$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/65783A3A68FE11EFB904E587C4F9AE02.roa File: 65783A3A68FE11EFB904E587C4F9AE02.roa (raw, json) Hash identifier: W9AbIPs04msR2L8j2qpbp6FWBUlEN2nJFHSFxYkcZYc= Subject key identifier: D5:D5:73:DA:3A:17:57:8A:CA:0B:10:F0:BA:7E:28:2E:F1:11:BF:3A Certificate issuer: /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Certificate serial: 02 Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/65783A3A68FE11EFB904E587C4F9AE02.roa Signing time: Mon 02 Sep 2024 07:38:50 +0000 ROA not before: Mon 02 Sep 2024 07:38:50 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 142570 IP address blocks: 160.30.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F Validity Not Before: Sep 2 07:38:50 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d56b8a-bfa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6d:1d:27:27:73:1a:5e:17:98:99:1f:7b:b3: 6c:37:b5:28:c5:4c:ae:ba:43:4f:4f:7d:10:d9:20: e8:0d:c1:7b:e9:d6:3b:6b:dd:9b:fd:5e:fd:bc:62: fc:7d:f4:ef:4a:8d:df:63:87:64:f2:56:1e:f7:ea: f5:62:f0:32:aa:4e:37:22:74:69:28:1e:0d:99:82: 5d:ec:b5:8b:ec:65:0b:11:3d:fc:db:b4:bb:19:4e: 24:e5:8a:22:49:83:bd:8a:f1:5a:0a:89:09:ef:8f: 6a:a7:1b:34:fe:ae:f8:54:98:ea:52:97:c4:f2:22: 6d:85:2e:02:2c:8c:3d:5e:ec:09:f3:4f:62:53:dc: 8b:d9:2c:55:7a:a8:f5:6b:a8:45:fe:5d:9c:42:29: c3:4b:4b:c1:dd:1d:aa:e1:10:48:3b:9a:6e:2f:ee: 78:98:4b:ed:7a:91:93:ac:5a:bd:bd:d3:4a:0b:37: 6f:a0:a7:16:b1:a5:63:1a:34:2b:7f:d3:e4:6a:0e: 74:c6:a0:80:da:6e:4d:fa:9d:85:59:33:f7:fc:7b: 33:e5:72:07:c3:3b:bb:e3:7b:11:df:5f:ab:8f:f0: c0:e1:7a:d1:1b:61:89:6a:5b:ea:3e:ec:56:5a:af: 3c:47:e2:94:03:72:b2:fa:4b:74:5d:a8:f1:d4:20: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D5:73:DA:3A:17:57:8A:CA:0B:10:F0:BA:7E:28:2E:F1:11:BF:3A X509v3 Authority Key Identifier: keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/65783A3A68FE11EFB904E587C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.234.0/24 Signature Algorithm: sha256WithRSAEncryption 77:16:6b:5d:ce:bd:51:fc:07:0b:94:18:83:ed:3a:4f:b3:63: 8c:d6:c3:97:aa:7a:97:79:dd:e2:12:f6:b4:90:37:75:5a:a4: 6d:7f:f1:fd:cb:08:10:c6:b1:4e:24:96:d4:5e:ec:c9:d1:1b: 4a:9a:43:46:51:b9:a2:bc:d8:d8:ad:b1:e9:fb:86:44:e0:ec: 07:bb:86:3c:c6:0f:01:99:0f:5c:7b:99:d4:e2:73:7e:01:e5: fd:8c:5c:09:d1:83:f1:51:3b:75:e1:39:39:dc:2c:dc:8d:15: b2:2c:ee:fb:5e:ee:c7:1a:5b:8d:52:d4:1d:ab:31:c8:df:27: eb:00:e4:2d:b3:58:ec:c3:f6:93:af:46:1e:c3:da:5c:44:4a: 76:79:ac:f7:5d:0e:49:4a:4b:cf:91:eb:89:ea:1d:5d:cc:5d: fe:70:24:20:e5:ae:92:36:db:8f:fe:bb:8a:43:80:bf:3f:04: 76:97:42:e8:ff:57:d0:09:7c:1a:74:91:28:88:aa:87:57:11: be:4f:a3:a0:93:41:6f:e2:c7:3d:71:63:71:ef:90:c0:bd:7c: 2c:8b:0e:e6:10:3e:64:09:77:06:6c:e8:48:53:73:59:a6:18: c8:33:87:3e:b4:12:1c:2b:2c:1e:97:8b:ac:3f:ec:37:e6:eb: 7f:ce:4a:9a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzE3NTExMC8GA1UEBRMoNzI1NzkyM0Q2NzcwQzU2Nzg5MTlCMDdDQkNGQThBRjhC OUM1MDUzRjAeFw0yNDA5MDIwNzM4NTBaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZDU2YjhhLWJmYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRbR0nJ3MaXheYmR97s2w3tSjFTK66Q09PfRDZIOgNwXvp1jtr3Zv9Xv28Yvx9 9O9Kjd9jh2TyVh736vVi8DKqTjcidGkoHg2Zgl3stYvsZQsRPfzbtLsZTiTliiJJ g72K8VoKiQnvj2qnGzT+rvhUmOpSl8TyIm2FLgIsjD1e7AnzT2JT3IvZLFV6qPVr qEX+XZxCKcNLS8HdHarhEEg7mm4v7niYS+16kZOsWr2900oLN2+gpxaxpWMaNCt/ 0+RqDnTGoIDabk36nYVZM/f8ezPlcgfDO7vjexHfX6uP8MDhetEbYYlqW+o+7FZa rzxH4pQDcrL6S3RdqPHUIEwZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU1dVz2joX V4rKCxDwun4oLvERvzowHwYDVR0jBBgwFoAUcleSPWdwxWeJGbB8vPqK+LnFBT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTc1L0U5QTA5MkI4NjhG RDExRUZBOTUwMDE4N0M0RjlBRTAyL2NsZVNQV2R3eFdlSkdiQjh2UHFLLUxuRkJU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY2xlU1BXZHd4V2VKR2JCOHZQcUstTG5GQlQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9FOUEwOTJCODY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi82NTc4M0EzQTY4 RkUxMUVGQjkwNEU1ODdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKAe6jANBgkqhkiG9w0BAQsFAAOCAQEAdxZrXc69UfwHC5QY g+06T7NjjNbDl6p6l3nd4hL2tJA3dVqkbX/x/csIEMaxTiSW1F7sydEbSppDRlG5 orzY2K2x6fuGRODsB7uGPMYPAZkPXHuZ1OJzfgHl/YxcCdGD8VE7deE5Odws3I0V sizu+17uxxpbjVLUHasxyN8n6wDkLbNY7MP2k69GHsPaXERKdnms910OSUpLz5Hr ieodXcxd/nAkIOWukjbbj/67ikOAvz8EdpdC6P9X0Al8GnSRKIiqh1cRvk+joJNB b+LHPXFjce+QwL18LIsO5hA+ZAl3BmzoSFNzWaYYyDOHPrQSHCssHpeLrD/sN+br f85Kmg== -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org