$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/D45F1712A8B311EFADA46649C4F9AE02.roa File: D45F1712A8B311EFADA46649C4F9AE02.roa (raw, json) Hash identifier: CGy5xeA/R04EEe+9BMCjpd9tn/JSS5izmnErdKNLMSk= Subject key identifier: 05:24:C4:68:B3:CA:56:15:B2:33:45:BA:47:52:96:9F:8A:5F:A9:28 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0C0E Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/D45F1712A8B311EFADA46649C4F9AE02.roa Signing time: Fri 22 Nov 2024 09:26:19 +0000 ROA not before: Fri 22 Nov 2024 09:26:19 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 49532 IP address blocks: 101.99.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3086 (0xc0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Nov 22 09:26:19 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=67404e3b-3790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:70:96:6b:4e:d7:5a:f1:13:ef:dd:ad:38: fb:e7:db:21:57:b7:eb:cf:86:64:f3:95:c1:aa:17: d8:91:c9:e2:ac:9c:fc:ba:02:c4:88:b3:ad:27:36: e4:a9:1e:79:f1:7e:b1:0f:7f:42:c3:7d:be:1e:47: 7d:82:20:8b:4a:0d:ca:9f:e9:2b:5e:8e:70:b4:d2: 41:0f:f7:a0:37:fb:2b:b1:97:87:18:4d:1d:61:83: 61:e0:e8:9b:fb:56:65:de:cd:0a:3c:4d:84:1f:a7: de:40:6a:dd:7f:54:4c:e9:d5:36:c6:0e:30:50:a1: 3a:1b:79:68:3a:8f:e1:4b:56:be:9b:de:45:8a:91: c4:ee:26:f9:1a:86:60:ba:cc:ab:8b:8b:8a:86:46: 61:9d:08:65:92:cb:d6:18:1d:76:06:34:d2:97:51: 9e:c8:dd:77:a7:8d:a1:d9:1d:f1:56:e3:03:14:a9: fa:56:d3:04:30:48:04:ac:f5:cd:87:86:da:46:aa: ea:6f:c0:f5:94:e6:d7:6e:b0:16:a6:63:f5:6d:ae: c8:ec:43:1d:8e:2e:99:c0:ad:c4:f3:42:3d:b9:e8: 94:1e:f8:3a:5f:06:e0:f6:6e:ea:12:67:d0:67:be: 48:f0:9b:9e:30:a1:26:60:3a:d8:be:1f:cd:b7:95: 3c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:24:C4:68:B3:CA:56:15:B2:33:45:BA:47:52:96:9F:8A:5F:A9:28 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/D45F1712A8B311EFADA46649C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.99.92.0/24 Signature Algorithm: sha256WithRSAEncryption 53:b7:60:c5:fc:1c:69:c9:19:0f:a9:06:77:a8:7b:0d:29:18: 04:d0:86:1c:a5:b0:d7:22:2b:27:6e:2f:3c:4a:46:8a:d6:80: da:45:3c:07:42:df:69:16:e0:df:f5:86:18:e5:e6:b2:ee:be: 99:32:d8:3d:6a:3e:c0:36:9b:8b:aa:a8:02:89:6f:d6:a3:70: c1:a6:60:7b:e4:78:be:df:ca:cf:d1:99:13:1c:79:a9:ea:40: a5:2a:5a:9d:03:2b:b6:ff:de:82:cc:41:bf:da:3d:1c:3a:5a: bc:ab:b8:a8:36:eb:bc:dd:70:b1:26:fa:64:7f:37:31:5e:00: bb:74:95:42:e6:8a:b2:ec:5e:46:ed:0b:8a:db:4f:a7:61:e7: 81:9d:25:d5:aa:3e:d4:ab:95:c8:6a:26:09:6a:1f:8a:bb:14: bb:b6:87:f0:aa:4b:79:5b:f0:fb:fa:3d:5c:3b:63:fb:07:38: 62:c5:39:10:30:73:5d:01:b7:f8:12:e2:34:f9:5a:80:12:96: c0:2f:3d:59:b4:c4:ab:32:62:17:fc:a7:59:5a:4e:85:21:f5: 14:c9:b2:ab:6c:fc:cc:e8:d3:5f:ac:8c:25:cc:f0:be:d5:14: 8b:fc:08:ec:f3:46:15:23:5d:ef:e9:1c:3a:47:de:a0:61:b3: 82:a3:63:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjQxMTIyMDkyNjE5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NzQwNGUzYi0zNzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2BwlmtO11rxE+/drTj759shV7frz4Zk85XBqhfYkcnirJz8ugLEiLOtJzbk qR558X6xD39Cw32+Hkd9giCLSg3Kn+krXo5wtNJBD/egN/srsZeHGE0dYYNh4Oib +1Zl3s0KPE2EH6feQGrdf1RM6dU2xg4wUKE6G3loOo/hS1a+m95FipHE7ib5GoZg usyri4uKhkZhnQhlksvWGB12BjTSl1GeyN13p42h2R3xVuMDFKn6VtMEMEgErPXN h4baRqrqb8D1lObXbrAWpmP1ba7I7EMdji6ZwK3E80I9ueiUHvg6Xwbg9m7qEmfQ Z75I8JueMKEmYDrYvh/Nt5U8cQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAUkxGiz ylYVsjNFukdSlp+KX6koMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJEMDgvRjlDMzMzOTIxRDg3MTFFQUE5QzVCMTcwQzRGOUFFMDIvRDQ1RjE3MTJB OEIzMTFFRkFEQTQ2NjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABlY1wwDQYJKoZIhvcNAQELBQADggEBAFO3YMX8HGnJGQ+p Bneoew0pGATQhhylsNciKyduLzxKRorWgNpFPAdC32kW4N/1hhjl5rLuvpky2D1q PsA2m4uqqAKJb9ajcMGmYHvkeL7fys/RmRMceanqQKUqWp0DK7b/3oLMQb/aPRw6 WryruKg267zdcLEm+mR/NzFeALt0lULmirLsXkbtC4rbT6dh54GdJdWqPtSrlchq JglqH4q7FLu2h/CqS3lb8Pv6PVw7Y/sHOGLFORAwc10Bt/gS4jT5WoASlsAvPVm0 xKsyYhf8p1laToUh9RTJsqts/Mzo01+sjCXM8L7VFIv8COzzRhUjXe/pHDpH3qBh s4KjYzk= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org