$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/FD114232912711EFBCB4ED6EC4F9AE02.roa File: FD114232912711EFBCB4ED6EC4F9AE02.roa (raw, json) Hash identifier: 1ZNHVVO60NViwnNr302mpP5jDT8su+zYi69HimFkoic= Subject key identifier: 61:CA:A0:C2:9A:A6:7D:72:C0:A1:9F:86:97:64:80:41:78:10:A7:FE Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Certificate serial: 0995 Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/FD114232912711EFBCB4ED6EC4F9AE02.roa Signing time: Wed 23 Oct 2024 10:17:21 +0000 ROA not before: Wed 23 Oct 2024 10:17:21 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 139715 IP address blocks: 123.0.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2453 (0x995) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Validity Not Before: Oct 23 10:17:21 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=6718cd31-5ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d6:32:c7:01:b8:b9:8b:0f:66:53:39:36:b9: 4c:41:43:d7:9e:2e:c1:69:b2:30:6a:f5:d5:dd:ba: 91:11:c7:26:dd:36:0e:6a:a0:1f:4c:9a:72:96:e2: df:79:1c:f4:41:58:db:82:0d:87:79:b1:46:5a:2c: 0c:51:1f:a5:ab:6c:b2:40:89:8f:79:71:66:e6:f5: 11:19:04:7a:95:4b:bb:c8:71:87:c1:64:21:5d:ea: 82:76:13:80:6f:a4:20:db:8f:14:d2:6f:19:bd:3b: b6:88:dc:b0:5f:2d:1f:37:48:27:dc:61:34:5c:26: 68:e5:b6:e4:cf:84:b0:be:0f:74:43:81:ec:38:93: fe:c9:d6:ec:2a:6b:d2:fa:b4:ee:36:6a:28:40:4c: b4:33:22:65:15:c3:f6:70:6e:ec:51:6d:8c:64:c2: f5:ae:49:de:c5:91:94:55:ed:15:52:c1:a3:b0:46: c4:48:37:e8:22:e0:3d:9c:50:ce:f3:ae:f4:a3:fa: 90:1d:2e:5a:95:ec:92:43:cc:77:c2:50:aa:95:79: 5d:fc:69:39:e0:8b:3e:03:c3:a5:67:47:55:6d:65: 1c:1f:34:db:2a:d7:43:f0:9d:d7:68:de:eb:be:cd: db:bd:96:48:43:2b:e0:28:5c:97:7f:12:d0:e6:21: dd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CA:A0:C2:9A:A6:7D:72:C0:A1:9F:86:97:64:80:41:78:10:A7:FE X509v3 Authority Key Identifier: keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/FD114232912711EFBCB4ED6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.0.29.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:c5:7c:d2:e7:de:ee:ae:cb:5d:39:f2:9b:54:7b:24:bd:a0: 74:29:57:61:54:9b:65:2a:86:cb:26:5b:05:cf:72:08:5a:9d: 33:c8:69:24:db:51:f5:bc:46:44:ba:19:17:ae:63:31:c1:b0: 7f:d9:4b:52:2d:be:97:23:8d:e6:7b:66:06:d4:f4:7d:f7:90: 6d:02:5d:80:33:c6:13:b3:60:b4:b4:94:e7:ab:a0:ee:2e:ad: cc:10:db:5b:8a:a7:5b:32:a6:a1:d2:84:de:b2:c1:09:b9:90: 98:88:ca:ae:53:c1:be:e2:cd:6f:a0:5b:f3:f7:90:c0:2d:f0: 84:7f:89:94:01:80:00:13:89:e7:82:29:7d:b5:39:08:5b:00: c0:f2:0e:d5:25:c1:fe:81:e6:01:37:9e:59:43:d0:27:f6:51: c3:17:1d:1d:57:3b:83:5c:91:97:aa:f8:d7:40:6c:b6:73:87: 4c:32:e0:41:f7:e7:88:31:34:b5:39:b3:7a:3b:34:ec:59:ce: b8:28:2c:65:e0:e5:26:42:24:f7:29:a2:0a:e6:88:1f:22:e6: e7:a8:8f:fa:dd:93:77:fe:0d:57:33:28:e9:54:4a:41:24:fd: b1:c7:41:73:03:a9:b6:89:1d:8c:6e:e1:8f:8c:70:f8:92:41: fc:74:94:80 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz MDZGODYyMjgwHhcNMjQxMDIzMTAxNzIxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE4Y2QzMS01YmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodYyxwG4uYsPZlM5NrlMQUPXni7BabIwavXV3bqREccm3TYOaqAfTJpyluLf eRz0QVjbgg2HebFGWiwMUR+lq2yyQImPeXFm5vURGQR6lUu7yHGHwWQhXeqCdhOA b6Qg248U0m8ZvTu2iNywXy0fN0gn3GE0XCZo5bbkz4Swvg90Q4HsOJP+ydbsKmvS +rTuNmooQEy0MyJlFcP2cG7sUW2MZML1rknexZGUVe0VUsGjsEbESDfoIuA9nFDO 8670o/qQHS5aleySQ8x3wlCqlXld/Gk54Is+A8OlZ0dVbWUcHzTbKtdD8J3XaN7r vs3bvZZIQyvgKFyXfxLQ5iHd/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGHKoMKa pn1ywKGfhpdkgEF4EKf+MB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5 NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REYwRUMvOTkxQ0VGN0U3OTU4MTFFQTkzQUU5NjQ2QzRGOUFFMDIvRkQxMTQyMzI5 MTI3MTFFRkJDQjRFRDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB7AB0wDQYJKoZIhvcNAQELBQADggEBAJ3FfNLn3u6uy105 8ptUeyS9oHQpV2FUm2UqhssmWwXPcghanTPIaSTbUfW8RkS6GReuYzHBsH/ZS1It vpcjjeZ7ZgbU9H33kG0CXYAzxhOzYLS0lOeroO4urcwQ21uKp1sypqHShN6ywQm5 kJiIyq5Twb7izW+gW/P3kMAt8IR/iZQBgAATieeCKX21OQhbAMDyDtUlwf6B5gE3 nllD0Cf2UcMXHR1XO4NckZeq+NdAbLZzh0wy4EH354gxNLU5s3o7NOxZzrgoLGXg 5SZCJPcpogrmiB8i5ueoj/rdk3f+DVczKOlUSkEk/bHHQXMDqbaJHYxu4Y+McPiS Qfx0lIA= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org