$ rpki-client -vvf rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/3D83357646E411EE82ED8843C4F9AE02.roa File: 3D83357646E411EE82ED8843C4F9AE02.roa (raw, json) Hash identifier: g/+jUDFbmU3qj9AfAKSl3kwzplQXj9NIVbGDOmw78Ds= Subject key identifier: 2A:8B:44:EB:8F:A7:DE:05:C0:C3:D5:86:C1:88:A6:2F:52:4A:AA:0C Certificate issuer: /CN=A913837F/serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500 Certificate serial: 75 Authority key identifier: 04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/3D83357646E411EE82ED8843C4F9AE02.roa Signing time: Fri 05 Apr 2024 07:39:13 +0000 ROA not before: Fri 05 Apr 2024 07:39:13 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 4768 IP address blocks: 192.122.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913837F/serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500 Validity Not Before: Apr 5 07:39:13 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660faaa1-35bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5f:dc:5b:04:33:ef:2d:83:6f:d9:c2:06:71: 52:69:23:c2:76:e9:83:9f:e8:f3:f4:25:9c:f2:61: 39:ae:a3:df:64:40:3c:57:80:c1:46:6f:ad:40:34: a5:25:02:d4:ec:d2:84:bf:99:0f:ea:de:cd:a9:ed: 48:73:4b:ed:ca:c6:89:7a:ee:a9:c0:9e:72:24:26: ba:01:8d:d1:62:68:f2:9d:91:df:7c:d7:f8:9c:36: 22:3b:ba:20:4e:0c:2c:08:1e:03:67:11:29:b4:4e: ef:31:a7:82:f9:fe:23:b5:44:c0:9a:ef:75:b1:41: 4c:18:8f:1f:03:7f:8e:cf:fc:8b:11:75:f7:38:e0: 60:a6:75:ad:7b:44:35:1f:a0:4b:0d:85:fd:fd:2d: 2f:47:1b:5c:d9:dc:27:be:9e:e6:f3:ac:ae:f7:0f: c0:61:11:86:50:69:51:e7:9e:33:6c:b0:5c:dc:da: cd:ff:75:ce:0a:1a:ec:92:b6:9b:5e:40:6d:88:93: b7:7f:7f:56:f3:67:cd:61:43:27:92:27:a4:fa:9b: 5c:bd:59:52:70:24:da:b0:1c:be:4e:b9:81:22:30: 1d:f8:87:0a:23:f8:7c:02:df:88:cd:05:bc:8a:c0: 64:f8:81:6c:ca:d0:8b:c7:30:d1:8a:fc:0d:2d:10: 88:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8B:44:EB:8F:A7:DE:05:C0:C3:D5:86:C1:88:A6:2F:52:4A:AA:0C X509v3 Authority Key Identifier: keyid:04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/3D83357646E411EE82ED8843C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.122.180.0/24 Signature Algorithm: sha256WithRSAEncryption 33:e9:6e:e3:48:ba:bc:49:fc:aa:7c:3b:8a:71:98:1f:04:71: a2:df:89:42:09:cb:e1:d1:cb:6a:2c:08:9c:c7:d9:c6:3f:37: 55:cf:b6:28:b4:b0:3b:c5:6b:c5:54:20:4b:43:c4:f9:7c:7f: 10:28:c3:78:28:24:7f:ad:8c:cf:29:bf:4d:5b:06:c0:e6:46: fd:e2:1b:4c:0c:96:9e:3a:af:2c:aa:c3:73:c7:1f:87:6f:77: d3:9f:65:3e:72:9f:3f:e0:68:b6:d2:eb:bf:12:34:cf:ec:56: 42:c3:01:f4:30:70:95:5a:bb:15:c4:2b:ab:15:3d:91:7f:76: 80:8f:65:63:93:c3:03:7a:3b:01:a6:eb:59:8b:a4:d9:2a:e5: 75:8b:22:ad:34:26:92:ec:3d:b6:2d:37:8f:c4:32:d3:ec:0b: 49:eb:51:df:0f:51:dc:fc:1d:9c:0c:0d:73:d7:c5:f1:93:37: ad:79:06:3c:16:c2:85:e5:d1:99:e0:a8:16:f6:25:68:55:37: 89:7f:07:69:e0:fa:a9:51:50:19:a1:14:29:ad:bb:bb:e1:7f: 71:67:b4:7f:37:e4:e8:a5:e1:3b:3c:43:a4:f1:a5:c1:86:9a: a1:af:fd:6f:c0:9f:e5:e7:cb:99:8f:dc:70:63:34:63:57:f3: 38:d4:58:52 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODM3RjExMC8GA1UEBRMoMDRBOUI4OTE5QjIyMEY1RjNFQUJEMEY0REQ4NUUyRjVC REJDNTUwMDAeFw0yNDA0MDUwNzM5MTNaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MGZhYWExLTM1YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVX9xbBDPvLYNv2cIGcVJpI8J26YOf6PP0JZzyYTmuo99kQDxXgMFGb61ANKUl AtTs0oS/mQ/q3s2p7UhzS+3Kxol67qnAnnIkJroBjdFiaPKdkd981/icNiI7uiBO DCwIHgNnESm0Tu8xp4L5/iO1RMCa73WxQUwYjx8Df47P/IsRdfc44GCmda17RDUf oEsNhf39LS9HG1zZ3Ce+nubzrK73D8BhEYZQaVHnnjNssFzc2s3/dc4KGuyStpte QG2Ik7d/f1bzZ81hQyeSJ6T6m1y9WVJwJNqwHL5OuYEiMB34hwoj+HwC34jNBbyK wGT4gWzK0IvHMNGK/A0tEIjXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUKotE64+n 3gXAw9WGwYimL1JKqgwwHwYDVR0jBBgwFoAUBKm4kZsiD18+q9D03YXi9b28VQAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MzdGLzY0NTkwQzEyNDZF MzExRUVCNUU0MTY0MkM0RjlBRTAyL0JLbTRrWnNpRDE4LXE5RDAzWVhpOWIyOFZR QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQkttNGtac2lEMTgtcTlEMDNZWGk5YjI4VlFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODM3Ri82NDU5MEMxMjQ2RTMxMUVFQjVFNDE2NDJDNEY5QUUwMi8zRDgzMzU3NjQ2 RTQxMUVFODJFRDg4NDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMB6tDANBgkqhkiG9w0BAQsFAAOCAQEAM+lu40i6vEn8qnw7 inGYHwRxot+JQgnL4dHLaiwInMfZxj83Vc+2KLSwO8VrxVQgS0PE+Xx/ECjDeCgk f62Mzym/TVsGwOZG/eIbTAyWnjqvLKrDc8cfh293059lPnKfP+BottLrvxI0z+xW QsMB9DBwlVq7FcQrqxU9kX92gI9lY5PDA3o7AabrWYuk2SrldYsirTQmkuw9ti03 j8Qy0+wLSetR3w9R3PwdnAwNc9fF8ZM3rXkGPBbCheXRmeCoFvYlaFU3iX8HaeD6 qVFQGaEUKa27u+F/cWe0fzfk6KXhOzxDpPGlwYaaoa/9b8Cf5efLmY/ccGM0Y1fz ONRYUg== -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:55 2024 by rpki-client on console-fra.rpki-client.org