$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/47C532D045B911EF93633071C4F9AE02.roa File: 47C532D045B911EF93633071C4F9AE02.roa (raw, json) Hash identifier: rE+0lealMQunqmP7T0ZCFPfRDHKLNmLXQBimJeKVcUo= Subject key identifier: 88:A3:E5:0A:F9:34:64:C0:AE:63:3B:89:AB:0E:5A:C9:8B:4F:C9:D8 Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Certificate serial: 02 Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/47C532D045B911EF93633071C4F9AE02.roa Signing time: Fri 19 Jul 2024 10:25:55 +0000 ROA not before: Fri 19 Jul 2024 10:25:55 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152317 IP address blocks: 157.10.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Validity Not Before: Jul 19 10:25:55 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=669a3f32-81e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:59:c6:91:bb:cb:0e:bf:0a:75:f7:ad:51:65: 16:e3:e8:73:07:b9:0d:e9:a2:bd:f2:10:9e:83:03: e7:a0:8a:5c:bc:a6:74:e1:1e:e6:83:87:4a:45:5a: 51:b1:40:d7:ad:44:86:a9:3e:3f:80:5c:0d:4c:1e: 0f:00:3b:ec:f2:6b:d6:90:22:59:14:1c:f8:8f:24: ee:bb:37:bb:80:c7:a0:34:3c:c0:20:0b:a1:31:27: 69:3f:87:3f:39:80:e6:99:76:2f:f4:30:8f:8f:da: 0b:39:f8:b6:66:17:6b:79:19:5d:f3:69:90:cb:2d: 10:ea:51:2a:49:76:7a:08:c1:5e:a1:70:b1:6d:65: e7:53:7d:70:d3:37:af:fc:07:61:31:05:2d:7b:bb: 25:9f:1a:9c:9c:dd:ef:0d:a8:93:98:68:99:e8:0d: 5c:96:b0:76:10:b5:c7:04:68:47:84:9a:0a:a5:84: b6:5e:75:86:e0:1f:e8:e2:23:69:84:03:96:4a:c3: 1c:6c:87:fb:fb:83:0c:7d:34:a9:ca:71:b0:95:c4: 6a:02:99:d6:d0:fe:76:13:72:28:2d:ea:e4:54:0b: 18:8f:e7:e6:4f:2f:9b:a5:f8:39:6d:7c:39:c1:b6: c9:16:e0:31:6f:62:97:d0:cb:70:58:fb:30:bb:38: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A3:E5:0A:F9:34:64:C0:AE:63:3B:89:AB:0E:5A:C9:8B:4F:C9:D8 X509v3 Authority Key Identifier: keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/47C532D045B911EF93633071C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.146.0/23 Signature Algorithm: sha256WithRSAEncryption 46:1c:3c:97:d4:c3:fb:02:0c:a4:9e:63:f0:cd:89:4b:06:4b: 63:cf:bf:86:61:25:db:f5:1e:8c:0a:a4:9e:5f:d9:4e:3c:87: a8:8c:6d:0f:87:6b:e4:32:69:36:11:09:4b:97:80:fe:32:5a: cf:f7:cd:da:e6:6f:16:7a:b3:67:2a:85:cd:b0:90:6b:a1:ad: 42:b2:64:d6:c0:13:ba:11:9c:86:db:ca:b9:81:f7:ec:f8:58: c1:52:5a:17:30:e5:d8:93:ad:08:c6:45:a1:a3:45:8c:7b:1f: f3:6a:a6:1d:bb:e5:4b:d8:22:c0:51:44:07:1f:fd:d7:d8:60: 7c:96:df:e2:9e:ce:7c:d2:4e:94:a6:1d:36:d8:15:e0:62:94: 6b:86:90:c8:63:73:3f:77:25:3b:bf:75:2c:f0:cd:19:72:82: cb:7c:ac:60:ef:59:e4:7a:bf:28:36:dd:77:c5:c8:92:7f:b8: d9:24:92:82:ff:8f:17:bb:8c:96:5a:7c:86:80:fb:42:3d:6b: 77:4e:70:25:4c:7c:4f:42:18:61:a5:70:cb:65:6b:c2:1f:98: 6a:57:03:02:19:70:43:06:cd:0c:01:3b:8e:71:4a:ea:9e:ec: 73:27:89:0b:c2:f9:2a:06:d4:c1:6b:d8:f2:6a:0b:30:de:89: 54:5d:83:3e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzREMDExMC8GA1UEBRMoRTA2RkU4NDFDNkJCNDk4QTFGQkY2N0VFM0FBOEM4QTlD NTM4N0QwRjAeFw0yNDA3MTkxMDI1NTVaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2OWEzZjMyLTgxZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLWcaRu8sOvwp1961RZRbj6HMHuQ3por3yEJ6DA+egily8pnThHuaDh0pFWlGx QNetRIapPj+AXA1MHg8AO+zya9aQIlkUHPiPJO67N7uAx6A0PMAgC6ExJ2k/hz85 gOaZdi/0MI+P2gs5+LZmF2t5GV3zaZDLLRDqUSpJdnoIwV6hcLFtZedTfXDTN6/8 B2ExBS17uyWfGpyc3e8NqJOYaJnoDVyWsHYQtccEaEeEmgqlhLZedYbgH+jiI2mE A5ZKwxxsh/v7gwx9NKnKcbCVxGoCmdbQ/nYTcigt6uRUCxiP5+ZPL5ul+DltfDnB tskW4DFvYpfQy3BY+zC7OH4HAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUiKPlCvk0 ZMCuYzuJqw5ayYtPydgwHwYDVR0jBBgwFoAU4G/oQca7SYofv2fuOqjIqcU4fQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzNEQwL0VDRjgwRjg2NDVC NzExRUZBM0Q5QTA0OUM0RjlBRTAyLzRHX29RY2E3U1lvZnYyZnVPcWpJcWNVNGZR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNEdfb1FjYTdTWW9mdjJmdU9xaklxY1U0ZlE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9FQ0Y4MEY4NjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80N0M1MzJEMDQ1 QjkxMUVGOTM2MzMwNzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0KkjANBgkqhkiG9w0BAQsFAAOCAQEARhw8l9TD+wIMpJ5j 8M2JSwZLY8+/hmEl2/UejAqknl/ZTjyHqIxtD4dr5DJpNhEJS5eA/jJaz/fN2uZv FnqzZyqFzbCQa6GtQrJk1sATuhGchtvKuYH37PhYwVJaFzDl2JOtCMZFoaNFjHsf 82qmHbvlS9giwFFEBx/919hgfJbf4p7OfNJOlKYdNtgV4GKUa4aQyGNzP3clO791 LPDNGXKCy3ysYO9Z5Hq/KDbdd8XIkn+42SSSgv+PF7uMllp8hoD7Qj1rd05wJUx8 T0IYYaVwy2Vrwh+YalcDAhlwQwbNDAE7jnFK6p7scyeJC8L5KgbUwWvY8moLMN6J VF2DPg== -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:24 2024 by rpki-client on console-fra.rpki-client.org