$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/63CE609A48CB11EF94C2AA83C4F9AE02.roa File: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (raw, json) Hash identifier: q/DDrGFL5S2NU9DAF/3ZYujxHcWmF0oksvSTie/kXHY= Subject key identifier: A0:D9:39:1D:5C:DA:B1:93:72:CB:06:52:1F:71:4E:41:9D:C3:BD:30 Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Certificate serial: 07 Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/63CE609A48CB11EF94C2AA83C4F9AE02.roa Signing time: Tue 23 Jul 2024 08:13:06 +0000 ROA not before: Tue 23 Jul 2024 08:13:06 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 152719 IP address blocks: 202.49.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Validity Not Before: Jul 23 08:13:06 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=669f6612-0a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:71:72:1f:23:87:be:8f:c6:d8:e9:f2:41:3e: 19:4f:2d:9b:8d:82:fc:b3:ea:75:e2:43:fd:ae:3f: ab:61:10:b4:8a:c4:c6:2c:c7:33:97:7f:b6:0e:67: ba:7a:bd:9e:ed:09:5e:c9:68:23:97:64:db:59:db: d8:38:96:75:93:ad:b9:df:cc:86:ec:3e:0e:ff:7f: 1b:64:5c:1e:8d:e0:09:46:b1:da:b4:7b:9d:07:63: 6d:a1:50:55:91:d0:92:97:6d:cc:8c:5a:17:df:1e: 2c:1b:53:d4:e9:5a:f4:fd:8a:cd:72:26:b3:2a:8a: 60:15:a0:44:1f:af:c4:9b:b5:2b:3b:8e:fa:06:16: 11:8b:e6:82:ef:69:c4:b4:fb:6d:5c:77:72:c8:8f: b0:b1:19:e4:d7:95:81:b3:11:77:3f:32:22:95:e9: c6:5d:d9:ba:c5:0d:56:2e:ad:d7:ac:e0:0e:25:4f: ae:af:ef:98:bd:5e:41:1e:01:e5:de:fc:07:37:00: f1:d1:21:e7:7c:b4:02:96:ef:70:34:58:24:8f:95: 9d:ef:bc:cb:4c:1f:08:93:3e:51:eb:7f:94:b8:f4: ee:9d:56:1f:92:fd:66:0d:2a:dd:87:8c:99:02:a5: d2:7d:7c:20:77:f6:9f:b8:4d:1f:fc:a0:ab:00:f0: 93:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D9:39:1D:5C:DA:B1:93:72:CB:06:52:1F:71:4E:41:9D:C3:BD:30 X509v3 Authority Key Identifier: keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/63CE609A48CB11EF94C2AA83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.49.114.0/24 Signature Algorithm: sha256WithRSAEncryption 77:fc:31:95:d0:7c:20:a3:ea:92:3e:04:d1:14:53:22:fd:c8: 01:8f:00:3c:af:e9:64:25:90:4f:09:51:ec:3c:15:df:de:bc: 78:20:69:94:08:5d:bf:8f:4f:d4:32:33:59:fe:a5:4c:5e:e6: db:b7:54:0d:9d:c6:a9:1e:ed:6c:d8:13:48:b7:34:ea:d2:a4: d1:46:40:db:5b:cc:80:ba:82:96:7c:11:bb:dc:1d:d9:3a:13: 71:69:66:6a:7a:9b:58:78:7d:af:81:aa:71:38:6b:1b:8b:8f: 09:35:b4:93:50:41:ad:34:6c:14:e4:0c:61:0a:7b:b8:d6:b3: c0:c4:aa:4d:78:1f:ba:ea:0b:5f:a4:ac:22:13:1f:5b:c8:88: 04:7c:39:7f:fa:2f:0b:e6:0c:19:cc:59:da:5c:db:48:f7:30: 74:72:69:0c:f9:e6:d2:1b:0a:32:38:a2:3d:c7:ea:ba:ca:d6: 8d:7b:b1:96:b5:d5:99:0a:b9:f1:ae:bf:9a:2d:81:3f:8e:c1: 1e:24:ac:2e:d2:cb:14:19:94:17:32:6f:ca:5a:91:49:a1:48: cb:de:9c:58:62:dd:5c:e5:a4:f1:a6:20:25:2a:53:56:4b:dd: a2:a3:07:6e:af:3f:16:97:48:98:f3:97:89:9d:40:24:54:94: 7b:34:5a:89 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MEQ4ODExMC8GA1UEBRMoRDA5OUVFQTlGNUNEQjZGRTRDNkVGOThFOEQ4Q0YzMzY0 QjlENjI2MTAeFw0yNDA3MjMwODEzMDZaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2OWY2NjEyLTBhOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXcXIfI4e+j8bY6fJBPhlPLZuNgvyz6nXiQ/2uP6thELSKxMYsxzOXf7YOZ7p6 vZ7tCV7JaCOXZNtZ29g4lnWTrbnfzIbsPg7/fxtkXB6N4AlGsdq0e50HY22hUFWR 0JKXbcyMWhffHiwbU9TpWvT9is1yJrMqimAVoEQfr8SbtSs7jvoGFhGL5oLvacS0 +21cd3LIj7CxGeTXlYGzEXc/MiKV6cZd2brFDVYurdes4A4lT66v75i9XkEeAeXe /Ac3APHRIed8tAKW73A0WCSPlZ3vvMtMHwiTPlHrf5S49O6dVh+S/WYNKt2HjJkC pdJ9fCB39p+4TR/8oKsA8JPtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUoNk5HVza sZNyywZSH3FOQZ3DvTAwHwYDVR0jBBgwFoAU0JnuqfXNtv5MbvmOjYzzNkudYmEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwRDg4L0I5ODZEOTFBNDMx MDExRUY4ODQxMTc4MkM0RjlBRTAyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFlt RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMEpudXFmWE50djVNYnZtT2pZenpOa3VkWW1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQ4OC9COTg2RDkxQTQzMTAxMUVGODg0MTE3ODJDNEY5QUUwMi82M0NFNjA5QTQ4 Q0IxMUVGOTRDMkFBODNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMoxcjANBgkqhkiG9w0BAQsFAAOCAQEAd/wxldB8IKPqkj4E 0RRTIv3IAY8APK/pZCWQTwlR7DwV3968eCBplAhdv49P1DIzWf6lTF7m27dUDZ3G qR7tbNgTSLc06tKk0UZA21vMgLqClnwRu9wd2ToTcWlmanqbWHh9r4GqcThrG4uP CTW0k1BBrTRsFOQMYQp7uNazwMSqTXgfuuoLX6SsIhMfW8iIBHw5f/ovC+YMGcxZ 2lzbSPcwdHJpDPnm0hsKMjiiPcfqusrWjXuxlrXVmQq58a6/mi2BP47BHiSsLtLL FBmUFzJvylqRSaFIy96cWGLdXOWk8aYgJSpTVkvdoqMHbq8/FpdImPOXiZ1AJFSU ezRaiQ== -----END CERTIFICATE-----Generated at Tue Sep 17 08:12:27 2024 by rpki-client on console-ams.rpki-client.org