$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/48E219C209C311EEA9D88A34C4F9AE02.roa File: 48E219C209C311EEA9D88A34C4F9AE02.roa (raw, json) Hash identifier: ojzmtYL5oSSSDRNMHS4oBfQHwOO76KE3+ooyFQgsmPI= Subject key identifier: 62:CD:10:F0:29:11:36:A5:95:26:61:A4:75:DB:AA:5B:40:2E:DB:EB Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0C0E Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/48E219C209C311EEA9D88A34C4F9AE02.roa Signing time: Wed 06 Nov 2024 19:08:43 +0000 ROA not before: Wed 06 Nov 2024 19:08:43 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 23736 IP address blocks: 58.139.240.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3086 (0xc0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 6 19:08:43 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=672bbeba-f518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:7c:43:f3:b6:b4:dc:28:51:9b:ec:16:7f: 57:2f:de:08:9f:b5:c3:dc:7c:f9:cf:e7:6a:dc:15: c0:66:0f:d7:34:79:42:e0:90:f1:b8:45:48:26:97: 8b:be:0e:95:ac:4b:80:1d:ec:ad:25:f3:4a:63:c2: ad:52:29:ae:4f:44:c4:d2:c6:1e:0f:fe:f1:ea:54: 96:0f:c2:d3:2f:c1:d0:5e:0e:af:3f:bd:bf:52:ef: 09:61:88:46:63:0b:1b:16:e4:e9:73:eb:be:72:31: c8:fb:51:3e:6d:99:ce:20:f8:f6:6c:fa:4a:52:68: 12:74:13:9c:e2:ff:ef:6e:ef:58:20:08:b1:65:7c: b3:e6:c6:5c:6f:8c:ab:2f:5f:68:dc:7c:72:a2:34: 8f:a9:d0:72:b9:9c:37:20:39:06:51:18:aa:2e:7a: 75:37:fc:af:33:4c:ba:01:07:e4:8b:3a:b3:7d:4b: 11:74:e0:2a:61:1b:46:dd:42:fd:c6:80:ec:da:a8: 40:d5:8e:3c:21:7f:61:07:7e:6d:1c:94:15:c2:f2: 9c:2c:d3:b4:1d:82:0e:a4:a2:f0:d7:ed:8b:1c:6c: 86:23:56:f6:f3:df:da:14:00:be:88:10:1b:06:9b: 27:cf:9d:6c:2c:30:0b:44:61:d8:7a:96:84:ad:64: 08:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CD:10:F0:29:11:36:A5:95:26:61:A4:75:DB:AA:5B:40:2E:DB:EB X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/48E219C209C311EEA9D88A34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.139.240.0/20 Signature Algorithm: sha256WithRSAEncryption 9a:5d:f7:e2:19:43:f3:10:16:30:9f:08:c9:2b:7b:33:06:95: 21:e4:47:6b:d2:6c:a3:58:d7:dd:dc:4d:2b:12:5f:26:3f:47: 05:7a:a5:21:70:32:5f:be:9b:3d:16:71:d9:05:e3:f9:e6:3d: 5f:2d:12:37:57:c5:e0:12:5a:e8:48:0a:c2:4b:bd:f0:f9:1a: b4:f6:b6:b6:fb:56:ba:f0:10:15:11:66:8e:49:bf:9f:2d:fd: 0b:33:b5:6c:d8:1a:2e:68:13:a9:05:05:78:ae:5c:e6:a5:6c: 35:02:4f:25:79:9e:c1:94:a7:95:38:c2:fa:4d:b6:2c:35:8c: c4:a7:04:5f:db:81:d6:0b:01:52:b1:dc:c9:8c:58:b3:ed:f0: bd:a6:09:36:6e:7b:98:d0:df:9f:f1:34:45:a5:da:c4:d4:d6: 7a:92:a4:05:e6:a3:39:2f:f1:61:29:bf:c8:f4:a5:1e:61:31: 31:84:85:55:42:05:52:e1:23:0f:f9:77:1d:76:03:cb:a1:21: df:9d:3c:1d:76:e9:80:f8:23:04:f7:66:d1:74:10:ad:b7:36: 19:29:69:51:ed:db:9f:ae:81:2d:66:58:98:3f:94:db:ff:ec: 05:56:66:81:13:cc:be:f3:ea:48:a7:7c:27:8c:c0:6e:78:da: cf:eb:7e:e9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjQxMTA2MTkwODQzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiYmViYS1mNTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6t8Q/O2tNwoUZvsFn9XL94In7XD3Hz5z+dq3BXAZg/XNHlC4JDxuEVIJpeL vg6VrEuAHeytJfNKY8KtUimuT0TE0sYeD/7x6lSWD8LTL8HQXg6vP72/Uu8JYYhG YwsbFuTpc+u+cjHI+1E+bZnOIPj2bPpKUmgSdBOc4v/vbu9YIAixZXyz5sZcb4yr L19o3HxyojSPqdByuZw3IDkGURiqLnp1N/yvM0y6AQfkizqzfUsRdOAqYRtG3UL9 xoDs2qhA1Y48IX9hB35tHJQVwvKcLNO0HYIOpKLw1+2LHGyGI1b289/aFAC+iBAb Bpsnz51sLDALRGHYepaErWQI5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGLNEPAp ETallSZhpHXbqltALtvrMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvNDhFMjE5QzIw OUMzMTFFRUE5RDg4QTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAQ6i/AwDQYJKoZIhvcNAQELBQADggEBAJpd9+IZQ/MQFjCf CMkrezMGlSHkR2vSbKNY193cTSsSXyY/RwV6pSFwMl++mz0WcdkF4/nmPV8tEjdX xeASWuhICsJLvfD5GrT2trb7VrrwEBURZo5Jv58t/QsztWzYGi5oE6kFBXiuXOal bDUCTyV5nsGUp5U4wvpNtiw1jMSnBF/bgdYLAVKx3MmMWLPt8L2mCTZue5jQ35/x NEWl2sTU1nqSpAXmozkv8WEpv8j0pR5hMTGEhVVCBVLhIw/5dx12A8uhId+dPB12 6YD4IwT3ZtF0EK23NhkpaVHt25+ugS1mWJg/lNv/7AVWZoETzL7z6kinfCeMwG54 2s/rfuk= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:21 2024 by rpki-client on console-ams.rpki-client.org