$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/3FC1B85E431811EA84E68121C4F9AE02.roa File: 3FC1B85E431811EA84E68121C4F9AE02.roa (raw, json) Hash identifier: kRXthgEAoGC/b23UrIEWTh9+gf3/yFfF1cVAtff2rTg= Subject key identifier: 70:4C:9D:CD:52:23:48:B4:4B:0C:F9:A6:01:0F:D4:FF:49:46:F7:AC Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0A9F Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/3FC1B85E431811EA84E68121C4F9AE02.roa Signing time: Thu 24 Oct 2024 19:58:24 +0000 ROA not before: Thu 24 Oct 2024 19:58:24 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 17408 IP address blocks: 58.84.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2719 (0xa9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Oct 24 19:58:24 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671aa6df-7a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b2:64:ec:e9:e6:4b:0c:f5:20:28:fe:68:68: 90:bb:e2:56:2f:da:0b:1a:61:a6:19:85:7c:b7:ff: 35:1a:56:44:b9:21:22:1f:c1:52:9a:10:48:04:e2: 8a:37:c2:46:b7:ea:52:9b:59:81:8c:9e:40:02:34: 29:45:68:ea:83:b1:21:68:e5:2b:8c:8e:e9:56:b8: a5:54:dd:16:e3:41:65:da:e0:2d:c9:9a:8c:53:1c: fb:38:a1:63:eb:14:82:08:37:c9:b6:1a:be:37:8d: 2e:0a:a1:20:58:48:01:10:28:41:51:9b:57:4e:a4: e3:70:56:d6:e0:de:a1:94:57:1e:89:d0:8c:07:cb: 82:44:fe:0b:4d:44:ba:ca:b9:05:c4:2a:2c:de:0d: d0:b0:3b:c0:6d:6c:f5:ff:e9:95:f0:69:e3:69:08: bb:01:fa:7f:b2:7b:3e:93:03:1f:48:e2:d6:c4:19: 94:d7:3d:2c:47:f7:49:cc:71:9a:0c:a2:94:93:2d: ef:84:7e:69:44:f6:7a:eb:6d:20:ad:4a:50:37:7f: dc:2f:2f:50:56:2f:fc:38:de:27:44:63:ad:90:82: 08:4a:39:ee:fa:fc:11:b8:4e:f7:15:ad:24:c1:13: 73:60:4c:c9:34:ea:64:98:c7:a6:07:ae:e7:8f:fa: 8d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4C:9D:CD:52:23:48:B4:4B:0C:F9:A6:01:0F:D4:FF:49:46:F7:AC X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/3FC1B85E431811EA84E68121C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.84.4.0/24 Signature Algorithm: sha256WithRSAEncryption 68:5f:35:ea:be:25:2c:bc:be:06:27:0c:53:76:fa:91:83:d1: 32:b9:56:ac:42:2a:02:dc:54:a3:b5:ec:1e:e2:96:64:2b:72: 26:ca:9c:2f:42:7b:4d:55:47:9b:e0:5f:b0:cc:7e:47:d9:66: ff:00:55:0b:92:cb:33:be:22:16:89:d3:75:7b:01:d1:d2:4e: b6:cb:c5:2f:37:8c:e6:b1:50:45:a2:5a:c9:16:e6:03:8c:eb: cc:8b:d8:d9:84:47:c7:c9:dd:07:a3:e3:75:e1:4e:1b:f1:9f: af:db:e5:55:5e:9f:6d:d3:6b:9c:12:45:a5:66:2a:fe:7d:f2: 4c:22:29:41:05:3f:4f:bc:40:3e:4c:da:38:fd:20:c9:ba:bd: 7a:0c:31:9f:7d:07:71:86:c2:35:e4:e9:c0:81:6d:4f:fe:ca: 35:9b:24:b2:64:19:6e:2a:41:6b:0b:2d:c2:fe:9a:3c:3d:ba: 0c:c1:53:97:eb:37:35:e1:fc:59:9b:dc:95:fa:e8:60:80:ad: d8:bd:20:98:02:2f:39:76:fd:d1:b9:7c:2f:82:6b:5d:77:ed: 83:13:c4:98:36:f7:a6:ce:d5:d3:54:db:ab:79:fb:78:47:d1: 39:84:ee:3c:2e:85:83:07:87:b6:19:29:2f:33:6e:79:17:1a: ee:2a:e1:7b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjQxMDI0MTk1ODI0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhYTZkZi03YTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLJk7OnmSwz1ICj+aGiQu+JWL9oLGmGmGYV8t/81GlZEuSEiH8FSmhBIBOKK N8JGt+pSm1mBjJ5AAjQpRWjqg7EhaOUrjI7pVrilVN0W40Fl2uAtyZqMUxz7OKFj 6xSCCDfJthq+N40uCqEgWEgBEChBUZtXTqTjcFbW4N6hlFceidCMB8uCRP4LTUS6 yrkFxCos3g3QsDvAbWz1/+mV8GnjaQi7Afp/sns+kwMfSOLWxBmU1z0sR/dJzHGa DKKUky3vhH5pRPZ6620grUpQN3/cLy9QVi/8ON4nRGOtkIIISjnu+vwRuE73Fa0k wRNzYEzJNOpkmMemB67nj/qNEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHBMnc1S I0i0Swz5pgEP1P9JRvesMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzI1REMvNDYxMkQ1MUU0MzE2MTFFQUIyNjI3ODFEQzRGOUFFMDIvM0ZDMUI4NUU0 MzE4MTFFQTg0RTY4MTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6VAQwDQYJKoZIhvcNAQELBQADggEBAGhfNeq+JSy8vgYn DFN2+pGD0TK5VqxCKgLcVKO17B7ilmQrcibKnC9Ce01VR5vgX7DMfkfZZv8AVQuS yzO+IhaJ03V7AdHSTrbLxS83jOaxUEWiWskW5gOM68yL2NmER8fJ3Qej43XhThvx n6/b5VVen23Ta5wSRaVmKv598kwiKUEFP0+8QD5M2jj9IMm6vXoMMZ99B3GGwjXk 6cCBbU/+yjWbJLJkGW4qQWsLLcL+mjw9ugzBU5frNzXh/Fmb3JX66GCArdi9IJgC Lzl2/dG5fC+Ca1137YMTxJg296bO1dNU26t5+3hH0TmE7jwuhYMHh7YZKS8zbnkX Gu4q4Xs= -----END CERTIFICATE-----Generated at Wed Nov 20 20:07:21 2024 by rpki-client on console-fra.rpki-client.org