$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/61DBE422A88B11EFAF507987C4F9AE02.roa File: 61DBE422A88B11EFAF507987C4F9AE02.roa (raw, json) Hash identifier: STHjjsnIAoIPHR0TFAUlDiXLQCeT5pB31DsweaU0WWA= Subject key identifier: 7C:8A:9F:0C:96:BE:2C:CB:9C:CC:A7:BE:C7:6C:24:3A:E2:DB:D8:07 Certificate issuer: /CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09 Certificate serial: 013D Authority key identifier: B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/61DBE422A88B11EFAF507987C4F9AE02.roa Signing time: Fri 22 Nov 2024 04:36:47 +0000 ROA not before: Fri 22 Nov 2024 04:36:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 24316 IP address blocks: 203.30.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09 Validity Not Before: Nov 22 04:36:47 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67400a5f-4222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1d:fe:b5:f0:e0:ae:12:64:9f:32:48:c9:43: b7:e5:91:b4:1e:ad:af:11:2f:2e:ef:34:4a:2a:2f: 9c:cf:a1:77:1b:f7:05:a2:38:80:9c:45:36:62:75: 59:e3:d5:ba:45:0a:86:18:14:5c:9b:32:67:7f:c6: 61:8a:b0:aa:02:78:a6:57:d4:e1:4d:f5:a0:4c:59: 6c:5c:e1:6a:e8:a1:cb:12:d7:31:e9:51:9a:66:2e: 56:89:7b:ed:af:3d:72:9b:d6:59:00:10:6c:a0:4b: 59:ab:d6:e2:66:05:da:74:fd:fe:a5:ab:9e:c5:ad: 16:ed:16:41:e7:0e:16:25:62:ff:7a:7f:c9:97:99: 0a:2b:70:4a:57:a2:12:35:f9:cd:5c:3d:eb:7c:99: ee:a6:5b:da:7d:e2:ac:75:c3:10:d6:dc:30:57:a0: 40:34:c6:c2:b1:e7:10:78:e1:a7:fe:8b:d2:28:77: 8e:88:c8:d1:b2:7e:eb:08:5a:34:9a:b0:b1:fe:af: a9:f0:84:9f:b5:f5:dc:b6:76:61:b6:e6:38:a4:e3: ad:b3:37:e6:b1:ab:0c:e5:5d:97:40:0b:71:2c:91: ea:d1:e6:84:eb:0b:dd:e7:07:c5:23:dc:71:61:e0: a0:68:c1:63:00:b2:c5:0f:66:15:33:14:50:c7:ec: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8A:9F:0C:96:BE:2C:CB:9C:CC:A7:BE:C7:6C:24:3A:E2:DB:D8:07 X509v3 Authority Key Identifier: keyid:B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/61DBE422A88B11EFAF507987C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.30.100.0/22 Signature Algorithm: sha256WithRSAEncryption 32:da:f8:a0:07:26:e7:cc:10:89:e5:b1:52:3f:f5:a0:9a:ca: 46:93:d0:9b:6a:f5:58:06:80:eb:dc:ce:bc:2c:74:11:16:d6: 5b:74:4e:d8:91:e5:64:d4:1f:a4:7e:75:4c:41:a2:25:c8:a0: c9:08:dd:c1:36:48:77:32:75:ec:fd:e9:84:ad:d9:20:24:d8: ea:ea:31:d1:87:49:92:72:df:9c:c7:90:52:bd:f0:81:9d:d5: 0b:9d:7a:db:07:3b:90:48:d0:62:e1:11:f0:c3:7a:7d:77:45: fd:91:cd:9b:f0:73:60:52:9d:76:5a:69:1d:43:11:1e:13:2c: d3:e0:fc:60:0c:1d:3b:53:db:68:f3:aa:a9:7e:7f:82:a4:bd: aa:c6:a3:55:19:a7:bd:95:21:8a:ff:28:40:dc:18:b0:d2:a4: 43:c3:8b:0c:e9:26:d7:25:9c:6d:bf:4a:6b:ce:ab:30:f2:41: b4:f9:fa:19:7f:e6:a0:17:8a:15:8c:15:0f:94:e5:e5:36:fd: e1:af:68:b4:fb:57:71:71:de:55:5f:41:32:de:b3:fe:a8:0f: 8b:71:0f:16:20:a5:e4:4b:fd:48:41:86:72:f0:9c:17:30:34: c3:bf:4a:e1:a4:6e:8f:ec:bb:24:0b:4d:f1:2a:e0:81:ee:af: 50:0e:2a:69 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBMTYxMTAvBgNVBAUTKEIxMzgzMkZDQTQ5MzQ0OTYyMzZBQzM4OTQ5OThDM0RE NTEzRDdDMDkwHhcNMjQxMTIyMDQzNjQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQwMGE1Zi00MjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4R3+tfDgrhJknzJIyUO35ZG0Hq2vES8u7zRKKi+cz6F3G/cFojiAnEU2YnVZ 49W6RQqGGBRcmzJnf8ZhirCqAnimV9ThTfWgTFlsXOFq6KHLEtcx6VGaZi5WiXvt rz1ym9ZZABBsoEtZq9biZgXadP3+pauexa0W7RZB5w4WJWL/en/Jl5kKK3BKV6IS NfnNXD3rfJnuplvafeKsdcMQ1twwV6BANMbCsecQeOGn/ovSKHeOiMjRsn7rCFo0 mrCx/q+p8ISftfXctnZhtuY4pOOtszfmsasM5V2XQAtxLJHq0eaE6wvd5wfFI9xx YeCgaMFjALLFD2YVMxRQx+wESQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHyKnwyW vizLnMynvsdsJDri29gHMB8GA1UdIwQYMBaAFLE4Mvykk0SWI2rDiUmYw91RPXwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEExNi9CQUU3RUZGRUND NTMxMUVEODFGNEM1MTVDNEY5QUUwMi9zVGd5X0tTVFJKWWphc09KU1pqRDNWRTlm QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NUZ3lfS1NUUkpZamFzT0pTWmpEM1ZFOWZBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDRBMTYvQkFFN0VGRkVDQzUzMTFFRDgxRjRDNTE1QzRGOUFFMDIvNjFEQkU0MjJB ODhCMTFFRkFGNTA3OTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALLHmQwDQYJKoZIhvcNAQELBQADggEBADLa+KAHJufMEInl sVI/9aCaykaT0Jtq9VgGgOvczrwsdBEW1lt0TtiR5WTUH6R+dUxBoiXIoMkI3cE2 SHcydez96YSt2SAk2OrqMdGHSZJy35zHkFK98IGd1QudetsHO5BI0GLhEfDDen13 Rf2RzZvwc2BSnXZaaR1DER4TLNPg/GAMHTtT22jzqql+f4KkvarGo1UZp72VIYr/ KEDcGLDSpEPDiwzpJtclnG2/SmvOqzDyQbT5+hl/5qAXihWMFQ+U5eU2/eGvaLT7 V3Fx3lVfQTLes/6oD4txDxYgpeRL/UhBhnLwnBcwNMO/SuGkbo/suyQLTfEq4IHu r1AOKmk= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:58 2024 by rpki-client on console-fra.rpki-client.org