c7:fa:97:65:a4:57:75:ee: ba:fd:67:00:93:cd:da:bf:f7:61:18:a9:f3:7d:6b: e9:26:e5:5f:5d:5e:38:7e:b9:e7:fc:d8:1b:dc:73: 02:5f:47:17:a4:5a:f1:03:1d:d1:5a:cb:ce:36:62: 3f:f6:fa:b6:05:2a:87:d3:28:03:e8:cd:13:fd:78: 39:77:17:23:60:7e:22:02:46:d6:f8:70:31:eb:b8: c4:5b:e4:2f:7d:0a:99:f6:22:77:b7:f7:b7:90:01: c0:f7:6d:e2:ab:df:c8:26:fb:cd:fa:21:28:6c:ab: 95:b1:47:6f:e8:5a:6b:78:62:f8:61:95:6b:e0:f1: 0d:ec:7d:68:88:a3:c0:fe:6d:34:0b:55:d9:15:7d: f7:b8:cf:71:79:76:6f:b9:88:0e:99:f5:2e:7e:13: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4C:82:35:23:36:B7:F8:3F:32:84:BF:EC:1E:C7:67:CE:61:06:CA X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/438C7C387D6F11ECBCDC721DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.22.214.0/24 IPv6: 2401:2fc0::/32 Signature Algorithm: sha256WithRSAEncryption 31:84:6c:43:30:19:f0:6e:19:c6:8f:e7:07:44:8f:1d:25:21: 1d:1f:fe:73:dc:6f:48:32:9d:5e:41:7a:3a:a7:32:fa:c9:89: 21:ea:79:30:ae:0a:1f:8c:95:a2:92:47:f1:30:45:c4:34:bb: 98:fb:d4:f8:f0:23:fb:28:f1:83:18:f4:30:0b:5d:df:98:0e: 37:5d:12:33:07:43:7a:91:ee:3e:f3:1e:43:15:00:3d:e7:9b: 22:7f:51:4a:46:1b:6a:6e:28:b0:9c:21:95:17:d9:fc:67:4c: 8b:fb:87:50:9a:7c:c4:92:6a:31:c3:30:a8:51:4d:08:fa:4f: d8:ab:fb:62:d4:7b:10:b6:53:01:c2:d4:27:00:fa:d9:c8:6d: 57:ae:1f:2e:23:8c:98:4a:76:a2:f2:2f:51:b7:da:11:97:fc: 30:02:ee:2b:5e:66:4b:b8:7a:e3:bb:a7:dd:af:4d:b9:7e:26: b6:ae:4a:fb:1a:e7:46:4f:6f:ca:7f:5b:05:ab:f2:a3:36:fd: a0:09:b4:d3:e9:78:9b:21:93:4f:3d:36:7d:23:59:4b:f2:2d: 7a:74:3e:f4:f7:29:b5:97:0d:6d:46:a1:1d:ac:25:93:d0:11: a3:79:62:96:e3:36:2c:9e:c3:20:f2:1f:86:38:a5:80:24:e0: 57:65:dd:38 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjQwNzA3MDIxNDIyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg5ZjlmZS1mNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWhboN8xxads3xjvZLeRi6TrbnsjSziQr1Iac5FBzXMtNeK2WTQFc6/Zbe+0 dcnL5jrbHN5+JPrERscoOhMMMJhLz2W735fQf+3GxHISn4ixU9wkqGONJiKQljA/ FhZax/qXZaRXde66/WcAk83av/dhGKnzfWvpJuVfXV44frnn/Ngb3HMCX0cXpFrx Ax3RWsvONmI/9vq2BSqH0ygD6M0T/Xg5dxcjYH4iAkbW+HAx67jEW+QvfQqZ9iJ3 t/e3kAHA923iq9/IJvvN+iEobKuVsUdv6FpreGL4YZVr4PEN7H1oiKPA/m00C1XZ FX33uM9xeXZvuYgOmfUufhM7oQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOhMgjUj Nrf4PzKEv+wex2fOYQbKMB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdFOUMvNTBDOTkzQ0U3RDYzMTFFQ0FDNUM3RjFFQzRGOUFFMDIvNDM4QzdDMzg3 RDZGMTFFQ0JDREM3MjFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBADLFtYwDQQCAAIwBwMFACQBL8AwDQYJKoZIhvcNAQELBQAD ggEBADGEbEMwGfBuGcaP5wdEjx0lIR0f/nPcb0gynV5BejqnMvrJiSHqeTCuCh+M laKSR/EwRcQ0u5j71PjwI/so8YMY9DALXd+YDjddEjMHQ3qR7j7zHkMVAD3nmyJ/ UUpGG2puKLCcIZUX2fxnTIv7h1CafMSSajHDMKhRTQj6T9ir+2LUexC2UwHC1CcA +tnIbVeuHy4jjJhKdqLyL1G32hGX/DAC7iteZku4euO7p92vTbl+JrauSvsa50ZP b8p/WwWr8qM2/aAJtNPpeJshk089Nn0jWUvyLXp0PvT3KbWXDW1GoR2sJZPQEaN5 YpbjNiyewyDyH4Y4pYAk4Fdl3Tg= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:36 2024 by rpki-client on console-fra.rpki-client.org