$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/CA2A06D6D5E511EE9B319A12C4F9AE02.roa File: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (raw, json) Hash identifier: Qq5UU0tcDxAU8exKz+6U8pmnC5amKrv1RDGkSY0cphM= Subject key identifier: E2:D6:3F:7D:84:D1:90:81:A6:DD:37:71:DA:33:0D:E8:81:C7:DE:BA Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Certificate serial: 02 Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/CA2A06D6D5E511EE9B319A12C4F9AE02.roa Signing time: Wed 28 Feb 2024 03:02:21 +0000 ROA not before: Wed 28 Feb 2024 03:02:21 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 2713 IP address blocks: 210.79.173.0/24 maxlen: 24 2001:df3:3b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Validity Not Before: Feb 28 03:02:21 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65dea23d-29c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:c6:81:2b:e5:1c:c9:0c:32:51:39:46:27: 4c:ab:13:3d:cd:4c:aa:4b:c9:84:bc:b2:01:57:a5: fa:f3:ea:90:c2:cb:34:95:6c:ba:13:e9:fe:35:c3: ed:8e:bb:77:95:d9:86:98:43:c1:fd:20:72:55:54: 0e:d6:24:9d:9a:b2:58:f5:7f:86:6b:df:9d:4a:92: 86:84:86:a0:2f:7c:3e:53:e8:bc:98:96:99:ba:9f: 93:89:59:e8:db:f7:22:6c:32:7d:bb:60:9c:6c:74: ea:f0:95:bb:f9:42:62:eb:e6:9b:bc:d9:9c:0d:9e: cb:eb:6a:99:85:45:a4:81:52:eb:db:91:f2:39:22: 62:ad:41:88:cb:6a:f3:96:05:31:21:77:4d:bd:df: dc:92:51:c2:db:6e:32:a4:9e:b3:84:e0:a5:b0:7a: 20:ff:38:11:dd:0b:c9:cd:6c:98:f6:cd:63:92:d7: b9:03:86:03:d1:ec:64:ef:fd:e5:ba:01:5b:d6:bb: 30:03:f7:4a:14:46:b2:74:8d:91:1d:35:eb:14:96: 57:34:ed:bf:b2:81:2f:db:07:03:d3:64:8a:92:36: 01:a5:07:5c:e0:39:42:db:01:1a:9e:0b:e4:6f:9a: 01:42:d7:7c:fe:d6:77:af:ad:ae:48:2f:2e:cd:f5: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D6:3F:7D:84:D1:90:81:A6:DD:37:71:DA:33:0D:E8:81:C7:DE:BA X509v3 Authority Key Identifier: keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/CA2A06D6D5E511EE9B319A12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.79.173.0/24 IPv6: 2001:df3:3b40::/48 Signature Algorithm: sha256WithRSAEncryption 1e:c2:06:f0:40:8b:7d:dd:79:26:33:20:3f:41:57:8f:60:d6: 16:fb:8d:30:95:a1:f0:dc:b3:2e:7c:a4:92:8f:5d:3b:58:2a: 22:0e:36:8d:9d:23:33:44:47:1f:1f:75:21:8d:76:1d:37:c9: e3:7c:9d:cc:a3:ae:44:c5:15:58:ac:f1:de:81:c3:f1:92:35: 10:98:a6:bc:e3:71:83:c6:ab:4b:11:de:9f:e3:5b:0f:b3:7b: 55:28:63:f2:91:7c:02:60:ab:38:2d:83:6b:05:b4:75:7b:df: 3b:2a:12:ab:d4:37:5b:0a:a1:d8:0c:70:cd:32:c8:9f:48:20: 13:aa:09:1f:32:9b:ac:d5:39:c4:41:f7:0b:54:0c:9c:ff:9a: 55:7c:3f:2c:a0:c3:aa:df:6f:f4:e3:17:e7:dd:42:e8:9f:bf: 13:3b:41:40:7b:63:b8:99:dc:e5:3b:e5:a2:24:8e:b5:0d:df: c4:80:15:53:2a:20:ec:c6:36:b9:fb:dc:90:56:00:88:39:86: ef:81:83:33:5a:14:3a:30:e2:4b:d8:97:90:da:c5:1b:dd:0e: f0:3a:e2:13:f5:27:e0:59:13:21:16:ed:bc:44:4e:86:64:dc: 4c:be:6d:c1:1e:ed:d7:83:63:7d:c2:8f:bc:29:b9:0d:7c:a2: 02:ca:bb:88 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzhDQzExMC8GA1UEBRMoQ0JDMEFEMTk2NTg1MTY0MUY2NjExMUU4RTI5MDI2OThB OUI5RUQ4MDAeFw0yNDAyMjgwMzAyMjFaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZGVhMjNkLTI5YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/WcaBK+UcyQwyUTlGJ0yrEz3NTKpLyYS8sgFXpfrz6pDCyzSVbLoT6f41w+2O u3eV2YaYQ8H9IHJVVA7WJJ2aslj1f4Zr351KkoaEhqAvfD5T6LyYlpm6n5OJWejb 9yJsMn27YJxsdOrwlbv5QmLr5pu82ZwNnsvrapmFRaSBUuvbkfI5ImKtQYjLavOW BTEhd02939ySUcLbbjKknrOE4KWweiD/OBHdC8nNbJj2zWOS17kDhgPR7GTv/eW6 AVvWuzAD90oURrJ0jZEdNesUllc07b+ygS/bBwPTZIqSNgGlB1zgOULbARqeC+Rv mgFC13z+1nevra5ILy7N9WdXAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU4tY/fYTR kIGm3Tdx2jMN6IHH3rowHwYDVR0jBBgwFoAUy8CtGWWFFkH2YRHo4pAmmKm57YAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzOENDLzNBQzU3QzhDRDVF NTExRUVCNzc5MjIzRUM0RjlBRTAyL3k4Q3RHV1dGRmtIMllSSG80cEFtbUttNTdZ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveThDdEdXV0ZGa0gyWVJIbzRwQW1tS201N1lBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzhDQy8zQUM1N0M4Q0Q1RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi9DQTJBMDZENkQ1 RTUxMUVFOUIzMTlBMTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEANJPrTAPBAIAAjAJAwcAIAEN8ztAMA0GCSqGSIb3DQEBCwUA A4IBAQAewgbwQIt93XkmMyA/QVePYNYW+40wlaHw3LMufKSSj107WCoiDjaNnSMz REcfH3UhjXYdN8njfJ3Mo65ExRVYrPHegcPxkjUQmKa843GDxqtLEd6f41sPs3tV KGPykXwCYKs4LYNrBbR1e987KhKr1DdbCqHYDHDNMsifSCATqgkfMpus1TnEQfcL VAyc/5pVfD8soMOq32/04xfn3ULon78TO0FAe2O4mdzlO+WiJI61Dd/EgBVTKiDs xja5+9yQVgCIOYbvgYMzWhQ6MOJL2JeQ2sUb3Q7wOuIT9SfgWRMhFu28RE6GZNxM vm3BHu3Xg2N9wo+8KbkNfKICyruI -----END CERTIFICATE-----Generated at Fri Jun 7 11:02:54 2024 by rpki-client on console-fra.rpki-client.org