$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6A32721CAD9511EFAA7B4C1AC4F9AE02.roa File: 6A32721CAD9511EFAA7B4C1AC4F9AE02.roa (raw, json) Hash identifier: 5EuaV2pKmfgRERw28f/5Lxl1VQWoTEyn2eDoW1PwmPM= Subject key identifier: 2A:C5:CC:C0:96:8D:30:2A:09:BF:66:B6:E3:E7:04:7E:51:8A:6C:31 Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934 Certificate serial: 0138 Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6A32721CAD9511EFAA7B4C1AC4F9AE02.roa Signing time: Thu 28 Nov 2024 14:31:12 +0000 ROA not before: Thu 28 Nov 2024 14:31:12 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 150300 IP address blocks: 87.124.91.0/24 maxlen: 24 87.124.92.0/24 maxlen: 24 87.124.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 03:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C Validity Not Before: Nov 28 14:31:12 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67487eaf-eb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:c0:18:dc:c1:8c:cd:23:37:68:0f:31:09: ec:8a:e9:1d:90:d3:24:e1:b8:f3:31:61:7d:bf:c1: be:a5:d3:9c:25:2f:43:d5:f7:c6:2e:6b:5e:d3:c0: c4:f4:84:7d:3f:39:96:ce:b9:fe:c6:9e:28:32:fd: b7:ad:6e:2c:00:c2:d5:ec:f3:8f:6d:57:5e:79:50: 39:1e:4f:94:63:bf:03:cf:6b:cd:a5:3e:4a:e5:a4: 62:6b:a9:21:f6:b2:04:1f:cd:05:07:28:69:65:10: bd:e5:a0:e2:21:e6:c0:f9:f6:82:ff:22:db:ee:7f: 58:02:c5:20:d6:ee:a3:8a:de:cb:f8:88:af:51:94: b5:11:89:4a:22:b6:3e:08:3d:4b:09:48:d7:86:c0: dd:95:32:a1:09:26:ce:d7:79:40:77:66:b3:11:3d: ba:c3:f9:b9:17:9d:c5:f8:80:ed:62:c3:ad:65:9b: 5a:f1:05:bb:6f:36:02:37:d4:8c:2f:e3:3d:67:e2: d3:69:8c:8d:09:88:74:67:04:4e:b0:44:63:e5:61: 25:f2:53:40:8d:f8:52:ee:88:8a:7a:46:ed:d9:e1: 75:dd:70:00:79:27:54:81:4a:96:d1:cc:3a:5d:ce: 8c:e4:ef:17:ce:08:e4:44:15:ec:59:95:56:e6:36: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C5:CC:C0:96:8D:30:2A:09:BF:66:B6:E3:E7:04:7E:51:8A:6C:31 X509v3 Authority Key Identifier: keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6A32721CAD9511EFAA7B4C1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 87.124.91.0-87.124.93.255 Signature Algorithm: sha256WithRSAEncryption 10:f5:28:10:a9:16:88:76:a4:10:29:63:86:99:b2:12:a4:c2: ec:ae:51:c3:cc:e7:45:1a:2f:79:53:ab:7f:1f:80:cc:74:ff: d5:f1:f5:1b:59:57:fb:4a:df:94:e6:82:58:2f:68:10:bd:ef: 10:f0:3b:50:3b:2f:37:ad:1f:4f:bc:e2:97:ca:a1:69:ed:72: 9a:dd:78:81:09:ad:1e:7c:7e:fe:cc:50:52:e6:64:ce:c0:9a: 32:ac:44:7e:3a:24:5c:99:fb:b7:4a:ac:87:33:4a:b9:32:38: d7:4e:16:e7:64:1e:5f:02:47:ce:cd:40:ad:24:1e:89:4e:ad: 70:5c:62:f4:ef:21:bf:b5:3b:20:43:92:c7:fd:90:92:ce:39: d2:87:13:68:17:08:9f:8f:0e:77:79:a3:72:e0:a9:7b:0a:0a: 2c:35:2b:50:f8:f9:22:d2:2c:c3:52:04:27:a9:e3:bb:cd:67: cc:93:ca:8f:ee:ba:de:50:94:84:2a:a2:a4:0f:7f:34:2e:c3: ca:17:2c:bd:d6:6f:83:a4:63:1f:1a:5a:e0:2c:b7:0c:a5:4c: 1e:c3:b9:26:63:48:a1:0b:6b:7a:b7:b3:84:cb:51:df:19:87: 4a:c6:8b:52:20:bc:53:72:f4:8c:6d:39:fa:c8:53:fa:58:f5: 7f:a8:e4:24 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKDcxRjQwMjE4QzFBRjQ3QzVFOTkzQTIxQTJCMjkyODRF NEMzMkM5MzQwHhcNMjQxMTI4MTQzMTEyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ4N2VhZi1lYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8LAGNzBjM0jN2gPMQnsiukdkNMk4bjzMWF9v8G+pdOcJS9D1ffGLmte08DE 9IR9PzmWzrn+xp4oMv23rW4sAMLV7POPbVdeeVA5Hk+UY78Dz2vNpT5K5aRia6kh 9rIEH80FByhpZRC95aDiIebA+faC/yLb7n9YAsUg1u6jit7L+IivUZS1EYlKIrY+ CD1LCUjXhsDdlTKhCSbO13lAd2azET26w/m5F53F+IDtYsOtZZta8QW7bzYCN9SM L+M9Z+LTaYyNCYh0ZwROsERj5WEl8lNAjfhS7oiKekbt2eF13XAAeSdUgUqW0cw6 Xc6M5O8XzgjkRBXsWZVW5jYPSwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFCrFzMCW jTAqCb9mtuPnBH5RimwxMB8GA1UdIwQYMBaAFHH0AhjBr0fF6ZOiGispKE5MMsk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy82REUzQ0U3QzM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9jZlFDR01HdlI4WHBrNklhS3lrb1Rrd3l5 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2NmUUNHTUd2UjhYcGs2SWFLeWtvVGt3eXlUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvNkRFM0NFN0MzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvNkEzMjcyMUNB RDk1MTFFRkFBN0I0QzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAFd8WwMEAVd8XDANBgkqhkiG9w0BAQsFAAOCAQEAEPUo EKkWiHakECljhpmyEqTC7K5Rw8znRRoveVOrfx+AzHT/1fH1G1lX+0rflOaCWC9o EL3vEPA7UDsvN60fT7zil8qhae1ymt14gQmtHnx+/sxQUuZkzsCaMqxEfjokXJn7 t0qshzNKuTI4104W52QeXwJHzs1ArSQeiU6tcFxi9O8hv7U7IEOSx/2Qks450ocT aBcIn48Od3mjcuCpewoKLDUrUPj5ItIsw1IEJ6nju81nzJPKj+663lCUhCqipA9/ NC7DyhcsvdZvg6RjHxpa4Cy3DKVMHsO5JmNIoQtrerezhMtR3xmHSsaLUiC8U3L0 jG05+shT+lj1f6jkJA== -----END CERTIFICATE-----Generated at Tue Apr 8 16:56:37 2025 by rpki-client