$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/36023BC6D29D11EAA11F7F51C4F9AE02.roa File: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (raw, json) Hash identifier: ef1HFtGWmHcKz9CuwiCCXSfT1VQsZ1MT51qDrYk3OoI= Subject key identifier: 01:95:58:D9:A1:4F:E6:46:C5:58:3B:46:FD:CA:11:41:00:69:F6:F4 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 07E8 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/36023BC6D29D11EAA11F7F51C4F9AE02.roa Signing time: Tue 08 Oct 2024 20:59:49 +0000 ROA not before: Tue 08 Oct 2024 20:59:49 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 17439 IP address blocks: 146.88.24.0/22 maxlen: 24 164.52.192.0/19 maxlen: 24 205.147.96.0/21 maxlen: 24 205.147.108.0/22 maxlen: 24 216.48.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Oct 8 20:59:49 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67059d45-2408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:9e:98:cc:be:ee:d4:a6:fb:48:11:ea:f9: 46:70:05:0b:28:6f:e2:c3:85:a3:d1:e1:aa:ea:0e: b1:c8:99:3d:e2:20:3a:7f:08:63:1d:73:13:ac:f1: 6a:ad:bb:4a:25:58:c6:4c:0e:97:a6:73:40:1f:0d: e7:f8:e1:c4:fe:96:ea:cd:98:5f:b1:08:70:14:51: 29:93:04:5f:1b:c8:5e:6d:8e:65:bb:61:c4:28:ff: 80:e6:de:47:0d:60:82:c7:78:17:c3:18:6a:9c:6a: 77:58:ad:f5:85:f7:0d:d8:f5:be:d2:2b:4c:bf:12: e6:c4:6a:ec:78:ac:11:c8:db:cd:ff:58:53:33:2f: 84:5d:af:33:62:f0:8d:27:30:e9:fb:b0:47:70:a0: 95:c4:65:53:8f:87:42:de:ea:78:bd:67:d7:b4:7c: 67:4e:a4:80:75:8c:02:e9:4f:d0:92:f1:2a:24:ee: 6d:2a:f1:3b:5f:c4:79:21:0b:f7:70:6a:9c:9f:93: cb:74:b2:6d:89:72:3e:83:9d:43:35:bf:83:5b:2a: f0:a1:fb:ad:5c:ba:c9:fe:33:77:a9:41:a4:57:d7: 80:6b:c3:1d:18:98:3e:19:d1:3b:24:fb:20:58:99: e3:a9:bd:ac:a2:ed:48:9a:52:bd:e0:47:f6:c7:33: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:95:58:D9:A1:4F:E6:46:C5:58:3B:46:FD:CA:11:41:00:69:F6:F4 X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/36023BC6D29D11EAA11F7F51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.88.24.0/22 164.52.192.0/19 205.147.96.0/21 205.147.108.0/22 216.48.176.0/20 Signature Algorithm: sha256WithRSAEncryption 27:63:7b:c5:fe:bc:b9:53:06:cc:23:84:63:e1:9d:4c:79:7d: c3:f6:b5:01:b8:9d:c3:ec:03:ba:f8:c1:cd:82:21:57:9b:58: 04:e6:0f:38:0e:57:0b:98:1b:e8:fb:71:bb:61:28:a1:1e:f1: cb:99:75:1e:05:2e:84:c4:ce:49:37:86:57:39:20:63:be:19: 9c:14:4a:e7:33:4e:23:e7:08:a5:52:62:9c:b7:04:39:ba:16: d0:f7:96:cc:d7:74:7c:07:0e:23:1f:6f:7a:fc:65:d6:b2:3d: cc:bb:71:92:54:bd:ec:8e:e2:56:e6:1b:90:fa:59:c0:ca:de: 0a:2e:62:c4:1c:cc:7a:b5:dd:6d:bb:a0:b1:c7:32:7f:9f:c8: 76:2e:c0:7a:51:d1:01:37:16:80:47:ea:57:af:19:d5:0f:e8: b1:ae:eb:df:45:cc:7e:8c:fb:b2:5e:e1:a6:d3:30:0b:14:6d: 0e:e0:16:e5:f6:2f:e8:05:76:16:ba:28:31:9f:d8:3d:f4:63: 87:8a:f9:7f:83:4d:1c:dc:72:fc:ae:f0:b7:04:6a:07:ae:b4: 41:01:2d:40:89:39:f6:dc:fb:c5:55:d4:9f:0d:df:d1:3e:50: 96:f0:45:cc:61:cd:9f:65:39:2c:da:95:2c:fc:8f:12:1c:2b: 75:a8:1c:81 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjQxMDA4MjA1OTQ5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA1OWQ0NS0yNDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUmemMy+7tSm+0gR6vlGcAULKG/iw4Wj0eGq6g6xyJk94iA6fwhjHXMTrPFq rbtKJVjGTA6XpnNAHw3n+OHE/pbqzZhfsQhwFFEpkwRfG8hebY5lu2HEKP+A5t5H DWCCx3gXwxhqnGp3WK31hfcN2PW+0itMvxLmxGrseKwRyNvN/1hTMy+EXa8zYvCN JzDp+7BHcKCVxGVTj4dC3up4vWfXtHxnTqSAdYwC6U/QkvEqJO5tKvE7X8R5IQv3 cGqcn5PLdLJtiXI+g51DNb+DWyrwofutXLrJ/jN3qUGkV9eAa8MdGJg+GdE7JPsg WJnjqb2sou1ImlK94Ef2xzOgpwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAGVWNmh T+ZGxVg7Rv3KEUEAafb0MB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RERDQjYvRTg4M0RGRDZDQzNEMTFFQThCQzQ1QzI5QzRGOUFFMDIvMzYwMjNCQzZE MjlEMTFFQUExMUY3RjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAKSWBgDBAWkNMADBAPNk2ADBALNk2wDBATYMLAwDQYJKoZI hvcNAQELBQADggEBACdje8X+vLlTBswjhGPhnUx5fcP2tQG4ncPsA7r4wc2CIVeb WATmDzgOVwuYG+j7cbthKKEe8cuZdR4FLoTEzkk3hlc5IGO+GZwUSuczTiPnCKVS Ypy3BDm6FtD3lszXdHwHDiMfb3r8ZdayPcy7cZJUveyO4lbmG5D6WcDK3gouYsQc zHq13W27oLHHMn+fyHYuwHpR0QE3FoBH6levGdUP6LGu699FzH6M+7Je4abTMAsU bQ7gFuX2L+gFdha6KDGf2D30Y4eK+X+DTRzccvyu8LcEageutEEBLUCJOfbc+8VV 1J8N39E+UJbwRcxhzZ9lOSzalSz8jxIcK3WoHIE= -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:47 2024 by rpki-client on console-fra.rpki-client.org