$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/673DC29606B011EFA665703AC4F9AE02.roa File: 673DC29606B011EFA665703AC4F9AE02.roa (raw, json) Hash identifier: eFzIE3XgQGBNH4Vf3/zyPlgIukjHrzr3A+HYin6uwTA= Subject key identifier: 42:BC:D3:65:49:B1:B2:CC:45:09:02:89:DA:2C:11:CB:9F:B2:42:96 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 3419 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/673DC29606B011EFA665703AC4F9AE02.roa Signing time: Fri 04 Oct 2024 14:50:47 +0000 ROA not before: Fri 04 Oct 2024 14:50:47 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 17559 IP address blocks: 43.224.60.0/22 maxlen: 22 103.80.40.0/22 maxlen: 22 202.68.169.0/24 maxlen: 24 2406:7300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13337 (0x3419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Oct 4 14:50:47 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=670000c7-4485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:48:e3:86:dc:30:53:d4:84:29:58:32:25: e0:c2:a1:1b:c6:e5:d0:0f:41:92:89:3b:90:ca:2d: 22:ae:ba:6c:93:1d:75:8f:17:5e:65:bd:aa:74:15: 88:21:b9:31:0c:70:7a:a1:34:fa:51:97:fa:99:67: 23:b1:f2:70:cb:14:e5:43:d9:d2:2a:6c:c7:d4:34: 6d:bc:2a:e8:3a:7d:2c:f3:11:7f:3a:36:2c:10:d6: 22:00:10:e4:25:50:1e:03:ec:c0:d0:b5:56:ea:3c: ab:47:3a:ae:77:dc:83:f2:0b:9a:71:35:9d:30:dd: f6:74:70:4e:5f:40:7a:86:d6:87:80:67:c5:64:bc: 85:dc:b6:04:19:b7:97:53:61:c2:02:2a:a0:9f:26: 11:e7:61:79:dd:25:51:f1:c2:53:5b:be:dc:28:98: 5e:43:98:aa:21:49:ab:f6:52:7c:71:25:31:1f:5e: 7f:26:b6:6d:45:36:03:31:2d:82:41:8c:ae:f8:53: c2:39:42:81:ff:2d:ab:1a:cb:3a:1d:f6:33:b5:92: 8a:27:65:d8:7f:99:4e:cf:fa:d3:11:68:d5:75:1d: eb:15:50:86:f8:c7:90:19:e8:8b:d5:90:4f:d0:b4: c4:6c:06:5a:44:90:a1:44:42:ae:d2:57:c5:84:9b: c7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BC:D3:65:49:B1:B2:CC:45:09:02:89:DA:2C:11:CB:9F:B2:42:96 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/673DC29606B011EFA665703AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.60.0/22 103.80.40.0/22 202.68.169.0/24 IPv6: 2406:7300::/32 Signature Algorithm: sha256WithRSAEncryption ba:d8:3e:ec:5f:c7:86:79:eb:0e:a4:b6:8b:b9:e8:3e:54:4a: 7d:06:ae:19:fc:31:43:ec:54:75:93:23:91:87:66:2e:49:59: b1:19:4a:b7:a0:13:a2:53:76:0a:b7:ce:cd:24:5c:ce:8f:11: 15:2f:37:0d:0e:8b:08:bc:13:39:01:0e:89:a6:dc:40:6c:47: ce:ff:95:73:18:32:4f:90:1e:d3:68:8d:63:4f:95:28:c1:8c: 31:ea:dc:5c:63:93:ac:99:13:3a:54:94:05:35:34:63:6e:df: 59:1b:0d:08:11:e7:67:2e:ef:98:5b:a8:9e:7d:f4:f8:eb:0c: 21:86:12:97:96:af:87:8b:a4:d2:e4:d4:e0:eb:84:00:fd:ec: f7:62:4f:96:98:0d:b4:c2:8d:98:10:39:f9:83:f3:1d:0c:c9: f5:d9:ae:07:e6:24:59:5c:71:36:be:e1:6c:46:34:3e:22:80: 9b:25:3e:84:62:9d:46:5a:97:63:b1:17:2d:e0:63:2a:45:99: 8e:4d:98:4e:6d:91:e1:01:b9:aa:cb:61:51:a3:c6:83:26:5f: f1:a0:e1:85:ca:e2:4c:58:b2:0d:74:4b:cd:9c:6f:e1:7a:51: 6c:a5:4f:50:aa:c2:89:c6:c0:d7:bc:0f:bb:c6:49:73:42:bd: c7:24:3a:5b -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICNBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjQxMDA0MTQ1MDQ3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzAwMDBjNy00NDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAws9I44bcMFPUhClYMiXgwqEbxuXQD0GSiTuQyi0irrpskx11jxdeZb2qdBWI IbkxDHB6oTT6UZf6mWcjsfJwyxTlQ9nSKmzH1DRtvCroOn0s8xF/OjYsENYiABDk JVAeA+zA0LVW6jyrRzqud9yD8guacTWdMN32dHBOX0B6htaHgGfFZLyF3LYEGbeX U2HCAiqgnyYR52F53SVR8cJTW77cKJheQ5iqIUmr9lJ8cSUxH15/JrZtRTYDMS2C QYyu+FPCOUKB/y2rGss6HfYztZKKJ2XYf5lOz/rTEWjVdR3rFVCG+MeQGeiL1ZBP 0LTEbAZaRJChREKu0lfFhJvHJwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFEK802VJ sbLMRQkCidosEcufskKWMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ4Q0IvMzI4RUQxNTQxRDhCMTFFMjkwNDlCQ0U1MDhCMDJDRDIvNjczREMyOTYw NkIwMTFFRkE2NjU3MDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr4DwDBAJnUCgDBADKRKkwDQQCAAIwBwMFACQGcwAwDQYJ KoZIhvcNAQELBQADggEBALrYPuxfx4Z56w6ktou56D5USn0Grhn8MUPsVHWTI5GH Zi5JWbEZSregE6JTdgq3zs0kXM6PERUvNw0Oiwi8EzkBDomm3EBsR87/lXMYMk+Q HtNojWNPlSjBjDHq3Fxjk6yZEzpUlAU1NGNu31kbDQgR52cu75hbqJ599PjrDCGG EpeWr4eLpNLk1ODrhAD97PdiT5aYDbTCjZgQOfmD8x0MyfXZrgfmJFlccTa+4WxG ND4igJslPoRinUZal2OxFy3gYypFmY5NmE5tkeEBuarLYVGjxoMmX/Gg4YXK4kxY sg10S82cb+F6UWylT1CqwonGwNe8D7vGSXNCvcckOls= -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:02 2024 by rpki-client on console-ams.rpki-client.org