$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3CE9A810799D11EF9547461CC4F9AE02.roa File: 3CE9A810799D11EF9547461CC4F9AE02.roa (raw, json) Hash identifier: LfnrEoRSy98kq5+Het7TGQh6Md9GIYKtrywQQ+4Cqlg= Subject key identifier: 0A:43:6C:EF:8A:0B:30:35:85:26:49:90:38:AE:9B:F9:E3:A9:1C:2E Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Certificate serial: 03 Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3CE9A810799D11EF9547461CC4F9AE02.roa Signing time: Mon 23 Sep 2024 11:16:11 +0000 ROA not before: Mon 23 Sep 2024 11:16:11 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 16509 IP address blocks: 202.50.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Oct 2024 06:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Validity Not Before: Sep 23 11:16:11 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66f14dfb-bdef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:26:18:ae:7b:f8:da:87:8c:98:86:da:04:2f: a1:7b:06:95:04:f3:0b:d2:39:2e:96:08:c3:49:86: 1a:0e:1e:6a:c9:f7:48:9e:79:ae:e3:df:31:c1:c9: 10:54:b7:8e:16:c1:17:c8:1a:c3:a0:6a:e4:f7:c1: 80:b9:74:ed:a8:79:ad:32:80:8f:2c:6d:3e:db:ce: 91:21:4b:31:75:b8:21:63:ad:ec:d1:d0:e4:e3:c2: 53:1e:8d:51:dc:fc:7e:10:bf:72:e0:84:4a:39:57: cf:c2:32:39:72:69:25:b8:88:b0:7d:a1:c3:8d:88: 51:e0:cc:00:8d:c0:20:c9:72:00:b5:7d:d1:6e:16: 5d:b2:11:ba:51:fa:84:2f:61:b3:e9:54:c8:cf:45: f1:ba:22:c4:c5:ae:a6:01:19:45:c5:e1:99:2a:63: 5d:fd:1f:2c:be:4a:79:c5:ed:0f:7b:74:82:51:10: d2:ea:d8:68:db:f1:19:a9:20:8c:ff:2c:ad:75:ca: dd:ab:ba:b8:dc:e9:b4:e0:8a:f4:b1:de:32:86:d5: 85:25:55:50:b2:65:71:27:f0:d5:75:f6:e6:12:d0: 57:97:65:49:f9:1b:3d:5f:23:21:03:c1:b7:c3:8d: 16:82:09:70:8b:66:08:2f:8a:f7:89:48:92:ce:ce: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:43:6C:EF:8A:0B:30:35:85:26:49:90:38:AE:9B:F9:E3:A9:1C:2E X509v3 Authority Key Identifier: keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3CE9A810799D11EF9547461CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.50.102.0/24 Signature Algorithm: sha256WithRSAEncryption 49:43:43:1f:f2:e8:65:2f:fd:99:8e:6b:5f:7e:87:5c:f1:45: cc:68:f0:d6:fe:0d:6b:c0:fd:70:f6:f5:8d:59:ea:91:b6:46: c2:f3:e5:f4:93:1e:c2:b8:0f:6e:e3:d8:2e:b6:fb:a5:9c:8f: 3b:7e:ae:1a:c7:0d:b2:97:28:f1:15:c8:ab:2e:ee:11:19:9b: 5c:05:e0:4e:ea:5f:9f:70:7d:8d:30:e2:a1:00:d6:64:33:dd: d3:b1:f4:79:de:d4:fa:9d:42:b6:4a:dc:88:e8:b4:af:26:3e: 84:f1:e8:3d:01:3a:13:0c:99:fd:56:ba:b6:54:57:18:41:d0: 9c:e0:0f:65:8f:9e:9d:79:24:99:76:2e:75:3f:93:f0:29:cc: be:19:c1:6b:69:00:7b:da:03:0b:fa:50:96:74:c8:8b:a5:2f: 26:53:7b:ef:4f:69:ae:2a:2a:8e:07:ab:43:59:b6:7d:89:59: 99:be:c8:49:ab:5d:3c:e8:f4:95:f8:17:70:5f:47:ad:70:a1: e0:4e:9c:9b:62:5e:a2:d4:df:02:fd:3b:86:ee:28:01:5b:03: a1:a5:f9:e8:43:cc:a0:85:7e:b6:4b:fe:2e:52:c9:4c:16:85: 81:06:18:f6:77:f6:23:96:d7:8c:89:0a:10:ba:d2:3b:d6:11: aa:99:ef:98 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Rjg1NDExMC8GA1UEBRMoRTExQTQ3MkY4NDlGQTNENjYzQ0E4N0NBNjYzM0VDRTdE OEQwMDc2MjAeFw0yNDA5MjMxMTE2MTFaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZjE0ZGZiLWJkZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMJhiue/jah4yYhtoEL6F7BpUE8wvSOS6WCMNJhhoOHmrJ90ieea7j3zHByRBU t44WwRfIGsOgauT3wYC5dO2oea0ygI8sbT7bzpEhSzF1uCFjrezR0OTjwlMejVHc /H4Qv3LghEo5V8/CMjlyaSW4iLB9ocONiFHgzACNwCDJcgC1fdFuFl2yEbpR+oQv YbPpVMjPRfG6IsTFrqYBGUXF4ZkqY139Hyy+SnnF7Q97dIJRENLq2Gjb8RmpIIz/ LK11yt2rurjc6bTgivSx3jKG1YUlVVCyZXEn8NV19uYS0FeXZUn5Gz1fIyEDwbfD jRaCCXCLZggviveJSJLOztj9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUCkNs74oL MDWFJkmQOK6b+eOpHC4wHwYDVR0jBBgwFoAU4RpHL4Sfo9ZjyofKZjPs59jQB2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGODU0L0E4OTY0NjYwNzk5 QjExRUY4MTFGOTAxOUM0RjlBRTAyLzRScEhMNFNmbzlaanlvZktaalBzNTlqUUIy SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFJwSEw0U2ZvOVpqeW9mS1pqUHM1OWpRQjJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg1NC9BODk2NDY2MDc5OUIxMUVGODExRjkwMTlDNEY5QUUwMi8zQ0U5QTgxMDc5 OUQxMUVGOTU0NzQ2MUNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMoyZjANBgkqhkiG9w0BAQsFAAOCAQEASUNDH/LoZS/9mY5r X36HXPFFzGjw1v4Na8D9cPb1jVnqkbZGwvPl9JMewrgPbuPYLrb7pZyPO36uGscN spco8RXIqy7uERmbXAXgTupfn3B9jTDioQDWZDPd07H0ed7U+p1CtkrciOi0ryY+ hPHoPQE6EwyZ/Va6tlRXGEHQnOAPZY+enXkkmXYudT+T8CnMvhnBa2kAe9oDC/pQ lnTIi6UvJlN7709prioqjgerQ1m2fYlZmb7ISatdPOj0lfgXcF9HrXCh4E6cm2Je otTfAv07hu4oAVsDoaX56EPMoIV+tkv+LlLJTBaFgQYY9nf2I5bXjIkKELrSO9YR qpnvmA== -----END CERTIFICATE-----Generated at Mon Oct 21 07:54:14 2024 by rpki-client on console-ams.rpki-client.org