$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa File: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: nCFG+bk+dqsOuGFESr8+Ya9a1BnYrZYntqhV2PYzrJ0= Subject key identifier: 7B:61:30:22:96:1C:19:CC:21:D5:CF:2B:02:94:74:17:BB:4D:7C:CE Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 34D4 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa Signing time: Mon 22 Jul 2024 14:40:16 +0000 ROA not before: Mon 22 Jul 2024 14:40:16 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 133376 IP address blocks: 203.209.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jul 22 14:40:16 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=669e6f50-3b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a6:72:ce:0c:2d:44:3b:84:d8:ba:5e:ed:97: fe:c2:35:b8:a6:68:bb:6e:58:4e:90:91:31:ed:5d: 2a:28:fd:7b:a9:5c:1c:05:22:46:8c:c3:d5:69:eb: 50:80:50:f6:aa:67:c0:57:31:f9:1e:7d:7e:73:08: a3:37:88:f9:27:e6:4a:43:57:bb:1b:8c:1e:83:71: 73:8d:90:63:d7:90:2f:b5:ab:40:9f:b2:9d:a5:8c: f6:a9:40:ba:ed:a1:eb:56:7d:df:f9:e9:e4:e5:14: 57:60:51:e4:99:2f:d3:2a:ae:57:9e:21:78:ce:56: c6:f8:25:62:55:db:54:95:e6:b4:b0:45:5f:32:b3: f4:30:3b:81:cc:30:73:89:6e:69:6d:d4:9d:19:4e: f1:94:54:b6:34:3b:1e:6f:e8:9d:69:b8:ee:ad:0b: 1e:e6:01:b5:3a:f9:37:32:a6:7a:04:92:3c:7d:e6: 9c:1d:80:eb:45:5b:0e:8b:76:d1:2a:9b:4b:a5:20: 9c:44:e4:5a:9c:0c:19:e3:47:e6:2c:42:f4:7b:64: a0:f1:4c:23:4b:f4:4d:15:54:fd:df:dd:8b:6b:96: 0a:f9:4f:b3:07:af:da:50:cd:31:4d:1f:af:76:fb: ab:aa:1f:ea:70:7d:e1:3a:23:43:fc:e6:00:9f:1a: 2f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:61:30:22:96:1C:19:CC:21:D5:CF:2B:02:94:74:17:BB:4D:7C:CE X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.209.121.0/24 Signature Algorithm: sha256WithRSAEncryption 38:5d:06:1b:d7:0b:26:1d:4a:8c:2f:cb:e5:b8:1c:5f:0d:fc: fb:83:13:08:1b:e5:30:7c:79:9a:81:0d:b3:05:3e:f0:13:11: da:77:7c:a1:20:85:39:74:f5:54:c6:e3:16:42:9b:44:2a:fa: 0b:3e:8a:fd:6d:30:1c:d0:0f:a4:07:28:8f:42:c6:79:88:5d: bb:c9:24:94:b0:87:52:8f:50:a7:05:34:0a:96:21:df:ce:25: 3a:01:ce:2e:f2:f4:ee:25:a5:9b:8c:39:ad:8a:2f:09:ba:ac: 12:38:cb:21:c6:2e:28:f3:0b:bb:85:f1:ff:54:ad:f4:7b:24: 0a:57:ab:26:72:ed:12:04:6c:3c:30:00:95:0f:3a:67:6d:e9: 95:93:25:3a:0c:86:58:6d:02:93:07:a7:ec:d7:c2:29:17:59: e4:d7:a7:61:66:0d:6e:93:2a:99:78:34:fe:8c:74:4f:16:01: 63:cf:40:18:88:ce:61:f2:99:54:c4:79:70:85:05:ea:1a:4d: ac:e2:1e:4c:a0:a2:91:29:6b:63:04:a9:79:66:47:4d:8d:2f: ea:74:d7:a7:7e:db:f0:4c:10:39:17:7e:30:ee:30:7b:b1:b1: f9:30:69:ba:77:d4:32:22:3e:3c:12:e1:c0:b1:e9:f7:ba:55: 56:12:5c:35 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjQwNzIyMTQ0MDE2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllNmY1MC0zYjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36ZyzgwtRDuE2Lpe7Zf+wjW4pmi7blhOkJEx7V0qKP17qVwcBSJGjMPVaetQ gFD2qmfAVzH5Hn1+cwijN4j5J+ZKQ1e7G4weg3FzjZBj15AvtatAn7KdpYz2qUC6 7aHrVn3f+enk5RRXYFHkmS/TKq5XniF4zlbG+CViVdtUlea0sEVfMrP0MDuBzDBz iW5pbdSdGU7xlFS2NDseb+idabjurQse5gG1Ovk3MqZ6BJI8feacHYDrRVsOi3bR KptLpSCcRORanAwZ40fmLEL0e2Sg8UwjS/RNFVT9392La5YK+U+zB6/aUM0xTR+v dvurqh/qcH3hOiND/OYAnxovpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHthMCKW HBnMIdXPKwKUdBe7TXzOMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvM0VENzEwQzY4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADL0XkwDQYJKoZIhvcNAQELBQADggEBADhdBhvXCyYdSowv y+W4HF8N/PuDEwgb5TB8eZqBDbMFPvATEdp3fKEghTl09VTG4xZCm0Qq+gs+iv1t MBzQD6QHKI9CxnmIXbvJJJSwh1KPUKcFNAqWId/OJToBzi7y9O4lpZuMOa2KLwm6 rBI4yyHGLijzC7uF8f9UrfR7JApXqyZy7RIEbDwwAJUPOmdt6ZWTJToMhlhtApMH p+zXwikXWeTXp2FmDW6TKpl4NP6MdE8WAWPPQBiIzmHymVTEeXCFBeoaTaziHkyg opEpa2MEqXlmR02NL+p016d+2/BMEDkXfjDuMHuxsfkwabp31DIiPjwS4cCx6fe6 VVYSXDU= -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:37 2024 by rpki-client on console-fra.rpki-client.org