$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/48E219C209C311EEA9D88A34C4F9AE02.roa File: 48E219C209C311EEA9D88A34C4F9AE02.roa (raw, json) Hash identifier: 4bqwARx5pNr5236r4Fz7ajdmUwXxCW9su9CjYZA5i9M= Subject key identifier: BF:7A:11:11:A4:64:86:22:9B:64:8E:3F:B6:A6:B6:33:70:9E:C8:F7 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0AE4 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/48E219C209C311EEA9D88A34C4F9AE02.roa Signing time: Mon 04 Dec 2023 20:08:01 +0000 ROA not before: Mon 04 Dec 2023 20:08:01 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 23736 IP address blocks: 58.139.240.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2788 (0xae4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Dec 4 20:08:01 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656e31a1-9262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:10:3b:b5:67:09:13:f6:22:2e:9f:15:c5:34: 95:a1:02:e2:cc:b0:62:2d:fe:07:a8:78:66:c1:da: 43:4b:59:9c:e0:12:ff:63:28:d0:4e:c6:ff:96:88: 12:b2:b0:a6:f7:94:51:2f:24:0f:ad:81:0e:37:50: 8d:45:31:6d:c7:23:02:f7:9b:28:13:79:27:c0:67: 95:df:2f:7c:28:5a:c2:9d:45:19:70:a6:3b:1a:de: fe:c9:95:c1:c8:dd:81:98:07:10:3d:2b:e3:31:3b: 41:fc:ae:f5:76:51:bb:8a:9d:1b:a4:3f:1c:92:0b: 8a:4f:cd:d7:73:7c:21:6d:c5:0a:36:1c:ad:76:9d: f9:ae:4f:2f:bc:92:b1:45:89:fe:71:7a:2a:16:54: a2:11:af:f7:41:d6:40:d8:79:20:85:25:99:bd:99: 68:4b:6b:ad:80:3b:8b:49:ec:e4:45:0e:e5:e5:61: 33:ed:4c:a5:db:57:cb:c0:fc:78:ae:1f:65:5e:7b: 37:bc:cb:b5:7e:d5:94:3c:e1:e4:0b:ac:de:e4:c8: 7c:6f:5b:b2:12:76:f3:92:b0:db:5e:29:88:77:b4: 5f:0f:69:48:db:e4:b0:01:76:70:95:0c:ea:5d:dc: 6c:76:3a:59:ff:0e:98:8e:3b:42:5a:39:27:b6:27: f0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7A:11:11:A4:64:86:22:9B:64:8E:3F:B6:A6:B6:33:70:9E:C8:F7 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/48E219C209C311EEA9D88A34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.139.240.0/20 Signature Algorithm: sha256WithRSAEncryption 14:fc:fd:36:3f:de:74:84:c6:c7:69:b2:a1:db:5b:20:ec:26: b0:c0:a8:43:62:36:70:ae:e8:7e:86:8a:4f:2e:64:0e:73:83: de:80:c8:89:f1:9f:20:f7:7d:06:7a:33:7e:ba:55:0a:41:3a: 58:47:a0:5e:18:d7:f7:55:ce:ba:93:8d:7c:7e:43:9a:20:82: 9e:82:83:b6:a2:66:6d:f8:24:a9:62:8a:e1:c9:65:86:38:e5: 93:5f:d2:82:e0:d2:b6:8e:59:fc:5b:31:e3:80:18:28:de:90: 96:d9:e0:c6:92:58:da:7b:2d:e0:b7:50:48:c4:e4:a8:99:61: e0:71:26:9b:5d:60:c9:eb:74:f8:ca:72:09:13:e3:4c:7c:5d: 41:4b:62:93:84:e9:48:8f:99:ea:6c:54:4d:76:f5:5d:25:49: ec:3e:6e:2e:8a:38:cd:f8:b7:1a:30:cb:ea:d6:83:96:a9:96: 53:7c:a3:77:2e:20:e5:7f:3c:d5:3c:37:1b:e2:02:b0:91:53: 83:d7:99:18:aa:87:a3:5a:cf:da:89:70:d4:2e:a8:7a:5a:50: c2:53:1a:17:0f:09:47:56:a9:62:49:7f:b6:85:e8:6b:41:c3: 8f:18:dd:e2:85:b0:36:07:26:28:7c:03:6f:c8:cf:5b:f1:83: 71:f5:16:96 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjMxMjA0MjAwODAxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZlMzFhMS05MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+hA7tWcJE/YiLp8VxTSVoQLizLBiLf4HqHhmwdpDS1mc4BL/YyjQTsb/logS srCm95RRLyQPrYEON1CNRTFtxyMC95soE3knwGeV3y98KFrCnUUZcKY7Gt7+yZXB yN2BmAcQPSvjMTtB/K71dlG7ip0bpD8ckguKT83Xc3whbcUKNhytdp35rk8vvJKx RYn+cXoqFlSiEa/3QdZA2HkghSWZvZloS2utgDuLSezkRQ7l5WEz7Uyl21fLwPx4 rh9lXns3vMu1ftWUPOHkC6ze5Mh8b1uyEnbzkrDbXimId7RfD2lI2+SwAXZwlQzq XdxsdjpZ/w6YjjtCWjkntifwUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFL96ERGk ZIYim2SOP7amtjNwnsj3MB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvNDhFMjE5QzIw OUMzMTFFRUE5RDg4QTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAQ6i/AwDQYJKoZIhvcNAQELBQADggEBABT8/TY/3nSExsdp sqHbWyDsJrDAqENiNnCu6H6Gik8uZA5zg96AyInxnyD3fQZ6M366VQpBOlhHoF4Y 1/dVzrqTjXx+Q5oggp6Cg7aiZm34JKliiuHJZYY45ZNf0oLg0raOWfxbMeOAGCje kJbZ4MaSWNp7LeC3UEjE5KiZYeBxJptdYMnrdPjKcgkT40x8XUFLYpOE6UiPmeps VE129V0lSew+bi6KOM34txowy+rWg5apllN8o3cuIOV/PNU8NxviArCRU4PXmRiq h6Naz9qJcNQuqHpaUMJTGhcPCUdWqWJJf7aF6GtBw48Y3eKFsDYHJih8A2/Iz1vx g3H1FpY= -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:09 2024 by rpki-client on console-ams.rpki-client.org