$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa File: B364F656C0AD11EEACCA627AC4F9AE02.roa (raw, json) Hash identifier: wADd79J5phMFz2zI3JBs2QdPJS+vVjZaqYNnTd8Gn4c= Subject key identifier: 75:DF:FB:96:17:57:1A:A7:CE:00:C0:5A:89:D3:04:05:B8:B1:F1:1A Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Certificate serial: 0A00 Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa Signing time: Thu 14 Nov 2024 19:59:05 +0000 ROA not before: Thu 14 Nov 2024 19:59:05 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 64079 IP address blocks: 61.29.244.0/22 maxlen: 24 61.29.254.0/23 maxlen: 23 103.211.192.0/24 maxlen: 24 103.211.193.0/24 maxlen: 24 146.196.78.0/23 maxlen: 24 2400:9380:9265::/48 maxlen: 48 2400:9380:f000::/40 maxlen: 40 2400:9380:f100::/40 maxlen: 40 2400:9380:f200::/40 maxlen: 40 2400:9380:f300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2560 (0xa00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Validity Not Before: Nov 14 19:59:05 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67365689-ab6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:42:9d:c7:af:d7:9c:6e:94:f0:77:fc:e4: 36:04:05:33:3f:cd:f4:9f:fd:79:71:c8:7d:57:b0: d1:f7:30:fe:12:c0:96:ee:a7:14:f4:13:ef:fb:8b: 40:39:85:9a:4f:4b:cf:e2:c3:3d:6d:42:22:7e:f1: 44:f9:34:14:ae:c7:af:6d:43:e3:dc:53:51:aa:fb: ad:b8:d7:d9:cc:f9:2a:eb:81:a5:76:99:be:a1:7a: 01:7e:3f:eb:9e:b2:42:80:fe:f8:e0:97:b1:b9:bb: a7:0a:96:ff:57:67:5c:ad:82:fe:55:96:a6:8d:ed: 09:8b:67:3a:ee:b4:82:57:f9:aa:98:ed:61:ea:c4: c7:df:b4:ae:7e:ed:0f:3a:8e:f4:20:1b:61:e5:7a: e6:e8:14:20:4f:4b:46:1e:22:17:0f:46:c3:fb:93: 74:ab:95:5c:6c:87:c1:a3:99:2e:a5:b1:c7:0a:bf: a5:3b:38:c2:b8:c5:af:49:2f:30:49:83:28:cb:55: 59:3e:2a:15:92:58:0b:e5:a9:e4:8c:ce:b8:1b:17: 71:48:6f:0e:b8:65:15:b7:d1:f0:ba:e8:3c:ec:13: a5:bb:7b:fd:a8:66:1d:d0:b6:7c:34:49:50:24:44: 91:d3:e5:44:74:eb:04:72:46:c2:67:7c:21:e4:77: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DF:FB:96:17:57:1A:A7:CE:00:C0:5A:89:D3:04:05:B8:B1:F1:1A X509v3 Authority Key Identifier: keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.29.244.0/22 61.29.254.0/23 103.211.192.0/23 146.196.78.0/23 IPv6: 2400:9380:9265::/48 2400:9380:f000::/38 Signature Algorithm: sha256WithRSAEncryption 5a:c3:34:ce:38:08:d7:25:eb:97:b8:c7:fc:fb:f2:c9:97:fb: 46:4d:b5:87:9a:40:59:c6:bd:b2:21:e0:3d:3f:a8:bd:7c:3d: b1:c8:a5:ba:01:43:79:4b:6d:66:df:8b:9e:31:28:ee:54:db: 4e:fe:14:4c:35:44:72:61:90:57:95:00:f9:cf:6c:da:8c:52: 5b:21:cc:66:42:47:10:fc:09:36:52:c7:81:5c:ee:cd:08:bc: 31:46:7a:3e:a2:3e:3b:41:2d:d6:87:54:af:d1:7c:cd:4d:47: 09:ae:d3:a5:c5:c5:5d:9a:35:09:e4:b4:6a:b2:ec:bf:c6:40: 25:1e:85:07:7f:ad:f9:d1:07:88:fe:1a:11:3f:29:10:55:12: e5:65:7e:2d:f5:2f:ea:46:3a:25:4f:50:71:90:50:1f:45:11: 14:ae:77:7f:14:1a:48:d5:2b:bf:6f:78:0a:7a:34:b4:86:b6: 97:bf:c3:23:41:67:fd:2a:c4:e1:7a:fd:5c:e9:a8:c7:d2:3f: fb:1d:7d:b6:9a:d8:17:ba:24:e6:72:78:0f:49:4d:2d:47:8f: 60:a2:0d:4e:a1:bb:ff:da:50:dd:a0:f0:d7:18:14:cd:7b:c9: b3:1d:c8:8b:f0:a8:b6:c8:84:a3:15:28:35:70:a7:b7:c6:69: 5b:26:b2:74 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICCgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEIxRTg0RkFDRkFDQkMwQjc4Mzg1NjFFRjIxRTI4RjJG QUNGNURGRUMwHhcNMjQxMTE0MTk1OTA1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM2NTY4OS1hYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8RCncev15xulPB3/OQ2BAUzP830n/15cch9V7DR9zD+EsCW7qcU9BPv+4tA OYWaT0vP4sM9bUIifvFE+TQUrsevbUPj3FNRqvutuNfZzPkq64Gldpm+oXoBfj/r nrJCgP744JexubunCpb/V2dcrYL+VZamje0Ji2c67rSCV/mqmO1h6sTH37Sufu0P Oo70IBth5Xrm6BQgT0tGHiIXD0bD+5N0q5VcbIfBo5kupbHHCr+lOzjCuMWvSS8w SYMoy1VZPioVklgL5ankjM64GxdxSG8OuGUVt9Hwuug87BOlu3v9qGYd0LZ8NElQ JESR0+VEdOsEckbCZ3wh5HdjrQIDAQABo4ICwDCCArwwHQYDVR0OBBYEFHXf+5YX VxqnzgDAWonTBAW4sfEaMB8GA1UdIwQYMBaAFLHoT6z6y8C3g4Vh7yHijy+s9d/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8zNjg3MkE1RTgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdMZURoV0h2SWVLUEw2ejEz LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlaFByUHJMd0xlRGhXSHZJZUtQTDZ6MTMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU3NkQvMzY4NzJBNUU4MkNEMTFFQTg5NUM3QjVDQzRGOUFFMDIvQjM2NEY2NTZD MEFEMTFFRUFDQ0E2MjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E OzA5MB4EAgABMBgDBAI9HfQDBAE9Hf4DBAFn08ADBAGSxE4wFwQCAAIwEQMHACQA k4CSZQMGAiQAk4DwMA0GCSqGSIb3DQEBCwUAA4IBAQBawzTOOAjXJeuXuMf8+/LJ l/tGTbWHmkBZxr2yIeA9P6i9fD2xyKW6AUN5S21m34ueMSjuVNtO/hRMNURyYZBX lQD5z2zajFJbIcxmQkcQ/Ak2UseBXO7NCLwxRno+oj47QS3Wh1Sv0XzNTUcJrtOl xcVdmjUJ5LRqsuy/xkAlHoUHf6350QeI/hoRPykQVRLlZX4t9S/qRjolT1BxkFAf RREUrnd/FBpI1Su/b3gKejS0hraXv8MjQWf9KsThev1c6ajH0j/7HX22mtgXuiTm cngPSU0tR49gog1Oobv/2lDdoPDXGBTNe8mzHciL8Ki2yISjFSg1cKe3xmlbJrJ0 -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:04 2024 by rpki-client on console-ams.rpki-client.org