$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/892CCE569C1511EF98993F61C4F9AE02.roa File: 892CCE569C1511EF98993F61C4F9AE02.roa (raw, json) Hash identifier: Jy+GqDCgJutgam1b+LZQqnBFWbVVne2BA0zmjqEAto8= Subject key identifier: C3:71:7C:19:07:F8:4B:63:39:95:4A:B6:18:91:16:2F:D9:CF:DF:85 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0BFE Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/892CCE569C1511EF98993F61C4F9AE02.roa Signing time: Wed 06 Nov 2024 08:02:58 +0000 ROA not before: Wed 06 Nov 2024 08:02:58 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 59711 IP address blocks: 101.99.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Nov 6 08:02:58 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=672b22b2-c859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:10:a0:62:59:6f:47:c2:18:2a:c2:51:6b: 76:5b:e7:79:a4:75:ec:9c:35:39:4a:28:fd:bf:1e: c5:64:02:a2:74:37:bb:24:37:fc:9c:8f:c2:a0:b5: 87:6d:1e:f9:59:c2:b1:59:89:ad:6a:fa:42:bd:3a: b2:7b:30:f7:cb:34:13:94:4a:8d:16:3a:c5:9d:1e: dc:54:3c:81:ef:57:1d:44:0a:1e:f7:1a:cc:39:9b: c8:f4:c9:2a:f4:fd:39:26:a7:d3:52:48:34:90:73: d6:99:45:61:cd:88:23:ad:5c:40:c1:dc:ac:5c:c1: 21:65:c0:4c:ac:13:f9:cb:f8:b6:7d:0c:13:a3:36: 0d:7c:97:be:dc:e8:94:ca:b0:60:68:66:f4:54:fd: c3:cf:ed:60:a3:14:6c:3b:68:7e:1b:8e:e7:43:f4: 64:44:7e:1f:99:78:1f:e4:c9:5c:c3:4a:68:2a:66: 3b:85:af:48:09:1b:65:d7:ac:9c:5e:6c:7c:76:13: e1:5c:58:b7:4a:08:17:98:06:a1:c2:94:8c:6d:b2: 13:b7:2b:1a:6f:d4:d3:fa:11:91:94:e9:4c:c7:48: ca:d7:20:6a:d3:e6:a4:a5:ee:ac:d7:95:e6:dd:a0: f4:4e:52:ab:86:57:8f:41:73:e9:06:0f:79:f0:b7: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:71:7C:19:07:F8:4B:63:39:95:4A:B6:18:91:16:2F:D9:CF:DF:85 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/892CCE569C1511EF98993F61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.99.92.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:b1:78:5a:7c:34:ec:97:ad:bf:aa:ca:c3:81:20:aa:23:19: da:ac:3d:56:b6:82:26:96:25:94:5d:ba:6f:1f:e2:17:5d:e6: a8:7d:57:9c:57:78:6b:cb:52:b4:a0:93:7c:42:8f:81:a1:17: ac:61:65:c1:c1:61:ed:39:d1:f7:39:85:41:eb:c7:00:5a:7e: 34:06:90:02:99:76:39:c5:64:92:47:d5:f2:47:52:57:db:e9: 5a:57:88:84:f0:cb:75:b4:bd:fc:05:6c:38:3b:47:24:e1:11: ec:65:ec:12:da:8c:a5:c6:01:06:95:b9:5f:0d:33:8b:9f:f9: 25:5d:88:b9:b4:f0:9f:13:6c:d7:7c:07:e2:6f:92:9d:ea:3e: 32:8b:2c:57:45:4a:64:17:b2:36:05:d2:a9:f0:34:09:5c:f9: 1e:64:d3:66:68:6b:23:be:2d:c9:c1:0b:77:87:c9:bb:26:0a: b1:6c:44:d8:17:fc:b2:f8:c4:00:0d:7f:c5:2e:7c:04:39:58: 3e:bd:39:9f:16:d3:ff:91:0c:a1:86:6e:de:9d:df:4c:37:d8: 97:6b:ba:8d:1a:72:9c:97:c4:83:c7:09:ba:bd:ef:2a:0b:ee: a9:dc:b7:d4:16:6f:5b:f8:7c:c6:69:47:35:59:f5:cd:17:fe: 25:51:de:49 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjQxMTA2MDgwMjU4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiMjJiMi1jODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnioQoGJZb0fCGCrCUWt2W+d5pHXsnDU5Sij9vx7FZAKidDe7JDf8nI/CoLWH bR75WcKxWYmtavpCvTqyezD3yzQTlEqNFjrFnR7cVDyB71cdRAoe9xrMOZvI9Mkq 9P05JqfTUkg0kHPWmUVhzYgjrVxAwdysXMEhZcBMrBP5y/i2fQwTozYNfJe+3OiU yrBgaGb0VP3Dz+1goxRsO2h+G47nQ/RkRH4fmXgf5Mlcw0poKmY7ha9ICRtl16yc Xmx8dhPhXFi3SggXmAahwpSMbbITtysab9TT+hGRlOlMx0jK1yBq0+akpe6s15Xm 3aD0TlKrhlePQXPpBg958Lc3bQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMNxfBkH +EtjOZVKthiRFi/Zz9+FMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJEMDgvRjlDMzMzOTIxRDg3MTFFQUE5QzVCMTcwQzRGOUFFMDIvODkyQ0NFNTY5 QzE1MTFFRjk4OTkzRjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABlY1wwDQYJKoZIhvcNAQELBQADggEBAC+xeFp8NOyXrb+q ysOBIKojGdqsPVa2giaWJZRdum8f4hdd5qh9V5xXeGvLUrSgk3xCj4GhF6xhZcHB Ye050fc5hUHrxwBafjQGkAKZdjnFZJJH1fJHUlfb6VpXiITwy3W0vfwFbDg7RyTh Eexl7BLajKXGAQaVuV8NM4uf+SVdiLm08J8TbNd8B+Jvkp3qPjKLLFdFSmQXsjYF 0qnwNAlc+R5k02ZoayO+LcnBC3eHybsmCrFsRNgX/LL4xAANf8UufAQ5WD69OZ8W 0/+RDKGGbt6d30w32Jdruo0acpyXxIPHCbq97yoL7qnct9QWb1v4fMZpRzVZ9c0X /iVR3kk= -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:25 2024 by rpki-client on console-fra.rpki-client.org