$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/0897E314434811EF8E76757AC4F9AE02.roa File: 0897E314434811EF8E76757AC4F9AE02.roa (raw, json) Hash identifier: R1gEi8j8mfWvUtSAHt/wf2LiIREsRf4G5SX9f+LsG9I= Subject key identifier: 45:B7:CA:AA:47:14:9E:8C:8D:93:52:F3:55:10:25:37:08:DD:3A:44 Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Certificate serial: 1634 Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/0897E314434811EF8E76757AC4F9AE02.roa Signing time: Tue 16 Jul 2024 07:50:13 +0000 ROA not before: Tue 16 Jul 2024 07:50:13 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 152891 IP address blocks: 110.235.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5684 (0x1634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Validity Not Before: Jul 16 07:50:13 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66962635-a5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:37:77:1e:b8:a9:33:47:f6:ac:8e:06:f2:b2: c0:5a:da:a2:96:53:2a:6a:b8:e0:b2:60:25:fd:13: 63:11:86:6e:9d:e3:c4:ce:f0:de:d8:fd:1d:27:cd: 7d:bd:6a:8e:8f:aa:a3:1c:00:f3:cc:d5:d3:8e:93: 68:cc:cb:18:df:a2:66:3c:8b:fe:b5:df:bf:04:68: 18:5d:c1:b9:8e:19:fd:ee:98:39:82:af:06:24:04: be:11:11:72:cf:10:8d:2e:b1:18:3a:fa:e1:ef:d2: 63:83:f5:3f:ee:6c:3d:d8:45:3d:e8:ea:22:56:17: 27:b9:cd:dc:2c:c6:50:fd:ea:70:8d:d6:67:e4:1c: 9e:75:c8:95:fd:d6:8d:0c:8e:6a:8a:87:da:4e:d2: 05:24:60:fa:86:8f:9b:16:6a:c1:e0:82:d2:df:f6: 45:df:56:8b:5a:4e:a8:5f:e3:69:30:66:a1:52:ea: 16:b8:2c:56:1b:2c:07:cf:83:39:e0:0f:12:50:67: 49:2d:0a:20:40:6b:55:a6:d1:23:39:6b:58:e8:1a: e3:4d:21:f1:5a:54:c8:56:7b:b6:2c:5d:be:2b:ff: 2b:7b:40:86:af:3a:8b:ea:32:f2:e2:72:bc:d3:ee: 5d:e6:ba:3f:1f:de:2b:b7:90:c5:c3:5d:8d:b4:ac: 5e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B7:CA:AA:47:14:9E:8C:8D:93:52:F3:55:10:25:37:08:DD:3A:44 X509v3 Authority Key Identifier: keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/0897E314434811EF8E76757AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.235.157.0/24 Signature Algorithm: sha256WithRSAEncryption 32:08:b9:0f:80:ca:56:40:94:fd:10:40:64:5a:dd:39:10:41: 56:f0:1a:61:63:69:d1:fb:3d:a8:7c:df:44:bd:db:27:76:dc: e7:84:b8:72:18:cc:a3:52:4b:6f:54:5f:21:8c:4e:26:6d:44: 27:da:09:c2:0c:88:c0:33:e8:d3:29:98:29:d2:3d:5c:12:9c: 74:6f:39:1f:62:28:9f:28:bd:83:62:cf:ac:32:a4:7b:ba:97: 63:17:30:b0:d6:f2:db:4a:7a:77:a1:15:0a:68:3b:03:13:10: 08:f0:a9:8b:b5:f8:8c:21:7c:36:57:9e:c7:e8:55:86:d4:b4: c8:58:d9:87:f5:13:f2:e1:0f:ce:75:7e:60:ad:1f:ff:57:c3: ea:35:05:c0:fa:21:00:b4:c1:5b:bf:96:b8:41:b4:c8:24:df: e1:1e:4b:a5:76:d1:c7:d1:cb:d4:79:16:24:04:28:3d:f9:74: cf:d9:bb:ce:b5:ae:71:dc:b8:4f:c6:02:6d:e6:6e:18:40:f9: bf:40:15:0c:0d:95:7c:8e:5c:48:1d:98:b4:56:3f:83:dc:20: 17:2a:c6:8b:e8:86:88:4f:73:ba:3c:80:27:cd:7b:08:cb:89: 79:ce:b2:98:c1:ea:e5:45:94:48:e8:16:49:7f:a6:b2:e1:95: fb:cf:ca:9f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKEM3QjI2NDczNTAzODBBNkEzNEUzNEUzMkNFRkUzNTE5 OTM3RTk3QzgwHhcNMjQwNzE2MDc1MDEzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2MjYzNS1hNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjd3HripM0f2rI4G8rLAWtqillMqarjgsmAl/RNjEYZunePEzvDe2P0dJ819 vWqOj6qjHADzzNXTjpNozMsY36JmPIv+td+/BGgYXcG5jhn97pg5gq8GJAS+ERFy zxCNLrEYOvrh79Jjg/U/7mw92EU96OoiVhcnuc3cLMZQ/epwjdZn5ByedciV/daN DI5qiofaTtIFJGD6ho+bFmrB4ILS3/ZF31aLWk6oX+NpMGahUuoWuCxWGywHz4M5 4A8SUGdJLQogQGtVptEjOWtY6BrjTSHxWlTIVnu2LF2+K/8re0CGrzqL6jLy4nK8 0+5d5ro/H94rt5DFw12NtKxeUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEW3yqpH FJ6MjZNS81UQJTcI3TpEMB8GA1UdIwQYMBaAFMeyZHNQOApqNONOMs7+NRmTfpfI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80Qjk1OEJDRTAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENtbzA0MDR5enY0MUdaTi1s OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3SmtjMUE0Q21vMDQwNHl6djQxR1pOLWw4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRGNTkvNEI5NThCQ0UwMENCMTFFOEJFQjFFRjEwQzRGOUFFMDIvMDg5N0UzMTQ0 MzQ4MTFFRjhFNzY3NTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABu650wDQYJKoZIhvcNAQELBQADggEBADIIuQ+AylZAlP0Q QGRa3TkQQVbwGmFjadH7Pah830S92yd23OeEuHIYzKNSS29UXyGMTiZtRCfaCcIM iMAz6NMpmCnSPVwSnHRvOR9iKJ8ovYNiz6wypHu6l2MXMLDW8ttKenehFQpoOwMT EAjwqYu1+IwhfDZXnsfoVYbUtMhY2Yf1E/LhD851fmCtH/9Xw+o1BcD6IQC0wVu/ lrhBtMgk3+EeS6V20cfRy9R5FiQEKD35dM/Zu861rnHcuE/GAm3mbhhA+b9AFQwN lXyOXEgdmLRWP4PcIBcqxovohohPc7o8gCfNewjLiXnOspjB6uVFlEjoFkl/prLh lfvPyp8= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org