$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/BA8A5FBEA61911EFAD319873C4F9AE02.roa File: BA8A5FBEA61911EFAD319873C4F9AE02.roa (raw, json) Hash identifier: Pu/II2vmsMHnGt86Bz07kblV70UDlQ3qizc1ThMazys= Subject key identifier: F6:2B:30:23:22:EA:6B:6C:63:AD:44:F5:6B:AF:C9:62:B6:DA:34:2A Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Certificate serial: 90 Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/BA8A5FBEA61911EFAD319873C4F9AE02.roa Signing time: Tue 19 Nov 2024 01:58:11 +0000 ROA not before: Tue 19 Nov 2024 01:58:11 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 16509 IP address blocks: 203.3.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Validity Not Before: Nov 19 01:58:11 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=673bf0b2-1e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9f:0a:31:68:af:a4:7f:ba:d2:11:c4:8e:02: 9b:ec:6c:9a:24:51:9e:67:d8:2b:5f:13:e5:b7:7f: 9e:50:76:3c:98:ce:25:7b:28:47:b2:39:21:73:13: b0:16:ef:c2:2d:a1:f3:27:36:7a:57:c6:43:3f:fc: 5a:95:1d:58:d8:c5:4c:c6:cf:44:83:87:a8:fd:2b: dd:af:c4:86:ce:16:a2:c2:1e:c5:de:8c:e6:e3:0d: cb:25:78:1f:8d:c8:53:cc:64:0b:9a:1e:ad:ce:3c: 2e:82:c6:98:79:d1:fa:73:b2:e0:88:dc:8e:2c:f5: a3:38:33:5a:32:57:4b:0d:de:df:90:a7:1c:88:f7: a4:2d:84:ac:12:a3:bb:09:07:5e:c4:a5:3b:5e:9e: df:b5:4c:8e:8f:1c:ca:82:a1:4e:e7:3e:5b:7a:35: 78:22:2f:a2:03:61:7d:92:a6:94:66:80:a5:9b:c6: 08:f8:93:4f:4d:bd:98:e6:fa:9b:34:23:07:72:05: cf:ca:d2:11:a3:a0:f5:0b:3d:d2:98:29:21:95:e5: cd:b8:45:a3:1a:1b:0f:80:b4:98:ae:aa:7b:79:80: 68:d5:04:88:17:51:79:70:d5:2d:af:23:01:66:35: 22:58:72:e2:be:3a:d3:67:85:34:5e:bc:24:1a:1d: 50:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2B:30:23:22:EA:6B:6C:63:AD:44:F5:6B:AF:C9:62:B6:DA:34:2A X509v3 Authority Key Identifier: keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/BA8A5FBEA61911EFAD319873C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.3.236.0/24 Signature Algorithm: sha256WithRSAEncryption 05:3a:9a:c4:2d:35:b3:79:ef:22:04:85:69:e6:ea:66:a9:17: 24:ec:bc:ad:67:e0:cd:a3:29:0c:e6:f4:e1:ca:d7:66:11:2c: 88:59:0a:6f:43:ca:9d:c6:dd:35:5b:cf:83:b4:05:46:27:3e: 04:a7:a2:3e:e6:26:e1:4b:c5:82:05:ce:26:d5:12:68:c0:bd: 70:ac:78:1f:9a:00:d4:69:0e:11:0c:6e:5c:6b:c4:88:40:71: c5:15:22:ed:fa:0c:41:2c:d5:8a:8e:8c:24:5b:7f:93:bd:f8: 29:8e:a1:ac:ca:15:6f:6e:5d:05:0c:c5:02:44:64:0c:fa:4f: c2:9d:a6:89:cb:08:e7:67:63:4b:6e:54:4f:ef:bb:28:50:9d: 99:18:05:18:44:94:b5:f2:2e:be:f5:5a:11:2a:08:0e:26:55: af:67:a7:ff:73:34:77:d3:da:2d:f9:a7:d1:23:63:3a:5a:52: 3f:73:a3:3d:68:28:60:e8:99:18:50:0e:71:61:a7:23:9c:d9: b3:31:a6:11:0d:69:b0:b9:77:9e:b3:27:08:17:b3:a1:8e:99: d1:df:ff:0d:3f:41:f4:23:fd:7e:59:94:ec:7e:18:eb:02:fe: 1e:3e:89:6b:54:58:53:24:f6:f7:55:ae:e3:ec:92:7c:94:b9: c0:f3:2c:b9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKDc4MzlBMUZDMDE3NDAyNEJDQkE4NEQwMTJEM0VDNENB NDY3OUFDNzEwHhcNMjQxMTE5MDE1ODExWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NzNiZjBiMi0xZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAop8KMWivpH+60hHEjgKb7GyaJFGeZ9grXxPlt3+eUHY8mM4leyhHsjkhcxOw Fu/CLaHzJzZ6V8ZDP/xalR1Y2MVMxs9Eg4eo/Svdr8SGzhaiwh7F3ozm4w3LJXgf jchTzGQLmh6tzjwugsaYedH6c7LgiNyOLPWjODNaMldLDd7fkKcciPekLYSsEqO7 CQdexKU7Xp7ftUyOjxzKgqFO5z5bejV4Ii+iA2F9kqaUZoClm8YI+JNPTb2Y5vqb NCMHcgXPytIRo6D1Cz3SmCkhleXNuEWjGhsPgLSYrqp7eYBo1QSIF1F5cNUtryMB ZjUiWHLivjrTZ4U0XrwkGh1QnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPYrMCMi 6mtsY61E9WuvyWK22jQqMB8GA1UdIwQYMBaAFHg5ofwBdAJLy6hNAS0+xMpGeaxx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS84ODJGMjMyMEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFrdkxxRTBCTFQ3RXlrWjVy SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU1QzkvODgyRjIzMjBDOUVCMTFFRThCODU3QjBDQzRGOUFFMDIvQkE4QTVGQkVB NjE5MTFFRkFEMzE5ODczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLA+wwDQYJKoZIhvcNAQELBQADggEBAAU6msQtNbN57yIE hWnm6mapFyTsvK1n4M2jKQzm9OHK12YRLIhZCm9Dyp3G3TVbz4O0BUYnPgSnoj7m JuFLxYIFzibVEmjAvXCseB+aANRpDhEMblxrxIhAccUVIu36DEEs1YqOjCRbf5O9 +CmOoazKFW9uXQUMxQJEZAz6T8KdponLCOdnY0tuVE/vuyhQnZkYBRhElLXyLr71 WhEqCA4mVa9np/9zNHfT2i35p9EjYzpaUj9zoz1oKGDomRhQDnFhpyOc2bMxphEN abC5d56zJwgXs6GOmdHf/w0/QfQj/X5ZlOx+GOsC/h4+iWtUWFMk9vdVruPsknyU ucDzLLk= -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:14 2024 by rpki-client on console-ams.rpki-client.org