$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/359CBDB28D0D11EF90882959C4F9AE02.roa File: 359CBDB28D0D11EF90882959C4F9AE02.roa (raw, json) Hash identifier: lPmMyjhw0BbW0ylkYp9Jo3DTy8i/8iWjuuMGt5ZSdV4= Subject key identifier: 71:A6:EE:BA:AD:67:02:58:2B:8E:3B:DA:1C:40:B6:BA:01:99:08:E8 Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Certificate serial: 7C Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/359CBDB28D0D11EF90882959C4F9AE02.roa Signing time: Fri 18 Oct 2024 04:55:34 +0000 ROA not before: Fri 18 Oct 2024 04:55:34 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 5666 IP address blocks: 203.86.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Validity Not Before: Oct 18 04:55:34 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6711ea46-ce2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cc:9a:70:b9:9d:17:1f:7b:d1:2c:41:a3:1a: 4b:0b:7a:e1:25:bc:30:c5:fa:8d:34:86:00:cc:8b: 5e:d6:b6:07:74:75:fe:91:b0:7f:e0:80:4a:25:e5: e3:c3:7a:ba:6e:0f:e1:ef:82:a2:73:30:6b:bf:0c: c6:6f:8c:98:b0:a2:41:e3:12:b5:74:28:04:22:9c: a1:ed:3b:b6:2e:99:25:d4:83:b7:2e:c8:43:2a:15: 5f:d8:5c:b5:b2:36:23:56:77:83:8d:a3:14:4f:26: 5d:82:bc:44:4f:2c:58:2b:63:c9:c9:0c:66:e1:ac: ff:52:0f:07:21:21:d8:46:0a:e2:7e:6b:e3:b4:bd: ff:b9:41:c5:d7:4a:fc:ee:2d:44:86:e4:70:2b:84: 3b:38:49:bc:d1:49:b8:e8:85:8d:db:81:d9:6f:a0: 05:3a:5b:51:a1:24:14:2b:00:46:11:c0:11:e6:cb: 57:06:2f:0d:6a:14:3c:47:97:55:4c:f2:1b:3f:4f: 2a:66:7c:0f:33:02:95:a6:fd:3f:b7:16:ac:f9:70: 6e:de:4a:c5:4b:64:4c:1a:62:ac:52:d1:ea:c3:7f: 76:13:a2:ae:0f:c5:9a:47:bf:64:52:20:c6:96:c9: 08:3e:2b:69:19:55:1f:d6:3b:80:cf:8a:04:22:b9: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A6:EE:BA:AD:67:02:58:2B:8E:3B:DA:1C:40:B6:BA:01:99:08:E8 X509v3 Authority Key Identifier: keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/359CBDB28D0D11EF90882959C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.86.223.0/24 Signature Algorithm: sha256WithRSAEncryption 10:a2:d2:d6:34:c2:cb:0c:ee:01:e5:29:b0:ef:13:91:d6:de: 43:bb:ac:22:78:bc:81:f2:06:5b:94:c3:01:06:fe:f3:43:72: fd:b6:21:61:bc:10:d3:99:d5:95:49:5f:fb:80:77:fd:53:f0: 28:08:6d:b8:b8:93:1b:14:f9:97:81:24:f5:77:3e:e9:6b:e6: d6:0a:bb:3d:87:70:d9:9b:20:2a:5f:07:c9:e6:17:14:4b:2b: 3c:bc:13:dc:7c:61:ca:c8:75:7f:9f:c2:28:54:70:6c:d5:a8: 61:93:03:f4:21:45:a6:c0:d8:90:5e:90:f0:9b:e0:46:6f:10: ee:e9:7f:2b:95:b8:d7:4c:6e:b8:b7:47:3e:1e:d5:6a:80:eb: 2f:7a:8f:9c:76:0d:d8:12:b7:80:22:bd:ce:3a:dd:72:47:84: af:9e:65:1d:21:ea:75:f2:6b:d6:61:36:74:e2:3e:44:af:87: 69:64:b6:97:76:27:d3:f2:d8:66:c4:16:bd:48:7c:81:13:b2: 0b:f8:58:36:e1:c0:d4:a8:51:13:e9:b9:41:13:26:8a:46:a1: 2e:93:63:31:94:04:f9:78:55:92:b0:27:c8:98:57:9d:9c:d9: 14:b6:7f:93:e7:ba:ff:99:e9:31:4f:ce:d2:75:20:e5:e1:d3: 96:2a:e4:4f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzcxMTExMC8GA1UEBRMoRTQyOUQ0MjlFNjZCNzk3QjNEOEExQ0JFMjQ5MTU3N0FE QzM4QTQ4RTAeFw0yNDEwMTgwNDU1MzRaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MTFlYTQ2LWNlMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuzJpwuZ0XH3vRLEGjGksLeuElvDDF+o00hgDMi17Wtgd0df6RsH/ggEol5ePD erpuD+HvgqJzMGu/DMZvjJiwokHjErV0KAQinKHtO7YumSXUg7cuyEMqFV/YXLWy NiNWd4ONoxRPJl2CvERPLFgrY8nJDGbhrP9SDwchIdhGCuJ+a+O0vf+5QcXXSvzu LUSG5HArhDs4SbzRSbjohY3bgdlvoAU6W1GhJBQrAEYRwBHmy1cGLw1qFDxHl1VM 8hs/TypmfA8zApWm/T+3Fqz5cG7eSsVLZEwaYqxS0erDf3YToq4PxZpHv2RSIMaW yQg+K2kZVR/WO4DPigQiuXvdAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUcabuuq1n AlgrjjvaHEC2ugGZCOgwHwYDVR0jBBgwFoAU5CnUKeZreXs9ihy+JJFXetw4pI4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNzExL0M3RDFCMDU0MUVF MzExRUY5MEQyMTIzNEM0RjlBRTAyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUNuVUtlWnJlWHM5aWh5LUpKRlhldHc0cEk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzcxMS9DN0QxQjA1NDFFRTMxMUVGOTBEMjEyMzRDNEY5QUUwMi8zNTlDQkRCMjhE MEQxMUVGOTA4ODI5NTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMtW3zANBgkqhkiG9w0BAQsFAAOCAQEAEKLS1jTCywzuAeUp sO8TkdbeQ7usIni8gfIGW5TDAQb+80Ny/bYhYbwQ05nVlUlf+4B3/VPwKAhtuLiT GxT5l4Ek9Xc+6Wvm1gq7PYdw2ZsgKl8HyeYXFEsrPLwT3Hxhysh1f5/CKFRwbNWo YZMD9CFFpsDYkF6Q8JvgRm8Q7ul/K5W410xuuLdHPh7VaoDrL3qPnHYN2BK3gCK9 zjrdckeEr55lHSHqdfJr1mE2dOI+RK+HaWS2l3Yn0/LYZsQWvUh8gROyC/hYNuHA 1KhRE+m5QRMmikahLpNjMZQE+XhVkrAnyJhXnZzZFLZ/k+e6/5npMU/O0nUg5eHT lirkTw== -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org