$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/FD2941A0BBC311EEBE58430EC4F9AE02.roa File: FD2941A0BBC311EEBE58430EC4F9AE02.roa (raw, json) Hash identifier: X2aoTMKWDO3O+NQTnXw87sQERWlGRf5FlK95mjGB8r4= Subject key identifier: 27:D2:7D:B9:69:FD:FE:C5:9C:E5:F5:97:02:18:6A:8F:92:DA:5F:32 Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 214E Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/FD2941A0BBC311EEBE58430EC4F9AE02.roa Signing time: Wed 26 Jun 2024 16:24:16 +0000 ROA not before: Wed 26 Jun 2024 16:24:16 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 133752 IP address blocks: 180.210.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8526 (0x214e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: Jun 26 16:24:16 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=667c40af-d20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0f:75:bf:84:b8:7f:e7:f6:62:df:b0:6e:42: 91:4a:cd:cb:09:2c:5d:6c:0e:cf:c9:50:7f:e8:21: b4:6e:74:02:e7:73:5e:4e:c4:3d:ea:1b:ca:76:89: 3d:e5:2e:2f:0c:4d:62:c1:b4:17:4a:4e:8f:e3:d1: d6:ae:68:7e:8f:87:ec:1b:67:e3:56:c2:4d:7e:4c: b5:22:cb:6c:69:c4:17:e5:3b:59:ab:e3:a5:fd:d4: ca:56:15:8f:dc:c3:4c:9d:8e:92:2e:5c:90:0b:b0: ba:64:ff:25:ed:b8:8f:7b:bb:4c:85:91:3c:05:09: 00:f7:86:b1:1a:fe:7f:b6:a7:9d:27:6a:30:c1:f0: 00:93:d6:05:6e:f5:ad:9b:eb:58:a9:30:e8:6c:b4: 6c:8c:06:ba:eb:eb:fd:c4:9e:be:79:7a:0b:ae:9b: 48:76:21:5b:a6:7f:36:60:1a:34:2f:61:b4:4f:46: 8f:a0:7a:02:10:1d:cb:b0:6b:35:4c:0a:5e:09:73: 9b:61:a1:a1:1f:17:3f:d2:92:ac:81:cb:fd:dd:94: 30:6e:16:4f:0f:98:1f:cf:a3:fa:89:d2:94:8d:9e: 24:68:2b:f9:b5:30:d4:27:e2:33:b4:c8:57:96:13: 00:8a:f2:56:eb:45:4d:cb:81:82:12:01:b3:59:2e: 02:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D2:7D:B9:69:FD:FE:C5:9C:E5:F5:97:02:18:6A:8F:92:DA:5F:32 X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/FD2941A0BBC311EEBE58430EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.210.220.0/24 Signature Algorithm: sha256WithRSAEncryption 25:75:8e:57:09:5b:42:02:2b:e0:60:84:40:41:f5:f5:dc:25: 47:a0:40:8d:9e:67:02:87:5d:4e:57:2b:6d:6c:74:c3:87:9a: 43:67:27:f8:4e:8a:9b:fb:91:ec:6d:91:f7:40:ab:cf:0d:5a: 4f:58:0b:72:e7:20:ea:0e:77:51:96:30:2f:4a:ca:30:32:ec: 48:72:e2:1a:e6:a7:f1:9b:59:21:97:fd:c0:11:d8:39:25:3e: c7:1b:d0:2d:f6:68:93:ef:2f:90:25:55:e3:a9:f9:18:f2:e6: 3b:35:43:ee:9d:21:c1:36:3c:7b:c4:f0:76:14:52:2e:03:30: dd:5b:0f:a0:1b:84:a6:59:23:e9:5b:aa:d1:e7:fe:85:bd:4e: 42:67:aa:80:98:64:8e:e9:be:f5:7f:3b:9a:01:e2:38:cb:d9: d8:5e:8a:4c:2e:dd:df:98:b3:02:35:8d:49:37:80:0b:6a:7d: 56:78:da:2c:be:7e:fd:3b:2b:f7:44:51:01:8c:1c:57:3a:70: 93:b1:3e:98:54:03:71:59:8a:cc:1d:ab:78:79:05:67:c2:4f: d4:ae:4a:94:06:f0:4d:0b:52:db:8c:12:67:56:a3:e1:a0:28: 50:9c:09:39:03:a2:92:09:60:63:8a:d1:a1:a6:b1:ce:19:96: c3:ff:46:09 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjQwNjI2MTYyNDE2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdjNDBhZi1kMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Q91v4S4f+f2Yt+wbkKRSs3LCSxdbA7PyVB/6CG0bnQC53NeTsQ96hvKdok9 5S4vDE1iwbQXSk6P49HWrmh+j4fsG2fjVsJNfky1IstsacQX5TtZq+Ol/dTKVhWP 3MNMnY6SLlyQC7C6ZP8l7biPe7tMhZE8BQkA94axGv5/tqedJ2owwfAAk9YFbvWt m+tYqTDobLRsjAa66+v9xJ6+eXoLrptIdiFbpn82YBo0L2G0T0aPoHoCEB3LsGs1 TApeCXObYaGhHxc/0pKsgcv93ZQwbhZPD5gfz6P6idKUjZ4kaCv5tTDUJ+IztMhX lhMAivJW60VNy4GCEgGzWS4CvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCfSfblp /f7FnOX1lwIYao+S2l8yMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDRDYvMUU5RTFBQUNEMkVBMTFFNUFGQjFFMjRDQzRGOUFFMDIvRkQyOTQxQTBC QkMzMTFFRUJFNTg0MzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAC00twwDQYJKoZIhvcNAQELBQADggEBACV1jlcJW0ICK+Bg hEBB9fXcJUegQI2eZwKHXU5XK21sdMOHmkNnJ/hOipv7kextkfdAq88NWk9YC3Ln IOoOd1GWMC9KyjAy7Ehy4hrmp/GbWSGX/cAR2DklPscb0C32aJPvL5AlVeOp+Rjy 5js1Q+6dIcE2PHvE8HYUUi4DMN1bD6AbhKZZI+lbqtHn/oW9TkJnqoCYZI7pvvV/ O5oB4jjL2dheikwu3d+YswI1jUk3gAtqfVZ42iy+fv07K/dEUQGMHFc6cJOxPphU A3FZiswdq3h5BWfCT9SuSpQG8E0LUtuMEmdWo+GgKFCcCTkDopIJYGOK0aGmsc4Z lsP/Rgk= -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:14 2024 by rpki-client on console-ams.rpki-client.org