$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/439638A88DB811E98ACC9F7EC4F9AE02.roa File: 439638A88DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: tJj1Fysd0xDWoVakE+OSdSVBLD/VndaJXIUaElpuDlU= Subject key identifier: E9:69:08:22:8F:AC:E9:06:98:40:E3:33:41:84:D6:6E:4C:2B:57:73 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 34E1 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/439638A88DB811E98ACC9F7EC4F9AE02.roa Signing time: Mon 22 Jul 2024 14:40:29 +0000 ROA not before: Mon 22 Jul 2024 14:40:29 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 23683 IP address blocks: 203.155.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13537 (0x34e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA Validity Not Before: Jul 22 14:40:29 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=669e6f5c-98d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:13:ef:cb:43:d4:a4:40:c6:5e:f9:93:f2:86: 87:d2:7f:e8:25:f3:c3:5e:85:85:a3:95:ae:6c:0d: 47:f4:1f:4d:ba:ed:a9:7c:d9:67:93:70:b3:44:ff: f2:3d:d7:2c:b4:6e:2c:15:ca:e5:54:71:23:5f:bd: 0c:75:b4:51:b4:45:08:2a:88:18:80:2b:74:3c:0d: 58:7e:d1:06:ff:82:f1:84:c3:e6:e7:45:84:02:78: 50:2a:3c:9d:39:28:1e:a2:23:71:6e:dd:ef:da:5c: 65:04:cf:51:50:25:d9:bd:2c:71:8a:e3:1f:c3:44: 40:e8:48:a6:95:e6:39:7a:4e:a6:6d:06:51:64:d8: 7e:11:93:b7:70:95:ca:12:44:13:d3:69:b6:b9:39: a6:42:61:c5:df:23:fc:95:15:80:59:ac:a1:f9:09: e6:e4:62:66:c9:b0:78:10:ad:1d:8b:ca:10:15:e1: cd:c9:b2:21:d6:87:d0:0f:08:17:0f:b7:94:60:f6: 8d:92:9d:50:68:f4:44:4b:20:cd:6a:bb:d0:fa:d1: 27:8a:2e:15:c3:72:c5:87:36:f5:c3:4a:61:1e:d4: 13:45:d2:59:f9:69:88:94:c7:49:4f:71:14:04:2e: c3:e0:56:0f:f9:bb:87:5b:03:d1:8b:2a:bc:e7:a5: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:69:08:22:8F:AC:E9:06:98:40:E3:33:41:84:D6:6E:4C:2B:57:73 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/439638A88DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.155.179.0/24 Signature Algorithm: sha256WithRSAEncryption 16:37:fa:ac:ca:e3:59:5a:83:a0:25:c3:bd:c9:f9:b4:ba:88: f2:20:d1:b3:3f:11:99:0e:80:5a:64:be:d4:37:ae:6a:37:f6: 24:d4:c8:26:2b:c6:78:31:bb:65:78:b2:22:0d:ac:55:81:29: d4:3c:12:a4:66:22:bc:3e:f8:3f:89:a7:91:17:b6:04:00:7b: 12:56:48:c0:e9:9e:5d:24:bb:b7:3c:fd:b6:81:c5:1b:28:33: 11:78:d5:06:8f:bc:a3:da:8c:00:ed:c8:4c:83:17:00:a7:3c: 9b:81:fc:e4:21:0f:42:c9:aa:5a:44:88:c0:a1:35:9d:9a:e2: 2e:6a:04:f5:27:28:4a:51:55:ea:9f:a6:c6:39:a6:22:e1:ec: 98:f4:2d:f8:1f:c5:5d:9f:84:cf:ca:86:1f:8e:d2:29:24:75: e9:a2:b2:e9:d1:40:7a:88:83:6e:a1:8b:b3:5d:7b:dd:e8:71: d2:91:3b:2a:90:6b:59:e2:40:a2:ed:5d:0f:0b:d2:fd:9c:e2: ff:b1:3f:3b:26:d5:6d:73:2b:d5:9b:91:0b:0d:4f:75:1e:c2: 5e:1e:40:bc:7e:a2:01:30:c5:f1:36:ff:10:f1:f6:dc:ed:08: 0f:7c:71:a1:af:93:89:57:5a:4f:dc:17:46:42:6c:6d:f0:7e: eb:f5:54:ad -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjQwNzIyMTQ0MDI5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllNmY1Yy05OGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BPvy0PUpEDGXvmT8oaH0n/oJfPDXoWFo5WubA1H9B9Nuu2pfNlnk3CzRP/y PdcstG4sFcrlVHEjX70MdbRRtEUIKogYgCt0PA1YftEG/4LxhMPm50WEAnhQKjyd OSgeoiNxbt3v2lxlBM9RUCXZvSxxiuMfw0RA6EimleY5ek6mbQZRZNh+EZO3cJXK EkQT02m2uTmmQmHF3yP8lRWAWayh+Qnm5GJmybB4EK0di8oQFeHNybIh1ofQDwgX D7eUYPaNkp1QaPRESyDNarvQ+tEnii4Vw3LFhzb1w0phHtQTRdJZ+WmIlMdJT3EU BC7D4FYP+buHWwPRiyq856W/LwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOlpCCKP rOkGmEDjM0GE1m5MK1dzMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNDM5NjM4QTg4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLm7MwDQYJKoZIhvcNAQELBQADggEBABY3+qzK41lag6Al w73J+bS6iPIg0bM/EZkOgFpkvtQ3rmo39iTUyCYrxngxu2V4siINrFWBKdQ8EqRm Irw++D+Jp5EXtgQAexJWSMDpnl0ku7c8/baBxRsoMxF41QaPvKPajADtyEyDFwCn PJuB/OQhD0LJqlpEiMChNZ2a4i5qBPUnKEpRVeqfpsY5piLh7Jj0LfgfxV2fhM/K hh+O0ikkdemisunRQHqIg26hi7Nde93ocdKROyqQa1niQKLtXQ8L0v2c4v+xPzsm 1W1zK9WbkQsNT3Uewl4eQLx+ogEwxfE2/xDx9tztCA98caGvk4lXWk/cF0ZCbG3w fuv1VK0= -----END CERTIFICATE-----Generated at Sun Feb 16 22:23:09 2025 by rpki-client