$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2072597E691311EF82B0FC62C4F9AE02.roa File: 2072597E691311EF82B0FC62C4F9AE02.roa (raw, json) Hash identifier: 0KgbJFyblRFwfwyAgMvtizqpJw5L7N4PN8PbwGbB8HY= Subject key identifier: B4:6E:CA:F5:E1:EB:59:4E:6F:60:6B:FE:A7:D4:B2:AA:80:2B:BA:7C Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 0287 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2072597E691311EF82B0FC62C4F9AE02.roa Signing time: Mon 02 Sep 2024 10:07:14 +0000 ROA not before: Mon 02 Sep 2024 10:07:14 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 137545 IP address blocks: 223.27.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Sep 2 10:07:14 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66d58e52-f4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:21:3f:aa:fd:92:2c:bd:c6:89:af:96:82: ef:79:55:03:9a:19:7f:8e:f7:e9:24:8a:d0:0b:ce: 6f:74:bf:74:a1:c7:cc:9b:d7:aa:d1:7c:45:55:36: 5b:d1:87:ec:04:04:40:0a:45:18:c8:b8:bf:2b:3b: f8:92:23:2c:2b:0a:58:6a:4b:c6:86:69:f8:70:21: cb:18:19:3d:a7:55:93:5c:e5:e7:8d:46:91:63:fe: ba:4e:3f:61:8e:f6:53:ba:ed:1d:05:0d:13:8f:3b: 4f:e1:37:bf:b7:b6:d7:bb:92:cc:3d:1f:c8:b4:d7: 7d:b1:ee:22:4c:37:bd:55:e0:9b:1b:e8:91:45:50: 86:5e:1a:76:d7:c6:a1:3f:ea:6d:df:e4:54:1e:81: 93:d0:9f:0a:62:57:79:89:90:1e:45:be:47:a2:56: ac:7e:36:31:4d:88:07:20:43:71:4c:60:34:7b:04: 93:8f:da:3e:79:f9:87:a3:a7:5e:f3:a5:93:d2:77: d1:aa:db:93:ed:83:a8:c4:d2:61:44:9d:e0:85:d5: 2e:a9:00:bf:15:5f:14:a3:4e:61:d4:af:f8:05:3a: 91:c5:ae:22:e5:ba:60:c7:d0:f0:f5:3c:b7:3a:d6: b8:e0:a9:72:0a:2f:19:91:a1:8f:81:2f:9d:5a:f1: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6E:CA:F5:E1:EB:59:4E:6F:60:6B:FE:A7:D4:B2:AA:80:2B:BA:7C X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2072597E691311EF82B0FC62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.27.206.0/24 Signature Algorithm: sha256WithRSAEncryption 27:dd:39:2c:78:d4:27:9a:a7:ba:6f:8c:40:ec:f0:c1:05:b7: d5:11:a0:fd:e9:6c:8c:b4:13:c3:ee:2e:d7:54:35:02:21:fe: 3b:13:7f:47:5e:11:81:72:35:70:4d:2d:35:0a:8d:e0:bd:bc: d2:63:34:5b:95:6e:f9:ea:a8:67:a7:64:16:9a:28:70:57:7c: 03:e9:a8:35:c8:06:8e:2e:34:72:05:21:9c:5e:84:80:53:bf: 2b:90:94:85:82:04:6f:b1:0a:d6:21:b9:c7:4a:90:10:fe:f7: 97:25:ed:af:ae:06:a6:39:fc:42:31:94:ec:5a:e6:d3:b9:5f: 8e:61:98:5c:5c:91:a5:44:4f:5f:b1:91:f0:88:97:14:e6:a7: 52:be:b3:e8:41:f6:5c:4d:f8:d9:5a:13:61:e9:07:05:fe:05: a6:5b:f3:05:40:e8:73:94:4a:70:3b:03:89:32:b4:65:32:0c: 94:3b:3d:61:1a:82:09:84:5f:95:44:7d:26:5d:a5:43:7d:60: 37:fe:cd:2b:2a:be:5b:4a:d5:24:d1:63:bc:bd:9d:fd:09:ce: 7f:3f:51:42:29:4e:69:ee:46:b4:e5:16:b6:ec:41:23:fb:a8: de:52:79:a8:f0:57:5b:0c:1d:11:a1:a5:a1:48:a6:2c:7d:3f: dd:99:fa:8a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjQwOTAyMTAwNzE0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ1OGU1Mi1mNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWMhP6r9kiy9xomvloLveVUDmhl/jvfpJIrQC85vdL90ocfMm9eq0XxFVTZb 0YfsBARACkUYyLi/Kzv4kiMsKwpYakvGhmn4cCHLGBk9p1WTXOXnjUaRY/66Tj9h jvZTuu0dBQ0TjztP4Te/t7bXu5LMPR/ItNd9se4iTDe9VeCbG+iRRVCGXhp218ah P+pt3+RUHoGT0J8KYld5iZAeRb5HolasfjYxTYgHIENxTGA0ewSTj9o+efmHo6de 86WT0nfRqtuT7YOoxNJhRJ3ghdUuqQC/FV8Uo05h1K/4BTqRxa4i5bpgx9Dw9Ty3 Ota44KlyCi8ZkaGPgS+dWvFAHwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLRuyvXh 61lOb2Br/qfUsqqAK7p8MB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvMjA3MjU5N0U2 OTEzMTFFRjgyQjBGQzYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADfG84wDQYJKoZIhvcNAQELBQADggEBACfdOSx41Ceap7pv jEDs8MEFt9URoP3pbIy0E8PuLtdUNQIh/jsTf0deEYFyNXBNLTUKjeC9vNJjNFuV bvnqqGenZBaaKHBXfAPpqDXIBo4uNHIFIZxehIBTvyuQlIWCBG+xCtYhucdKkBD+ 95cl7a+uBqY5/EIxlOxa5tO5X45hmFxckaVET1+xkfCIlxTmp1K+s+hB9lxN+Nla E2HpBwX+BaZb8wVA6HOUSnA7A4kytGUyDJQ7PWEaggmEX5VEfSZdpUN9YDf+zSsq vltK1STRY7y9nf0Jzn8/UUIpTmnuRrTlFrbsQSP7qN5SeajwV1sMHRGhpaFIpix9 P92Z+oo= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:31 2024 by rpki-client on console-fra.rpki-client.org