$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/5D24529CAB0C11EA8D5ADE09C4F9AE02.roa File: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (raw, json) Hash identifier: jQLZJj3VvPR1niUIT7DA9sty7btEtK8rmHNsN8IaW9w= Subject key identifier: E3:D8:A8:F1:A1:F1:7A:11:03:0F:AC:1E:92:57:0C:02:B4:6D:60:50 Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1C5A Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/5D24529CAB0C11EA8D5ADE09C4F9AE02.roa Signing time: Mon 28 Oct 2024 14:40:40 +0000 ROA not before: Mon 28 Oct 2024 14:40:40 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 38710 IP address blocks: 119.30.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7258 (0x1c5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Oct 28 14:40:40 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=671fa267-790d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e2:44:b8:ab:d1:10:32:62:46:b1:b0:06:54: b2:e9:81:02:16:0b:11:6b:48:93:99:64:ea:4c:fb: 40:5c:ec:28:27:ec:6d:37:14:03:06:5b:9d:12:0b: c8:7c:ee:34:dd:ce:c0:ca:3d:03:67:a8:0f:cf:67: cd:dd:e4:fb:49:67:96:79:4e:a1:11:20:e2:68:d8: 33:06:e8:2d:f3:14:35:2c:f6:5a:ca:58:1b:5e:c1: 19:4e:b4:c9:af:37:d2:2d:21:e5:f5:3a:94:2a:18: 34:3b:b1:9c:14:ac:a1:b8:34:e3:1f:50:f6:32:c0: b8:50:2c:f1:90:36:22:b5:23:d0:21:f9:e7:58:26: 32:56:d8:17:e0:96:86:bf:80:57:13:17:d8:3a:8e: c4:d9:81:da:56:44:e8:a2:bf:56:72:86:81:87:07: ee:78:78:12:25:92:b0:48:98:82:ef:38:66:24:26: 22:81:7e:24:8b:c8:e2:5f:22:09:97:6b:6d:31:2b: 26:71:bc:18:0c:0e:48:18:d1:79:84:1a:d3:c0:7d: fb:7b:64:1c:15:52:7f:cd:65:28:6a:98:ec:0b:e6: 18:b5:be:57:09:38:03:72:b9:e9:75:36:85:19:10: f4:cc:ea:62:93:73:6a:74:ee:08:ce:fd:ca:e7:2b: 29:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D8:A8:F1:A1:F1:7A:11:03:0F:AC:1E:92:57:0C:02:B4:6D:60:50 X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/5D24529CAB0C11EA8D5ADE09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.30.88.0/24 Signature Algorithm: sha256WithRSAEncryption 81:1b:20:64:5a:20:61:04:cc:e2:4f:53:0d:de:d5:2e:ab:1f: c1:96:0c:e2:f3:c1:13:cf:bd:52:f4:7d:f1:11:d1:67:98:5f: c1:c9:a7:94:15:53:f7:7e:dd:4d:18:e1:aa:64:50:5c:c9:19: 88:ab:9a:c6:a1:90:ba:83:e2:dd:bf:36:7e:2a:c7:a4:af:84: 4d:36:17:77:0d:b8:e9:e6:10:61:4c:44:74:58:3c:ec:05:92: ad:27:1e:89:04:0f:f3:60:3e:a3:6d:67:81:7c:da:40:78:49: 9a:1f:fa:f7:e0:19:1b:30:0f:87:0b:d7:b1:f7:83:50:ea:94: 2a:82:18:cd:ed:3c:5d:3c:20:43:28:ca:4a:e7:f9:6f:0a:f6: 42:51:72:11:ae:46:aa:e8:95:01:8e:89:eb:a9:b0:2d:fe:31: e3:9b:74:99:ab:ed:c6:8b:56:c3:c8:17:2f:8e:be:e2:36:09: ab:ca:3e:14:52:00:62:6e:02:65:3e:13:3d:30:04:a0:aa:72: 40:18:3b:74:e8:1a:a4:87:dc:67:33:68:59:cc:2f:3b:6b:df: 16:c9:2b:a6:d8:25:cf:9c:84:e5:c2:9e:bf:d6:8f:78:89:28: 75:4a:0e:0b:a6:ef:4a:72:60:dd:1d:16:4b:4e:e1:d2:f9:db: 1a:34:d6:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjQxMDI4MTQ0MDQwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFmYTI2Ny03OTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+OJEuKvREDJiRrGwBlSy6YECFgsRa0iTmWTqTPtAXOwoJ+xtNxQDBludEgvI fO403c7Ayj0DZ6gPz2fN3eT7SWeWeU6hESDiaNgzBugt8xQ1LPZaylgbXsEZTrTJ rzfSLSHl9TqUKhg0O7GcFKyhuDTjH1D2MsC4UCzxkDYitSPQIfnnWCYyVtgX4JaG v4BXExfYOo7E2YHaVkToor9WcoaBhwfueHgSJZKwSJiC7zhmJCYigX4ki8jiXyIJ l2ttMSsmcbwYDA5IGNF5hBrTwH37e2QcFVJ/zWUoapjsC+YYtb5XCTgDcrnpdTaF GRD0zOpik3NqdO4Izv3K5ysplwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOPYqPGh 8XoRAw+sHpJXDAK0bWBQMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvNUQyNDUyOUNB QjBDMTFFQThENUFERTA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB3HlgwDQYJKoZIhvcNAQELBQADggEBAIEbIGRaIGEEzOJP Uw3e1S6rH8GWDOLzwRPPvVL0ffER0WeYX8HJp5QVU/d+3U0Y4apkUFzJGYirmsah kLqD4t2/Nn4qx6SvhE02F3cNuOnmEGFMRHRYPOwFkq0nHokED/NgPqNtZ4F82kB4 SZof+vfgGRswD4cL17H3g1DqlCqCGM3tPF08IEMoykrn+W8K9kJRchGuRqrolQGO ieupsC3+MeObdJmr7caLVsPIFy+OvuI2CavKPhRSAGJuAmU+Ez0wBKCqckAYO3To GqSH3GczaFnMLztr3xbJK6bYJc+chOXCnr/Wj3iJKHVKDgum70pyYN0dFktO4dL5 2xo01ms= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:21 2024 by rpki-client on console-ams.rpki-client.org