$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/46FEF7041E0111E9A590C837C4F9AE02.roa File: 46FEF7041E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: XXnHeEn//zd6SCZJ8zWJu3er8QGphPRYzDor9NVg7TA= Subject key identifier: 3E:CF:BE:AB:6D:8A:E2:AE:D5:E2:1B:D5:2B:81:3D:ED:3F:8C:F4:80 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 38AD Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/46FEF7041E0111E9A590C837C4F9AE02.roa Signing time: Tue 16 Jul 2024 14:31:07 +0000 ROA not before: Tue 16 Jul 2024 14:31:07 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 37992 IP address blocks: 61.90.234.0/24 maxlen: 24 61.90.235.0/24 maxlen: 24 61.90.236.0/24 maxlen: 24 61.90.237.0/24 maxlen: 24 119.46.188.0/24 maxlen: 24 119.46.189.0/24 maxlen: 24 119.46.190.0/24 maxlen: 24 119.46.191.0/24 maxlen: 24 119.46.235.0/24 maxlen: 24 119.46.236.0/24 maxlen: 24 119.46.237.0/24 maxlen: 24 119.46.238.0/24 maxlen: 24 2001:fb0:100e::/48 maxlen: 48 2001:fb0:100f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14509 (0x38ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC Validity Not Before: Jul 16 14:31:07 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6696842b-e34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:14:c0:4b:a4:2f:57:44:33:e5:93:b6:60:b3: d5:92:70:8e:f3:e3:3a:23:c8:ad:45:70:39:79:4f: c5:c5:d3:23:93:29:79:d3:0d:d6:d1:17:1f:0c:9d: f8:2e:4b:42:8b:aa:60:4e:47:3e:b5:71:0d:c4:bd: 96:6c:b4:4f:80:1c:5a:6d:bf:a5:22:2f:f9:66:31: 14:17:1d:aa:e9:be:87:10:ab:09:fd:0e:8a:2f:99: 6d:b2:e3:d1:2b:be:bb:05:37:f7:db:ae:04:ee:b8: 73:d1:3a:43:73:a4:01:14:09:c9:d3:61:83:d5:0c: 82:15:96:2c:b7:14:91:8c:30:51:bd:fa:dc:57:54: af:e1:21:8b:7b:ca:0a:5f:fc:d1:6b:96:6b:06:0e: 96:fe:ce:eb:0c:51:ce:f3:1f:1a:1d:c3:8f:4a:83: 1a:07:5d:3c:d5:9e:85:00:a3:d5:7e:df:27:eb:c6: fa:23:7e:41:e8:c3:99:8a:ca:cd:e5:89:47:df:d4: 0b:35:47:ac:fe:5d:a3:c5:f1:82:36:69:00:79:af: 50:cb:d8:fb:e9:39:07:0d:14:bc:04:ea:d8:51:52: b4:24:95:52:f9:35:e0:4e:4c:7b:8e:56:31:7f:c2: 0b:ac:77:8c:eb:2d:9f:8d:07:f9:99:d6:a4:06:a8: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CF:BE:AB:6D:8A:E2:AE:D5:E2:1B:D5:2B:81:3D:ED:3F:8C:F4:80 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/46FEF7041E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.90.234.0-61.90.237.255 119.46.188.0/22 119.46.235.0-119.46.238.255 IPv6: 2001:fb0:100e::/47 Signature Algorithm: sha256WithRSAEncryption 36:1a:33:25:7c:af:01:98:29:03:df:4d:01:88:c8:14:d6:78: f7:fc:dc:14:bd:91:20:48:30:d9:1a:45:9c:6c:73:40:03:09: 5a:b6:a1:38:de:6e:8f:bd:20:c0:0a:94:dd:7e:f1:c7:b7:5d: f7:7b:5b:cf:37:f7:67:5b:a5:b8:5d:c0:3c:0d:06:44:82:20: ab:00:ce:ef:74:f3:68:a5:6b:43:e2:63:1b:60:6e:78:67:7a: 76:c9:3d:99:60:fa:71:74:5c:31:ea:cc:c8:ee:cd:1b:67:e3: 27:94:12:9f:6d:f1:68:d1:57:b8:07:b6:09:3e:f1:95:22:20: dc:49:01:f4:68:d5:88:03:d8:53:57:4f:ca:5e:93:0c:cb:73: 2c:a2:f6:d8:c8:9a:2d:fd:c7:c1:69:9e:a3:0c:d1:67:68:f8: 01:85:f9:d5:97:c4:ad:19:45:b7:ec:13:96:10:c2:64:e7:c4: 7a:34:5e:8e:4d:8d:3d:66:03:81:21:62:31:b2:4e:51:10:27: 55:8e:f3:39:6f:9c:aa:78:02:17:09:27:a6:7d:b7:9b:00:97: ac:16:72:7b:eb:1f:1e:6c:60:29:e3:46:9a:62:14:a5:d5:a8: 15:ad:2f:b5:a4:9d:df:3f:86:05:9d:57:17:28:78:2d:6e:84: 7c:3c:ea:1f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICOK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjQwNzE2MTQzMTA3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ODQyYi1lMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RTAS6QvV0Qz5ZO2YLPVknCO8+M6I8itRXA5eU/FxdMjkyl50w3W0RcfDJ34 LktCi6pgTkc+tXENxL2WbLRPgBxabb+lIi/5ZjEUFx2q6b6HEKsJ/Q6KL5ltsuPR K767BTf3264E7rhz0TpDc6QBFAnJ02GD1QyCFZYstxSRjDBRvfrcV1Sv4SGLe8oK X/zRa5ZrBg6W/s7rDFHO8x8aHcOPSoMaB1081Z6FAKPVft8n68b6I35B6MOZisrN 5YlH39QLNUes/l2jxfGCNmkAea9Qy9j76TkHDRS8BOrYUVK0JJVS+TXgTkx7jlYx f8ILrHeM6y2fjQf5mdakBqg4tQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFD7Pvqtt iuKu1eIb1SuBPe0/jPSAMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNDZGRUY3MDQx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCgEAgABMCIwDAMEAT1a6gMEAT1a7AMEAncuvDAMAwQAdy7rAwQAdy7uMA8E AgACMAkDBwEgAQ+wEA4wDQYJKoZIhvcNAQELBQADggEBADYaMyV8rwGYKQPfTQGI yBTWePf83BS9kSBIMNkaRZxsc0ADCVq2oTjebo+9IMAKlN1+8ce3Xfd7W88392db pbhdwDwNBkSCIKsAzu9082ila0PiYxtgbnhnenbJPZlg+nF0XDHqzMjuzRtn4yeU Ep9t8WjRV7gHtgk+8ZUiINxJAfRo1YgD2FNXT8pekwzLcyyi9tjImi39x8FpnqMM 0Wdo+AGF+dWXxK0ZRbfsE5YQwmTnxHo0Xo5NjT1mA4EhYjGyTlEQJ1WO8zlvnKp4 AhcJJ6Z9t5sAl6wWcnvrHx5sYCnjRppiFKXVqBWtL7Wknd8/hgWdVxcoeC1uhHw8 6h8= -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:35 2025 by rpki-client