$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D6672BEE0BD111ECB2E9C868C4F9AE02.roa File: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (raw, json) Hash identifier: Svh+zqulap5hyqgsKeuAwzqAl3vJyRUhZqeALz03n0w= Subject key identifier: 49:B6:F8:83:9B:05:4C:B1:48:6A:93:A9:DA:49:EE:68:79:B4:75:21 Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Certificate serial: 35DF Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D6672BEE0BD111ECB2E9C868C4F9AE02.roa Signing time: Thu 04 Apr 2024 15:21:00 +0000 ROA not before: Thu 04 Apr 2024 15:21:00 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 140499 IP address blocks: 119.152.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13791 (0x35df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Validity Not Before: Apr 4 15:21:00 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=660ec55c-1625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:51:32:b9:10:0d:48:24:e6:8c:95:24:73:e5: de:8e:7c:65:1c:54:47:91:78:9a:a3:27:86:7f:d1: 07:6c:fd:3a:36:57:95:36:09:11:99:0a:25:02:11: be:b6:44:12:cd:b9:04:df:ba:d0:95:a4:97:7e:d8: 92:90:ec:b8:84:a5:af:b5:db:df:c0:ae:47:87:31: 64:e6:54:c8:10:67:3c:74:9a:c4:07:88:22:e9:75: cd:c0:fc:ae:43:92:2a:6b:b5:fb:39:3a:02:22:5a: 49:1f:ce:9e:ff:6a:0f:8c:3c:04:c4:8e:ea:a5:92: 6f:15:de:63:99:b4:0d:3f:06:78:2b:bc:62:59:c2: 77:97:6b:21:4f:ce:d9:55:f1:35:e9:24:70:77:b7: 87:e6:97:53:40:75:4f:49:6b:74:df:ba:be:fe:dc: 23:83:ae:0e:21:b1:3c:34:22:3b:6d:92:94:a0:55: b6:4d:4c:34:e4:33:d4:5e:7e:5d:ba:f4:e1:4c:23: 6f:c7:63:d5:28:79:d8:cf:35:2f:c8:84:e7:fa:b8: 3e:8d:46:22:e9:f9:bb:5c:5f:e4:9a:8a:b1:01:56: af:1b:f4:39:a9:a4:a5:87:a3:61:d0:1c:25:bb:8c: d9:4d:8b:92:bf:86:74:69:64:95:dd:2a:a6:c2:05: 1b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B6:F8:83:9B:05:4C:B1:48:6A:93:A9:DA:49:EE:68:79:B4:75:21 X509v3 Authority Key Identifier: keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D6672BEE0BD111ECB2E9C868C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.152.126.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:43:bf:86:4f:8a:96:2a:3b:81:83:de:02:ec:82:39:db:67: 11:ac:f4:fe:3b:17:67:2e:7c:e8:2c:08:8d:47:0b:86:b1:2e: 9c:12:86:a3:c6:2c:83:a2:ef:af:8e:54:da:90:70:90:c4:e5: 12:5e:b4:3f:4b:42:32:09:44:24:71:6b:65:76:cd:70:b8:ec: f2:51:4d:fc:f5:fc:d4:7e:82:ab:08:02:d0:2c:81:f2:82:ad: 3a:a3:b0:1e:76:c7:08:84:bd:39:61:f1:35:4c:c9:4a:bf:63: ab:c4:87:9a:46:80:3d:56:db:01:8e:2c:5b:04:d4:83:9c:9a: 47:0c:13:a1:f7:d0:3c:55:42:ec:75:99:ae:9f:26:25:83:89: 92:58:6e:c8:d8:da:4a:65:01:44:fc:bc:52:3c:14:80:43:38: 1b:12:ef:3d:5c:d3:9e:fd:26:e7:fc:47:43:87:1c:5a:9f:4e: ef:1a:53:d2:a5:b4:5c:85:8b:3a:b1:c1:17:ad:9a:29:9a:72: e0:b2:52:34:f8:a9:86:0b:b9:ae:97:fb:a0:e2:7f:20:ba:c2: b6:00:5d:2e:d1:a9:c1:34:49:3a:f8:5e:76:99:60:c7:03:a2: 0a:b7:c4:87:50:e7:97:9f:3d:8d:9f:60:1b:7d:e9:6c:18:97: 0c:36:c6:72 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4MzIxMTAvBgNVBAUTKDlFRDkwNTUxMDdDNzBGODVCQjkxQThEQTAyNzBCNUNB NzYwQUVCNTQwHhcNMjQwNDA0MTUyMTAwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjBlYzU1Yy0xNjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1EyuRANSCTmjJUkc+XejnxlHFRHkXiaoyeGf9EHbP06NleVNgkRmQolAhG+ tkQSzbkE37rQlaSXftiSkOy4hKWvtdvfwK5HhzFk5lTIEGc8dJrEB4gi6XXNwPyu Q5Iqa7X7OToCIlpJH86e/2oPjDwExI7qpZJvFd5jmbQNPwZ4K7xiWcJ3l2shT87Z VfE16SRwd7eH5pdTQHVPSWt037q+/twjg64OIbE8NCI7bZKUoFW2TUw05DPUXn5d uvThTCNvx2PVKHnYzzUvyITn+rg+jUYi6fm7XF/kmoqxAVavG/Q5qaSlh6Nh0Bwl u4zZTYuSv4Z0aWSV3SqmwgUbQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEm2+IOb BUyxSGqTqdpJ7mh5tHUhMB8GA1UdIwQYMBaAFJ7ZBVEHxw+Fu5Go2gJwtcp2CutU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDgzMi85REFGNzgwRTFE OTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0VzdrYWphQW5DMXluWUs2 MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL250a0ZVUWZIRDRXN2thamFBbkMxeW5ZSzYxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA4MzIvOURBRjc4MEUxRDk0MTFFMjk5MDFGM0Y4MDhCMDJDRDIvRDY2NzJCRUUw QkQxMTFFQ0IyRTlDODY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB3mH4wDQYJKoZIhvcNAQELBQADggEBAExDv4ZPipYqO4GD 3gLsgjnbZxGs9P47F2cufOgsCI1HC4axLpwShqPGLIOi76+OVNqQcJDE5RJetD9L QjIJRCRxa2V2zXC47PJRTfz1/NR+gqsIAtAsgfKCrTqjsB52xwiEvTlh8TVMyUq/ Y6vEh5pGgD1W2wGOLFsE1IOcmkcME6H30DxVQux1ma6fJiWDiZJYbsjY2kplAUT8 vFI8FIBDOBsS7z1c0579Juf8R0OHHFqfTu8aU9KltFyFizqxwRetmimacuCyUjT4 qYYLua6X+6DifyC6wrYAXS7RqcE0STr4XnaZYMcDogq3xIdQ55efPY2fYBt96WwY lww2xnI= -----END CERTIFICATE-----Generated at Sat May 4 15:55:02 2024 by rpki-client on console-ams.rpki-client.org