$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/E309B1883C9711EF88C2B284C4F9AE02.roa File: E309B1883C9711EF88C2B284C4F9AE02.roa (raw, json) Hash identifier: w51TUZ9aKXo3NJmk6dhABfqfugO3+EeHqPsN7Ek6pSc= Subject key identifier: C3:18:E4:8E:86:90:F7:81:D2:93:D0:90:9A:64:72:B1:8C:EF:AE:E3 Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Certificate serial: 01E2 Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/E309B1883C9711EF88C2B284C4F9AE02.roa Signing time: Sun 25 Aug 2024 03:25:25 +0000 ROA not before: Sun 25 Aug 2024 03:25:25 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 396356 IP address blocks: 203.33.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Validity Not Before: Aug 25 03:25:25 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66caa424-adc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:ab:8f:54:5b:d9:ca:8d:0e:7b:e4:a7:ba: b7:dd:af:79:64:27:8b:8f:ed:30:6b:a5:b7:1b:c5: e7:92:03:56:3a:15:5b:d5:6e:f6:7c:4a:ae:ea:44: 9f:e6:b8:21:05:29:81:95:56:cf:ad:4c:28:1b:76: 54:66:bd:d0:eb:2c:1c:f6:1c:9d:fa:9b:95:9f:8e: 45:20:df:ec:7a:93:e6:93:27:74:cc:d4:c9:d4:70: 8a:1d:a7:2c:5c:e1:57:a3:1a:1c:08:63:17:97:6e: 5f:84:7f:e2:c7:3d:7a:9f:a2:60:0a:f7:72:32:9b: e1:58:33:8f:38:99:af:0b:21:c8:01:9c:db:72:b6: ed:e6:1b:da:c2:93:a9:23:58:46:5b:2f:8e:28:1c: 7b:1f:c0:3a:e8:bb:0d:8d:df:7d:c5:38:54:92:80: b1:2f:0b:e8:dc:b1:73:c7:22:6b:ca:fa:c0:56:f1: 3d:59:c3:e4:13:b2:9b:bb:55:57:ca:9c:8b:42:d1: 00:85:23:da:fb:31:e7:81:fc:df:8c:2c:03:f6:f4: d2:b1:d3:67:9f:93:c3:68:bf:1b:9e:f5:55:8f:27: 0e:f4:48:a5:b0:99:3c:ea:4f:13:14:90:e8:48:99: 19:7f:a4:96:35:d7:9a:68:3f:50:c0:e8:4c:4f:15: a0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:18:E4:8E:86:90:F7:81:D2:93:D0:90:9A:64:72:B1:8C:EF:AE:E3 X509v3 Authority Key Identifier: keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/E309B1883C9711EF88C2B284C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.33.238.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:a1:a9:56:be:a2:03:17:58:72:43:e5:2d:03:b2:56:ad:af: d2:bd:2a:3a:46:64:9b:5b:23:8f:fe:d2:0f:98:e4:30:72:97: fe:8e:a4:04:b0:a8:81:7a:0f:01:76:e4:9b:8a:8d:9f:22:bd: 65:a0:80:fd:a1:c7:85:88:3c:ce:f5:1b:d8:b9:e5:c7:18:fd: 0a:fd:52:f1:59:1c:27:01:ee:fd:6b:3c:98:02:f1:57:9d:50: 3a:00:f7:b2:66:2e:84:d9:8a:2b:3c:81:55:9e:af:73:04:f7: 42:29:33:ca:68:7e:e6:98:27:76:88:50:c8:5e:d9:c7:d6:99: 75:44:98:19:3f:48:ce:68:84:87:7a:0e:24:94:a5:2a:10:a0: 11:e8:42:64:27:80:95:64:6f:a4:ca:c5:17:4e:cc:45:88:7b: ec:c4:21:42:5c:9c:32:10:65:9e:ec:f8:4a:73:82:f9:6e:b0: 05:12:59:aa:d1:69:62:57:1d:6f:65:85:31:b6:d0:08:7d:37: ac:1e:56:d9:20:84:ca:1c:af:3a:91:24:de:37:54:c4:52:7a: 1c:9e:7f:55:c6:b9:cd:10:13:06:79:64:b4:7b:a9:51:6d:f6: cb:d8:96:dc:bc:c0:0f:53:f7:2f:46:be:5e:05:ec:6b:5c:e9: f1:04:92:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkExMTAvBgNVBAUTKEIwNjdDNkJCNzBERjBEQzA0Q0U3N0Y3QzhENzY3MDZB NDlGNkNCODUwHhcNMjQwODI1MDMyNTI1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNhYTQyNC1hZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1Wrj1Rb2cqNDnvkp7q33a95ZCeLj+0wa6W3G8XnkgNWOhVb1W72fEqu6kSf 5rghBSmBlVbPrUwoG3ZUZr3Q6ywc9hyd+puVn45FIN/sepPmkyd0zNTJ1HCKHacs XOFXoxocCGMXl25fhH/ixz16n6JgCvdyMpvhWDOPOJmvCyHIAZzbcrbt5hvawpOp I1hGWy+OKBx7H8A66LsNjd99xThUkoCxLwvo3LFzxyJryvrAVvE9WcPkE7Kbu1VX ypyLQtEAhSPa+zHngfzfjCwD9vTSsdNnn5PDaL8bnvVVjycO9EilsJk86k8TFJDo SJkZf6SWNdeaaD9QwOhMTxWgOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMMY5I6G kPeB0pPQkJpkcrGM767jMB8GA1UdIwQYMBaAFLBnxrtw3w3ATOd/fI12cGpJ9suF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2QS9FQzA5QUE0QTMw N0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRjQk01Mzk4alhad2FrbjJ5 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHZkd1M0RmRGNCTTUzOThqWFp3YWtuMnk0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDM2NkEvRUMwOUFBNEEzMDdEMTFFREE2QzNBMjEyQzRGOUFFMDIvRTMwOUIxODgz Qzk3MTFFRjg4QzJCMjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLIe4wDQYJKoZIhvcNAQELBQADggEBAByhqVa+ogMXWHJD 5S0Dslatr9K9KjpGZJtbI4/+0g+Y5DByl/6OpASwqIF6DwF25JuKjZ8ivWWggP2h x4WIPM71G9i55ccY/Qr9UvFZHCcB7v1rPJgC8VedUDoA97JmLoTZiis8gVWer3ME 90IpM8pofuaYJ3aIUMhe2cfWmXVEmBk/SM5ohId6DiSUpSoQoBHoQmQngJVkb6TK xRdOzEWIe+zEIUJcnDIQZZ7s+EpzgvlusAUSWarRaWJXHW9lhTG20Ah9N6weVtkg hMocrzqRJN43VMRSehyef1XGuc0QEwZ5ZLR7qVFt9svYlty8wA9T9y9Gvl4F7Gtc 6fEEkjk= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:46 2024 by rpki-client on console-fra.rpki-client.org