$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa File: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (raw, json) Hash identifier: XOMUO0jWAovTKb5iTxELptx/mbrH0GNMhGdtxbgO81I= Subject key identifier: 50:8C:0E:58:3C:80:F4:53:E2:62:52:AE:65:99:3A:14:9C:48:36:75 Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Certificate serial: 04B6 Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa Signing time: Thu 07 Sep 2023 00:11:50 +0000 ROA not before: Thu 07 Sep 2023 00:11:50 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 4764 IP address blocks: 203.30.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1206 (0x4b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Validity Not Before: Sep 7 00:11:50 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=64f91546-c87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5d:72:a9:5c:9c:98:07:8c:c6:ad:c5:ae:99: 51:42:04:68:65:87:c0:c0:54:8a:4e:b0:2d:22:f5: ad:f2:d7:4d:4f:21:cc:bb:ee:e1:33:8c:da:32:8b: 52:b6:0d:dd:48:92:0d:54:91:9d:f4:46:33:82:33: c1:f0:44:e3:0c:62:74:5b:68:a6:41:f5:94:04:29: 09:52:b3:00:d6:df:02:56:ec:23:28:a1:48:8f:0d: 64:5e:c2:bd:1c:bc:d7:25:5c:e0:d9:be:01:a3:da: 5a:6a:66:aa:28:27:bb:3f:96:c6:54:49:8e:ea:a9: 7a:d4:24:2c:3f:64:36:0f:82:c5:9d:61:cc:5f:00: d2:de:82:d3:b3:a3:35:8e:2f:4f:39:44:71:7e:9c: 20:58:fe:c6:71:fe:f2:dd:85:b0:06:64:90:86:0e: 55:bd:d7:19:69:63:9d:52:86:bf:44:9d:1c:00:4d: 6c:99:32:a5:c7:33:c9:98:70:df:1c:72:cb:00:32: 83:b5:7b:5a:e4:fb:43:6b:09:87:db:d2:d8:02:3d: 8b:19:50:f1:cd:8b:a8:95:99:fc:e4:c0:30:d7:57: 87:b4:42:44:16:94:8e:1d:97:35:42:3a:1b:39:14: 4e:c4:3d:d0:b1:e5:e0:28:5b:3b:17:4e:61:e3:c1: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8C:0E:58:3C:80:F4:53:E2:62:52:AE:65:99:3A:14:9C:48:36:75 X509v3 Authority Key Identifier: keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.30.24.0/24 Signature Algorithm: sha256WithRSAEncryption a3:92:6e:af:25:da:2c:16:11:6f:e8:14:14:bb:f8:47:f0:87: e6:fe:17:1a:0a:80:65:40:73:d7:12:65:3a:c2:a9:48:4c:13: d0:cf:47:b7:a8:13:84:a9:d4:d7:af:46:b3:c6:49:b7:50:44: 44:15:db:55:7d:d2:2d:1a:60:2b:77:f5:6c:88:e7:d9:36:66: f8:55:47:5a:c6:18:05:43:c4:4d:77:8a:30:5d:67:b4:c8:70: 25:02:9c:16:fd:d7:27:4c:a2:76:7e:da:0b:db:fc:0d:12:ac: 6f:e5:c9:c7:f2:f5:76:c9:3a:07:41:47:7b:96:22:53:79:1e: 55:98:b4:91:f0:b8:01:d2:a7:ae:3a:9a:e9:82:14:3f:c0:72: 04:cf:d2:48:3b:c7:cf:d3:cc:e8:d3:09:ff:89:7b:78:17:a6: 69:c6:f3:e0:ba:11:db:12:59:d0:48:72:e5:bb:a0:f4:ed:98: 1a:e8:fb:f0:91:e8:ea:5f:6d:9d:48:eb:0b:44:82:13:52:4e: 49:10:dd:90:6e:7e:14:69:a2:0b:4c:c0:2d:f8:54:c4:f1:9c: 25:0f:7b:47:90:1c:2b:3d:2c:e9:8f:e2:8a:82:59:f5:f0:3e: 18:d0:2c:67:ff:e9:52:d1:0f:88:25:28:f4:33:a7:76:a2:6f: 7b:6e:47:ba -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5 MTE4OUZBMjIwHhcNMjMwOTA3MDAxMTUwWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY5MTU0Ni1jODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2V1yqVycmAeMxq3FrplRQgRoZYfAwFSKTrAtIvWt8tdNTyHMu+7hM4zaMotS tg3dSJINVJGd9EYzgjPB8ETjDGJ0W2imQfWUBCkJUrMA1t8CVuwjKKFIjw1kXsK9 HLzXJVzg2b4Bo9paamaqKCe7P5bGVEmO6ql61CQsP2Q2D4LFnWHMXwDS3oLTs6M1 ji9POURxfpwgWP7Gcf7y3YWwBmSQhg5VvdcZaWOdUoa/RJ0cAE1smTKlxzPJmHDf HHLLADKDtXta5PtDawmH29LYAj2LGVDxzYuolZn85MAw11eHtEJEFpSOHZc1Qjob ORROxD3QseXgKFs7F05h48G6TwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFCMDlg8 gPRT4mJSrmWZOhScSDZ1MB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTAwMDkvQ0M4MTAxMjBBQzZBMTFFQkE1NEFGODdBQzRGOUFFMDIvRERFRjc1MzRB QzZDMTFFQkI2QjFFMTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLHhgwDQYJKoZIhvcNAQELBQADggEBAKOSbq8l2iwWEW/o FBS7+Efwh+b+FxoKgGVAc9cSZTrCqUhME9DPR7eoE4Sp1NevRrPGSbdQREQV21V9 0i0aYCt39WyI59k2ZvhVR1rGGAVDxE13ijBdZ7TIcCUCnBb91ydMonZ+2gvb/A0S rG/lycfy9XbJOgdBR3uWIlN5HlWYtJHwuAHSp646mumCFD/AcgTP0kg7x8/TzOjT Cf+Je3gXpmnG8+C6EdsSWdBIcuW7oPTtmBro+/CR6OpfbZ1I6wtEghNSTkkQ3ZBu fhRpogtMwC34VMTxnCUPe0eQHCs9LOmP4oqCWfXwPhjQLGf/6VLRD4glKPQzp3ai b3tuR7o= -----END CERTIFICATE-----Generated at Sun May 19 01:47:08 2024 by rpki-client on console-ams.rpki-client.org