$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/35BE363E668F11EBA738AF61C4F9AE02.roa File: 35BE363E668F11EBA738AF61C4F9AE02.roa (raw, json) Hash identifier: 4ZqRPuB82tD4GgkAjxWzsofF8rVT1GZ2GlbAnR98YcY= Subject key identifier: 80:94:7C:E8:D5:49:40:1D:ED:99:E8:C5:1B:28:FE:B7:4E:F3:EE:83 Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 061F Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/35BE363E668F11EBA738AF61C4F9AE02.roa Signing time: Fri 10 Nov 2023 23:31:37 +0000 ROA not before: Fri 10 Nov 2023 23:31:37 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 45474 IP address blocks: 123.1.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: Nov 10 23:31:37 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=654ebd58-26b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:da:c7:76:78:56:41:f0:7f:97:67:42:e9: af:f5:01:55:21:7b:92:20:24:e8:4d:77:17:01:a5: 65:04:40:82:b7:89:3d:c1:44:55:29:da:01:f3:27: 21:66:a8:d6:56:bf:74:ce:30:00:0a:f6:aa:f5:2f: f1:9b:ec:e9:c5:f9:e1:41:5f:35:83:db:ea:ee:c2: 23:7f:1f:df:06:06:2e:9d:5b:24:05:22:d9:c4:59: 64:1b:72:44:ab:c2:32:2a:d8:74:5b:ba:98:9a:fe: 5f:ff:5e:a5:27:c6:dc:e7:b4:32:67:91:72:3f:ad: a6:6a:9a:43:88:e9:2f:22:e1:37:36:8e:ad:56:35: 68:69:f6:6e:21:46:77:0f:54:62:bc:05:d9:cc:5d: b5:d6:f0:c1:ff:76:4f:48:ce:cc:5b:81:cf:7c:0d: dc:1e:11:2a:09:08:43:54:0e:22:52:ad:e7:b5:26: e1:bf:43:89:da:6a:c9:a6:e6:00:4b:17:e7:9c:5d: fe:44:c3:cb:69:ad:ca:d0:23:dc:c2:07:f7:10:f8: 5f:92:1d:b5:dd:16:20:9c:65:99:d0:f5:12:0b:0c: a7:47:ed:c7:32:00:86:ba:7f:49:d2:5b:2a:ac:2b: 86:63:bd:2b:fc:f9:93:db:62:14:a6:38:99:7e:e8: 08:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:94:7C:E8:D5:49:40:1D:ED:99:E8:C5:1B:28:FE:B7:4E:F3:EE:83 X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/35BE363E668F11EBA738AF61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.1.207.0/24 Signature Algorithm: sha256WithRSAEncryption 09:bc:0d:8b:26:29:c2:f9:99:37:a9:b1:f1:ba:1d:bc:f9:d8: 2f:ae:97:a2:e0:42:e4:c6:85:45:34:a2:fc:8b:3e:c1:64:e0: a8:68:f2:8c:de:4f:32:34:7e:26:86:18:c4:a3:4e:1b:88:3d: 36:f6:8c:b5:9d:d1:42:17:5c:d3:da:4d:49:47:4e:82:ea:32: f1:45:ad:48:6d:ff:fe:48:f7:d2:dd:cd:63:65:54:f8:f7:48: e7:9a:87:81:b3:a7:a2:c1:81:26:45:17:7f:ad:3a:5c:05:34: 9a:da:d7:1f:29:34:d8:45:ea:af:d3:3b:30:32:c7:d9:69:e2: 19:db:b4:86:83:75:af:c8:9b:1d:26:68:bc:bd:18:ef:a3:6c: c7:e6:e8:b3:00:06:db:02:cf:47:94:83:28:d5:12:f6:f2:bd: 68:3c:c2:e9:f7:f7:0b:a1:4f:5f:87:c0:18:4b:4e:4f:0f:b9: a5:5a:bf:03:44:12:aa:2c:e1:f8:d5:c5:56:a0:2f:8b:37:80: c8:55:a8:b3:ec:60:e3:0d:59:82:7e:3a:17:fd:a5:5f:bf:c5: d3:86:61:95:47:8c:06:54:ac:d8:bc:c6:8e:2b:63:ab:19:b5: f9:e4:51:39:6f:ab:4b:e9:82:bf:8a:d8:ba:a8:f1:c1:77:84: 3e:01:2e:30 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjMxMTEwMjMzMTM3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTRlYmQ1OC0yNmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gPax3Z4VkHwf5dnQumv9QFVIXuSICToTXcXAaVlBECCt4k9wURVKdoB8ych ZqjWVr90zjAACvaq9S/xm+zpxfnhQV81g9vq7sIjfx/fBgYunVskBSLZxFlkG3JE q8IyKth0W7qYmv5f/16lJ8bc57QyZ5FyP62mappDiOkvIuE3No6tVjVoafZuIUZ3 D1RivAXZzF211vDB/3ZPSM7MW4HPfA3cHhEqCQhDVA4iUq3ntSbhv0OJ2mrJpuYA SxfnnF3+RMPLaa3K0CPcwgf3EPhfkh213RYgnGWZ0PUSCwynR+3HMgCGun9J0lsq rCuGY70r/PmT22IUpjiZfugIowIDAQABo4IClTCCApEwHQYDVR0OBBYEFICUfOjV SUAd7ZnoxRso/rdO8+6DMB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURGMUYvRjVDQjZFNkE1QzUzMTFFQkI2NjI3ODUzQzRGOUFFMDIvMzVCRTM2M0U2 NjhGMTFFQkE3MzhBRjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB7Ac8wDQYJKoZIhvcNAQELBQADggEBAAm8DYsmKcL5mTep sfG6Hbz52C+ul6LgQuTGhUU0ovyLPsFk4Kho8ozeTzI0fiaGGMSjThuIPTb2jLWd 0UIXXNPaTUlHToLqMvFFrUht//5I99LdzWNlVPj3SOeah4Gzp6LBgSZFF3+tOlwF NJra1x8pNNhF6q/TOzAyx9lp4hnbtIaDda/Imx0maLy9GO+jbMfm6LMABtsCz0eU gyjVEvbyvWg8wun39wuhT1+HwBhLTk8PuaVavwNEEqos4fjVxVagL4s3gMhVqLPs YOMNWYJ+Ohf9pV+/xdOGYZVHjAZUrNi8xo4rY6sZtfnkUTlvq0vpgr+K2Lqo8cF3 hD4BLjA= -----END CERTIFICATE-----Generated at Fri May 3 00:48:28 2024 by rpki-client on console-ams.rpki-client.org