$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa File: 2F320256981611EB904AF150C4F9AE02.roa (raw, json) Hash identifier: zydBQ6+XzPsP0D5XfuooCO12kFS+89HKhQ6kY0lGz0g= Subject key identifier: 29:D2:05:F2:26:D6:6A:F5:6E:C1:F5:FE:3C:6B:02:7A:C6:CF:46:20 Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Certificate serial: 05C6 Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa Signing time: Sat 02 Nov 2024 22:42:05 +0000 ROA not before: Sat 02 Nov 2024 22:42:05 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 141365 IP address blocks: 203.7.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1478 (0x5c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Validity Not Before: Nov 2 22:42:05 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6726aabc-c9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:28:9c:05:31:a2:c4:d7:c7:9a:bf:c1:0d:48: 7c:b7:ae:57:e8:62:3c:9c:71:53:f2:7b:91:38:7e: 34:f1:be:bd:ee:42:b8:b1:a2:a6:3b:3b:70:b3:64: 61:c3:70:ba:e0:bc:c0:a8:cb:20:2b:a7:4e:e0:84: 59:ce:b8:fc:84:58:10:3b:25:8a:fd:13:cb:8b:e4: fb:d5:ba:65:2d:3d:a3:65:32:64:72:f9:0e:19:8e: a6:3a:6d:f8:6f:e2:70:0b:99:d9:e7:06:5f:40:6e: f5:1a:50:c8:62:5e:b1:1d:5c:6c:93:51:52:f3:26: c0:57:bf:ad:f5:32:d7:2f:7d:a6:bf:b7:b4:8c:1f: 83:b5:0b:fe:60:f8:84:ac:12:6f:0a:6d:e1:cd:c5: db:f3:6c:31:18:45:7b:2f:1b:a5:2d:9b:31:24:bb: 2a:b2:e3:99:ea:77:59:2b:95:9b:df:64:98:5c:40: be:cd:d0:e9:24:34:1f:50:33:7f:38:5a:56:dd:81: d0:ed:a6:00:8e:83:ca:e7:4d:f5:2b:b2:18:cd:0a: 02:65:b1:92:2e:6b:f3:8b:ff:10:4c:f9:29:7a:9b: c0:dc:df:3f:4d:7c:51:a9:74:20:9e:b8:e2:ca:8b: 9e:6c:e3:81:db:ec:9a:d9:88:69:20:d2:e9:db:19: 79:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D2:05:F2:26:D6:6A:F5:6E:C1:F5:FE:3C:6B:02:7A:C6:CF:46:20 X509v3 Authority Key Identifier: keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.7.172.0/23 Signature Algorithm: sha256WithRSAEncryption 03:a8:56:d0:3b:13:72:c7:59:2c:ce:e1:a0:45:54:8e:d7:d4: d8:30:b1:b3:91:e1:ce:06:7e:72:8a:e7:58:9f:19:77:8a:7d: 70:b2:da:8f:95:9b:b2:54:62:2b:cd:e7:d7:64:54:24:db:5c: 5e:b3:33:04:e7:4a:50:79:4c:16:f1:49:9e:61:5e:2e:55:06: 8b:b1:4e:ca:8c:4e:f6:91:a0:94:f1:4b:e9:d5:ac:d1:c8:3b: 2b:19:6c:38:31:7c:06:e4:a6:62:63:2d:7c:14:0d:e7:b9:3d: b5:6c:39:3c:90:48:7d:db:99:08:f4:2c:ac:eb:4d:f3:5d:91: db:c8:51:f9:df:bd:b2:1b:5d:3e:24:15:dc:35:4b:13:5c:d4: f5:a9:04:09:0e:f0:6d:1a:0d:9c:11:a0:b4:9a:9d:ef:63:cb: e4:de:aa:66:1d:68:72:55:22:c1:b8:74:d7:72:92:4b:9c:be: a6:64:52:1a:30:cd:98:9f:d5:65:93:0e:6f:fd:32:f2:f4:34: d1:76:be:a8:7a:0e:19:d6:61:93:be:08:61:67:38:c8:15:93: ff:99:3e:19:8e:78:96:e5:ce:bc:8d:bb:f2:01:66:f7:91:31: b0:44:42:4b:85:c6:d6:c4:c7:9b:32:40:85:24:9f:3a:49:d8: fb:f4:1e:53 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY4NEYxMTAvBgNVBAUTKDcxNDFDMzE5QkI0NEJGQkNERTMzODJCM0JCNjkxMjY1 Rjk1RDMwOUYwHhcNMjQxMTAyMjI0MjA1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2YWFiYy1jOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSicBTGixNfHmr/BDUh8t65X6GI8nHFT8nuROH408b697kK4saKmOztws2Rh w3C64LzAqMsgK6dO4IRZzrj8hFgQOyWK/RPLi+T71bplLT2jZTJkcvkOGY6mOm34 b+JwC5nZ5wZfQG71GlDIYl6xHVxsk1FS8ybAV7+t9TLXL32mv7e0jB+DtQv+YPiE rBJvCm3hzcXb82wxGEV7LxulLZsxJLsqsuOZ6ndZK5Wb32SYXEC+zdDpJDQfUDN/ OFpW3YHQ7aYAjoPK5031K7IYzQoCZbGSLmvzi/8QTPkpepvA3N8/TXxRqXQgnrji youebOOB2+ya2YhpINLp2xl5BQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCnSBfIm 1mr1bsH1/jxrAnrGz0YgMB8GA1UdIwQYMBaAFHFBwxm7RL+83jOCs7tpEmX5XTCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg0Ri9ERDQ4N0E1Qzk4 MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3emVNNEt6dTJrU1pmbGRN SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVSERHYnRFdjd6ZU00S3p1MmtTWmZsZE1KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY4NEYvREQ0ODdBNUM5ODE0MTFFQkE0QjMyMTUwQzRGOUFFMDIvMkYzMjAyNTY5 ODE2MTFFQjkwNEFGMTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHLB6wwDQYJKoZIhvcNAQELBQADggEBAAOoVtA7E3LHWSzO 4aBFVI7X1NgwsbOR4c4GfnKK51ifGXeKfXCy2o+Vm7JUYivN59dkVCTbXF6zMwTn SlB5TBbxSZ5hXi5VBouxTsqMTvaRoJTxS+nVrNHIOysZbDgxfAbkpmJjLXwUDee5 PbVsOTyQSH3bmQj0LKzrTfNdkdvIUfnfvbIbXT4kFdw1SxNc1PWpBAkO8G0aDZwR oLSane9jy+TeqmYdaHJVIsG4dNdykkucvqZkUhowzZif1WWTDm/9MvL0NNF2vqh6 DhnWYZO+CGFnOMgVk/+ZPhmOeJblzryNu/IBZveRMbBEQkuFxtbEx5syQIUknzpJ 2Pv0HlM= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:54 2024 by rpki-client on console-ams.rpki-client.org