$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3C54DA081E0111E9A590C837C4F9AE02.roa File: 3C54DA081E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: 5vIVfXPIiC2bAaHs20blNMVDaitREKVDsCOp31gx1Pg= Subject key identifier: 00:A2:E4:9E:29:F1:2F:C2:21:31:C5:36:4C:58:A5:B0:CB:AB:6B:41 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 389B Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3C54DA081E0111E9A590C837C4F9AE02.roa Signing time: Tue 16 Jul 2024 14:30:51 +0000 ROA not before: Tue 16 Jul 2024 14:30:51 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 17475 IP address blocks: 61.90.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14491 (0x389b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 16 14:30:51 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6696841b-4e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:34:3f:e9:f2:de:18:4a:33:41:6e:7a:e1: d6:a4:87:a9:db:26:5e:76:5a:66:f1:93:c5:4d:3f: 54:83:98:8f:eb:1c:b7:48:cd:e4:a5:6f:ae:5b:89: fe:d2:c0:14:e7:26:cd:65:5b:31:43:c4:b0:9d:d4: 59:99:73:c9:ea:7f:60:ac:8b:4b:62:7c:20:ec:ab: dc:57:7c:35:76:15:5b:11:5a:b3:56:fd:54:53:8a: d9:dc:17:f3:12:96:81:40:66:93:e5:84:de:8a:2f: 18:09:d2:17:af:e9:c8:dd:82:a8:0f:11:29:f3:67: 62:99:88:3d:e9:ed:ae:ad:c9:dc:32:61:01:82:af: 73:ac:37:45:2d:b1:1e:2e:62:19:fe:f0:b2:88:d3: 02:ff:8b:82:8d:34:c0:6e:f8:f2:cd:b3:ba:ad:66: 44:a7:e9:f9:19:23:95:6c:cb:50:00:39:56:3d:ef: d7:44:04:30:c8:21:75:e2:1b:23:e1:44:0b:2f:61: 33:9b:61:6f:33:4a:a9:f8:d0:c6:12:9f:95:66:b6: 4a:09:bf:db:5a:c3:7d:64:cf:e7:f2:09:6a:b3:8e: ad:c6:89:85:6c:90:80:0b:5d:e2:51:6b:95:75:c3: 8e:b4:6a:dd:e7:82:21:7c:4e:32:0d:01:d6:f0:e7: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A2:E4:9E:29:F1:2F:C2:21:31:C5:36:4C:58:A5:B0:CB:AB:6B:41 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3C54DA081E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.90.218.0/24 Signature Algorithm: sha256WithRSAEncryption a9:ce:ec:85:b1:3b:54:40:fd:62:6f:07:b6:7c:50:7e:c2:d2: d1:72:5c:a8:05:70:49:85:fe:fb:cf:5a:e5:da:9d:1f:8c:06: b5:5c:42:03:d0:7b:f9:bb:94:48:80:be:10:ce:07:59:c1:f8: 69:e8:85:75:ca:78:05:ba:2c:04:a4:d5:68:54:89:08:e7:ff: 3b:38:d4:6c:78:d6:de:c1:33:17:e3:f9:53:fc:c5:d8:dd:30: 20:dd:55:f1:d6:f4:c9:29:a1:f8:47:21:9d:ff:9e:be:cd:da: 6b:ba:84:e3:99:85:48:ca:33:08:43:66:f0:b4:3f:8f:37:c0: e3:cd:28:f5:ad:88:f7:e5:6f:78:98:2e:7a:07:f3:85:8f:92: c5:fb:30:4d:3d:c0:3f:a0:32:82:fc:4d:31:f5:53:db:c5:61: 18:43:d4:08:6d:4c:cd:47:3b:99:7c:7f:f3:8a:94:d4:ba:5c: 16:fd:29:23:75:7e:16:43:63:fe:f0:7e:38:87:d9:0e:9d:b9: cc:af:d9:55:39:b5:c3:46:4f:9b:cb:c3:87:e0:b3:10:04:4e: 04:cb:e5:10:c0:33:e7:62:4e:41:f7:d3:df:65:f0:9d:8c:fa: d0:72:5c:6c:b7:89:c9:56:f9:a6:f7:6e:43:f3:3c:bd:c4:e1: 7b:92:4c:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICOJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjQwNzE2MTQzMDUxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ODQxYi00ZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2I0P+ny3hhKM0FueuHWpIep2yZedlpm8ZPFTT9Ug5iP6xy3SM3kpW+uW4n+ 0sAU5ybNZVsxQ8SwndRZmXPJ6n9grItLYnwg7KvcV3w1dhVbEVqzVv1UU4rZ3Bfz EpaBQGaT5YTeii8YCdIXr+nI3YKoDxEp82dimYg96e2urcncMmEBgq9zrDdFLbEe LmIZ/vCyiNMC/4uCjTTAbvjyzbO6rWZEp+n5GSOVbMtQADlWPe/XRAQwyCF14hsj 4UQLL2Ezm2FvM0qp+NDGEp+VZrZKCb/bWsN9ZM/n8glqs46txomFbJCAC13iUWuV dcOOtGrd54IhfE4yDQHW8OdLQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFACi5J4p 8S/CITHFNkxYpbDLq2tBMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvM0M1NERBMDgx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA9WtowDQYJKoZIhvcNAQELBQADggEBAKnO7IWxO1RA/WJv B7Z8UH7C0tFyXKgFcEmF/vvPWuXanR+MBrVcQgPQe/m7lEiAvhDOB1nB+GnohXXK eAW6LASk1WhUiQjn/zs41Gx41t7BMxfj+VP8xdjdMCDdVfHW9MkpofhHIZ3/nr7N 2mu6hOOZhUjKMwhDZvC0P483wOPNKPWtiPflb3iYLnoH84WPksX7ME09wD+gMoL8 TTH1U9vFYRhD1AhtTM1HO5l8f/OKlNS6XBb9KSN1fhZDY/7wfjiH2Q6ducyv2VU5 tcNGT5vLw4fgsxAETgTL5RDAM+diTkH3099l8J2M+tByXGy3iclW+ab3bkPzPL3E 4XuSTNg= -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:24 2024 by rpki-client on console-fra.rpki-client.org