$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa File: E6B3F23C041E11EA8A736F7EC4F9AE02.roa (raw, json) Hash identifier: Z72B2clD1drV5IAH1qd2T+bMR6C28KSN0ZpXzAvWln4= Subject key identifier: 05:EC:CC:60:85:3F:A5:50:7C:18:45:9A:6C:E8:2D:0A:63:13:D7:FF Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653 Certificate serial: 125F Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa Signing time: Sat 10 Aug 2024 17:44:49 +0000 ROA not before: Sat 10 Aug 2024 17:44:49 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 19551 IP address blocks: 122.11.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4703 (0x125f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653 Validity Not Before: Aug 10 17:44:49 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b7a711-a594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:70:c8:aa:7f:4a:2b:3e:72:e4:7b:d3:f4: 00:87:d9:ea:ee:a0:46:41:e5:0f:49:4c:66:02:e1: e6:c1:57:be:e5:b1:a1:d7:b7:9e:fa:15:03:d0:d0: 2f:e4:a2:f6:aa:d7:bc:48:21:e2:46:d8:1a:5f:f6: f2:3b:ab:91:57:95:22:df:c8:47:36:0d:2f:27:9f: 63:c0:84:9b:30:ad:4c:d2:60:18:28:24:d8:40:72: 07:84:ec:3a:6b:f4:6e:00:31:8a:e7:80:e9:38:04: 88:91:69:99:25:25:81:f6:d2:c2:73:cb:f0:ce:62: c1:5a:ca:a6:62:f3:87:48:a5:4d:e7:4c:97:43:d9: 88:fa:e4:00:84:12:c2:ed:0b:47:bc:c9:83:f6:41: 09:41:e0:9d:e9:5a:ad:75:75:2b:ec:6d:bb:fa:39: 3b:25:c2:84:6c:be:9b:33:8b:97:63:ba:e3:5e:45: dd:1b:20:72:7b:99:ef:06:60:ea:9e:11:c0:e0:30: c3:85:54:9e:53:e8:39:8e:93:be:37:88:1b:3a:b1: 07:4b:35:ad:07:32:58:8b:22:ed:22:b1:a4:4e:e1: e1:8b:82:80:63:00:c3:ee:50:35:c3:d5:7c:a1:e3: 74:45:39:f5:51:5e:73:30:6c:d0:91:3f:84:b1:7b: 7b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EC:CC:60:85:3F:A5:50:7C:18:45:9A:6C:E8:2D:0A:63:13:D7:FF X509v3 Authority Key Identifier: keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.11.196.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:61:14:e4:d5:fd:7e:c8:28:c6:18:78:24:d9:51:b9:61:fa: 9a:a7:57:c3:23:54:11:9b:41:01:47:91:2d:1c:cd:99:fb:71: d9:05:03:67:eb:10:90:51:c7:d3:3e:e8:16:1a:f7:4a:0c:c1: e3:60:7a:c9:5a:16:ad:03:42:16:7f:76:f7:90:72:23:ba:10: 70:3d:41:3f:13:24:a0:95:2e:23:13:ed:57:8e:5b:cd:2a:20: 65:71:d2:1b:2a:b6:55:fa:41:c5:e6:17:48:35:d7:12:30:a4: cd:47:88:e2:77:65:24:30:f9:06:59:cc:9f:79:dc:0c:d7:4e: bd:4c:b1:ea:c0:18:68:ef:5a:b3:3f:9c:6d:4d:fb:cd:74:40: 71:67:68:a4:2c:6a:97:df:28:ff:64:f1:69:da:a7:47:6d:e2: fc:d4:3a:13:59:f0:95:1b:0d:c4:55:cc:33:00:d1:2d:48:89: 5d:01:ea:5e:a7:8d:23:e0:8f:05:49:61:a1:ab:b8:21:b3:4b: f0:78:02:68:08:03:5c:69:e7:c1:6a:7c:b5:7f:4a:7f:7f:27: b3:21:14:35:71:35:3b:05:c6:db:bf:18:3f:29:8c:b5:1f:61: 1c:b8:ba:e8:cc:e6:ae:22:6d:f7:89:3e:63:a5:89:87:b9:31: e0:4a:e0:63 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyREMxMTAvBgNVBAUTKEMyQjlGNUYzQzY4QzU3NjcyNzIzOUI5MkE5M0IzNjI5 N0QxQjE2NTMwHhcNMjQwODEwMTc0NDQ5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI3YTcxMS1hNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXxwyKp/Sis+cuR70/QAh9nq7qBGQeUPSUxmAuHmwVe+5bGh17ee+hUD0NAv 5KL2qte8SCHiRtgaX/byO6uRV5Ui38hHNg0vJ59jwISbMK1M0mAYKCTYQHIHhOw6 a/RuADGK54DpOASIkWmZJSWB9tLCc8vwzmLBWsqmYvOHSKVN50yXQ9mI+uQAhBLC 7QtHvMmD9kEJQeCd6VqtdXUr7G27+jk7JcKEbL6bM4uXY7rjXkXdGyBye5nvBmDq nhHA4DDDhVSeU+g5jpO+N4gbOrEHSzWtBzJYiyLtIrGkTuHhi4KAYwDD7lA1w9V8 oeN0RTn1UV5zMGzQkT+EsXt7TwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAXszGCF P6VQfBhFmmzoLQpjE9f/MB8GA1UdIwQYMBaAFMK59fPGjFdnJyObkqk7Nil9GxZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJEQy8yRDUxQUY0MkZE M0UxMUU4ODhDNTM5NDRDNEY5QUUwMi93cm4xODhhTVYyY25JNXVTcVRzMktYMGJG bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dybjE4OGFNVjJjbkk1dVNxVHMyS1gwYkZsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDAyREMvMkQ1MUFGNDJGRDNFMTFFODg4QzUzOTQ0QzRGOUFFMDIvRTZCM0YyM0Mw NDFFMTFFQThBNzM2RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB6C8QwDQYJKoZIhvcNAQELBQADggEBAI9hFOTV/X7IKMYY eCTZUblh+pqnV8MjVBGbQQFHkS0czZn7cdkFA2frEJBRx9M+6BYa90oMweNgesla Fq0DQhZ/dveQciO6EHA9QT8TJKCVLiMT7VeOW80qIGVx0hsqtlX6QcXmF0g11xIw pM1HiOJ3ZSQw+QZZzJ953AzXTr1MserAGGjvWrM/nG1N+810QHFnaKQsapffKP9k 8Wnap0dt4vzUOhNZ8JUbDcRVzDMA0S1IiV0B6l6njSPgjwVJYaGruCGzS/B4AmgI A1xp58FqfLV/Sn9/J7MhFDVxNTsFxtu/GD8pjLUfYRy4uujM5q4ibfeJPmOliYe5 MeBK4GM= -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:16 2024 by rpki-client on console-ams.rpki-client.org