$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa File: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (raw, json) Hash identifier: d0oN/FUNzNpOKmQI6ds/0v5d1ZE90v5NzlRPE14knFk= Subject key identifier: C4:EE:52:6F:09:E2:91:62:72:4B:F6:04:F4:2F:E6:8E:38:0F:53:87 Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Certificate serial: 0757 Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa Signing time: Wed 16 Oct 2024 21:40:29 +0000 ROA not before: Wed 16 Oct 2024 21:40:29 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 9884 IP address blocks: 202.189.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1879 (0x757) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Validity Not Before: Oct 16 21:40:29 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=671032cd-2349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:0a:08:4a:11:c3:d0:26:57:ba:b5:26:c7: c9:99:f2:ed:d7:9f:01:47:02:59:a5:c6:3b:79:8e: b5:ac:79:02:52:5e:88:1e:d1:8b:b9:6e:51:c2:d7: b5:eb:02:bb:59:d5:d3:49:0d:37:ae:24:8d:05:68: 91:d8:55:3a:70:ff:e4:dd:6f:a1:03:5b:9d:d9:bd: f2:a2:3c:0d:a5:51:f0:a2:16:9e:f1:96:41:9d:1d: 29:29:75:4e:73:43:42:59:68:42:ee:78:96:fa:48: 24:a1:6b:0a:04:39:c7:0e:ab:39:a8:5c:88:3e:1b: 34:d2:2a:45:04:da:40:4c:bf:93:ef:43:4f:46:ce: fb:cf:6f:da:a0:53:3a:9c:e3:ca:4a:25:45:ff:89: a0:63:a0:36:3a:37:39:af:12:d3:a6:20:c3:63:c6: ab:bb:90:c4:1f:3f:da:ae:eb:fd:7c:e1:3c:c5:53: ff:fd:aa:4d:f7:f3:de:90:fb:91:da:e8:05:61:f1: 63:66:48:62:6c:05:ac:68:ef:51:bb:3e:78:ec:a6: 42:a9:b4:11:a6:de:4e:16:b3:80:60:a7:7b:83:4c: f3:57:bd:57:93:ce:c2:f2:fc:c4:ee:a8:4e:90:2a: ce:f2:11:9b:68:3d:95:33:3b:e2:87:c6:39:8c:3e: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EE:52:6F:09:E2:91:62:72:4B:F6:04:F4:2F:E6:8E:38:0F:53:87 X509v3 Authority Key Identifier: keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.189.128.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:76:e5:1d:fd:f3:50:bf:1a:94:b9:5f:43:49:80:8a:9b:1d: 9c:f6:72:fa:4f:55:03:c7:4a:9d:98:1e:e2:87:b6:f8:ab:c0: 66:38:2c:38:f4:b3:e6:98:6b:95:ca:33:4c:60:29:59:97:40: 8d:01:33:b8:9c:74:8c:23:14:49:a1:e5:8b:99:68:1c:05:20: 71:a5:69:ab:07:50:22:3d:73:ed:a4:cf:db:85:f7:37:3c:b5: d3:53:87:e4:3d:69:0f:fe:a5:28:33:f2:6d:1b:9b:3f:19:33: e5:2f:19:da:8d:b5:23:f6:ac:4d:99:ed:35:9d:35:71:8c:af: 70:f9:88:6a:51:fb:a8:be:99:df:93:5b:59:0c:50:39:59:ad: a0:e5:2b:df:0a:d2:dd:6c:74:d4:41:6f:08:ac:55:72:bb:72: c4:cb:b8:01:2f:92:68:8e:7d:4f:d9:1b:cc:04:16:6f:9d:52: 6a:6a:30:c3:b5:53:ba:a8:76:b0:83:9b:bf:73:f7:1e:e4:c1: 2d:b2:aa:01:4b:b7:46:b4:f4:5b:b6:1b:5b:05:0e:e1:58:51: e7:e5:f7:1f:6f:4f:53:70:29:7c:91:7f:28:2a:fa:65:d6:b3: 7d:7d:7e:a5:fe:e5:cf:6e:97:33:7c:f4:a1:27:2b:42:23:ec: 52:e6:e2:38 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU1OTAxMTAvBgNVBAUTKDcxOTYxMzhGRDlGQzhDNzhGRTg0M0EyNTNDQjA0ODBB RENDNTdGMEQwHhcNMjQxMDE2MjE0MDI5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEwMzJjZC0yMzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUEKCEoRw9AmV7q1JsfJmfLt158BRwJZpcY7eY61rHkCUl6IHtGLuW5Rwte1 6wK7WdXTSQ03riSNBWiR2FU6cP/k3W+hA1ud2b3yojwNpVHwohae8ZZBnR0pKXVO c0NCWWhC7niW+kgkoWsKBDnHDqs5qFyIPhs00ipFBNpATL+T70NPRs77z2/aoFM6 nOPKSiVF/4mgY6A2Ojc5rxLTpiDDY8aru5DEHz/aruv9fOE8xVP//apN9/PekPuR 2ugFYfFjZkhibAWsaO9Ruz547KZCqbQRpt5OFrOAYKd7g0zzV71Xk87C8vzE7qhO kCrO8hGbaD2VMzvih8Y5jD5wHwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMTuUm8J 4pFickv2BPQv5o44D1OHMB8GA1UdIwQYMBaAFHGWE4/Z/Ix4/oQ6JTywSArcxX8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTU5MC9BODk1MjQ5RUY3 QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpIai1oRG9sUExCSUN0ekZm dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NaWVRqOW44akhqLWhEb2xQTEJJQ3R6RmZ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU1OTAvQTg5NTI0OUVGN0M1MTFFQTg3MUMwMDBDQzRGOUFFMDIvOTkyMEQyRTZG N0M2MTFFQThCMjNDMzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKvYAwDQYJKoZIhvcNAQELBQADggEBAG525R3981C/GpS5 X0NJgIqbHZz2cvpPVQPHSp2YHuKHtvirwGY4LDj0s+aYa5XKM0xgKVmXQI0BM7ic dIwjFEmh5YuZaBwFIHGlaasHUCI9c+2kz9uF9zc8tdNTh+Q9aQ/+pSgz8m0bmz8Z M+UvGdqNtSP2rE2Z7TWdNXGMr3D5iGpR+6i+md+TW1kMUDlZraDlK98K0t1sdNRB bwisVXK7csTLuAEvkmiOfU/ZG8wEFm+dUmpqMMO1U7qodrCDm79z9x7kwS2yqgFL t0a09Fu2G1sFDuFYUefl9x9vT1NwKXyRfygq+mXWs319fqX+5c9ulzN89KEnK0Ij 7FLm4jg= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org