$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa File: 61A65BF2C35011EE95366E18C4F9AE02.roa (raw, json) Hash identifier: lJX0Rj0D2pXCWqSqPGBLqRXobNJsOmj1xve2tbokkqo= Subject key identifier: CF:79:49:80:CA:A0:AB:F5:E6:6D:B5:2D:4C:53:7C:C0:D5:4F:1E:A1 Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Certificate serial: 3436 Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa Signing time: Tue 30 Jul 2024 14:50:18 +0000 ROA not before: Tue 30 Jul 2024 14:50:18 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 38228 IP address blocks: 210.246.94.0/24 maxlen: 24 210.246.95.0/24 maxlen: 24 2403:c000:1401::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13366 (0x3436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Validity Not Before: Jul 30 14:50:18 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a8fdaa-9f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:b6:71:e2:66:b3:40:36:54:f8:c2:a8:35: 79:23:25:72:6d:31:b0:46:12:3a:6a:30:22:f4:19: 8f:ac:d9:dd:93:e2:73:e5:2e:04:2b:ea:08:4d:64: 7c:4d:04:a0:b4:42:d8:a2:de:3d:7b:79:cb:bd:59: 32:8c:28:88:dc:30:8a:71:16:95:64:32:94:59:14: b5:a1:a4:98:86:b5:a3:ca:f8:9e:c4:0b:89:18:82: 63:31:73:41:41:be:2e:72:8b:7f:2f:ae:f5:81:4c: 13:cd:0f:92:76:cd:9a:2e:d6:f7:13:94:d7:50:c4: 5d:5c:da:b3:5a:e6:8a:78:f4:55:0a:1c:8f:37:9c: 67:a0:d0:5d:e6:8c:05:37:2e:12:06:8d:09:78:3d: ee:bf:9c:f0:9f:cc:a5:eb:c0:66:f5:96:a2:2e:3f: 3d:06:b9:72:15:4a:ec:e2:e0:a6:2f:84:74:95:fa: d6:b7:1d:fc:47:ae:02:0d:46:03:8b:c4:db:4b:ad: 05:95:58:d8:2c:43:18:56:ea:1c:ef:b6:ca:c6:c2: aa:93:82:05:98:82:c7:a1:5b:a8:0e:c3:ea:9e:51: ec:14:13:17:8f:c0:2c:d0:31:03:cf:90:12:c3:23: 07:a0:c5:37:75:bf:d8:cd:b7:d3:63:66:8a:b5:9d: 26:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:79:49:80:CA:A0:AB:F5:E6:6D:B5:2D:4C:53:7C:C0:D5:4F:1E:A1 X509v3 Authority Key Identifier: keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.246.94.0/23 IPv6: 2403:c000:1401::/48 Signature Algorithm: sha256WithRSAEncryption 20:84:83:2d:e0:ce:1c:ab:ed:4c:fb:e7:6a:2d:13:5e:8c:96: 6d:ac:bc:3f:58:d6:c3:9d:be:c0:13:22:29:24:6e:b5:f6:1c: f9:57:a5:6c:36:67:29:0e:6c:d8:e4:00:f3:75:85:05:2f:e7: 39:77:0d:76:8d:ea:3e:64:cf:c3:63:b7:57:99:89:f8:1a:47: 4a:f2:07:a2:31:9d:3f:31:9f:6f:5d:e1:ef:1f:f9:c9:85:47: 69:d9:ac:9b:e7:72:7f:09:f9:4a:57:48:81:16:88:d9:cb:6e: a9:8a:18:12:43:04:9b:7d:a6:0c:7b:fa:f3:9b:a6:11:f8:57: a8:b9:10:fd:a2:2f:e0:5e:9d:48:ae:4c:f4:88:18:ef:89:05: e4:2a:d7:d4:48:da:e2:d9:11:30:e7:44:f6:9d:9f:05:b5:13: 16:08:e9:97:b3:06:8f:95:51:d4:96:ee:f0:17:6c:43:69:52: 34:5f:1c:78:a6:7b:33:bf:d0:b6:bc:51:d4:09:5c:bc:26:63: 6c:5f:a5:cb:ec:46:76:ef:03:f6:c8:81:31:cd:bd:26:1f:f4: 1c:30:24:63:3e:3c:97:eb:cf:a1:a0:00:ae:49:52:65:6c:78: 53:82:c2:b2:a8:f7:d1:90:73:f4:e9:5a:3b:ed:7c:53:e7:f3: 96:81:f1:56 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG NzMzQTJGMUEwHhcNMjQwNzMwMTQ1MDE4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE4ZmRhYS05ZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZC2ceJms0A2VPjCqDV5IyVybTGwRhI6ajAi9BmPrNndk+Jz5S4EK+oITWR8 TQSgtELYot49e3nLvVkyjCiI3DCKcRaVZDKUWRS1oaSYhrWjyviexAuJGIJjMXNB Qb4ucot/L671gUwTzQ+Sds2aLtb3E5TXUMRdXNqzWuaKePRVChyPN5xnoNBd5owF Ny4SBo0JeD3uv5zwn8yl68Bm9ZaiLj89BrlyFUrs4uCmL4R0lfrWtx38R64CDUYD i8TbS60FlVjYLEMYVuoc77bKxsKqk4IFmILHoVuoDsPqnlHsFBMXj8As0DEDz5AS wyMHoMU3db/YzbfTY2aKtZ0mBQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFM95SYDK oKv15m21LUxTfMDVTx6hMB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM1QjAvNDBDOEQ1QTYxRDgzMTFFMjgyM0E1RkQ4MDhCMDJDRDIvNjFBNjVCRjJD MzUwMTFFRTk1MzY2RTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHS9l4wDwQCAAIwCQMHACQDwAAUATANBgkqhkiG9w0BAQsF AAOCAQEAIISDLeDOHKvtTPvnai0TXoyWbay8P1jWw52+wBMiKSRutfYc+VelbDZn KQ5s2OQA83WFBS/nOXcNdo3qPmTPw2O3V5mJ+BpHSvIHojGdPzGfb13h7x/5yYVH admsm+dyfwn5SldIgRaI2ctuqYoYEkMEm32mDHv685umEfhXqLkQ/aIv4F6dSK5M 9IgY74kF5CrX1Eja4tkRMOdE9p2fBbUTFgjpl7MGj5VR1Jbu8BdsQ2lSNF8ceKZ7 M7/QtrxR1AlcvCZjbF+ly+xGdu8D9siBMc29Jh/0HDAkYz48l+vPoaAArklSZWx4 U4LCsqj30ZBz9OlaO+18U+fzloHxVg== -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:34 2024 by rpki-client on console-fra.rpki-client.org