$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BB117C7263E311EC8B936683C4F9AE02.roa File: BB117C7263E311EC8B936683C4F9AE02.roa (raw, json) Hash identifier: 0/EW64Mh63zMaVA14McIsT4SlAqq3SmbvYbfwCpi0z0= Subject key identifier: A6:27:0C:A4:05:40:E4:D7:DE:28:C2:4E:BD:7D:24:52:56:76:8A:DD Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 463C Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BB117C7263E311EC8B936683C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:35:37 +0000 ROA not before: Thu 05 Sep 2024 03:35:37 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 24066 IP address blocks: 117.122.124.0/22 maxlen: 24 203.119.36.0/22 maxlen: 24 2001:dc8:c000::/48 maxlen: 48 2001:dc8:c001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17980 (0x463c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:35:37 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92709-f478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:ce:67:6d:00:10:28:d3:16:32:f0:2d:f2: 07:42:24:63:cb:95:f0:e4:ed:2e:17:d7:65:5f:7c: eb:4f:11:0d:12:c7:2a:99:6e:d5:a9:77:48:b9:04: 21:45:14:5c:42:08:f1:33:65:85:85:fb:ce:ae:a6: 33:31:ff:91:0a:55:3f:73:c6:03:25:3d:94:b6:c3: ca:1c:21:97:ce:1e:39:20:73:96:09:e4:9b:7f:44: ed:5a:db:3c:2e:27:ef:13:20:44:75:0c:d3:14:28: 92:1f:dd:0f:e4:4d:e9:75:10:c9:f9:bd:50:ce:7b: 92:19:35:1c:78:ba:c1:76:6c:9c:dd:f8:35:28:54: 7f:ff:02:49:29:38:62:08:c8:7a:bb:ce:9c:84:fc: 51:7b:e7:77:0f:47:f5:5d:20:92:14:aa:69:a5:a2: f1:30:af:69:ce:0c:ed:66:51:eb:f1:07:40:33:27: 48:e1:07:8a:04:8c:a8:11:61:d6:cf:f7:48:e4:49: 10:7b:a8:a6:c6:e4:44:f6:2e:6a:de:6f:56:d5:b6: 95:2b:a9:86:2b:85:98:ee:a4:d5:53:71:8d:fc:12: d5:7e:ab:6e:76:d9:a0:00:fb:87:7e:2e:c8:aa:ef: a5:b4:92:fe:d0:73:1b:4c:97:44:da:49:64:f6:24: b7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:27:0C:A4:05:40:E4:D7:DE:28:C2:4E:BD:7D:24:52:56:76:8A:DD X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BB117C7263E311EC8B936683C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.122.124.0/22 203.119.36.0/22 IPv6: 2001:dc8:c000::/47 Signature Algorithm: sha256WithRSAEncryption bb:3b:44:f5:18:f0:24:30:74:fe:17:5c:2e:c0:f8:a3:22:60: fc:a6:0f:98:ba:a3:17:82:fb:49:54:1b:7a:a0:28:16:4d:9f: b8:bf:46:86:53:ed:14:82:ec:8f:6b:a8:3c:ac:a1:ff:a7:d1: e8:1c:b2:5b:6a:31:a0:ee:d5:c6:00:eb:ec:34:96:97:e5:f6: 75:15:ba:d0:39:70:3d:14:2d:23:5d:e3:cd:c8:40:4c:39:38: 68:dc:e9:0f:6e:e0:01:38:6e:fa:34:70:8c:e9:56:25:02:1e: b8:7f:0d:b7:37:e2:38:91:b1:61:bd:35:19:eb:21:33:48:37: 50:fc:e4:e0:dc:4b:8c:ec:7c:53:07:b8:ce:08:17:f7:d2:8d: d6:c3:ea:e8:0c:c2:ad:61:2a:7b:f1:54:20:d1:dd:95:a1:ee: e2:85:db:67:d7:91:bf:74:aa:6b:d6:65:05:3a:49:b8:6d:a1: 01:4c:70:25:0c:38:a0:d5:d9:73:a8:c2:e1:ee:32:9e:37:f0: ba:e0:07:dc:28:6c:50:d0:c4:4e:3e:24:c2:b7:c5:59:7f:02: 27:97:b1:0e:fa:20:d5:5d:1a:d0:05:4b:9b:a9:4e:78:0a:c7: de:9e:58:01:b4:c7:ba:de:94:3e:c4:57:18:3e:98:74:5f:00: 25:62:e0:69 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICRjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNTM3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjcwOS1mNDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvH7OZ20AECjTFjLwLfIHQiRjy5Xw5O0uF9dlX3zrTxENEscqmW7VqXdIuQQh RRRcQgjxM2WFhfvOrqYzMf+RClU/c8YDJT2UtsPKHCGXzh45IHOWCeSbf0TtWts8 LifvEyBEdQzTFCiSH90P5E3pdRDJ+b1QznuSGTUceLrBdmyc3fg1KFR//wJJKThi CMh6u86chPxRe+d3D0f1XSCSFKpppaLxMK9pzgztZlHr8QdAMydI4QeKBIyoEWHW z/dI5EkQe6imxuRE9i5q3m9W1baVK6mGK4WY7qTVU3GN/BLVfqtudtmgAPuHfi7I qu+ltJL+0HMbTJdE2klk9iS35wIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFKYnDKQF QOTX3ijCTr19JFJWdordMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkIxMTdDNzI2 M0UzMTFFQzhCOTM2NjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAJ1enwDBALLdyQwDwQCAAIwCQMHASABDcjAADANBgkqhkiG 9w0BAQsFAAOCAQEAuztE9RjwJDB0/hdcLsD4oyJg/KYPmLqjF4L7SVQbeqAoFk2f uL9GhlPtFILsj2uoPKyh/6fR6ByyW2oxoO7VxgDr7DSWl+X2dRW60DlwPRQtI13j zchATDk4aNzpD27gAThu+jRwjOlWJQIeuH8NtzfiOJGxYb01GeshM0g3UPzk4NxL jOx8Uwe4zggX99KN1sPq6AzCrWEqe/FUINHdlaHu4oXbZ9eRv3Sqa9ZlBTpJuG2h AUxwJQw4oNXZc6jC4e4ynjfwuuAH3ChsUNDETj4kwrfFWX8CJ5exDvog1V0a0AVL m6lOeArH3p5YAbTHut6UPsRXGD6YdF8AJWLgaQ== -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org