$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/5D822954368F11EAB3D4CE7FC4F9AE02.roa File: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (raw, json) Hash identifier: /cS7IVALMe9B/AtpjJXVY/jO3FykqwmgPTZQLz+GjqE= Subject key identifier: 42:BD:0B:F4:41:A8:D0:A0:05:14:01:61:41:AB:54:09:1E:04:1D:19 Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0ACE Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/5D822954368F11EAB3D4CE7FC4F9AE02.roa Signing time: Mon 16 Sep 2024 19:27:54 +0000 ROA not before: Mon 16 Sep 2024 19:27:54 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 132683 IP address blocks: 203.161.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2766 (0xace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: Sep 16 19:27:54 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e886ba-406b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:1f:c0:c3:26:df:30:ad:4c:1e:40:4c:0e: 34:3d:cf:0a:59:32:46:b3:7a:2b:14:76:7e:34:0f: 61:db:a3:1b:27:57:51:58:9e:b4:9c:7e:a0:33:fa: aa:10:e2:4b:eb:8d:57:49:d2:1e:aa:87:9b:8c:a4: 5a:c9:37:e0:5f:c4:b7:f9:51:b0:92:37:28:0b:33: 27:d7:8d:4c:85:cb:74:0b:49:51:06:f8:b2:12:43: 80:6b:fb:dd:63:69:2b:e2:de:67:ef:d9:bb:f0:21: 71:bc:87:03:b2:f2:49:8f:d4:c6:af:da:dd:e6:66: 10:3d:74:25:43:98:8b:1b:36:be:cd:f4:c2:a7:52: 19:1b:bb:72:06:d8:38:d3:5a:ea:80:04:a4:89:8d: 5c:c9:cd:4e:4b:37:b3:f7:f9:47:f7:6f:05:ea:64: e0:8f:df:3b:4a:c6:d8:7c:11:c1:35:ff:3a:01:2a: c8:97:bd:a4:bc:da:a7:fa:aa:21:22:cc:4c:a8:b1: ef:ad:cd:f1:6e:ca:48:30:de:db:a5:24:9f:1a:9c: 8e:3f:28:4c:e1:db:9c:cb:1d:ce:ed:30:73:5a:81: 80:db:ca:bc:7a:a7:51:03:a5:af:56:1d:9a:b4:b4: 51:e3:10:32:ca:3c:56:be:ba:92:07:3a:a9:2f:69: 51:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BD:0B:F4:41:A8:D0:A0:05:14:01:61:41:AB:54:09:1E:04:1D:19 X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/5D822954368F11EAB3D4CE7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.161.179.0/24 Signature Algorithm: sha256WithRSAEncryption 35:c9:a8:66:3f:91:ac:bc:72:26:50:af:80:56:36:cc:45:8e: f5:be:cf:64:c5:b9:34:33:3c:2e:5f:de:1d:5d:9c:34:06:76: 61:f7:6f:e9:17:3d:4d:53:03:df:a9:0e:eb:e8:be:3f:a2:65: 42:35:0a:6c:f2:2d:78:77:15:c4:b1:08:0e:85:50:89:e8:d1: f2:8c:fe:cc:09:e0:46:b9:bb:a9:4a:3b:7d:4c:79:ec:00:5b: e7:dc:22:41:e8:eb:ba:c8:37:10:c6:c0:48:20:07:f7:14:ed: fd:08:b6:41:44:8b:2d:c6:9e:99:4e:30:b5:70:2d:7f:16:20: d8:fb:a9:a9:a6:48:d7:f7:40:c0:3e:e6:cd:73:46:fd:b5:b2: 29:a8:94:b5:ba:6c:f6:5c:be:20:e1:22:6d:35:9e:b6:f8:eb: c7:66:7d:08:fd:76:a5:ca:27:88:6a:b8:76:30:a4:df:8c:19: a1:cb:03:7d:05:06:08:c1:60:6b:e0:2a:97:9e:b0:5d:bf:ab: bc:03:8d:0b:3f:70:b9:5b:1b:f4:df:48:54:b1:e6:cd:3f:3a: 65:ac:49:f9:24:d5:47:b4:ec:04:4b:45:5b:64:9a:24:ea:37: 06:98:a4:8b:6d:13:77:2d:29:48:2a:8e:67:98:34:7b:17:b2: e5:a9:e5:18 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjQwOTE2MTkyNzU0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU4ODZiYS00MDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo68fwMMm3zCtTB5ATA40Pc8KWTJGs3orFHZ+NA9h26MbJ1dRWJ60nH6gM/qq EOJL641XSdIeqoebjKRayTfgX8S3+VGwkjcoCzMn141Mhct0C0lRBviyEkOAa/vd Y2kr4t5n79m78CFxvIcDsvJJj9TGr9rd5mYQPXQlQ5iLGza+zfTCp1IZG7tyBtg4 01rqgASkiY1cyc1OSzez9/lH928F6mTgj987SsbYfBHBNf86ASrIl72kvNqn+qoh IsxMqLHvrc3xbspIMN7bpSSfGpyOPyhM4ducyx3O7TBzWoGA28q8eqdRA6WvVh2a tLRR4xAyyjxWvrqSBzqpL2lRkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEK9C/RB qNCgBRQBYUGrVAkeBB0ZMB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUwRkEvQUFBMEVCRTAzNjhFMTFFQUE3NjhGQzdFQzRGOUFFMDIvNUQ4MjI5NTQz NjhGMTFFQUIzRDRDRTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLobMwDQYJKoZIhvcNAQELBQADggEBADXJqGY/kay8ciZQ r4BWNsxFjvW+z2TFuTQzPC5f3h1dnDQGdmH3b+kXPU1TA9+pDuvovj+iZUI1Cmzy LXh3FcSxCA6FUIno0fKM/swJ4Ea5u6lKO31MeewAW+fcIkHo67rINxDGwEggB/cU 7f0ItkFEiy3GnplOMLVwLX8WINj7qammSNf3QMA+5s1zRv21simolLW6bPZcviDh Im01nrb468dmfQj9dqXKJ4hquHYwpN+MGaHLA30FBgjBYGvgKpeesF2/q7wDjQs/ cLlbG/TfSFSx5s0/OmWsSfkk1Ue07ARLRVtkmiTqNwaYpIttE3ctKUgqjmeYNHsX suWp5Rg= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org