$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa File: 03BA8B36824411EF94479387C4F9AE02.roa (raw, json) Hash identifier: HE9hhfjLbpoLmdYRqz2hD2rCJCRDbET7MCnv1VGXqgg= Subject key identifier: 27:13:29:60:C2:AA:42:DA:18:75:C1:F9:0F:2B:09:13:23:10:BF:6E Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 06BF Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa Signing time: Fri 04 Oct 2024 20:27:47 +0000 ROA not before: Fri 04 Oct 2024 20:27:47 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 55740 IP address blocks: 14.195.78.0/24 maxlen: 24 14.195.79.0/24 maxlen: 24 14.195.91.0/24 maxlen: 24 49.249.1.0/24 maxlen: 24 49.249.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1727 (0x6bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Oct 4 20:27:47 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=67004fc2-cf12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:75:c3:e9:f2:27:47:95:4c:3f:77:7b:fe: b3:d9:44:e9:b3:a0:16:1f:a3:b5:82:ac:74:99:d8: d4:e3:fd:23:9f:22:ae:03:b3:fb:1e:f2:1d:99:00: 2a:28:7b:74:03:d1:14:e5:bc:35:d6:61:c7:f6:66: 26:55:cc:6f:84:db:dd:58:5f:76:78:8e:f0:a4:de: e5:fb:0b:d6:cb:dc:60:7f:f7:fd:c2:22:64:b1:71: c7:48:ab:8a:fa:3e:c6:e7:0c:0b:37:75:29:5e:6b: d6:47:ae:0f:04:f9:0a:2e:84:17:2f:25:6f:39:95: ac:7e:80:aa:bf:72:eb:df:00:6d:67:9b:df:94:e4: 67:49:8a:16:25:ad:93:24:fe:19:98:9f:d0:f9:15: 67:8f:1d:d2:b6:6f:b4:5b:c1:cd:7d:34:55:2b:30: fd:2f:70:41:34:d1:95:7b:20:ee:f7:7b:34:ef:8f: 8d:27:6e:81:68:29:00:18:21:d5:91:4b:2f:d3:85: cb:83:64:95:52:a2:04:5c:84:2c:91:49:e2:dc:7b: 2f:c0:71:2c:66:98:b8:40:01:d7:e6:21:88:21:09: 34:27:a9:dd:94:b7:b8:95:33:e7:0e:35:d2:e3:94: cf:57:db:b5:8a:8c:11:72:79:f3:ff:58:4e:41:9e: 3e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:13:29:60:C2:AA:42:DA:18:75:C1:F9:0F:2B:09:13:23:10:BF:6E X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.195.78.0/23 14.195.91.0/24 49.249.1.0/24 49.249.27.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:af:68:ac:35:92:f0:17:28:75:4d:d6:28:23:97:1f:a4:48: 12:9e:22:ed:9d:db:59:71:83:a8:80:a3:ae:94:f2:1e:99:c7: c2:81:c3:fa:b5:fa:39:dd:94:48:cd:0f:dd:84:74:3a:5f:bc: 29:07:22:5d:1d:79:24:be:38:4b:53:3c:ec:0a:50:91:87:ae: 58:e9:6c:89:6a:c5:2f:e5:46:8d:f5:fc:ef:27:71:cd:f6:0e: 35:91:6b:e0:cb:6b:ce:c3:8a:ff:92:03:68:c0:e7:21:d7:7d: ee:7f:83:b4:99:06:c0:81:49:3d:0b:08:dd:0f:d4:a2:4c:ee: 3d:47:4c:19:4e:1c:0c:f3:4c:0c:0b:7a:0f:df:53:c3:b8:ee: 7a:50:56:ee:60:0c:8f:38:4b:ec:31:25:25:01:1d:9c:2a:c7: b2:b6:8e:71:e9:90:1c:25:73:d1:2f:1b:d2:81:86:f3:cf:d6: de:2c:14:fe:0c:46:e9:56:76:a5:79:ab:8e:d9:5a:05:4b:42: 9c:4b:73:f4:75:1a:8d:a8:01:de:54:49:f5:79:a6:34:e6:fc: 60:2c:db:af:38:e2:57:72:25:d1:bd:b3:03:3f:a3:46:cd:58: 94:27:e7:de:50:3c:f4:04:c3:d5:e9:76:85:a5:f4:9e:fd:31: b6:48:ad:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjQxMDA0MjAyNzQ3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NzAwNGZjMi1jZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfZ1w+nyJ0eVTD93e/6z2UTps6AWH6O1gqx0mdjU4/0jnyKuA7P7HvIdmQAq KHt0A9EU5bw11mHH9mYmVcxvhNvdWF92eI7wpN7l+wvWy9xgf/f9wiJksXHHSKuK +j7G5wwLN3UpXmvWR64PBPkKLoQXLyVvOZWsfoCqv3Lr3wBtZ5vflORnSYoWJa2T JP4ZmJ/Q+RVnjx3Stm+0W8HNfTRVKzD9L3BBNNGVeyDu93s074+NJ26BaCkAGCHV kUsv04XLg2SVUqIEXIQskUni3HsvwHEsZpi4QAHX5iGIIQk0J6ndlLe4lTPnDjXS 45TPV9u1iowRcnnz/1hOQZ4+1wIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFCcTKWDC qkLaGHXB+Q8rCRMjEL9uMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvMDNCQThCMzY4 MjQ0MTFFRjk0NDc5Mzg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAEOw04DBAAOw1sDBAAx+QEDBAAx+RswDQYJKoZIhvcNAQEL BQADggEBAI+vaKw1kvAXKHVN1igjlx+kSBKeIu2d21lxg6iAo66U8h6Zx8KBw/q1 +jndlEjND92EdDpfvCkHIl0deSS+OEtTPOwKUJGHrljpbIlqxS/lRo31/O8ncc32 DjWRa+DLa87Div+SA2jA5yHXfe5/g7SZBsCBST0LCN0P1KJM7j1HTBlOHAzzTAwL eg/fU8O47npQVu5gDI84S+wxJSUBHZwqx7K2jnHpkBwlc9EvG9KBhvPP1t4sFP4M RulWdqV5q47ZWgVLQpxLc/R1Go2oAd5USfV5pjTm/GAs26844ldyJdG9swM/o0bN WJQn595QPPQEw9XpdoWl9J79MbZIrdY= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:25 2024 by rpki-client on console-fra.rpki-client.org