$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/A62D8646A70811EFB1511445C4F9AE02.roa File: A62D8646A70811EFB1511445C4F9AE02.roa (raw, json) Hash identifier: cDepa/JWzfUR3fg1KcJ2ZxnATSMi2ZOoyezIOl4P6WM= Subject key identifier: 53:ED:DA:7A:49:79:F7:B9:73:F5:07:80:57:F7:62:10:DF:BA:EE:FC Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: 02 Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/A62D8646A70811EFB1511445C4F9AE02.roa Signing time: Wed 20 Nov 2024 06:28:26 +0000 ROA not before: Wed 20 Nov 2024 06:28:26 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138026 IP address blocks: 160.250.36.0/23 maxlen: 23 160.250.36.0/24 maxlen: 24 160.250.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Nov 20 06:28:26 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=673d818a-2559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d3:2a:54:0a:df:67:d6:da:98:9b:1d:64:b0: 4e:6c:2d:12:b2:04:90:27:de:be:09:c2:f6:85:35: f1:e0:75:73:23:fc:da:5b:ff:41:6e:6d:0c:c4:62: cf:f7:18:9e:7f:20:26:da:72:e6:80:44:43:c9:e0: 75:c7:65:fe:36:d6:8e:7c:4f:b0:21:b6:b9:a0:6a: cf:a0:a4:90:e2:9b:f1:8d:d4:8b:ab:1e:af:14:a4: 96:70:07:c0:63:7a:84:ff:92:92:4a:4a:a3:2f:31: c2:8b:ef:62:82:49:f6:d9:de:d4:f7:c3:71:9d:ce: 9b:1a:df:b8:49:61:b0:63:0a:da:88:2e:9d:6f:7b: 5c:d6:d4:40:14:c4:34:1b:e7:62:e6:ef:e4:78:ee: 62:b5:31:45:6e:a6:88:62:90:43:16:0e:ac:43:a3: a2:4c:f7:b5:25:a8:58:6f:3b:fa:e5:45:71:34:05: b1:fd:76:ef:12:fe:b3:39:67:a4:ae:77:8a:8e:b6: 8e:6d:68:51:3a:19:cd:e8:2a:1c:fa:30:15:46:cf: fd:56:72:40:73:cf:ac:a8:71:8c:8a:35:94:d1:b4: c4:66:50:86:22:37:33:cc:b3:25:ee:0b:45:f2:cb: 6d:66:e5:86:9f:75:f4:c8:3f:d9:a7:a6:39:f8:5d: f2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:ED:DA:7A:49:79:F7:B9:73:F5:07:80:57:F7:62:10:DF:BA:EE:FC X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/A62D8646A70811EFB1511445C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.36.0/23 Signature Algorithm: sha256WithRSAEncryption 03:9a:0a:b9:cc:e9:6b:eb:b8:e5:0c:35:89:6a:3f:c5:4a:08: a7:68:75:a8:85:a5:f2:93:0b:56:9d:be:25:af:8f:c4:64:c1: 7d:ce:4d:7a:ea:5f:e1:9b:85:65:89:8a:f6:a8:63:61:97:92: cc:93:c1:dc:01:e7:a8:c0:af:cb:c4:e8:24:80:7a:36:91:f5: 77:0f:0d:15:4a:03:11:e7:d8:37:39:de:35:f2:d5:ee:84:13: 38:aa:03:95:83:14:d1:af:cc:3d:9b:ac:dd:11:97:a7:bc:4e: ec:ce:27:a8:20:a0:cf:46:9c:56:4c:5d:34:66:07:c6:fd:87: ed:62:9f:be:2d:3e:42:04:21:62:16:ee:1a:b8:e2:f8:9f:94: 2f:d8:3d:fb:f7:06:06:39:2d:ad:cb:91:2a:5c:68:2f:67:97: ec:13:fc:71:b0:b4:2b:7f:3f:9b:aa:9d:16:5c:d9:b3:d6:ed: 6a:ef:c1:c9:20:b6:19:d0:e3:b0:d2:cb:73:eb:73:fb:69:70: 1d:ff:b5:6c:7b:63:6a:6e:f3:e0:91:ad:e3:00:97:88:ba:a2: 26:ad:95:e5:2d:0b:65:34:3c:73:6f:68:8a:17:d5:dd:23:1f: 60:54:5c:2b:2a:fc:14:40:3a:fd:36:0a:41:12:89:51:99:31: a2:ad:12:33 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCQzExMC8GA1UEBRMoRjE1RDExNzkwQjBFNzUzNTc0MDY2MTFEQzU3MDU4RjY5 REM1NzhBMDAeFw0yNDExMjAwNjI4MjZaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3M2Q4MThhLTI1NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDw0ypUCt9n1tqYmx1ksE5sLRKyBJAn3r4JwvaFNfHgdXMj/Npb/0FubQzEYs/3 GJ5/ICbacuaAREPJ4HXHZf421o58T7Ahtrmgas+gpJDim/GN1IurHq8UpJZwB8Bj eoT/kpJKSqMvMcKL72KCSfbZ3tT3w3Gdzpsa37hJYbBjCtqILp1ve1zW1EAUxDQb 52Lm7+R47mK1MUVupohikEMWDqxDo6JM97UlqFhvO/rlRXE0BbH9du8S/rM5Z6Su d4qOto5taFE6Gc3oKhz6MBVGz/1WckBzz6yocYyKNZTRtMRmUIYiNzPMsyXuC0Xy y21m5YafdfTIP9mnpjn4XfI3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUU+3aekl5 97lz9QeAV/diEN+67vwwHwYDVR0jBBgwFoAU8V0ReQsOdTV0BmEdxXBY9p3FeKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0NCODgyRTdFQTcw NzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFYwUmVRc09kVFYwQm1FZHhYQlk5cDNGZUtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlCQy9DQjg4MkU3RUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi9BNjJEODY0NkE3 MDgxMUVGQjE1MTE0NDVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaD6JDANBgkqhkiG9w0BAQsFAAOCAQEAA5oKuczpa+u45Qw1 iWo/xUoIp2h1qIWl8pMLVp2+Ja+PxGTBfc5Neupf4ZuFZYmK9qhjYZeSzJPB3AHn qMCvy8ToJIB6NpH1dw8NFUoDEefYNzneNfLV7oQTOKoDlYMU0a/MPZus3RGXp7xO 7M4nqCCgz0acVkxdNGYHxv2H7WKfvi0+QgQhYhbuGrji+J+UL9g9+/cGBjktrcuR KlxoL2eX7BP8cbC0K38/m6qdFlzZs9btau/BySC2GdDjsNLLc+tz+2lwHf+1bHtj am7z4JGt4wCXiLqiJq2V5S0LZTQ8c29oihfV3SMfYFRcKyr8FEA6/TYKQRKJUZkx oq0SMw== -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org