$ rpki-client -vvf rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/675EE9DC87E711EEAC6C0B48C4F9AE02.roa File: 675EE9DC87E711EEAC6C0B48C4F9AE02.roa (raw, json) Hash identifier: drw42sYp0Yh/VWP9xaFHuMDcqO3Tii4R1NV32pLiPSM= Subject key identifier: DC:D2:30:10:FF:CD:63:DB:0C:BE:F3:42:04:41:25:65:29:19:C2:C3 Certificate issuer: /CN=A91D318A/serialNumber=3A1543BDF3772A98D294EB90023803DDDDF11E62 Certificate serial: C6 Authority key identifier: 3A:15:43:BD:F3:77:2A:98:D2:94:EB:90:02:38:03:DD:DD:F1:1E:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/675EE9DC87E711EEAC6C0B48C4F9AE02.roa Signing time: Tue 19 Nov 2024 04:19:05 +0000 ROA not before: Tue 19 Nov 2024 04:19:05 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 4648 IP address blocks: 156.69.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.crl rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D318A/serialNumber=3A1543BDF3772A98D294EB90023803DDDDF11E62 Validity Not Before: Nov 19 04:19:05 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=673c11b9-d13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:af:6d:7e:de:54:1b:89:d2:d4:d1:53:c9: dd:9c:83:6e:b9:11:3c:fd:6f:26:97:8c:88:96:f1: 8e:50:24:fc:a9:f8:a2:da:ab:bc:cf:b0:de:d2:fc: 6e:61:df:54:d8:52:fc:a4:7a:b7:59:f1:67:4d:e8: 61:e9:e6:71:bf:a8:34:a9:d1:c3:13:7e:6d:c0:8b: 69:cc:c3:8a:2c:ae:eb:86:ba:28:78:c8:67:dd:53: 95:df:1a:64:12:67:d2:c2:ee:73:0f:b8:b8:ac:b0: 64:f7:36:4c:57:ba:7b:7d:ac:c7:5d:7a:70:ef:1f: 58:a4:9a:1f:f5:fa:1c:ee:6b:60:20:f1:d1:19:ab: d7:2e:45:24:e0:e8:04:4d:95:34:d1:24:02:1c:f4: d6:5f:df:28:dc:d8:9a:52:d3:e5:f3:a6:24:9c:3b: 9c:d2:63:d6:61:5d:e8:6a:a6:bb:61:fa:46:70:79: 29:fc:0d:3c:11:12:09:4b:66:46:5b:1a:d0:6c:ec: 08:b5:86:37:e3:7e:95:7a:62:54:5e:a2:5c:12:1d: bc:f5:85:d6:60:ca:70:dd:4d:37:8c:7f:7d:69:ca: 91:e0:64:46:0b:26:1e:13:a1:4f:cc:2c:84:62:d9: 82:94:41:e8:99:dc:c6:e7:8a:c9:e9:4a:40:b4:ad: 00:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D2:30:10:FF:CD:63:DB:0C:BE:F3:42:04:41:25:65:29:19:C2:C3 X509v3 Authority Key Identifier: keyid:3A:15:43:BD:F3:77:2A:98:D2:94:EB:90:02:38:03:DD:DD:F1:1E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/675EE9DC87E711EEAC6C0B48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 156.69.31.0/24 Signature Algorithm: sha256WithRSAEncryption 41:50:92:50:7a:18:35:b5:ba:fc:77:d4:b7:d0:2b:2e:3a:9b: 87:3c:9c:30:72:f4:62:76:dd:85:59:0b:d5:4c:20:c7:5f:dc: 22:a1:ae:42:c1:39:34:12:d3:de:60:b6:af:ae:98:ed:c6:0a: 9a:70:ef:44:6d:04:96:0a:fd:ca:84:6d:27:de:64:7f:c9:39: 4d:b6:3a:9d:e4:d4:69:74:26:5a:bf:38:97:33:18:45:29:a9: e6:7c:ec:dd:56:d5:7c:f9:03:f2:76:1d:9d:04:d2:1e:c5:4d: e3:86:9e:62:59:38:7a:a9:0d:e6:53:38:1f:41:55:68:20:62: 20:bd:4c:e5:07:a1:b1:5c:ee:c7:fa:10:ff:57:e6:c8:f8:24: 01:20:64:29:f4:c2:c6:f5:a2:e4:a3:01:da:fc:23:6c:45:c3: 18:20:fe:b6:ab:71:ac:fa:57:42:7a:4c:c3:53:a9:9b:ea:f5: 30:df:28:dd:33:ad:bc:37:78:0a:aa:63:30:7f:ad:93:e7:22: 7b:d8:95:07:15:4e:cf:97:c2:5b:cf:4b:0e:b1:3c:f2:41:9c: 59:57:5f:38:44:04:a5:be:fc:bf:e1:aa:4f:0c:84:d5:0e:f9: 04:52:c1:07:a8:cb:9e:e4:98:dc:6d:58:96:1d:bb:c9:f7:77: e5:3a:86:28 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxOEExMTAvBgNVBAUTKDNBMTU0M0JERjM3NzJBOThEMjk0RUI5MDAyMzgwM0RE RERGMTFFNjIwHhcNMjQxMTE5MDQxOTA1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNjMTFiOS1kMTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmKvbX7eVBuJ0tTRU8ndnINuuRE8/W8ml4yIlvGOUCT8qfii2qu8z7De0vxu Yd9U2FL8pHq3WfFnTehh6eZxv6g0qdHDE35twItpzMOKLK7rhrooeMhn3VOV3xpk EmfSwu5zD7i4rLBk9zZMV7p7fazHXXpw7x9YpJof9foc7mtgIPHRGavXLkUk4OgE TZU00SQCHPTWX98o3NiaUtPl86YknDuc0mPWYV3oaqa7YfpGcHkp/A08ERIJS2ZG WxrQbOwItYY3436VemJUXqJcEh289YXWYMpw3U03jH99acqR4GRGCyYeE6FPzCyE YtmClEHomdzG54rJ6UpAtK0AgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNzSMBD/ zWPbDL7zQgRBJWUpGcLDMB8GA1UdIwQYMBaAFDoVQ73zdyqY0pTrkAI4A93d8R5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzE4QS9FQ0ZGMkFGODg3 RTYxMUVFOTdFNkM3NDZDNEY5QUUwMi9PaFZEdmZOM0twalNsT3VRQWpnRDNkM3hI bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09oVkR2Zk4zS3BqU2xPdVFBamdEM2QzeEhtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMxOEEvRUNGRjJBRjg4N0U2MTFFRTk3RTZDNzQ2QzRGOUFFMDIvNjc1RUU5REM4 N0U3MTFFRUFDNkMwQjQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACcRR8wDQYJKoZIhvcNAQELBQADggEBAEFQklB6GDW1uvx3 1LfQKy46m4c8nDBy9GJ23YVZC9VMIMdf3CKhrkLBOTQS095gtq+umO3GCppw70Rt BJYK/cqEbSfeZH/JOU22Op3k1Gl0Jlq/OJczGEUpqeZ87N1W1Xz5A/J2HZ0E0h7F TeOGnmJZOHqpDeZTOB9BVWggYiC9TOUHobFc7sf6EP9X5sj4JAEgZCn0wsb1ouSj Adr8I2xFwxgg/rarcaz6V0J6TMNTqZvq9TDfKN0zrbw3eAqqYzB/rZPnInvYlQcV Ts+XwlvPSw6xPPJBnFlXXzhEBKW+/L/hqk8MhNUO+QRSwQeoy57kmNxtWJYdu8n3 d+U6hig= -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:05 2024 by rpki-client on console-fra.rpki-client.org