$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/4793567206A211EEBDA4D34BC4F9AE02.roa File: 4793567206A211EEBDA4D34BC4F9AE02.roa (raw, json) Hash identifier: 0y1umhcXrzwIQDnq4Cka+2E+MR7Gy+fTGy43hos8bno= Subject key identifier: B4:16:92:FD:D8:6E:29:B3:C2:3B:EE:5B:D2:A5:63:EB:A7:AB:57:D3 Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 04AF Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/4793567206A211EEBDA4D34BC4F9AE02.roa Signing time: Fri 26 Apr 2024 21:10:02 +0000 ROA not before: Fri 26 Apr 2024 21:10:02 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 3258 IP address blocks: 85.113.70.0/24 maxlen: 24 91.199.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1199 (0x4af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: Apr 26 21:10:02 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=662c182a-b349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:3c:85:e5:bd:d6:8b:b1:93:59:1d:7f:33: e8:84:bf:fb:9f:fd:dd:09:be:ab:7f:10:9c:95:f5: 0f:38:43:7e:55:bf:22:ea:6c:5e:1d:58:71:8e:f9: a2:87:56:c5:0a:79:e7:6b:a3:d3:98:cf:bf:b8:ba: d9:94:36:a4:14:e0:f7:23:e2:86:ed:27:2e:e5:b9: e5:67:9a:57:bc:fe:d7:1c:62:02:de:76:35:cf:67: 0b:44:a8:9b:2d:fa:7b:78:be:c4:3f:3f:87:c7:29: a3:3c:35:ee:51:c7:c3:d0:1b:13:91:b9:aa:e9:ee: d6:2c:5d:19:8d:c8:83:3e:64:f6:dc:de:ac:42:bb: c1:05:50:f3:1c:61:e3:e2:1e:aa:2f:1c:72:8d:d8: 1d:8f:a1:53:07:dd:77:1e:c7:c6:4b:96:fe:61:39: ab:93:a7:90:3a:b4:86:3d:c9:c2:9f:5c:d5:40:e0: 5b:a4:5b:d7:55:1c:2d:4a:0c:71:6c:3e:e7:ad:2a: b9:3c:5d:9e:82:d8:89:c5:17:ab:7e:94:df:3b:33: 1d:88:73:d2:f4:00:68:52:66:3a:be:f8:d9:44:74: a0:b7:f7:a7:b6:a6:05:46:17:73:67:cd:64:35:d1: cc:fe:8d:6c:68:50:5c:29:42:21:01:7b:91:a3:50: 8c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:16:92:FD:D8:6E:29:B3:C2:3B:EE:5B:D2:A5:63:EB:A7:AB:57:D3 X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/4793567206A211EEBDA4D34BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 85.113.70.0/24 91.199.209.0/24 Signature Algorithm: sha256WithRSAEncryption 51:b6:23:ec:f3:c3:b1:85:e3:34:46:f0:f2:19:0e:ed:78:0f: 81:5f:3b:24:74:15:f0:15:23:6f:29:ae:ea:a7:c2:86:ba:f6: 89:8d:56:46:02:86:fd:3c:cc:b1:c1:e4:49:ac:cc:f1:b7:83: 70:c4:fa:1c:4d:c2:68:dc:cf:43:e6:ff:f7:09:95:62:19:da: c0:c7:01:75:2c:7d:16:b5:17:0e:e0:d8:85:10:f9:56:97:30: 17:b9:ca:78:a5:40:2c:30:40:ff:cd:38:7d:10:54:4e:b7:f7: 30:8c:c8:90:85:94:ce:20:c3:e9:8b:2d:3d:58:62:64:ce:92: 7b:89:d1:30:c6:09:eb:f1:24:25:2f:fa:37:48:0c:dc:ea:bf: 19:e9:fc:21:83:c4:44:a9:9e:d3:a8:cc:6b:70:41:00:b0:75: 1c:38:c3:2b:ce:07:06:f8:c0:37:cb:c3:8b:f6:5a:e1:89:30: b9:36:24:c5:48:4f:61:2a:1d:c0:ea:4e:1f:74:27:c3:0f:96: bb:e2:56:f3:e0:c4:08:79:09:5e:ae:7d:76:9f:3f:6a:45:b4: 37:b8:93:42:43:f7:09:9b:da:a3:cb:b6:84:97:9b:2f:35:33: 87:f5:f4:e6:fc:b4:2a:21:86:8f:20:b4:36:86:f9:60:e3:0b: 53:4f:01:23 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjQwNDI2MjExMDAyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjJjMTgyYS1iMzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1A8heW91ouxk1kdfzPohL/7n/3dCb6rfxCclfUPOEN+Vb8i6mxeHVhxjvmi h1bFCnnna6PTmM+/uLrZlDakFOD3I+KG7Scu5bnlZ5pXvP7XHGIC3nY1z2cLRKib Lfp7eL7EPz+HxymjPDXuUcfD0BsTkbmq6e7WLF0ZjciDPmT23N6sQrvBBVDzHGHj 4h6qLxxyjdgdj6FTB913HsfGS5b+YTmrk6eQOrSGPcnCn1zVQOBbpFvXVRwtSgxx bD7nrSq5PF2egtiJxRerfpTfOzMdiHPS9ABoUmY6vvjZRHSgt/entqYFRhdzZ81k NdHM/o1saFBcKUIhAXuRo1CMXwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLQWkv3Y bimzwjvuW9KlY+unq1fTMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UwQTgvMEM0NzQ5MEFFQUIzMTFFQjk4MTFBNDY1QzRGOUFFMDIvNDc5MzU2NzIw NkEyMTFFRUJEQTREMzRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABVcUYDBABbx9EwDQYJKoZIhvcNAQELBQADggEBAFG2I+zz w7GF4zRG8PIZDu14D4FfOyR0FfAVI28pruqnwoa69omNVkYChv08zLHB5EmszPG3 g3DE+hxNwmjcz0Pm//cJlWIZ2sDHAXUsfRa1Fw7g2IUQ+VaXMBe5ynilQCwwQP/N OH0QVE639zCMyJCFlM4gw+mLLT1YYmTOknuJ0TDGCevxJCUv+jdIDNzqvxnp/CGD xESpntOozGtwQQCwdRw4wyvOBwb4wDfLw4v2WuGJMLk2JMVIT2EqHcDqTh90J8MP lrviVvPgxAh5CV6ufXafP2pFtDe4k0JD9wmb2qPLtoSXmy81M4f19Ob8tCohho8g tDaG+WDjC1NPASM= -----END CERTIFICATE-----Generated at Fri May 31 22:13:06 2024 by rpki-client on console-fra.rpki-client.org