$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/A3744A28149A11EDB9CF2F70C4F9AE02.roa File: A3744A28149A11EDB9CF2F70C4F9AE02.roa (raw, json) Hash identifier: owavO0XDzj500YGpyqbmjhYipEKAfrWBHBWdBUgrtlU= Subject key identifier: 8B:A3:34:EF:5C:06:CD:E6:DB:70:7F:B8:E4:9C:C2:D2:F4:E4:9F:BC Certificate issuer: /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Certificate serial: 06B5 Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/A3744A28149A11EDB9CF2F70C4F9AE02.roa Signing time: Mon 06 May 2024 16:53:51 +0000 ROA not before: Mon 06 May 2024 16:53:51 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 132819 IP address blocks: 185.251.172.0/24 maxlen: 24 185.251.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1717 (0x6b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Validity Not Before: May 6 16:53:51 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66390b1e-83a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:31:0e:e7:a2:d8:bd:4f:63:da:04:ac:7c: 11:05:be:0c:a0:b5:a9:f6:af:d3:cc:3b:b0:ad:cd: 75:ed:9e:f0:ad:77:1b:e3:bb:69:df:1d:c3:8d:fb: 88:57:af:8c:3b:d2:17:30:2a:a7:51:a8:b7:a7:be: 3c:0b:d8:a2:92:a3:9e:23:f5:4c:00:cf:c8:eb:43: 2d:49:a9:5a:34:c2:84:ea:0c:c8:c1:55:e9:d9:88: fc:fe:32:72:c2:f8:5e:a2:7c:21:c7:4b:cd:fc:13: 53:ed:60:de:ad:d4:67:78:3a:18:ce:a2:7a:1a:83: e3:89:d7:8e:a1:1c:5c:f0:a2:f4:73:82:24:c6:79: 73:43:a5:21:70:fc:05:20:6c:19:20:e2:0c:1a:e1: c9:ad:8b:be:c1:8c:95:87:57:96:18:8f:e8:3f:fa: bd:b3:0c:9f:77:94:43:72:7a:b9:96:13:c7:96:73: 3c:48:95:5f:68:43:c2:d7:82:07:f0:b3:03:aa:b6: c3:36:cd:11:3e:ce:38:92:f3:de:67:a8:41:4e:6b: 1c:95:9f:6b:5a:bc:96:13:66:77:61:bb:c0:e5:de: 1f:83:f7:b3:c3:62:83:dd:77:72:d9:8d:54:95:de: 82:95:86:4c:18:0b:18:e4:18:4b:9b:c4:99:e5:f3: 99:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A3:34:EF:5C:06:CD:E6:DB:70:7F:B8:E4:9C:C2:D2:F4:E4:9F:BC X509v3 Authority Key Identifier: keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/A3744A28149A11EDB9CF2F70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 185.251.172.0/23 Signature Algorithm: sha256WithRSAEncryption bb:d3:c9:29:82:59:1d:49:d8:74:8a:28:e1:cb:d5:31:b7:6a: 69:1b:3d:22:25:30:f2:c6:da:ed:fd:0c:f3:79:04:90:3e:c3: 8b:7c:e2:eb:40:a1:33:55:ad:5a:67:02:e2:4d:b1:bd:27:a3: e0:e8:38:b2:94:43:02:3d:c6:78:10:13:d4:34:c5:2a:e9:75: 16:ff:05:4a:85:25:30:b9:50:ea:05:7b:d5:52:a8:bb:43:4b: a6:33:fb:85:91:e4:36:df:57:f9:dd:36:df:18:7f:05:cd:b7: 37:b0:bb:da:56:e3:0f:db:20:f1:90:9a:35:c9:17:99:d7:59: 91:0a:32:0a:52:81:87:bb:60:3c:9e:c9:cf:a0:af:66:d8:b4: 46:18:87:ed:fe:f4:cd:ef:77:72:f1:92:f3:26:15:a4:75:cf: c6:df:bd:12:d7:0d:32:95:79:14:12:ca:96:f5:f7:3d:af:e5: f4:4d:87:d2:03:33:9e:58:03:30:3a:de:94:fc:37:08:3e:44: 15:a9:33:d4:3e:d3:66:dd:73:ef:05:82:e7:34:c1:10:90:e8: 28:aa:ff:bb:4e:00:77:50:7a:ac:73:5c:aa:94:46:40:31:ff: a7:fa:f2:6e:3e:e2:a0:fa:c7:bc:82:c2:03:44:3f:79:d1:37: 62:e4:af:fd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKEFGNEEzNTQ0Qzc0QjMxN0E3QzMyNkFGMEU4MzkzQ0I5 RDUyNjIwMzIwHhcNMjQwNTA2MTY1MzUxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM5MGIxZS04M2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1l4xDuei2L1PY9oErHwRBb4MoLWp9q/TzDuwrc117Z7wrXcb47tp3x3DjfuI V6+MO9IXMCqnUai3p748C9iikqOeI/VMAM/I60MtSalaNMKE6gzIwVXp2Yj8/jJy wvheonwhx0vN/BNT7WDerdRneDoYzqJ6GoPjideOoRxc8KL0c4IkxnlzQ6UhcPwF IGwZIOIMGuHJrYu+wYyVh1eWGI/oP/q9swyfd5RDcnq5lhPHlnM8SJVfaEPC14IH 8LMDqrbDNs0RPs44kvPeZ6hBTmsclZ9rWryWE2Z3YbvA5d4fg/ezw2KD3Xdy2Y1U ld6ClYZMGAsY5BhLm8SZ5fOZHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIujNO9c Bs3m23B/uOScwtL05J+8MB8GA1UdIwQYMBaAFK9KNUTHSzF6fDJq8Og5PLnVJiAy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi8wRTJFRjUzNDFB NkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1YcDhNbXJ3NkRrOHVkVW1J REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3IwbzFSTWRMTVhwOE1tcnc2RGs4dWRVbUlESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNCRkYvMEUyRUY1MzQxQTZBMTFFQjlGRDJEMzYzQzRGOUFFMDIvQTM3NDRBMjgx NDlBMTFFREI5Q0YyRjcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAG5+6wwDQYJKoZIhvcNAQELBQADggEBALvTySmCWR1J2HSK KOHL1TG3amkbPSIlMPLG2u39DPN5BJA+w4t84utAoTNVrVpnAuJNsb0no+DoOLKU QwI9xngQE9Q0xSrpdRb/BUqFJTC5UOoFe9VSqLtDS6Yz+4WR5DbfV/ndNt8YfwXN tzewu9pW4w/bIPGQmjXJF5nXWZEKMgpSgYe7YDyeyc+gr2bYtEYYh+3+9M3vd3Lx kvMmFaR1z8bfvRLXDTKVeRQSypb19z2v5fRNh9IDM55YAzA63pT8Nwg+RBWpM9Q+ 02bdc+8Fguc0wRCQ6Ciq/7tOAHdQeqxzXKqURkAx/6f68m4+4qD6x7yCwgNEP3nR N2Lkr/0= -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:04 2024 by rpki-client on console-ams.rpki-client.org