$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/B7FDD0B031E711EF9FBC7372C4F9AE02.roa File: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (raw, json) Hash identifier: vRTnjavVXE5BoWmix9amg9lgOEyq/KuOKiPhcwexbdg= Subject key identifier: F9:F3:C3:B7:4C:7B:55:90:82:4F:04:46:C1:BC:E4:94:57:E0:53:EC Certificate issuer: /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Certificate serial: 02 Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/B7FDD0B031E711EF9FBC7372C4F9AE02.roa Signing time: Mon 24 Jun 2024 05:07:57 +0000 ROA not before: Mon 24 Jun 2024 05:07:57 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 152908 IP address blocks: 202.0.67.0/24 maxlen: 24 202.0.68.0/24 maxlen: 24 203.18.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Validity Not Before: Jun 24 05:07:57 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6678ff2c-1981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0b:b8:b7:27:40:ce:da:a9:15:28:fc:d6:cd: 68:20:67:7b:5d:30:fa:7c:49:c7:5f:e4:ef:28:30: f2:01:07:d9:36:48:75:e2:c2:44:c8:27:6d:c4:81: d7:94:95:69:8a:96:2c:e2:e2:a1:c2:c1:1c:ea:65: ba:d5:64:17:24:46:9d:cb:33:8f:10:51:78:09:df: d3:a3:04:7c:fa:6f:7f:26:5f:64:57:2d:a7:1c:81: 29:7e:4c:04:bd:0b:9d:a5:a7:a4:a4:fd:e0:f3:18: 3f:08:4d:7a:5f:56:92:2c:4f:5a:6c:78:85:7b:da: f1:3c:b5:53:00:ce:02:31:c9:ce:21:bb:d2:f2:17: f1:75:7f:93:e6:9e:57:4f:de:a4:b3:b4:a2:df:76: 55:78:1a:b4:ca:88:0d:00:fd:4d:89:2f:f6:84:68: 48:24:36:ef:3f:52:6c:ee:7c:3b:81:4f:b5:e6:e8: e1:09:87:b3:1b:c3:17:38:97:8c:62:a5:cf:0e:3b: ff:0a:5d:3e:28:b5:d0:37:15:26:dd:48:07:a9:7a: c0:50:6a:4f:af:70:95:9e:c4:5e:95:a1:74:e3:b7: b9:9d:78:46:4a:b8:3e:74:b9:f6:c7:d9:73:68:65: 30:8d:fa:f8:82:4d:de:51:b9:12:3f:30:72:00:25: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F3:C3:B7:4C:7B:55:90:82:4F:04:46:C1:BC:E4:94:57:E0:53:EC X509v3 Authority Key Identifier: keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/B7FDD0B031E711EF9FBC7372C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.0.67.0-202.0.68.255 203.18.231.0/24 Signature Algorithm: sha256WithRSAEncryption d1:72:3d:2b:63:02:43:4f:e5:11:ba:db:9a:ef:5b:79:5f:da: b6:89:d7:10:a6:c9:c1:90:83:cb:16:1c:1d:05:17:d7:c4:e1: 54:2b:93:03:82:1a:9f:e2:72:77:57:92:09:14:0a:88:6e:e0: 86:05:9e:cc:c4:97:36:ce:f0:77:9c:64:88:14:9e:31:78:3f: cf:93:fd:1a:b3:fa:4c:03:62:f5:cd:a4:3d:68:69:b7:a0:83: 10:7d:a0:75:e4:07:88:fa:99:29:ea:3a:db:82:bf:d8:23:ca: 98:2f:db:3c:90:9d:84:c7:e9:69:6e:b7:5c:9b:5d:59:ec:ec: 3f:4f:f8:87:a4:9e:a2:3a:d3:f1:dc:e9:7f:39:be:f6:21:14: a2:8d:4c:b7:49:32:bd:40:b3:e0:b7:60:d2:ff:a4:8e:19:a3: 21:e8:b6:3a:79:7c:52:2e:e5:17:08:b6:78:da:37:fa:e7:06: cf:69:37:7a:57:87:8a:85:ca:f1:e5:a7:73:df:36:aa:22:8a: 28:49:91:a4:bb:f9:4f:b2:cf:40:15:61:18:97:b2:b4:2d:4b: d4:8f:2a:b6:59:95:59:b7:7a:29:9b:b1:4a:6f:ef:53:ee:1b: ce:c9:84:99:89:63:ce:a0:91:15:94:c8:f1:a8:08:4a:b2:56: 06:a9:e5:eb -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDQ3MjExMC8GA1UEBRMoMTg5RjJERUM1QTcwM0Y3RDZDRkQ1Rjk2QUFCNUEyRThB OEREOTQwNjAeFw0yNDA2MjQwNTA3NTdaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NzhmZjJjLTE5ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdC7i3J0DO2qkVKPzWzWggZ3tdMPp8Scdf5O8oMPIBB9k2SHXiwkTIJ23EgdeU lWmKlizi4qHCwRzqZbrVZBckRp3LM48QUXgJ39OjBHz6b38mX2RXLaccgSl+TAS9 C52lp6Sk/eDzGD8ITXpfVpIsT1pseIV72vE8tVMAzgIxyc4hu9LyF/F1f5PmnldP 3qSztKLfdlV4GrTKiA0A/U2JL/aEaEgkNu8/UmzufDuBT7Xm6OEJh7Mbwxc4l4xi pc8OO/8KXT4otdA3FSbdSAepesBQak+vcJWexF6VoXTjt7mdeEZKuD50ufbH2XNo ZTCN+viCTd5RuRI/MHIAJTDtAgMBAAGjggKjMIICnzAdBgNVHQ4EFgQU+fPDt0x7 VZCCTwRGwbzklFfgU+wwHwYDVR0jBBgwFoAUGJ8t7FpwP31s/V+WqrWi6KjdlAYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdENDcyLzEzQThGQjQ0MzFF NjExRUZBRTlFRTQ2MEM0RjlBRTAyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxB WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0o4dDdGcHdQMzFzX1YtV3FyV2k2S2pkbEFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDQ3Mi8xM0E4RkI0NDMxRTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9CN0ZERDBCMDMx RTcxMUVGOUZCQzczNzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAtBggrBgEFBQcBBwEB/wQe MBwwGgQCAAEwFDAMAwQAygBDAwQAygBEAwQAyxLnMA0GCSqGSIb3DQEBCwUAA4IB AQDRcj0rYwJDT+URutua71t5X9q2idcQpsnBkIPLFhwdBRfXxOFUK5MDghqf4nJ3 V5IJFAqIbuCGBZ7MxJc2zvB3nGSIFJ4xeD/Pk/0as/pMA2L1zaQ9aGm3oIMQfaB1 5AeI+pkp6jrbgr/YI8qYL9s8kJ2Ex+lpbrdcm11Z7Ow/T/iHpJ6iOtPx3Ol/Ob72 IRSijUy3STK9QLPgt2DS/6SOGaMh6LY6eXxSLuUXCLZ42jf65wbPaTd6V4eKhcrx 5adz3zaqIoooSZGku/lPss9AFWEYl7K0LUvUjyq2WZVZt3opm7FKb+9T7hvOyYSZ iWPOoJEVlMjxqAhKslYGqeXr -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:14 2024 by rpki-client on console-ams.rpki-client.org