$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A1C2C588366311EEB376DC3AC4F9AE02.roa File: A1C2C588366311EEB376DC3AC4F9AE02.roa (raw, json) Hash identifier: eMfy7OINYllKPw/hYmLN+RLPDufOse3B1bVnfxelXA4= Subject key identifier: CD:24:28:90:53:DA:6A:DC:F4:09:48:7A:96:CA:91:05:35:C6:F5:DF Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: CD Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A1C2C588366311EEB376DC3AC4F9AE02.roa Signing time: Tue 25 Jun 2024 06:22:02 +0000 ROA not before: Tue 25 Jun 2024 06:22:02 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 140660 IP address blocks: 161.82.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Validity Not Before: Jun 25 06:22:02 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667a620a-0b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e6:28:57:69:21:af:50:56:dc:bb:25:c2:94: c0:fc:97:67:7b:25:fa:03:94:8a:b7:17:4a:49:43: 16:a0:9a:b4:cb:be:7e:9f:67:81:97:4d:c6:38:3e: 1d:1e:b0:a3:60:df:f1:02:60:10:d0:9f:47:aa:01: bd:a7:1b:09:de:3d:b8:15:0e:56:86:08:d4:fa:8a: fd:7c:b1:99:48:6c:c0:40:c2:50:0e:c6:e9:d0:cb: 48:59:a1:15:a7:1a:ee:4a:3e:0e:04:e0:69:02:26: 4e:c4:32:7c:8c:b9:71:eb:25:c1:d8:d2:42:0e:7c: 3d:f8:86:cb:af:b8:9b:05:7e:e0:82:3a:12:f2:79: 37:bb:58:70:72:e3:ab:4f:71:f0:89:64:f4:1d:e7: 5e:5d:b0:0b:a2:c2:5d:77:69:93:79:0f:4a:23:1d: 1b:39:ed:7c:52:78:e6:66:b1:bf:ad:b8:a8:5c:18: 2b:c8:20:6a:3c:da:1a:b4:24:8f:36:04:87:9a:c0: d6:46:be:0a:51:cd:a0:22:80:47:c6:a2:74:10:02: 7f:62:31:cc:d2:cd:aa:31:fb:9e:f3:e7:eb:6f:a5: 3f:cb:0a:4b:5a:b9:b2:20:ad:8a:ce:43:7d:9c:16: ff:20:c3:a5:8b:c0:d3:81:ad:2a:22:b6:c2:af:03: ea:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:24:28:90:53:DA:6A:DC:F4:09:48:7A:96:CA:91:05:35:C6:F5:DF X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A1C2C588366311EEB376DC3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.82.228.0/24 Signature Algorithm: sha256WithRSAEncryption 27:c1:98:4b:ee:30:da:29:da:57:b3:86:61:76:4e:31:14:ec: 93:e8:b7:0b:a8:88:34:c9:41:b2:2e:22:50:1f:8b:0c:40:4c: 99:57:11:3a:9f:1e:bf:a3:29:24:4d:0b:cb:9a:2e:ab:db:1d: 2c:d0:01:79:22:8c:30:23:e5:ba:fd:f9:b5:2a:0e:11:41:19: b2:23:14:82:2e:08:33:6d:7c:2f:67:b5:d9:20:da:0f:13:c8: af:a8:a9:56:34:8a:2c:8a:3e:ea:d6:86:7a:7b:75:9a:fb:75: 95:29:52:a9:a0:85:8b:93:83:51:5b:20:7f:c8:41:1f:41:33: 47:1f:c8:69:a0:2d:b6:0f:20:dd:b2:b4:ff:b4:5e:2e:2a:f6: 3e:2c:c7:59:44:d2:6b:22:15:9a:b5:6c:ee:e7:ea:3e:74:68: c3:7a:02:fe:fc:13:6e:fc:08:55:b6:06:98:2c:c0:d5:36:0d: 09:07:9d:bc:00:4f:cb:c5:be:bb:46:01:3e:ec:3d:c7:75:41: 2c:5b:e8:e1:87:01:3b:19:7b:67:63:d1:07:2b:9b:a8:25:3a: 50:ad:34:83:d8:ff:94:19:69:c9:b1:34:18:ea:f9:c0:6f:05: c7:f3:01:c9:6d:25:08:10:27:79:60:b4:f6:92:6e:f9:30:d3: c2:40:55:09 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjQwNjI1MDYyMjAyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdhNjIwYS0wYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eYoV2khr1BW3LslwpTA/JdneyX6A5SKtxdKSUMWoJq0y75+n2eBl03GOD4d HrCjYN/xAmAQ0J9HqgG9pxsJ3j24FQ5WhgjU+or9fLGZSGzAQMJQDsbp0MtIWaEV pxruSj4OBOBpAiZOxDJ8jLlx6yXB2NJCDnw9+IbLr7ibBX7ggjoS8nk3u1hwcuOr T3HwiWT0HedeXbALosJdd2mTeQ9KIx0bOe18UnjmZrG/rbioXBgryCBqPNoatCSP NgSHmsDWRr4KUc2gIoBHxqJ0EAJ/YjHM0s2qMfue8+frb6U/ywpLWrmyIK2KzkN9 nBb/IMOli8DTga0qIrbCrwPqUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM0kKJBT 2mrc9AlIepbKkQU1xvXfMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvQTFDMkM1ODgz NjYzMTFFRUIzNzZEQzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAChUuQwDQYJKoZIhvcNAQELBQADggEBACfBmEvuMNop2lez hmF2TjEU7JPotwuoiDTJQbIuIlAfiwxATJlXETqfHr+jKSRNC8uaLqvbHSzQAXki jDAj5br9+bUqDhFBGbIjFIIuCDNtfC9ntdkg2g8TyK+oqVY0iiyKPurWhnp7dZr7 dZUpUqmghYuTg1FbIH/IQR9BM0cfyGmgLbYPIN2ytP+0Xi4q9j4sx1lE0msiFZq1 bO7n6j50aMN6Av78E278CFW2BpgswNU2DQkHnbwAT8vFvrtGAT7sPcd1QSxb6OGH ATsZe2dj0Qcrm6glOlCtNIPY/5QZacmxNBjq+cBvBcfzAcltJQgQJ3lgtPaSbvkw 08JAVQk= -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:01 2024 by rpki-client on console-fra.rpki-client.org