$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/84023C06D24611EABDDF5344C4F9AE02.roa File: 84023C06D24611EABDDF5344C4F9AE02.roa (raw, json) Hash identifier: 1tQbOZGCpdjO+Y55KBqDyrU6PI7sCOp/TxXvN4NzOO0= Subject key identifier: 1C:3F:30:BF:F2:24:9E:26:63:80:B6:94:C3:89:85:6F:DE:91:90:EE Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Certificate serial: 0A11 Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/84023C06D24611EABDDF5344C4F9AE02.roa Signing time: Sat 22 Jun 2024 21:14:02 +0000 ROA not before: Sat 22 Jun 2024 21:14:02 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 19905 IP address blocks: 14.136.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2577 (0xa11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C Validity Not Before: Jun 22 21:14:02 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66773e9a-efbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:fe:a5:2d:c5:6d:f4:00:b5:83:d2:e3:fe: 71:b0:b4:8f:94:0e:9a:80:06:94:ef:fd:cd:48:e4: 2e:4e:34:16:7c:44:2d:55:a2:94:f0:11:1b:74:85: df:ae:2e:33:22:5b:a8:90:e6:82:29:53:54:db:bb: 2d:41:8e:53:5e:80:9b:fc:73:f7:42:2e:1a:aa:3c: ae:b8:a4:38:23:6f:2c:ad:95:67:ac:50:06:08:c2: bd:36:9c:37:54:3e:db:09:7b:2f:9f:b6:b7:17:88: 4c:6a:1e:6b:5b:e9:25:8e:38:f5:32:a3:8a:7e:ac: 92:54:e1:5a:c8:4f:54:78:f3:84:f3:e9:df:40:0f: d6:03:15:e7:01:be:0d:23:4a:b3:31:ab:45:b6:26: 16:73:80:d0:d3:21:2f:3d:6c:35:ad:6b:d7:4c:c0: c2:f9:6f:3b:80:e5:47:9d:10:b5:29:13:79:0e:5e: 4f:d8:d1:09:80:09:7f:2a:71:6e:34:6d:f2:9c:2c: 0a:29:90:55:04:35:ea:b2:31:66:ba:74:b4:b5:d0: c7:36:13:93:66:19:69:10:1d:61:50:d1:56:4d:cc: 50:80:c8:48:f5:f7:91:fd:2f:1d:ec:f5:f3:18:f7: 39:fb:6d:b6:15:66:d3:2d:c1:f0:9e:f4:fd:31:ac: 4a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3F:30:BF:F2:24:9E:26:63:80:B6:94:C3:89:85:6F:DE:91:90:EE X509v3 Authority Key Identifier: keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/84023C06D24611EABDDF5344C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.136.149.0/24 Signature Algorithm: sha256WithRSAEncryption cc:78:29:39:3a:84:0e:0a:e1:18:0a:0b:9e:ba:27:0f:78:26: 3f:22:fd:f4:e6:92:f3:a6:4f:a8:52:57:5c:8f:fa:7f:ad:13: af:05:77:20:fa:d3:bf:79:cf:bf:b8:36:5a:68:03:98:c6:b4: 07:4b:45:35:b1:7f:8e:26:ac:fd:2d:81:c2:20:13:ff:3b:4b: 41:80:13:e1:2a:f8:a6:7e:8e:e0:b0:08:f6:c3:0f:c4:5a:9c: b1:07:44:f8:00:b3:a7:b1:1f:be:54:d4:ae:40:8e:7c:b2:09: 62:a7:b4:54:ab:91:6c:44:e2:2a:75:28:2e:3e:e9:2d:ba:f1: 40:88:85:68:27:03:9e:8e:8a:36:0a:3a:d9:09:2f:96:f5:a1: a4:23:49:c5:3f:aa:0e:8d:e0:b1:74:a3:cb:94:fc:c3:e8:34: e7:b6:37:d4:8b:40:55:a7:bb:86:ac:ab:a9:2c:48:27:30:32: ab:2c:19:a6:5a:28:f6:f1:32:14:17:ac:63:08:44:8f:36:b0: a3:0d:77:07:42:ff:4c:0c:34:77:a6:2a:4c:1e:a1:b8:33:25: 52:f7:d2:51:70:60:d8:01:f3:d2:6d:3c:30:31:62:53:6d:bf: bb:30:01:45:3f:6b:99:1a:ad:85:06:90:cd:7f:84:38:db:f9: ea:e4:36:93 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICChEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE NTQ0QTYyQTYwHhcNMjQwNjIyMjExNDAyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc3M2U5YS1lZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAue7+pS3FbfQAtYPS4/5xsLSPlA6agAaU7/3NSOQuTjQWfEQtVaKU8BEbdIXf ri4zIluokOaCKVNU27stQY5TXoCb/HP3Qi4aqjyuuKQ4I28srZVnrFAGCMK9Npw3 VD7bCXsvn7a3F4hMah5rW+kljjj1MqOKfqySVOFayE9UePOE8+nfQA/WAxXnAb4N I0qzMatFtiYWc4DQ0yEvPWw1rWvXTMDC+W87gOVHnRC1KRN5Dl5P2NEJgAl/KnFu NG3ynCwKKZBVBDXqsjFmunS0tdDHNhOTZhlpEB1hUNFWTcxQgMhI9feR/S8d7PXz GPc5+222FWbTLcHwnvT9MaxKgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBw/ML/y JJ4mY4C2lMOJhW/ekZDuMB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY0N0MvNDM3Q0M0MDY4NTEzMTFFQUFBMEIwQTdGQzRGOUFFMDIvODQwMjNDMDZE MjQ2MTFFQUJEREY1MzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAOiJUwDQYJKoZIhvcNAQELBQADggEBAMx4KTk6hA4K4RgK C566Jw94Jj8i/fTmkvOmT6hSV1yP+n+tE68FdyD60795z7+4NlpoA5jGtAdLRTWx f44mrP0tgcIgE/87S0GAE+Eq+KZ+juCwCPbDD8RanLEHRPgAs6exH75U1K5Ajnyy CWKntFSrkWxE4ip1KC4+6S268UCIhWgnA56OijYKOtkJL5b1oaQjScU/qg6N4LF0 o8uU/MPoNOe2N9SLQFWnu4asq6ksSCcwMqssGaZaKPbxMhQXrGMIRI82sKMNdwdC /0wMNHemKkweobgzJVL30lFwYNgB89JtPDAxYlNtv7swAUU/a5karYUGkM1/hDjb +erkNpM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:54 2025 by rpki-client