$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa File: 23331070F9FB11EB8CFF5E7DC4F9AE02.roa (raw, json) Hash identifier: F+k1pgKAm7HpOhKtY5/4J+QSbulAvGQUTiDf7IqkyBg= Subject key identifier: 36:80:1F:90:55:82:CE:AF:FD:3F:A6:89:87:F6:C7:1F:A8:E3:8B:2D Certificate issuer: /CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D Certificate serial: 0501 Authority key identifier: 1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa Signing time: Fri 13 Sep 2024 02:13:50 +0000 ROA not before: Fri 13 Sep 2024 02:13:50 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 14340 IP address blocks: 101.53.160.0/19 maxlen: 24 182.50.76.0/22 maxlen: 24 202.129.242.0/23 maxlen: 24 2401:ce80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D Validity Not Before: Sep 13 02:13:50 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e39fde-1767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b4:e6:9b:25:b7:2a:a1:51:11:8d:29:34:97: 3d:96:e7:27:92:30:ca:81:3e:30:4c:80:cb:39:47: 5f:1b:48:3b:5f:90:b6:19:ce:47:a8:f6:1a:0f:58: db:84:e8:4e:a1:90:48:f8:d3:2b:ba:bf:4e:dd:26: ee:71:71:17:9d:92:3b:af:37:ca:26:86:3f:5b:85: d5:c3:f9:a7:be:c3:c3:cc:b7:25:c5:18:4a:1c:86: 8e:50:07:84:5a:63:25:23:f3:60:42:0e:a7:aa:30: f7:a9:6e:e8:93:f4:11:ca:a2:d3:ca:61:bb:d5:26: ed:8d:8b:5f:ba:43:cf:cc:80:6c:25:6e:f0:d6:bf: 09:7f:65:75:5a:69:22:05:bf:30:61:d5:04:e7:57: e2:e0:64:01:93:64:59:58:df:47:ec:08:70:42:ce: 06:da:23:a2:e9:b5:ef:0a:ee:31:d5:4d:07:9c:cc: c3:24:83:50:de:0e:f3:ea:de:3f:4b:47:9b:e8:a9: 3c:2d:fc:59:ad:bc:34:96:f3:98:55:7e:4d:7f:f8: 27:3a:53:17:48:1d:4f:de:23:80:ff:54:95:b9:d7: 78:99:54:fe:56:3e:58:b1:10:f7:81:4b:f5:b1:ea: 36:8c:f4:8f:56:80:97:e1:a9:0a:7a:af:3c:3e:f2: f2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:80:1F:90:55:82:CE:AF:FD:3F:A6:89:87:F6:C7:1F:A8:E3:8B:2D X509v3 Authority Key Identifier: keyid:1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.53.160.0/19 182.50.76.0/22 202.129.242.0/23 IPv6: 2401:ce80::/32 Signature Algorithm: sha256WithRSAEncryption 46:5e:83:fc:43:b8:04:fd:b8:61:45:ae:b7:8b:d0:51:19:8c: 73:60:31:5c:05:da:62:4a:2c:c7:34:5e:65:c8:16:55:60:38: 1e:de:15:a5:78:b0:e5:b9:16:e8:20:b2:da:aa:e5:58:75:60: 72:ac:31:9f:b8:f9:a3:4f:b2:f8:20:51:2e:57:db:6a:26:0c: 43:ef:2e:1f:3b:bf:aa:77:c9:45:73:46:bb:8b:96:fe:19:50: f9:b4:e7:74:bc:90:1e:f5:48:02:bd:a9:ec:cb:33:18:93:9b: a0:fe:3d:58:a8:eb:93:91:33:be:fe:70:87:87:d2:09:df:26: 28:07:0f:ff:c3:6c:9c:2f:e1:1c:c6:57:f9:71:9a:0a:fb:46: 59:52:85:9b:26:c8:b6:91:20:b3:91:10:f6:9e:06:6b:f3:ba: 0a:a2:a3:5d:5b:35:e7:d7:cb:85:79:ab:88:aa:6a:91:92:5e: 4a:13:22:53:8c:e4:aa:c7:b3:45:e3:0d:ab:6c:74:94:e9:04: a5:fd:b8:e4:db:32:bb:7d:f3:2d:d9:0f:08:6c:10:2f:9c:a4: 44:a0:02:3a:86:18:22:19:4b:44:71:7d:69:6d:3c:1f:b7:b0: be:c5:8f:05:30:35:fa:fb:78:06:54:39:b3:c8:5a:f9:95:cf: ec:5d:cb:10 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDFFREQ3OUQ1NjU4MTYzNUY3RjMyOTdDNkQyNzBDNzM3 NDk3ODlFM0QwHhcNMjQwOTEzMDIxMzUwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUzOWZkZS0xNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7TmmyW3KqFREY0pNJc9lucnkjDKgT4wTIDLOUdfG0g7X5C2Gc5HqPYaD1jb hOhOoZBI+NMrur9O3SbucXEXnZI7rzfKJoY/W4XVw/mnvsPDzLclxRhKHIaOUAeE WmMlI/NgQg6nqjD3qW7ok/QRyqLTymG71SbtjYtfukPPzIBsJW7w1r8Jf2V1Wmki Bb8wYdUE51fi4GQBk2RZWN9H7AhwQs4G2iOi6bXvCu4x1U0HnMzDJINQ3g7z6t4/ S0eb6Kk8LfxZrbw0lvOYVX5Nf/gnOlMXSB1P3iOA/1SVudd4mVT+Vj5YsRD3gUv1 seo2jPSPVoCX4akKeq88PvLykQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDaAH5BV gs6v/T+miYf2xx+o44stMB8GA1UdIwQYMBaAFB7dedVlgWNffzKXxtJwxzdJeJ49 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS81NkU5QTdBNERG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9IdDE1MVdXQlkxOV9NcGZHMG5ESE4wbDRu ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0MTUxV1dCWTE5X01wZkcwbkRITjBsNG5qMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVENkUvNTZFOUE3QTRERkYxMTFFQjg5NEYzMDY3QzRGOUFFMDIvMjMzMzEwNzBG OUZCMTFFQjhDRkY1RTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAVlNaADBAK2MkwDBAHKgfIwDQQCAAIwBwMFACQBzoAwDQYJ KoZIhvcNAQELBQADggEBAEZeg/xDuAT9uGFFrreL0FEZjHNgMVwF2mJKLMc0XmXI FlVgOB7eFaV4sOW5Fuggstqq5Vh1YHKsMZ+4+aNPsvggUS5X22omDEPvLh87v6p3 yUVzRruLlv4ZUPm053S8kB71SAK9qezLMxiTm6D+PVio65ORM77+cIeH0gnfJigH D//DbJwv4RzGV/lxmgr7RllShZsmyLaRILOREPaeBmvzugqio11bNefXy4V5q4iq apGSXkoTIlOM5KrHs0XjDatsdJTpBKX9uOTbMrt98y3ZDwhsEC+cpESgAjqGGCIZ S0RxfWltPB+3sL7FjwUwNfr7eAZUObPIWvmVz+xdyxA= -----END CERTIFICATE-----Generated at Sun Nov 24 23:58:49 2024 by rpki-client on console-fra.rpki-client.org