$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/1703348238F611EFAE53A822C4F9AE02.roa File: 1703348238F611EFAE53A822C4F9AE02.roa (raw, json) Hash identifier: 9PbBml0/E97tyIZ6LCJAYyx/+6Li47fLfQEcz5pzevQ= Subject key identifier: 1F:F9:96:40:1C:5D:7A:E2:F7:E4:00:4D:A1:A3:2A:9E:13:A8:73:0A Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3899 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/1703348238F611EFAE53A822C4F9AE02.roa Signing time: Tue 16 Jul 2024 14:30:50 +0000 ROA not before: Tue 16 Jul 2024 14:30:50 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 152915 IP address blocks: 61.91.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14489 (0x3899) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 16 14:30:50 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66968419-bcaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:a8:2a:ae:29:6a:e5:fc:d4:b0:7b:e5:06: 4d:59:c1:5c:2a:76:9b:8d:30:4a:ec:09:bd:4b:10: 8f:5e:1d:a3:38:ac:ff:47:e4:8c:d1:0a:f3:40:81: 43:50:df:c4:5e:11:13:a6:c3:30:20:63:6d:67:a5: bc:96:14:34:02:ac:a4:cc:07:31:dc:f4:13:a3:bf: d4:32:cb:38:a6:34:77:d7:f3:41:df:7c:da:35:72: 1a:f1:22:e4:c1:89:dc:aa:7c:9f:a4:1d:80:17:47: 0f:46:d7:0a:cf:3f:b3:06:8f:14:ad:ad:bb:81:ad: ab:89:2c:2b:e9:ca:98:5c:38:7e:4a:b4:47:4b:62: 02:6d:e0:53:cb:b5:90:d1:bc:d5:af:c7:52:c3:5e: a9:f2:3a:bd:f8:f9:82:ea:46:84:f4:60:39:9c:71: 98:a6:ee:31:7e:43:4b:2f:0f:f2:c7:8f:77:3d:98: d1:0f:fa:72:af:32:cb:d7:3d:50:81:8c:e1:3e:49: 42:a8:ab:a5:29:89:aa:02:a0:0d:dd:6e:82:7a:58: 89:bb:49:51:5c:25:5b:d5:d8:0c:ca:31:9f:8e:08: a0:e1:01:db:12:fc:8f:20:58:d2:94:d4:0e:22:b9: ed:32:dc:ed:d4:6e:36:4f:1e:65:05:b4:c2:d3:a4: 25:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F9:96:40:1C:5D:7A:E2:F7:E4:00:4D:A1:A3:2A:9E:13:A8:73:0A X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/1703348238F611EFAE53A822C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.91.255.0/24 Signature Algorithm: sha256WithRSAEncryption 93:cd:ce:c0:7e:da:2a:41:07:33:10:e1:35:4c:66:59:44:96: 53:72:06:69:ab:1b:b6:46:ed:72:93:c2:22:74:42:90:d6:5b: 22:4a:d0:71:50:c5:48:c7:7a:74:c4:4c:dd:a6:26:2e:0f:68: 03:94:f1:3e:5e:6e:b3:0b:08:2c:47:d9:44:8d:e8:ea:87:8e: 3e:3e:20:f4:2f:cb:33:0e:2f:4a:5d:74:4d:fa:c7:98:50:45: 3b:59:81:1a:8c:af:66:f7:73:e2:42:31:ac:cb:0e:7d:1b:8e: 6f:af:ee:07:f5:1e:82:16:7f:c3:9d:67:bb:5c:d7:66:3f:2c: 72:30:12:64:9d:9a:a4:d1:87:a9:ca:7f:c5:3a:89:d5:28:47: 6e:19:6e:dd:07:02:a0:bf:2d:01:a0:c0:ce:de:e7:0e:25:80: fe:92:2f:db:46:51:07:54:b5:cc:4d:b3:05:4d:81:38:05:18: 33:30:e1:44:04:95:4f:48:f1:60:6f:3e:72:96:76:a7:2b:1a: d2:d5:2b:4b:cd:40:59:b1:77:0a:ef:0e:9c:02:02:4c:76:5c: a7:ce:08:a9:57:43:c0:6a:d7:30:fc:57:18:c8:48:4e:5a:84: f1:4d:e6:0b:e2:48:39:69:50:9e:d8:d6:c7:eb:00:31:c8:e2: 34:e7:36:07 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICOJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjQwNzE2MTQzMDUwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ODQxOS1iY2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnGoKq4pauX81LB75QZNWcFcKnabjTBK7Am9SxCPXh2jOKz/R+SM0QrzQIFD UN/EXhETpsMwIGNtZ6W8lhQ0AqykzAcx3PQTo7/UMss4pjR31/NB33zaNXIa8SLk wYncqnyfpB2AF0cPRtcKzz+zBo8Ura27ga2riSwr6cqYXDh+SrRHS2ICbeBTy7WQ 0bzVr8dSw16p8jq9+PmC6kaE9GA5nHGYpu4xfkNLLw/yx493PZjRD/pyrzLL1z1Q gYzhPklCqKulKYmqAqAN3W6CeliJu0lRXCVb1dgMyjGfjgig4QHbEvyPIFjSlNQO IrntMtzt1G42Tx5lBbTC06Ql1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFB/5lkAc XXri9+QATaGjKp4TqHMKMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMTcwMzM0ODIz OEY2MTFFRkFFNTNBODIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA9W/8wDQYJKoZIhvcNAQELBQADggEBAJPNzsB+2ipBBzMQ 4TVMZllEllNyBmmrG7ZG7XKTwiJ0QpDWWyJK0HFQxUjHenTETN2mJi4PaAOU8T5e brMLCCxH2USN6OqHjj4+IPQvyzMOL0pddE36x5hQRTtZgRqMr2b3c+JCMazLDn0b jm+v7gf1HoIWf8OdZ7tc12Y/LHIwEmSdmqTRh6nKf8U6idUoR24Zbt0HAqC/LQGg wM7e5w4lgP6SL9tGUQdUtcxNswVNgTgFGDMw4UQElU9I8WBvPnKWdqcrGtLVK0vN QFmxdwrvDpwCAkx2XKfOCKlXQ8Bq1zD8VxjISE5ahPFN5gviSDlpUJ7Y1sfrADHI 4jTnNgc= -----END CERTIFICATE-----Generated at Sun Nov 24 15:31:14 2024 by rpki-client on console-ams.rpki-client.org