$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa File: D96D4614B0F811E595E0F761C4F9AE02.roa (raw, json) Hash identifier: E3U3F8lmAlNXbZSa6yPrVPMaCU4q4mH/ZxI+07ugJOo= Subject key identifier: B2:1E:75:48:08:82:67:7F:8F:64:F9:75:2F:71:AC:DD:C7:04:71:41 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 341F Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa Signing time: Tue 02 Apr 2024 14:50:09 +0000 ROA not before: Tue 02 Apr 2024 14:50:09 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 38478 IP address blocks: 27.50.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13343 (0x341f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Apr 2 14:50:09 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=660c1b21-c0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:a3:1a:58:07:a6:7f:72:2d:fb:d4:86:09: 53:1d:da:e0:e1:c2:bb:0f:e0:19:3f:11:f0:f2:e8: e2:d7:dd:23:f4:d5:c2:ac:a6:d9:d9:91:58:50:a6: 1e:88:7f:c7:eb:45:7d:b3:7c:74:96:2e:d0:86:bc: 45:56:a8:e4:90:78:43:3d:d2:32:e7:cd:df:af:04: 56:2b:7d:c1:83:76:37:f2:df:14:4c:f0:7f:cd:0b: 15:59:5b:cd:e5:f4:4d:a0:2e:82:2b:0c:34:14:fd: 9a:d9:cb:ec:10:cf:f7:50:55:7f:b2:3b:1f:53:bb: b2:cb:5c:11:75:02:2f:81:cb:de:7c:66:ac:1c:17: bc:7a:f3:00:50:3c:84:ab:1a:3a:24:0d:71:ea:f9: a4:5c:99:2e:e4:c8:83:8a:fe:12:6c:61:68:5f:1a: bc:f9:a1:56:1a:1a:93:a0:30:7c:8e:12:76:e7:b6: 4a:a6:d0:ff:47:a1:2a:08:e6:ef:f0:2b:0c:05:9a: ab:66:9b:38:92:74:c6:2b:e7:c3:e2:93:04:17:56: d5:6c:67:45:83:f6:81:05:d7:63:ef:25:36:bd:96: 52:1c:0a:a2:3c:35:4a:40:fa:0e:ef:6e:b5:e8:91: 12:bd:62:f8:cd:93:da:89:f9:64:cb:19:c1:77:ea: a1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:75:48:08:82:67:7F:8F:64:F9:75:2F:71:AC:DD:C7:04:71:41 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.50.34.0/24 Signature Algorithm: sha256WithRSAEncryption b0:a9:d6:6c:e4:51:79:93:9b:e5:f6:e4:5c:59:87:42:08:52: 7d:35:fe:3a:c6:23:e7:6f:86:44:4b:e1:7f:19:ac:86:39:28: 5a:e4:3c:69:e8:bc:a7:f0:06:c6:ab:bf:ec:5a:be:49:bb:74: cd:7b:b8:43:57:ee:d6:7f:f9:b4:bd:51:bf:a1:c8:f1:3f:5f: e3:3c:d3:7b:99:0e:69:c5:91:f6:ba:ef:14:da:fa:4b:d0:df: 8f:4c:14:dd:72:5d:f9:85:65:02:63:9c:82:32:ed:d0:79:91: d9:47:a8:95:ad:29:17:db:03:52:8e:58:8e:e4:f6:17:c0:06: 08:91:9f:70:12:c3:87:33:30:0d:39:df:04:14:49:84:8a:42: 9d:d8:98:1e:d6:76:56:f4:00:58:4d:b4:ef:fa:31:a3:90:a8: 06:bf:7a:5e:1d:d6:80:93:09:82:f1:90:66:c6:96:ca:76:00: 1f:a6:27:48:74:db:4c:51:3e:0a:e7:ae:66:77:3e:af:9b:54: 07:75:5a:4c:79:25:9e:c8:5c:29:7e:c9:67:34:f4:1c:05:6b: 45:b5:44:f5:1a:1d:f9:c6:52:35:8a:c1:08:1d:21:79:1f:27: d4:5e:b0:21:7b:82:de:86:c1:b9:0c:51:27:eb:b6:f0:51:6f: a7:f7:70:f8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjQwNDAyMTQ1MDA5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjMWIyMS1jMGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXWjGlgHpn9yLfvUhglTHdrg4cK7D+AZPxHw8uji190j9NXCrKbZ2ZFYUKYe iH/H60V9s3x0li7QhrxFVqjkkHhDPdIy583frwRWK33Bg3Y38t8UTPB/zQsVWVvN 5fRNoC6CKww0FP2a2cvsEM/3UFV/sjsfU7uyy1wRdQIvgcvefGasHBe8evMAUDyE qxo6JA1x6vmkXJku5MiDiv4SbGFoXxq8+aFWGhqToDB8jhJ257ZKptD/R6EqCObv 8CsMBZqrZps4knTGK+fD4pMEF1bVbGdFg/aBBddj7yU2vZZSHAqiPDVKQPoO7261 6JESvWL4zZPaiflkyxnBd+qhpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLIedUgI gmd/j2T5dS9xrN3HBHFBMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc0QzMvNkY4QjUyQTAxRDcwMTFFMkJDMTFEQUI0MDhCMDJDRDIvRDk2RDQ2MTRC MEY4MTFFNTk1RTBGNzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAbMiIwDQYJKoZIhvcNAQELBQADggEBALCp1mzkUXmTm+X2 5FxZh0IIUn01/jrGI+dvhkRL4X8ZrIY5KFrkPGnovKfwBsarv+xavkm7dM17uENX 7tZ/+bS9Ub+hyPE/X+M803uZDmnFkfa67xTa+kvQ349MFN1yXfmFZQJjnIIy7dB5 kdlHqJWtKRfbA1KOWI7k9hfABgiRn3ASw4czMA053wQUSYSKQp3YmB7Wdlb0AFhN tO/6MaOQqAa/el4d1oCTCYLxkGbGlsp2AB+mJ0h020xRPgrnrmZ3Pq+bVAd1Wkx5 JZ7IXCl+yWc09BwFa0W1RPUaHfnGUjWKwQgdIXkfJ9ResCF7gt6GwbkMUSfrtvBR b6f3cPg= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:18 2024 by rpki-client on console-ams.rpki-client.org