$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3A9DF21A178411EC83735974C4F9AE02.roa File: 3A9DF21A178411EC83735974C4F9AE02.roa (raw, json) Hash identifier: /5vaFU/movPiNcrsjCj3H2p31M+BSywFDXfC27bwtzs= Subject key identifier: D7:83:0B:34:85:10:A8:2F:95:EA:02:E0:CE:6A:56:F4:FA:3F:EC:20 Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB Certificate serial: 0530 Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3A9DF21A178411EC83735974C4F9AE02.roa Signing time: Tue 03 Sep 2024 01:14:50 +0000 ROA not before: Tue 03 Sep 2024 01:14:50 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 134139 IP address blocks: 61.88.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB Validity Not Before: Sep 3 01:14:50 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d6630a-d3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:02:4c:e8:7a:67:2d:3e:4b:7d:22:f3:48: 44:6b:05:9d:0a:ed:63:90:6a:28:94:c0:87:71:37: b8:bf:14:a5:94:5f:a4:78:00:95:72:b1:da:be:9b: f5:94:30:9f:14:c2:82:22:d9:3d:8f:f1:b2:69:89: d9:34:9f:02:42:bb:5f:18:62:5e:61:f6:a5:66:cc: 84:ef:1b:a4:ab:dc:46:14:6e:a2:e2:e8:09:d7:53: 89:21:4d:12:fd:a1:4e:24:fc:53:fb:4d:1d:7a:83: 1e:c4:ee:01:86:6a:aa:c7:3b:85:63:cf:ec:58:86: a4:09:94:91:b9:65:63:47:fc:94:a2:58:37:30:92: b8:ef:c2:dc:48:76:7b:c4:ba:e8:20:66:0f:34:b9: 2a:f2:fd:12:9f:cd:9d:4e:ec:64:3e:a6:eb:54:20: de:c6:7d:d0:54:b7:bb:04:5e:c9:f1:99:1f:e1:9b: 1c:10:81:2d:f9:42:63:96:53:d5:70:4d:99:c2:72: c0:76:38:44:6c:3a:c8:48:b3:f2:b7:69:66:cd:04: f8:cb:0e:7e:e7:8f:7f:ec:45:7a:ea:fd:0a:02:1c: b1:bb:a5:26:a1:58:32:f8:40:04:a6:55:1f:93:31: c4:c5:7e:6d:d5:64:55:5c:22:26:77:85:75:fc:de: d3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:83:0B:34:85:10:A8:2F:95:EA:02:E0:CE:6A:56:F4:FA:3F:EC:20 X509v3 Authority Key Identifier: keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3A9DF21A178411EC83735974C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.88.231.0/24 Signature Algorithm: sha256WithRSAEncryption 62:19:73:ac:13:c0:e3:9e:c7:9f:88:e3:5f:33:71:37:eb:92: d8:0b:35:65:1e:f6:e5:8e:6c:89:1d:0d:7f:f3:e2:13:28:ff: db:63:f0:f1:b4:09:30:2e:58:48:f7:c2:88:d2:04:fb:9f:5b: 19:f9:7f:e9:af:8b:6b:c9:81:52:ea:8d:9c:f2:22:50:aa:cd: b6:71:11:18:8b:9d:7c:9c:0d:4f:70:a0:c7:dc:9a:cd:ca:21: 16:d2:20:18:60:f2:15:f0:88:fb:ff:91:c6:89:b4:e9:bc:a7: 44:56:80:f8:05:64:0d:88:35:7e:ac:c3:54:d4:63:91:04:80: 96:19:9c:8f:ca:df:be:10:79:f1:09:61:a0:18:bf:fa:bb:d7: 20:ba:74:f9:70:1e:4d:79:10:c7:43:7d:0c:bf:f0:7a:93:8b: 7a:fb:ac:82:ea:62:8a:05:69:cc:1c:f0:c1:bd:80:1a:bf:3a: 3e:4c:6e:8c:37:98:cd:f5:d0:71:79:b4:67:ab:0b:24:49:6c: df:bd:a0:60:41:07:34:b7:de:eb:db:9d:50:58:24:4e:97:0a: 94:29:f9:41:1b:cb:be:c9:20:62:0b:bb:91:c2:9a:a9:ff:e5: 5d:89:6c:9f:ca:4c:31:a2:01:0d:fa:80:d8:4f:9a:aa:1a:fc: 11:af:06:b0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC RUM0NkU1RkIwHhcNMjQwOTAzMDExNDUwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2NjMwYS1kM2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp80CTOh6Zy0+S30i80hEawWdCu1jkGoolMCHcTe4vxSllF+keACVcrHavpv1 lDCfFMKCItk9j/GyaYnZNJ8CQrtfGGJeYfalZsyE7xukq9xGFG6i4ugJ11OJIU0S /aFOJPxT+00deoMexO4BhmqqxzuFY8/sWIakCZSRuWVjR/yUolg3MJK478LcSHZ7 xLroIGYPNLkq8v0Sn82dTuxkPqbrVCDexn3QVLe7BF7J8Zkf4ZscEIEt+UJjllPV cE2ZwnLAdjhEbDrISLPyt2lmzQT4yw5+549/7EV66v0KAhyxu6UmoVgy+EAEplUf kzHExX5t1WRVXCImd4V1/N7T+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNeDCzSF EKgvleoC4M5qVvT6P+wgMB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE0QjEvODQxODkyMjZGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvM0E5REYyMUEx Nzg0MTFFQzgzNzM1OTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA9WOcwDQYJKoZIhvcNAQELBQADggEBAGIZc6wTwOOex5+I 418zcTfrktgLNWUe9uWObIkdDX/z4hMo/9tj8PG0CTAuWEj3wojSBPufWxn5f+mv i2vJgVLqjZzyIlCqzbZxERiLnXycDU9woMfcms3KIRbSIBhg8hXwiPv/kcaJtOm8 p0RWgPgFZA2INX6sw1TUY5EEgJYZnI/K374QefEJYaAYv/q71yC6dPlwHk15EMdD fQy/8HqTi3r7rILqYooFacwc8MG9gBq/Oj5Mbow3mM310HF5tGerCyRJbN+9oGBB BzS33uvbnVBYJE6XCpQp+UEby77JIGILu5HCmqn/5V2JbJ/KTDGiAQ36gNhPmqoa /BGvBrA= -----END CERTIFICATE-----Generated at Sun Nov 24 23:58:46 2024 by rpki-client on console-fra.rpki-client.org