$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7EF28CBA175111EC8D2A3722C4F9AE02.roa File: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (raw, json) Hash identifier: B82Un+DU6B7NyuhVj1V9v///1zPVJ3rXRY6EcEaq0ew= Subject key identifier: 52:51:EA:44:89:F7:F5:05:11:99:8D:0B:D3:69:27:87:01:62:73:0F Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB Certificate serial: 0536 Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7EF28CBA175111EC8D2A3722C4F9AE02.roa Signing time: Tue 03 Sep 2024 01:14:55 +0000 ROA not before: Tue 03 Sep 2024 01:14:55 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 26380 IP address blocks: 220.101.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB Validity Not Before: Sep 3 01:14:55 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d6630f-0a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:6d:eb:e9:8a:a8:f0:41:a5:11:76:26:cd: 47:c0:ad:94:c2:8a:92:a1:e9:8e:02:5f:a7:c6:8c: cc:12:4f:4e:06:85:a4:ad:14:32:66:b9:95:13:76: 31:9f:c8:cd:51:78:e3:ea:80:66:8a:13:42:96:ff: 02:45:20:09:5a:8c:e0:34:e9:0b:95:49:71:89:2f: e2:ea:44:07:a2:cd:bc:53:a1:38:66:d6:1d:95:da: 49:a9:ba:3d:9a:88:49:ac:bc:44:41:67:8d:65:fa: 0a:75:8d:e1:41:5e:c3:c6:55:71:a9:47:b3:c6:35: 85:6e:46:15:f7:74:59:31:ef:99:db:81:a7:a0:7c: 0a:e8:8a:d3:4b:f9:66:72:5b:eb:d6:79:60:1a:21: a5:d1:22:8f:d6:86:66:15:9d:a3:85:72:ce:5d:82: b1:c6:f1:50:f1:11:4b:64:6c:3f:14:01:d7:2d:5c: 31:b7:30:cd:2d:b9:8e:66:5f:bf:f4:ec:34:73:1d: d7:14:f3:78:a8:26:c4:c5:62:03:36:18:2a:9b:73: fd:6c:2e:8f:5a:3d:4a:1b:78:14:f5:6b:00:05:2f: e1:f4:c7:74:6c:8f:91:86:c9:a7:36:f0:48:58:2a: 76:0e:1a:41:dd:4a:93:91:b4:85:c7:2a:fa:ec:88: 30:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:51:EA:44:89:F7:F5:05:11:99:8D:0B:D3:69:27:87:01:62:73:0F X509v3 Authority Key Identifier: keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7EF28CBA175111EC8D2A3722C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.101.52.0/24 Signature Algorithm: sha256WithRSAEncryption bd:3f:97:11:d8:a3:c7:7c:93:8b:8a:32:c4:61:c3:8f:d4:50: 93:ba:c2:46:e9:cf:81:42:64:b3:3f:8f:10:59:bb:93:b3:6f: 01:74:17:1a:17:f8:84:ea:e9:94:02:ac:3d:19:db:7c:b9:97: 01:49:d0:ca:14:15:f8:65:3d:02:18:3c:c3:cb:06:0c:17:14: 5d:6a:08:9c:10:5b:dd:e9:5c:93:75:2e:59:84:e6:0f:b9:dd: e2:27:51:32:86:fb:86:fe:32:84:0e:46:2c:0d:05:9c:e1:3b: 5c:4d:e1:91:f0:6b:3e:b3:65:87:77:de:f1:f1:68:7f:9d:9e: 1a:d3:0a:cd:8c:ad:92:69:77:7d:22:0c:04:bf:67:b8:95:71: 9e:92:91:4f:50:a4:39:d6:e2:7f:53:5f:22:ae:5b:4e:73:c8: 4f:9a:b7:bc:93:2b:05:8f:06:8a:59:ba:e8:d2:ef:69:5c:b9: 85:f4:85:15:47:4c:ff:2c:59:f1:36:6d:94:14:fc:90:ba:6e: 7b:cd:4b:82:e7:c2:ca:99:bf:8a:13:61:ca:74:97:c6:76:77: 3d:67:e0:f2:ed:62:c7:3c:fb:87:2a:49:b2:82:6c:f2:02:65: 6d:54:21:d6:26:8d:46:0e:5b:b7:b0:05:b7:53:1c:c4:0d:19: 37:8d:39:dd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC RUM0NkU1RkIwHhcNMjQwOTAzMDExNDU1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2NjMwZi0wYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSlt6+mKqPBBpRF2Js1HwK2UwoqSoemOAl+nxozMEk9OBoWkrRQyZrmVE3Yx n8jNUXjj6oBmihNClv8CRSAJWozgNOkLlUlxiS/i6kQHos28U6E4ZtYdldpJqbo9 mohJrLxEQWeNZfoKdY3hQV7DxlVxqUezxjWFbkYV93RZMe+Z24GnoHwK6IrTS/lm clvr1nlgGiGl0SKP1oZmFZ2jhXLOXYKxxvFQ8RFLZGw/FAHXLVwxtzDNLbmOZl+/ 9Ow0cx3XFPN4qCbExWIDNhgqm3P9bC6PWj1KG3gU9WsABS/h9Md0bI+RhsmnNvBI WCp2DhpB3UqTkbSFxyr67IgwEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFJR6kSJ 9/UFEZmNC9NpJ4cBYnMPMB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE0QjEvODQxODkyMjZGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvN0VGMjhDQkEx NzUxMTFFQzhEMkEzNzIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADcZTQwDQYJKoZIhvcNAQELBQADggEBAL0/lxHYo8d8k4uK MsRhw4/UUJO6wkbpz4FCZLM/jxBZu5OzbwF0FxoX+ITq6ZQCrD0Z23y5lwFJ0MoU FfhlPQIYPMPLBgwXFF1qCJwQW93pXJN1LlmE5g+53eInUTKG+4b+MoQORiwNBZzh O1xN4ZHwaz6zZYd33vHxaH+dnhrTCs2MrZJpd30iDAS/Z7iVcZ6SkU9QpDnW4n9T XyKuW05zyE+at7yTKwWPBopZuujS72lcuYX0hRVHTP8sWfE2bZQU/JC6bnvNS4Ln wsqZv4oTYcp0l8Z2dz1n4PLtYsc8+4cqSbKCbPICZW1UIdYmjUYOW7ewBbdTHMQN GTeNOd0= -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:58 2024 by rpki-client on console-ams.rpki-client.org