$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/85C534069AA711EBB9BBD670C4F9AE02.roa File: 85C534069AA711EBB9BBD670C4F9AE02.roa (raw, json) Hash identifier: 0Wf6MrY856EXSgNTseMSxFkk6LBzj+vW0CkBQhFM5Vo= Subject key identifier: DF:09:35:E0:E5:4E:C5:D3:BE:28:28:BE:5D:3A:2F:12:2F:60:98:7E Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 135E Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/85C534069AA711EBB9BBD670C4F9AE02.roa Signing time: Tue 10 Sep 2024 17:55:00 +0000 ROA not before: Tue 10 Sep 2024 17:55:00 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 141773 IP address blocks: 203.112.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4958 (0x135e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Sep 10 17:55:00 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e087f4-a5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:86:b2:83:aa:77:6a:35:66:40:d5:5c:4f: d5:fe:9f:73:6b:cd:fc:35:dd:cc:66:6c:ad:4f:4f: 16:a8:17:1a:6e:c3:df:49:ef:6f:14:76:93:8c:84: 33:71:44:ab:12:04:2b:e0:33:17:29:2b:29:bb:95: 6e:7b:88:87:3c:ba:50:a7:7c:ba:19:b7:3d:f7:4e: 5b:0d:ce:47:e4:1c:68:88:9a:81:8f:b3:02:e8:03: 45:cf:39:46:a4:23:a0:de:da:90:ba:6d:e1:55:b0: 62:32:f4:9e:4a:fe:28:0b:4e:9e:c9:b3:bf:f2:77: eb:dc:1b:e9:3c:b8:48:45:65:35:b2:c9:a1:f4:aa: 06:16:38:a7:88:04:3d:43:06:7e:fb:e1:50:92:82: bd:0a:dd:9f:2b:49:ff:17:7b:9d:c3:21:57:61:fa: 5e:4b:88:d0:dc:8d:89:e0:77:0e:9e:43:6e:57:10: d5:57:5c:02:f7:9d:97:4b:16:d3:47:5c:cd:ca:ea: d8:d3:6c:c0:ac:e3:32:65:af:c5:20:e8:e2:b3:7c: 40:8f:bd:db:94:da:f5:37:29:79:a7:e7:b2:a0:8d: f5:11:09:3c:e3:a3:43:a9:ae:7c:59:c4:67:cc:27: 6d:53:51:fc:1b:5b:f1:2b:89:38:91:d5:4e:1e:e2: e5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:09:35:E0:E5:4E:C5:D3:BE:28:28:BE:5D:3A:2F:12:2F:60:98:7E X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/85C534069AA711EBB9BBD670C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.112.220.0/23 Signature Algorithm: sha256WithRSAEncryption 13:7a:bd:2e:d9:3d:7c:2e:12:ca:77:99:d0:56:85:3b:98:d9: 4e:6d:27:90:71:9a:fa:c2:11:60:80:c8:43:45:d9:93:a2:b9: 61:e5:ed:68:80:c9:2b:6b:ba:5d:74:92:b7:a2:ac:7b:c8:4b: 7d:ec:42:7f:11:30:ab:86:40:6d:88:c2:76:bf:21:af:aa:61: f4:fc:a8:44:57:7f:17:c7:0d:fe:e4:c7:76:d3:be:b2:6f:ee: bf:63:28:df:a4:9e:dc:76:0e:b0:3c:9a:a7:36:cf:c0:15:1b: 64:48:6d:d8:63:4d:1e:2d:9b:32:a0:39:b4:c0:6a:00:ec:5b: 2d:02:27:9b:b8:7b:af:db:a2:a0:73:8f:c4:9a:20:e4:aa:0e: 5f:59:b7:d6:1b:ef:71:7f:e6:2c:81:61:f3:41:94:79:90:05: 42:74:5d:4c:8d:3e:d2:cc:69:e3:fe:30:99:60:7e:34:eb:ce: 86:08:80:7d:a7:72:99:b0:b9:a0:98:d1:f0:78:81:42:57:13: 50:2f:43:20:5a:45:02:57:62:02:57:92:4b:a3:2e:d4:26:e2: b8:c6:aa:6c:16:40:b8:a0:cc:66:64:86:6e:fd:1b:0f:a3:5f: 9b:05:68:b3:ea:7c:36:2a:bc:a7:81:48:54:76:fa:4e:af:e1: 60:40:ba:08 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICE14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjQwOTEwMTc1NTAwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUwODdmNC1hNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1F6GsoOqd2o1ZkDVXE/V/p9za838Nd3MZmytT08WqBcabsPfSe9vFHaTjIQz cUSrEgQr4DMXKSspu5Vue4iHPLpQp3y6Gbc9905bDc5H5BxoiJqBj7MC6ANFzzlG pCOg3tqQum3hVbBiMvSeSv4oC06eybO/8nfr3BvpPLhIRWU1ssmh9KoGFjiniAQ9 QwZ+++FQkoK9Ct2fK0n/F3udwyFXYfpeS4jQ3I2J4HcOnkNuVxDVV1wC952XSxbT R1zNyurY02zArOMyZa/FIOjis3xAj73blNr1Nyl5p+eyoI31EQk846NDqa58WcRn zCdtU1H8G1vxK4k4kdVOHuLlPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN8JNeDl TsXTvigovl06LxIvYJh+MB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkM4NDcvQUNGOTQzNTI5QUYzMTFFOEFBQjRENTVEQzRGOUFFMDIvODVDNTM0MDY5 QUE3MTFFQkI5QkJENjcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHLcNwwDQYJKoZIhvcNAQELBQADggEBABN6vS7ZPXwuEsp3 mdBWhTuY2U5tJ5BxmvrCEWCAyENF2ZOiuWHl7WiAyStrul10kreirHvIS33sQn8R MKuGQG2Iwna/Ia+qYfT8qERXfxfHDf7kx3bTvrJv7r9jKN+kntx2DrA8mqc2z8AV G2RIbdhjTR4tmzKgObTAagDsWy0CJ5u4e6/boqBzj8SaIOSqDl9Zt9Yb73F/5iyB YfNBlHmQBUJ0XUyNPtLMaeP+MJlgfjTrzoYIgH2ncpmwuaCY0fB4gUJXE1AvQyBa RQJXYgJXkkujLtQm4rjGqmwWQLigzGZkhm79Gw+jX5sFaLPqfDYqvKeBSFR2+k6v 4WBAugg= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org