$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/CC7502F8670E11EC90C22B7EC4F9AE02.roa File: CC7502F8670E11EC90C22B7EC4F9AE02.roa (raw, json) Hash identifier: HMDXcvVMEGAxoOC++6wcObudAAOApyw/6bDY30a1r+o= Subject key identifier: D7:B2:67:E2:0E:45:8E:B2:51:61:C9:89:FF:21:81:FA:6C:77:4B:D3 Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 1361 Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/CC7502F8670E11EC90C22B7EC4F9AE02.roa Signing time: Tue 10 Sep 2024 17:55:04 +0000 ROA not before: Tue 10 Sep 2024 17:55:04 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 45532 IP address blocks: 180.211.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4961 (0x1361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Sep 10 17:55:04 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e087f8-5b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:68:57:10:ec:11:c1:a0:23:fa:24:f5:97:b7: bf:3d:2a:20:b6:35:10:a5:3a:95:a8:ed:76:7e:48: 4b:5d:e2:cc:ec:bf:aa:62:17:00:03:b6:8e:9a:2c: e2:f3:53:a6:86:19:f9:b6:28:6b:b3:e9:88:78:63: 30:f5:15:00:fa:6d:a3:2b:77:32:bb:58:4a:33:b1: 18:0c:9a:57:34:8a:77:3a:d1:b9:a5:6c:33:c0:5b: 2b:a4:a4:d9:bd:1a:84:c7:cd:ca:eb:69:9d:09:14: b1:d6:42:ef:09:58:dc:f8:b2:b5:b3:c9:4c:e8:55: 77:af:9d:5f:1b:03:54:62:4e:ce:50:6b:31:cb:f5: 6e:58:7b:d6:c4:3a:27:1a:d9:fb:a4:80:ee:85:dd: 58:fb:8a:f3:f0:5d:87:6f:a6:5c:94:cf:44:c8:5b: 0b:bb:c3:84:7d:27:c4:46:46:db:30:c1:e2:a0:79: 13:63:67:4d:f0:0f:87:6a:d1:80:96:22:b9:f4:e0: e0:fa:64:fd:36:6b:f5:0f:5e:ab:20:d7:03:31:17: 38:58:43:60:3c:c3:2a:61:d3:b3:c6:c4:8c:58:42: 7b:b6:d6:8f:dc:40:36:a2:56:fd:a9:25:f2:d4:55: bc:04:9f:2b:bd:a6:6a:8a:c6:1e:ab:ad:04:64:99: d5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B2:67:E2:0E:45:8E:B2:51:61:C9:89:FF:21:81:FA:6C:77:4B:D3 X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/CC7502F8670E11EC90C22B7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.211.208.0/24 Signature Algorithm: sha256WithRSAEncryption 05:2d:38:83:aa:f0:d4:ba:ba:05:39:2d:a9:3a:e2:e0:2a:fa: 0b:81:5d:e4:3a:62:ab:f3:01:ef:12:9c:73:32:a2:b9:fa:11: d6:d0:c7:59:e4:4e:cf:e0:6b:59:a8:78:ce:08:e0:f2:a2:49: 93:73:17:80:fd:cb:ca:5b:9d:79:b0:6e:49:d7:18:7b:de:4e: 8c:45:75:a8:bc:00:6b:a3:8f:25:cc:c6:b2:e6:0c:5b:09:03: ad:71:34:ba:66:6a:7e:ce:62:1b:aa:e7:1e:c2:35:0f:87:07: c1:e1:c2:35:dd:da:45:67:c0:4e:f1:85:5c:3c:e6:05:44:b8: b6:8b:2a:fa:4d:88:54:22:7f:32:ad:3c:64:30:4d:7e:43:0f: 34:5a:e2:59:be:56:77:21:17:d8:e3:06:e8:72:27:bd:cf:ac: 0b:2c:24:0f:8e:48:ba:14:93:85:ff:b1:c6:cb:c0:53:2d:7f: 55:ba:1c:91:1b:72:78:77:b1:f2:2d:0a:51:42:b5:ac:26:fd: c1:74:7c:7d:5a:04:be:b1:4f:0d:d8:a7:b5:6c:2a:0c:db:9e: d0:ec:db:db:2e:fc:47:0b:66:a0:19:d1:f7:fe:d5:01:29:76: 7c:e5:4c:02:87:db:5b:e4:a1:d9:82:db:ce:4f:61:af:21:cf: f8:04:c3:a1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICE2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjQwOTEwMTc1NTA0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUwODdmOC01Yjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGhXEOwRwaAj+iT1l7e/PSogtjUQpTqVqO12fkhLXeLM7L+qYhcAA7aOmizi 81Omhhn5tihrs+mIeGMw9RUA+m2jK3cyu1hKM7EYDJpXNIp3OtG5pWwzwFsrpKTZ vRqEx83K62mdCRSx1kLvCVjc+LK1s8lM6FV3r51fGwNUYk7OUGsxy/VuWHvWxDon Gtn7pIDuhd1Y+4rz8F2Hb6ZclM9EyFsLu8OEfSfERkbbMMHioHkTY2dN8A+HatGA liK59ODg+mT9Nmv1D16rINcDMRc4WENgPMMqYdOzxsSMWEJ7ttaP3EA2olb9qSXy 1FW8BJ8rvaZqisYeq60EZJnVywIDAQABo4IClTCCApEwHQYDVR0OBBYEFNeyZ+IO RY6yUWHJif8hgfpsd0vTMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkM4NDcvQUNGOTQzNTI5QUYzMTFFOEFBQjRENTVEQzRGOUFFMDIvQ0M3NTAyRjg2 NzBFMTFFQzkwQzIyQjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAC009AwDQYJKoZIhvcNAQELBQADggEBAAUtOIOq8NS6ugU5 Lak64uAq+guBXeQ6YqvzAe8SnHMyorn6EdbQx1nkTs/ga1moeM4I4PKiSZNzF4D9 y8pbnXmwbknXGHveToxFdai8AGujjyXMxrLmDFsJA61xNLpman7OYhuq5x7CNQ+H B8HhwjXd2kVnwE7xhVw85gVEuLaLKvpNiFQifzKtPGQwTX5DDzRa4lm+VnchF9jj BuhyJ73PrAssJA+OSLoUk4X/scbLwFMtf1W6HJEbcnh3sfItClFCtawm/cF0fH1a BL6xTw3Yp7VsKgzbntDs29su/EcLZqAZ0ff+1QEpdnzlTAKH21vkodmC285PYa8h z/gEw6E= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org