$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/B1A34CDCD53A11EDB199211BC4F9AE02.roa File: B1A34CDCD53A11EDB199211BC4F9AE02.roa (raw, json) Hash identifier: l6JYToju68IzUtZzHFgCZis3cWCR44kbaf5G79V9hRo= Subject key identifier: 5F:4D:DB:46:44:F3:11:D3:4C:40:F2:FF:AB:A1:20:A9:D9:B5:CA:6C Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2766 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/B1A34CDCD53A11EDB199211BC4F9AE02.roa Signing time: Tue 30 Jul 2024 16:04:15 +0000 ROA not before: Tue 30 Jul 2024 16:04:15 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 149440 IP address blocks: 45.249.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10086 (0x2766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 30 16:04:15 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a90eff-f546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:f1:4a:d2:f7:29:09:3c:ed:35:35:34:d6: fd:d1:05:ee:39:5f:05:4e:25:ad:53:57:79:a3:3a: 87:e5:08:9e:b0:67:a1:a6:d3:8c:ee:00:1a:30:f0: a3:da:cf:03:26:b0:d8:01:fb:c8:eb:39:3f:28:9e: 0b:be:e5:80:58:72:ba:67:e9:ce:24:1a:d3:a2:1e: c6:2b:6c:06:77:fb:68:ec:31:27:2c:fd:a4:27:b0: 1d:82:62:7b:85:49:5b:1f:49:3c:72:b0:86:ff:b4: 85:28:16:43:d9:a9:93:cd:37:a1:cb:86:5f:31:b1: 21:cc:c2:d8:31:34:ba:c0:ab:9f:cb:1c:f7:94:66: 1c:74:a5:0e:7c:71:6b:17:54:28:cb:5e:02:33:5b: 76:5c:09:43:a1:aa:24:8e:7e:78:ec:8e:bc:b9:41: e2:9c:11:a0:d3:c7:e3:43:04:c6:2b:d8:5a:c5:6d: a6:42:f7:0a:d0:dd:ba:ee:fe:de:8a:4c:a7:81:25: 0f:73:88:75:b7:ef:72:67:e5:e0:49:33:8a:73:66: e0:36:c8:74:b9:62:68:60:7c:ac:9b:ed:b8:7f:5f: c4:ce:9a:06:36:7d:a9:71:a4:48:67:8b:e8:84:79: bf:ff:80:26:37:25:0d:9c:25:99:56:43:c1:ae:73: 30:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4D:DB:46:44:F3:11:D3:4C:40:F2:FF:AB:A1:20:A9:D9:B5:CA:6C X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/B1A34CDCD53A11EDB199211BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.249.90.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:82:56:83:76:b2:e2:59:28:55:1b:10:99:b8:17:16:1d:b4: 70:d1:f3:d7:59:24:8d:23:28:05:85:cf:a1:2b:79:8f:f2:a6: ea:d6:75:07:ed:54:34:5c:3e:f9:60:a1:7c:98:02:57:d6:9e: 03:6c:fb:5b:2e:6b:93:e8:90:f1:11:40:d1:54:35:91:77:d0: 91:b5:fc:e8:00:73:c5:2e:63:63:c2:2e:e7:63:fb:c4:f6:d9: 3e:ac:29:cc:fe:cb:2b:cc:22:8a:46:c8:9c:cb:4e:7f:5a:73: ce:c9:8d:62:5e:c4:eb:65:72:f5:96:92:b7:5b:d8:fc:42:da: 38:df:d3:4d:9a:d2:52:e5:0d:27:92:25:6d:23:ec:9c:98:88: e0:b1:3d:8a:6c:f2:01:8e:46:a7:ed:d4:ad:7e:1c:ee:72:3d: 0e:56:af:9b:d7:e6:bc:80:da:40:67:fd:da:86:ec:95:a5:0f: 29:a1:2b:ff:c7:f4:91:89:1d:ea:5e:6a:9d:45:77:77:75:f5: 6d:0c:bf:08:24:12:a1:46:d4:80:a0:01:21:9d:2b:9f:a8:ae: 72:eb:b4:63:88:24:d0:6b:e5:5a:c1:84:ed:e1:bb:5d:c6:41: d4:ed:60:bb:be:78:78:bd:22:d6:31:17:8b:18:28:9b:4a:d5: ae:95:15:10 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJ2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjQwNzMwMTYwNDE1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5MGVmZi1mNTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0HxStL3KQk87TU1NNb90QXuOV8FTiWtU1d5ozqH5QiesGehptOM7gAaMPCj 2s8DJrDYAfvI6zk/KJ4LvuWAWHK6Z+nOJBrToh7GK2wGd/to7DEnLP2kJ7AdgmJ7 hUlbH0k8crCG/7SFKBZD2amTzTehy4ZfMbEhzMLYMTS6wKufyxz3lGYcdKUOfHFr F1Qoy14CM1t2XAlDoaokjn547I68uUHinBGg08fjQwTGK9haxW2mQvcK0N267v7e ikyngSUPc4h1t+9yZ+XgSTOKc2bgNsh0uWJoYHysm+24f1/EzpoGNn2pcaRIZ4vo hHm//4AmNyUNnCWZVkPBrnMwsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF9N20ZE 8xHTTEDy/6uhIKnZtcpsMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvQjFBMzRDRENE NTNBMTFFREIxOTkyMTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAt+VowDQYJKoZIhvcNAQELBQADggEBAF2CVoN2suJZKFUb EJm4FxYdtHDR89dZJI0jKAWFz6EreY/ypurWdQftVDRcPvlgoXyYAlfWngNs+1su a5PokPERQNFUNZF30JG1/OgAc8UuY2PCLudj+8T22T6sKcz+yyvMIopGyJzLTn9a c87JjWJexOtlcvWWkrdb2PxC2jjf002a0lLlDSeSJW0j7JyYiOCxPYps8gGORqft 1K1+HO5yPQ5Wr5vX5ryA2kBn/dqG7JWlDymhK//H9JGJHepeap1Fd3d19W0Mvwgk EqFG1ICgASGdK5+ornLrtGOIJNBr5VrBhO3hu13GQdTtYLu+eHi9ItYxF4sYKJtK 1a6VFRA= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:38 2024 by rpki-client on console-fra.rpki-client.org