$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa File: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (raw, json) Hash identifier: MlL6AakK7qGzM8DE1JwJUAOkQ8rpfwcCeXJ1v0Bdnow= Subject key identifier: 00:28:41:12:3C:7D:A4:02:96:EA:49:5B:E4:D8:47:D8:68:33:58:A8 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 0757 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa Signing time: Wed 10 Apr 2024 23:01:34 +0000 ROA not before: Wed 10 Apr 2024 23:01:34 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 23713 IP address blocks: 202.41.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1879 (0x757) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Apr 10 23:01:34 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66171a4e-3d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:dd:c4:23:e5:b7:31:b6:e7:aa:43:c1:15: c7:08:32:d8:48:b8:62:bf:57:52:70:54:70:3d:f6: 69:e1:f3:eb:83:e5:d7:ae:f1:18:57:82:97:3b:4d: b0:cb:88:11:32:4a:e7:fc:84:e5:99:ac:fc:db:3a: 73:dc:51:73:b6:14:27:f5:1e:09:38:d6:68:ce:0a: d1:b1:17:c0:0c:b5:0f:4c:3a:89:44:f0:7b:69:ed: 6a:12:da:8f:23:21:9f:fe:82:6b:af:1a:e4:57:35: a9:63:fd:2d:89:59:63:15:fd:24:71:79:d7:fb:6b: 47:ba:75:87:17:9f:51:3d:88:c5:16:89:85:22:57: a5:b9:09:66:69:30:a3:a9:ee:70:79:dc:77:7c:45: b8:1e:6a:45:7d:ad:d4:8f:d6:45:0b:ba:2d:55:01: b9:37:6b:ba:0b:ea:ca:cb:7d:43:cf:95:14:b0:77: c8:66:52:31:07:1b:6a:6e:b2:c9:0d:94:32:a8:da: dd:13:7c:67:48:31:17:a5:7e:e9:2c:21:1f:7b:78: c7:7e:07:65:d5:e2:c6:f3:c6:e4:5e:4c:dc:f1:65: f8:e2:cb:10:49:c8:9c:be:b7:e5:d3:f5:d2:0d:d9: 29:46:f4:da:82:e3:e3:9c:5d:7f:26:05:cb:60:eb: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:28:41:12:3C:7D:A4:02:96:EA:49:5B:E4:D8:47:D8:68:33:58:A8 X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.41.145.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:9b:c5:a5:e8:00:bb:4d:e8:61:57:be:ec:f3:4c:3d:28:89: 8d:2c:fb:ea:3a:cb:f6:55:68:62:12:ef:f9:d5:66:3c:62:39: 2c:f9:31:39:83:c2:2b:cb:db:ff:61:14:ae:00:92:c3:32:3a: 29:bc:1c:61:b0:26:3e:42:1c:28:a2:b0:c2:02:92:25:bd:91: ee:a7:fb:e0:aa:85:5b:53:95:fb:8b:1a:f5:27:6e:cc:e5:1b: ac:c2:d3:59:eb:ae:32:ae:15:4d:0a:d4:f5:d2:94:0c:ce:b0: 0c:a6:b5:34:cd:1b:33:6a:65:eb:cc:e7:d2:03:ac:16:50:4e: f4:20:38:8e:b9:ef:70:c9:4d:7c:8e:7b:e8:5a:cb:13:ea:ef: e1:a5:df:27:97:dd:64:f1:b3:2d:8a:2d:ad:6d:de:d2:60:73: 5a:03:3f:87:4a:0b:eb:7d:a8:e7:45:0f:2f:c8:c8:97:01:fd: c2:07:ee:13:7d:57:e1:32:87:6a:87:c4:9e:44:d4:48:87:92: f7:22:89:fd:43:57:96:5b:42:db:5e:eb:66:06:e8:c8:a3:e3: a9:ed:ee:00:79:5e:ba:fa:19:e4:db:a8:0b:5a:98:7f:ce:f0: 86:d9:23:fc:19:21:8a:93:eb:c2:b5:63:2d:af:fb:17:63:4b: 02:bd:60:11 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjQwNDEwMjMwMTM0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE3MWE0ZS0zZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXPdxCPltzG256pDwRXHCDLYSLhiv1dScFRwPfZp4fPrg+XXrvEYV4KXO02w y4gRMkrn/ITlmaz82zpz3FFzthQn9R4JONZozgrRsRfADLUPTDqJRPB7ae1qEtqP IyGf/oJrrxrkVzWpY/0tiVljFf0kcXnX+2tHunWHF59RPYjFFomFIleluQlmaTCj qe5wedx3fEW4HmpFfa3Uj9ZFC7otVQG5N2u6C+rKy31Dz5UUsHfIZlIxBxtqbrLJ DZQyqNrdE3xnSDEXpX7pLCEfe3jHfgdl1eLG88bkXkzc8WX44ssQScicvrfl0/XS DdkpRvTaguPjnF1/JgXLYOv9lQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAAoQRI8 faQClupJW+TYR9hoM1ioMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI1MzYvRTRDODg5NzJFQjc0MTFFQUJBMEE5RTQ4QzRGOUFFMDIvMzZDREUzMENF QzI0MTFFQThCMEREQTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKKZEwDQYJKoZIhvcNAQELBQADggEBAA+bxaXoALtN6GFX vuzzTD0oiY0s++o6y/ZVaGIS7/nVZjxiOSz5MTmDwivL2/9hFK4AksMyOim8HGGw Jj5CHCiisMICkiW9ke6n++CqhVtTlfuLGvUnbszlG6zC01nrrjKuFU0K1PXSlAzO sAymtTTNGzNqZevM59IDrBZQTvQgOI6573DJTXyOe+hayxPq7+Gl3yeX3WTxsy2K La1t3tJgc1oDP4dKC+t9qOdFDy/IyJcB/cIH7hN9V+Eyh2qHxJ5E1EiHkvciif1D V5ZbQtte62YG6Mij46nt7gB5Xrr6GeTbqAtamH/O8IbZI/wZIYqT68K1Yy2v+xdj SwK9YBE= -----END CERTIFICATE-----Generated at Thu May 16 23:48:40 2024 by rpki-client on console-fra.rpki-client.org