$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa File: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (raw, json) Hash identifier: QpvoelvPEpatl7vZX1ju+e5IS1LSZA6xD22XxjXPiwQ= Subject key identifier: 5A:12:2F:C0:E8:32:B0:83:E0:07:DA:AE:CB:9A:1B:DF:47:4B:22:BD Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 01C0 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa Signing time: Tue 01 Oct 2024 03:16:33 +0000 ROA not before: Tue 01 Oct 2024 03:16:33 +0000 ROA not after: Thu 30 Jan 2025 00:00:00 +0000 asID: 65510 IP address blocks: 140.168.64.0/19 maxlen: 19 140.168.78.0/24 maxlen: 24 140.168.79.0/24 maxlen: 24 140.168.87.0/24 maxlen: 24 140.168.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Oct 1 03:16:33 2024 GMT Not After : Jan 30 00:00:00 2025 GMT Subject: CN=66fb6991-1720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:8e:55:98:63:16:12:b6:19:a8:0d:26:23: da:17:1b:88:33:3a:61:b0:13:38:52:9a:a2:82:02: f1:f1:09:bf:59:2f:7f:75:91:69:0d:57:fb:71:c6: 74:a0:93:a1:72:27:ab:c2:c7:67:89:3f:5b:fd:59: e5:6e:9d:c7:f3:23:1f:ae:05:26:bd:b4:8e:2b:a7: d1:77:f9:27:91:23:d5:75:87:7b:0d:21:02:0e:dd: 11:36:3f:20:a3:32:6f:6e:74:7b:6d:49:9b:01:86: 4d:6b:30:ae:2f:07:97:03:80:a7:81:df:95:85:2f: f7:42:bd:70:5c:f5:a4:73:d4:4f:df:af:c5:37:da: 09:6b:df:c7:6b:99:7f:0c:0a:5b:ca:12:7a:54:14: 87:a1:1a:fb:3b:63:6c:d0:17:42:f7:f2:9b:81:b2: ec:00:29:51:68:7c:da:01:7c:af:a6:27:11:6b:2c: 65:90:b3:82:a9:dd:62:0f:6d:42:74:4d:14:21:3a: 55:55:46:87:b8:25:35:3f:71:2a:6e:fb:c3:1f:53: 15:a6:86:fa:4e:33:7f:6a:8e:12:14:49:9e:91:7e: ee:26:bd:dc:6c:ab:b0:77:89:87:f2:4d:53:61:e7: f4:41:9e:aa:c1:55:ae:b3:bb:7a:5a:9a:e8:6b:84: 55:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:12:2F:C0:E8:32:B0:83:E0:07:DA:AE:CB:9A:1B:DF:47:4B:22:BD X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.168.64.0/18 Signature Algorithm: sha256WithRSAEncryption 2a:2c:27:c2:c8:01:92:75:9f:43:5c:fa:51:c1:34:91:7f:5c: 29:7c:0c:b8:f0:ed:d2:04:6b:2c:93:52:09:58:30:7c:00:85: d7:8a:27:99:44:52:51:89:5c:b6:45:0d:ce:e0:df:de:f0:d6: 0b:31:84:44:b0:5b:bd:0c:c2:0d:59:9b:16:0b:e7:a2:9d:c6: 11:7a:9d:e9:f4:82:39:fb:b1:b4:49:d8:93:62:e8:f1:55:eb: cc:9a:8b:41:4e:ac:83:07:0f:f5:03:4f:98:7c:7f:c4:a2:bd: 0d:56:a2:55:2b:14:8b:33:1c:ac:18:47:28:69:e8:b3:05:8c: 1a:c7:17:a6:ee:41:52:e3:64:06:77:c2:26:07:02:9d:53:3b: d9:3a:d2:f3:58:dd:e7:5d:e1:df:f3:70:12:8e:a9:71:79:43: c0:06:1d:7c:e9:dc:3c:3e:4a:cb:b2:d5:48:91:f1:12:b5:c4: 18:4f:ca:71:b6:43:88:25:d5:f2:9b:79:49:cd:69:07:65:a7: 30:a2:10:20:b2:99:35:f2:1c:7b:98:ea:28:a6:5f:40:96:9f: 32:d9:2a:76:3c:80:22:e0:2d:86:25:d2:1d:0f:fb:8b:55:7b: fd:94:86:9e:42:83:c0:ff:0b:14:ad:6f:4f:71:d9:c2:22:03: 69:15:6b:c8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjQxMDAxMDMxNjMzWhcNMjUwMTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZiNjk5MS0xNzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLGOVZhjFhK2GagNJiPaFxuIMzphsBM4UpqiggLx8Qm/WS9/dZFpDVf7ccZ0 oJOhcierwsdniT9b/Vnlbp3H8yMfrgUmvbSOK6fRd/knkSPVdYd7DSECDt0RNj8g ozJvbnR7bUmbAYZNazCuLweXA4Cngd+VhS/3Qr1wXPWkc9RP36/FN9oJa9/Ha5l/ DApbyhJ6VBSHoRr7O2Ns0BdC9/KbgbLsAClRaHzaAXyvpicRayxlkLOCqd1iD21C dE0UITpVVUaHuCU1P3EqbvvDH1MVpob6TjN/ao4SFEmekX7uJr3cbKuwd4mH8k1T Yef0QZ6qwVWus7t6Wproa4RVAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFoSL8Do MrCD4AfarsuaG99HSyK9MB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMkZEOEE0NkU1 QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAaMqEAwDQYJKoZIhvcNAQELBQADggEBACosJ8LIAZJ1n0Nc +lHBNJF/XCl8DLjw7dIEayyTUglYMHwAhdeKJ5lEUlGJXLZFDc7g397w1gsxhESw W70Mwg1ZmxYL56KdxhF6nen0gjn7sbRJ2JNi6PFV68yai0FOrIMHD/UDT5h8f8Si vQ1WolUrFIszHKwYRyhp6LMFjBrHF6buQVLjZAZ3wiYHAp1TO9k60vNY3edd4d/z cBKOqXF5Q8AGHXzp3Dw+Ssuy1UiR8RK1xBhPynG2Q4gl1fKbeUnNaQdlpzCiECCy mTXyHHuY6iimX0CWnzLZKnY8gCLgLYYl0h0P+4tVe/2Uhp5Cg8D/CxStb09x2cIi A2kVa8g= -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:50 2024 by rpki-client on console-ams.rpki-client.org