$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/209A2EA88D9B11EEB4F6C646C4F9AE02.roa File: 209A2EA88D9B11EEB4F6C646C4F9AE02.roa (raw, json) Hash identifier: t98TzM/dH6Z0S1YjmBFC8aqcGxXk9nsgXCocY//ngE4= Subject key identifier: 36:E2:E7:EC:8B:31:CA:82:D5:85:EB:04:F9:E6:1D:EA:C8:62:47:2D Certificate issuer: /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8 Certificate serial: 08 Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/209A2EA88D9B11EEB4F6C646C4F9AE02.roa Signing time: Tue 28 Nov 2023 03:08:52 +0000 ROA not before: Tue 28 Nov 2023 03:08:52 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152125 IP address blocks: 36.50.31.0/24 maxlen: 24 2001:df3:3340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8 Validity Not Before: Nov 28 03:08:52 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656559c3-58f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fe:af:9a:0a:28:5f:f9:da:d6:8a:4d:a0:8f: a4:e1:85:b9:bf:b4:b9:fb:5c:73:0d:25:a9:03:2e: 76:64:6e:bb:89:41:9f:a3:da:6a:aa:b0:d4:25:7e: 82:4f:cb:1f:88:04:f9:a8:4b:cf:e9:80:eb:bb:04: 22:01:97:5c:14:1e:a7:01:57:79:a2:59:43:48:b3: 54:da:56:04:77:39:66:d9:2d:68:48:70:77:23:d7: cc:0f:ee:9e:04:35:e3:fe:b2:f9:56:de:49:e1:a6: 22:72:59:59:e7:5d:8d:09:cc:0d:e0:d6:84:cb:de: a6:8b:0b:40:70:27:f8:84:9c:92:ab:40:fd:dd:72: bd:ab:8f:90:cc:b1:57:d7:fb:ee:25:05:0c:bc:0c: 56:79:ed:03:98:08:c7:b4:6a:91:f9:d3:69:df:2b: 30:d5:83:98:5d:71:7d:cb:74:c4:50:b6:1b:91:68: 6a:48:6b:6d:10:39:6b:e9:59:d0:35:66:39:42:4b: 0f:16:98:01:4c:18:1d:d9:b4:20:6d:27:ab:2b:55: 1b:47:c2:ad:d8:5f:ff:e3:c8:75:0b:d4:16:57:51: af:df:e8:06:aa:5e:a0:32:c7:19:e1:28:11:79:64: dc:86:66:6e:e8:29:aa:82:12:3a:3d:e7:e4:2b:93: b3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E2:E7:EC:8B:31:CA:82:D5:85:EB:04:F9:E6:1D:EA:C8:62:47:2D X509v3 Authority Key Identifier: keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/209A2EA88D9B11EEB4F6C646C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.31.0/24 IPv6: 2001:df3:3340::/48 Signature Algorithm: sha256WithRSAEncryption 97:f9:cd:33:67:fd:5d:40:85:68:b9:fe:cc:21:96:44:46:3a: 11:f0:dd:af:df:40:be:86:c4:bd:91:73:7f:17:d0:4c:b8:d2: cf:53:80:01:a0:27:7a:01:dc:20:ad:26:bf:ed:41:1f:58:43: e7:f8:fa:91:37:ba:29:59:7f:31:9a:1f:56:8e:76:c5:2f:1f: b8:1f:78:be:f4:3d:b7:74:68:2e:0f:c5:85:e1:7a:b5:1e:02: 2d:5a:7c:25:e7:f4:83:00:44:aa:13:4d:8e:11:e8:b1:87:81: 73:6b:04:69:1a:99:c3:a1:e4:ff:aa:16:05:d7:7f:a2:e5:b4: 80:4d:c5:b7:73:c0:52:40:dc:30:11:d1:6a:88:e0:21:06:61: 85:9f:13:8c:30:8a:2c:f6:03:9e:f0:20:e7:16:5e:3e:c1:ab: ad:04:42:bc:e7:c9:e5:56:5b:5c:ff:64:7d:15:0b:01:f4:1f: d9:96:38:ef:34:79:06:48:0a:2b:ae:fc:9b:61:fe:66:93:39: 81:06:6c:93:04:22:95:22:d3:7e:44:68:d9:bf:5b:16:8b:cb: 75:86:cd:25:73:c3:09:dd:bd:17:31:23:7a:5b:9c:6f:91:95: 6b:70:a0:f1:04:a2:bc:c8:ce:c4:23:fe:c1:81:4b:24:4f:b2: 2c:d5:c1:60 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjNDMTExMC8GA1UEBRMoNDE1M0JBNDk5QTQ0RTdFQzEwNDFDNjBFRjdGMzY5QUM2 MjM1N0FBODAeFw0yMzExMjgwMzA4NTJaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NjU1OWMzLTU4ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM/q+aCihf+drWik2gj6Thhbm/tLn7XHMNJakDLnZkbruJQZ+j2mqqsNQlfoJP yx+IBPmoS8/pgOu7BCIBl1wUHqcBV3miWUNIs1TaVgR3OWbZLWhIcHcj18wP7p4E NeP+svlW3knhpiJyWVnnXY0JzA3g1oTL3qaLC0BwJ/iEnJKrQP3dcr2rj5DMsVfX ++4lBQy8DFZ57QOYCMe0apH502nfKzDVg5hdcX3LdMRQthuRaGpIa20QOWvpWdA1 ZjlCSw8WmAFMGB3ZtCBtJ6srVRtHwq3YX//jyHUL1BZXUa/f6AaqXqAyxxnhKBF5 ZNyGZm7oKaqCEjo95+Qrk7OfAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUNuLn7Isx yoLVhesE+eYd6shiRy0wHwYDVR0jBBgwFoAUQVO6SZpE5+wQQcYO9/NprGI1eqgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyM0MxLzBFMERGQTk4OEND RjExRUU5NkY0RTY1QUM0RjlBRTAyL1FWTzZTWnBFNS13UVFjWU85X05wckdJMWVx Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVZPNlNacEU1LXdRUWNZTzlfTnByR0kxZXFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS8wRTBERkE5ODhDQ0YxMUVFOTZGNEU2NUFDNEY5QUUwMi8yMDlBMkVBODhE OUIxMUVFQjRGNkM2NDZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEACQyHzAPBAIAAjAJAwcAIAEN8zNAMA0GCSqGSIb3DQEBCwUA A4IBAQCX+c0zZ/1dQIVouf7MIZZERjoR8N2v30C+hsS9kXN/F9BMuNLPU4ABoCd6 AdwgrSa/7UEfWEPn+PqRN7opWX8xmh9WjnbFLx+4H3i+9D23dGguD8WF4Xq1HgIt Wnwl5/SDAESqE02OEeixh4FzawRpGpnDoeT/qhYF13+i5bSATcW3c8BSQNwwEdFq iOAhBmGFnxOMMIos9gOe8CDnFl4+wautBEK858nlVltc/2R9FQsB9B/ZljjvNHkG SAorrvybYf5mkzmBBmyTBCKVItN+RGjZv1sWi8t1hs0lc8MJ3b0XMSN6W5xvkZVr cKDxBKK8yM7EI/7BgUskT7Is1cFg -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org