$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CD251666E84911EE9947A115C4F9AE02.roa File: CD251666E84911EE9947A115C4F9AE02.roa (raw, json) Hash identifier: jeCTjTVnbd3o/HVnFYIzUPoCLZ8YGFGFV8uSS/jh1zQ= Subject key identifier: EA:E2:F0:D1:21:B0:4E:67:DF:E5:A1:46:23:0D:15:12:92:B9:33:4C Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 0603 Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CD251666E84911EE9947A115C4F9AE02.roa Signing time: Fri 22 Mar 2024 12:43:37 +0000 ROA not before: Fri 22 Mar 2024 12:43:37 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 834 IP address blocks: 36.255.197.0/24 maxlen: 24 36.255.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1539 (0x603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Mar 22 12:43:37 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65fd7cf9-2765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:6f:b0:ee:77:cb:82:8a:42:a1:6d:21:f9: 2a:34:6a:35:fb:41:9f:dc:8c:3f:2c:e2:3d:b3:e4: fc:c0:41:27:24:65:1a:b8:6c:4b:8b:9c:85:93:67: 2e:fb:a3:f9:48:8b:cf:0b:ec:b5:29:c8:3c:88:ee: b0:5a:a8:9a:5c:9c:b6:c9:cb:c5:54:11:a3:b3:55: 60:a0:52:d0:92:70:c1:56:43:35:6e:48:7b:72:e0: e0:90:42:e7:57:48:7d:e7:28:06:df:98:46:83:82: dc:31:d5:45:25:6c:dd:17:b5:28:ca:b2:f6:e2:d2: f7:78:a0:cc:c3:b1:56:7b:8f:28:4a:0d:59:88:12: aa:bc:d6:08:14:55:ea:e7:e2:28:62:a7:a0:ed:a1: 91:d0:68:95:16:52:83:ed:24:75:e5:56:60:cf:2b: 18:87:45:72:c5:65:be:a6:49:e1:b6:23:4b:cd:0b: 99:f9:0f:02:cf:de:fa:86:ae:c4:cb:bc:b6:c5:b5: 7d:f2:f5:1f:c0:ea:f0:37:32:3b:c2:2d:f7:4e:b2: 6e:7f:18:73:fd:1c:1e:dc:80:35:05:f6:98:6e:8a: 64:c8:67:d6:28:22:c5:1f:ce:20:2f:56:97:96:cf: 4c:6d:22:6d:30:70:b6:b1:d1:49:07:3d:07:29:d7: 96:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E2:F0:D1:21:B0:4E:67:DF:E5:A1:46:23:0D:15:12:92:B9:33:4C X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/CD251666E84911EE9947A115C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.197.0-36.255.198.255 Signature Algorithm: sha256WithRSAEncryption 4f:81:33:fc:c3:f5:8f:3f:da:e4:d9:36:69:6d:80:35:c7:1b: de:94:8b:b5:64:22:73:e0:e6:e4:4a:00:03:b0:f5:e1:10:86: 02:de:11:02:fb:06:3e:57:8c:fa:e9:2e:5e:f1:71:c8:0c:43: eb:b4:8d:ea:09:b7:7e:39:55:d5:ec:26:0f:95:32:3e:59:28: 95:3a:9a:7b:a3:cc:4b:ce:7c:84:aa:17:d7:23:7c:e8:12:b6: 87:9b:45:f5:63:7f:74:3d:08:6e:7c:43:c3:59:30:39:50:4d: d8:a4:e4:38:e0:d7:77:fc:64:34:3d:6b:bd:1e:73:dc:a6:d6: fb:35:dc:ea:8d:79:fd:28:18:de:32:c9:1b:f5:46:ed:5d:b9: 7a:77:ed:58:11:32:38:b4:1c:eb:30:08:1e:19:a7:d9:95:50: 86:9b:af:65:83:d0:3a:e0:6c:f6:d1:c7:8a:cf:92:e4:16:de: 1e:28:20:47:e7:07:fe:ce:8c:d4:ec:e6:90:54:55:84:a4:7b: 8a:20:6b:f7:00:c4:d2:7d:a4:29:86:99:8d:24:78:d7:68:37: c5:40:7b:05:aa:8d:b2:53:02:39:da:e8:51:48:17:65:76:86: 5f:1e:50:a1:d1:8e:e4:15:67:86:eb:48:5c:79:58:f8:58:b5: b8:ca:5a:cc -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICBgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjQwMzIyMTI0MzM3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWZkN2NmOS0yNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2xvsO53y4KKQqFtIfkqNGo1+0Gf3Iw/LOI9s+T8wEEnJGUauGxLi5yFk2cu +6P5SIvPC+y1Kcg8iO6wWqiaXJy2ycvFVBGjs1VgoFLQknDBVkM1bkh7cuDgkELn V0h95ygG35hGg4LcMdVFJWzdF7UoyrL24tL3eKDMw7FWe48oSg1ZiBKqvNYIFFXq 5+IoYqeg7aGR0GiVFlKD7SR15VZgzysYh0VyxWW+pknhtiNLzQuZ+Q8Cz976hq7E y7y2xbV98vUfwOrwNzI7wi33TrJufxhz/Rwe3IA1BfaYbopkyGfWKCLFH84gL1aX ls9MbSJtMHC2sdFJBz0HKdeWrQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFOri8NEh sE5n3+WhRiMNFRKSuTNMMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvQ0QyNTE2NjZF ODQ5MTFFRTk5NDdBMTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEACT/xQMEACT/xjANBgkqhkiG9w0BAQsFAAOCAQEAT4Ez /MP1jz/a5Nk2aW2ANccb3pSLtWQic+Dm5EoAA7D14RCGAt4RAvsGPleM+ukuXvFx yAxD67SN6gm3fjlV1ewmD5UyPlkolTqae6PMS858hKoX1yN86BK2h5tF9WN/dD0I bnxDw1kwOVBN2KTkOODXd/xkND1rvR5z3KbW+zXc6o15/SgY3jLJG/VG7V25enft WBEyOLQc6zAIHhmn2ZVQhpuvZYPQOuBs9tHHis+S5BbeHiggR+cH/s6M1OzmkFRV hKR7iiBr9wDE0n2kKYaZjSR412g3xUB7BaqNslMCOdroUUgXZXaGXx5QodGO5BVn hutIXHlY+Fi1uMpazA== -----END CERTIFICATE-----Generated at Wed May 1 01:38:28 2024 by rpki-client on console-ams.rpki-client.org