$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D97AC950ABDD11EDAE837666C4F9AE02.roa File: D97AC950ABDD11EDAE837666C4F9AE02.roa (raw, json) Hash identifier: tdnv3yegEbxd1X05RwDaloSoRTHWIFMLf521OQY7jzA= Subject key identifier: 44:18:01:BE:52:7D:15:FF:16:DD:B3:2B:2C:4A:BD:27:B2:A8:B1:F3 Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 0380 Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D97AC950ABDD11EDAE837666C4F9AE02.roa Signing time: Sat 15 Jun 2024 05:11:05 +0000 ROA not before: Sat 15 Jun 2024 05:11:04 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 17819 IP address blocks: 203.32.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Validity Not Before: Jun 15 05:11:04 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=666d2268-9a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:b2:32:be:8e:58:06:8d:79:e1:7e:ff:7f: 22:bc:ab:37:34:3a:12:b1:17:27:9b:36:1b:fd:08: 51:c8:1c:96:1c:40:10:ae:1f:bf:46:3a:e3:ad:6c: 90:ac:c4:88:b5:7c:30:67:d3:db:d0:51:f7:56:71: 22:85:5e:fe:df:62:a6:cb:b6:e8:4d:f8:3c:85:66: 41:52:97:e9:de:f6:17:ab:38:bf:a6:45:1f:de:fd: 87:3d:4c:3c:3b:c3:49:e3:d4:e0:ff:33:02:7a:8b: f3:70:5d:43:7c:0c:d0:bd:7f:a2:06:41:7c:a7:aa: d3:22:9a:5c:2e:a3:e6:89:16:83:ec:63:08:2d:79: 2f:b4:83:7f:db:e9:7d:95:4c:5a:04:74:98:21:a0: 02:ea:e5:21:3f:bb:49:dd:58:8c:24:a3:72:e2:79: 5f:ff:2f:4b:83:e4:3a:74:ba:fc:13:70:99:e9:f0: f1:82:24:ec:e1:3e:02:67:17:e3:c8:37:9c:66:70: e7:93:09:f1:38:90:00:6e:60:d6:e1:bb:fd:4e:82: b8:44:61:af:f7:58:63:e4:29:13:43:f2:89:15:aa: ca:46:e0:da:fd:f6:c5:a1:90:f6:7d:3c:32:89:5b: c8:03:0d:ef:8a:4a:0c:8d:b9:51:09:d6:f3:29:bd: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:18:01:BE:52:7D:15:FF:16:DD:B3:2B:2C:4A:BD:27:B2:A8:B1:F3 X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D97AC950ABDD11EDAE837666C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.32.41.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:1a:71:7f:d9:c5:6e:e6:d4:c8:99:40:32:64:bc:80:e0:76: 48:40:93:cb:8b:e7:da:4d:9f:1a:68:90:2d:31:93:c3:79:61: 22:1e:20:20:f1:49:80:95:a9:17:60:09:28:3b:0d:fa:8d:52: 31:6b:9b:2d:16:03:3e:3d:7e:cc:2f:7e:fc:02:99:bd:44:d3: cd:70:64:85:3f:be:8a:94:00:26:1f:d6:02:a3:5d:ba:9f:06: 93:75:ee:76:f1:a3:a9:bd:2e:3b:b1:3c:35:08:d4:c6:89:6a: 33:de:7b:61:d3:59:58:a7:78:d4:3b:76:1a:68:09:aa:6d:4e: a4:bd:44:61:3b:95:db:4a:ca:af:e2:8d:39:96:fd:d7:40:12: 7e:79:de:58:eb:42:b0:10:e8:50:72:02:6c:7e:a5:6d:bf:fd: c2:d2:a4:5b:84:e0:fb:f2:5e:33:b2:20:31:ac:49:89:58:f1: 97:88:e8:20:bf:c8:3a:58:a3:4a:6a:6e:da:26:ee:fd:c9:54: 5d:b5:fe:8c:5a:34:6a:2f:6d:04:2f:41:3e:4e:9b:6e:4a:f3: 2a:98:d1:c8:5c:96:be:0f:8f:f8:c4:61:76:b1:59:de:a7:d4: 8f:f5:84:4a:c7:67:09:b2:99:4b:96:5e:69:e3:96:34:f2:ab: 8c:67:f2:d2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjQwNjE1MDUxMTA0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjZkMjI2OC05YTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB+yMr6OWAaNeeF+/38ivKs3NDoSsRcnmzYb/QhRyByWHEAQrh+/RjrjrWyQ rMSItXwwZ9Pb0FH3VnEihV7+32Kmy7boTfg8hWZBUpfp3vYXqzi/pkUf3v2HPUw8 O8NJ49Tg/zMCeovzcF1DfAzQvX+iBkF8p6rTIppcLqPmiRaD7GMILXkvtIN/2+l9 lUxaBHSYIaAC6uUhP7tJ3ViMJKNy4nlf/y9Lg+Q6dLr8E3CZ6fDxgiTs4T4CZxfj yDecZnDnkwnxOJAAbmDW4bv9ToK4RGGv91hj5CkTQ/KJFarKRuDa/fbFoZD2fTwy iVvIAw3vikoMjblRCdbzKb20RQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEQYAb5S fRX/Ft2zKyxKvSeyqLHzMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvRDk3QUM5NTBB QkREMTFFREFFODM3NjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLICkwDQYJKoZIhvcNAQELBQADggEBAB8acX/ZxW7m1MiZ QDJkvIDgdkhAk8uL59pNnxpokC0xk8N5YSIeICDxSYCVqRdgCSg7DfqNUjFrmy0W Az49fswvfvwCmb1E081wZIU/voqUACYf1gKjXbqfBpN17nbxo6m9LjuxPDUI1MaJ ajPee2HTWVineNQ7dhpoCaptTqS9RGE7ldtKyq/ijTmW/ddAEn553ljrQrAQ6FBy Amx+pW2//cLSpFuE4PvyXjOyIDGsSYlY8ZeI6CC/yDpYo0pqbtom7v3JVF21/oxa NGovbQQvQT5Om25K8yqY0chclr4Pj/jEYXaxWd6n1I/1hErHZwmymUuWXmnjljTy q4xn8tI= -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:48 2024 by rpki-client on console-ams.rpki-client.org