$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A4B323921E0211E9862ECE3FC4F9AE02.roa File: A4B323921E0211E9862ECE3FC4F9AE02.roa (raw, json) Hash identifier: Hne7SjWV+44A2x4yhqcjeUuFpvHV8ZSW4yFJizA6cG4= Subject key identifier: B6:77:A5:27:27:F0:08:6E:E8:7B:6D:FB:24:A5:78:38:AA:97:E5:E7 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3885 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A4B323921E0211E9862ECE3FC4F9AE02.roa Signing time: Tue 16 Jul 2024 14:30:33 +0000 ROA not before: Tue 16 Jul 2024 14:30:33 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 134438 IP address blocks: 110.170.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14469 (0x3885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 16 14:30:33 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66968408-97b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a2:16:f3:ab:63:f2:38:36:bf:1b:ac:ac:85: f4:80:9c:b7:9c:90:9d:fc:41:27:8d:4b:9b:48:a6: 48:a2:a4:31:f3:0f:97:d3:e3:61:b5:b8:37:8d:7f: 66:64:e7:99:0b:14:cc:40:4a:29:26:b1:ff:5a:af: a0:93:6f:e5:30:d6:41:78:53:2a:9a:dd:80:f3:cb: 85:08:c3:3a:f0:17:59:f0:f2:5d:99:99:7c:a9:f9: e7:67:f7:90:d5:10:2d:d4:c6:37:81:1e:bb:c4:0d: 22:e0:db:6b:96:27:ee:21:d5:f6:47:c3:0f:25:cd: c0:32:4b:d5:2e:3b:c1:24:e1:00:b7:a5:94:a1:dc: 13:84:76:54:2e:ed:ec:65:1f:c9:63:49:50:f0:68: 20:cd:4c:44:70:f9:a2:ab:14:6c:57:27:2d:34:79: 4b:66:17:2c:94:dc:14:a0:92:d1:6d:60:5a:18:16: 17:80:01:d7:11:e4:83:1f:7b:b1:3f:ae:c0:9d:4f: e3:c9:62:ff:65:d8:45:a2:5c:db:fd:29:48:f5:32: 7f:06:a0:58:2a:17:d7:6e:79:ec:94:3a:4d:48:14: 03:0d:0d:49:d6:93:89:3f:fd:1d:0c:b9:69:ed:5f: eb:1c:42:6f:09:2c:a7:62:ba:91:70:44:a5:a0:d9: 01:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:77:A5:27:27:F0:08:6E:E8:7B:6D:FB:24:A5:78:38:AA:97:E5:E7 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A4B323921E0211E9862ECE3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.170.17.0/24 Signature Algorithm: sha256WithRSAEncryption 53:04:ea:b7:55:c9:52:97:8f:60:a3:2f:0b:d7:ec:d9:70:c5: a1:f7:42:f4:8f:b3:66:14:54:2d:9a:64:09:a0:98:6d:aa:e4: e0:b7:f0:71:66:54:e2:e2:de:17:61:a3:75:84:56:c1:2a:f4: ae:c0:c5:00:f2:21:92:f7:9c:c2:51:37:45:1d:e9:b6:73:81: d3:e1:e5:21:bd:a6:d3:59:6f:9f:48:ae:1d:8e:5d:c0:80:7d: 60:fd:c5:82:5f:02:32:03:d6:98:e7:66:0b:df:ef:f0:99:e0: 2f:2e:86:91:11:1d:d5:10:75:5f:92:c0:a3:e1:cb:ef:9b:c9: 75:e9:e6:05:bf:7d:f6:38:a9:bc:e1:0b:03:da:c3:d5:ca:04: c1:8d:dd:5c:eb:a2:39:f1:a9:71:f6:f0:fa:b6:be:d6:6b:2b: 0c:7d:04:ed:b7:65:8b:5e:df:0c:73:7a:f5:bc:d7:76:fa:e3: 65:6a:4e:a8:21:0a:5e:de:dd:14:68:45:da:12:77:a8:7e:21: 03:42:8f:f1:bf:83:b3:29:a9:94:00:ce:6d:73:8d:3f:79:70: a7:a0:de:b3:8c:b4:45:07:bb:35:66:59:e6:fa:1d:9d:f7:86: 1c:d9:41:62:5a:da:55:95:2b:61:f3:d7:fc:47:e6:7a:9d:f8: 4c:54:bf:04 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICOIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjQwNzE2MTQzMDMzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ODQwOC05N2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6IW86tj8jg2vxusrIX0gJy3nJCd/EEnjUubSKZIoqQx8w+X0+Nhtbg3jX9m ZOeZCxTMQEopJrH/Wq+gk2/lMNZBeFMqmt2A88uFCMM68BdZ8PJdmZl8qfnnZ/eQ 1RAt1MY3gR67xA0i4NtrlifuIdX2R8MPJc3AMkvVLjvBJOEAt6WUodwThHZULu3s ZR/JY0lQ8GggzUxEcPmiqxRsVyctNHlLZhcslNwUoJLRbWBaGBYXgAHXEeSDH3ux P67AnU/jyWL/ZdhFolzb/SlI9TJ/BqBYKhfXbnnslDpNSBQDDQ1J1pOJP/0dDLlp 7V/rHEJvCSynYrqRcESloNkB4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLZ3pScn 8Ahu6Htt+ySleDiql+XnMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvQTRCMzIzOTIx RTAyMTFFOTg2MkVDRTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABuqhEwDQYJKoZIhvcNAQELBQADggEBAFME6rdVyVKXj2Cj LwvX7NlwxaH3QvSPs2YUVC2aZAmgmG2q5OC38HFmVOLi3hdho3WEVsEq9K7AxQDy IZL3nMJRN0Ud6bZzgdPh5SG9ptNZb59Irh2OXcCAfWD9xYJfAjID1pjnZgvf7/CZ 4C8uhpERHdUQdV+SwKPhy++byXXp5gW/ffY4qbzhCwPaw9XKBMGN3VzrojnxqXH2 8Pq2vtZrKwx9BO23ZYte3wxzevW813b642VqTqghCl7e3RRoRdoSd6h+IQNCj/G/ g7MpqZQAzm1zjT95cKeg3rOMtEUHuzVmWeb6HZ33hhzZQWJa2lWVK2Hz1/xH5nqd +ExUvwQ= -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:24 2024 by rpki-client on console-fra.rpki-client.org