$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7B938024B0CD11E58B55FC73C4F9AE02.roa File: 7B938024B0CD11E58B55FC73C4F9AE02.roa (raw, json) Hash identifier: K7Nj7n/i6tjKO0doM6XNQ63Jlt3J6xLH5CMscSm9Z5g= Subject key identifier: 1B:F2:03:10:27:02:C6:72:34:8B:ED:14:FC:F2:53:AD:1C:04:00:AC Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 34AC Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7B938024B0CD11E58B55FC73C4F9AE02.roa Signing time: Fri 08 Dec 2023 14:40:33 +0000 ROA not before: Fri 08 Dec 2023 14:40:33 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 18188 IP address blocks: 121.58.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13484 (0x34ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Validity Not Before: Dec 8 14:40:33 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65732ae1-3d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:24:fa:d3:0e:95:1f:86:12:34:0a:73:57: e1:57:88:ad:d7:3c:d4:d5:31:50:6f:ec:d6:f3:bf: 64:60:1b:88:d7:67:25:85:cd:b1:58:ec:f4:d6:75: 92:8e:24:f1:ec:70:c1:85:cc:c6:9a:a4:66:d3:a4: e7:95:5c:78:e2:39:3b:38:7e:38:83:82:74:bc:2c: 1d:9f:a4:21:4d:68:37:48:a7:42:2b:ba:64:31:3c: 3a:e8:09:36:40:e8:21:2f:36:22:ab:3e:08:8b:04: c6:2c:0e:36:08:75:ff:cf:d0:ad:84:6b:05:cc:b7: b4:77:bf:46:23:04:67:12:28:7a:8d:d9:b8:6f:63: 6d:88:b6:e4:fe:ae:b9:84:a4:eb:c8:09:cc:8e:2b: 86:2a:74:03:bf:c6:3a:22:e5:89:40:ef:31:ab:8c: 9e:ea:ca:8a:07:3c:7b:82:7f:eb:d7:72:fc:87:f2: 61:e2:77:16:68:07:f6:43:6f:35:8f:ef:05:d6:6d: 1a:9f:f8:ad:5d:de:52:56:79:f2:a9:af:34:6f:6f: c2:96:2b:a9:b8:0d:14:4b:62:33:68:5c:38:fc:e6: e1:7f:39:4c:31:06:cd:fa:32:cb:8d:03:0d:bc:76: 75:5e:73:b1:5c:c3:91:95:bf:6b:e6:3d:2e:f9:66: 02:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F2:03:10:27:02:C6:72:34:8B:ED:14:FC:F2:53:AD:1C:04:00:AC X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7B938024B0CD11E58B55FC73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.58.232.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:09:eb:aa:f6:9f:f6:6c:12:65:7b:13:c9:16:37:95:fd:42: 4d:98:db:06:9c:c4:1f:6b:2e:a0:43:ba:cb:fc:d5:26:d2:e2: 62:6c:67:11:9b:c6:e0:89:42:3b:87:21:30:1b:f1:a7:9e:6f: 9b:4e:b3:9a:39:ca:5a:5c:86:14:99:c9:78:cb:04:b6:6a:6e: 60:5d:43:1d:41:d9:57:4b:75:93:eb:5b:1a:4e:0f:e7:7d:68: 05:32:4a:7d:8b:bd:9f:ef:f8:84:17:b8:76:2b:5a:75:54:cc: 48:34:85:a0:95:a0:7b:fd:0c:83:30:45:3f:64:52:59:ac:96: 0c:e5:be:11:07:35:60:ec:62:49:72:a2:ff:af:4e:7c:ac:8d: 64:49:ab:07:c5:22:b9:02:6a:b5:6f:36:df:55:6a:ec:2b:2e: e3:4f:2e:e4:67:a3:1d:57:fc:87:ae:3e:d0:b0:d6:d5:7f:d2: 55:3e:4c:de:f7:29:d9:52:69:77:aa:f3:03:47:ba:47:ff:f1: 4c:d4:61:93:c8:65:8a:9d:5e:2a:6b:c0:f6:08:fc:83:b1:13: 9a:37:cf:e9:b4:da:e3:ab:f4:97:a6:99:21:aa:dd:63:4f:8a: a4:92:ed:f8:b3:f0:2c:42:fe:47:0b:72:75:63:51:28:75:de: f9:44:f5:47 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjMxMjA4MTQ0MDMzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczMmFlMS0zZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPAk+tMOlR+GEjQKc1fhV4it1zzU1TFQb+zW879kYBuI12clhc2xWOz01nWS jiTx7HDBhczGmqRm06TnlVx44jk7OH44g4J0vCwdn6QhTWg3SKdCK7pkMTw66Ak2 QOghLzYiqz4IiwTGLA42CHX/z9CthGsFzLe0d79GIwRnEih6jdm4b2NtiLbk/q65 hKTryAnMjiuGKnQDv8Y6IuWJQO8xq4ye6sqKBzx7gn/r13L8h/Jh4ncWaAf2Q281 j+8F1m0an/itXd5SVnnyqa80b2/CliupuA0US2IzaFw4/ObhfzlMMQbN+jLLjQMN vHZ1XnOxXMORlb9r5j0u+WYCYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBvyAxAn AsZyNIvtFPzyU60cBACsMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI0NTQvRDRDMzBCNDIxRDg3MTFFMkExOTgyMkUwMDhCMDJDRDIvN0I5MzgwMjRC MENEMTFFNThCNTVGQzczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB5OugwDQYJKoZIhvcNAQELBQADggEBAAsJ66r2n/ZsEmV7 E8kWN5X9Qk2Y2wacxB9rLqBDusv81SbS4mJsZxGbxuCJQjuHITAb8aeeb5tOs5o5 ylpchhSZyXjLBLZqbmBdQx1B2VdLdZPrWxpOD+d9aAUySn2LvZ/v+IQXuHYrWnVU zEg0haCVoHv9DIMwRT9kUlmslgzlvhEHNWDsYklyov+vTnysjWRJqwfFIrkCarVv Nt9VauwrLuNPLuRnox1X/IeuPtCw1tV/0lU+TN73KdlSaXeq8wNHukf/8UzUYZPI ZYqdXiprwPYI/IOxE5o3z+m02uOr9JemmSGq3WNPiqSS7fiz8CxC/kcLcnVjUSh1 3vlE9Uc= -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:44 2024 by rpki-client on console-fra.rpki-client.org