$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa File: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (raw, json) Hash identifier: 1lAGETSydBwVjG0hesN1/ViGN9eOR/26uzUYMFoxaT4= Subject key identifier: 40:51:F1:2C:80:2C:8E:C6:BC:BC:41:07:24:CB:E1:E4:A3:1C:D1:88 Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 012B Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa Signing time: Sun 21 Jul 2024 04:16:11 +0000 ROA not before: Sun 21 Jul 2024 04:16:11 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 132698 IP address blocks: 203.124.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: Jul 21 04:16:11 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=669c8b8b-197b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6d:69:8f:72:77:8e:ff:f1:e0:d2:96:8a:57: b8:b1:b4:7c:8a:2a:24:12:8f:9a:b4:5d:46:a4:2e: 7a:79:bd:0d:d9:3b:23:5d:f4:54:8b:19:a7:00:0b: 83:31:56:19:68:de:2e:e9:61:6c:e4:f1:7f:63:fa: 87:9a:e4:01:d6:59:f1:45:ab:b0:a6:b8:33:c4:6b: 55:a9:8e:9a:3e:c0:b0:b9:f7:df:8a:be:49:97:2a: a0:7c:17:f7:c5:69:b6:37:bb:8a:17:32:b6:24:b4: a8:e0:64:7a:f3:30:dd:e5:b5:46:da:62:bd:5b:8d: 73:6a:e9:5b:b7:a8:fc:41:8c:99:87:df:f5:02:43: 53:69:e8:fa:09:c4:ae:1e:9c:83:7a:99:c4:00:9a: 0f:f6:d8:71:a6:39:9b:7e:5f:8a:71:fc:a5:8c:e4: e4:ff:5c:2e:13:87:9a:8b:9f:19:af:61:52:c1:a2: 49:df:7a:9e:72:ff:c3:f9:cd:77:4e:70:69:db:56: 3d:e4:53:fb:b5:b0:ac:67:d7:f8:f6:21:15:32:ab: fd:d1:8d:39:4b:63:28:63:ff:4a:3b:56:46:3e:9d: 5c:e1:d0:63:67:c7:b8:d6:0e:00:43:bb:8a:d3:f2: ea:4d:fa:52:63:e8:3f:0c:f7:10:3a:b9:f9:ef:06: 36:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:51:F1:2C:80:2C:8E:C6:BC:BC:41:07:24:CB:E1:E4:A3:1C:D1:88 X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.124.14.0/24 Signature Algorithm: sha256WithRSAEncryption 41:7f:2c:aa:01:58:ee:4c:79:c5:0a:bc:b1:6e:c1:12:ab:81: a6:b9:c8:56:80:ce:19:69:40:a0:a9:52:ad:c7:9a:b3:80:45: 77:68:90:90:52:e6:44:7f:b2:e5:19:56:c0:63:68:a1:00:bc: 09:ee:a0:c8:4b:d7:58:e0:cd:53:e6:e1:3a:ee:be:39:1a:e6: de:51:7b:70:21:20:83:64:f4:0b:7d:13:17:c0:98:77:df:45: a4:bf:58:82:2c:94:5f:8e:f0:af:c5:ef:8a:6d:66:f2:e9:5d: 00:71:05:c3:c1:c8:81:8f:8f:18:1e:3d:4d:1c:3d:f3:60:e8: 40:12:a3:c9:92:48:cc:34:8c:92:12:9a:e6:9e:b4:c2:b7:fd: 7f:a2:7e:4b:34:f7:64:d2:fa:e4:15:43:6f:68:ca:a9:b3:5b: d5:03:ba:30:49:e3:37:27:6d:31:a3:ad:95:e9:e4:40:a3:e9: 3f:ea:de:05:a4:33:e6:78:c6:31:88:d3:4a:8f:2c:c0:58:a7: c5:10:16:eb:cc:50:08:13:09:60:96:d7:49:96:4d:db:43:3a: 6b:99:70:92:56:01:3a:7d:89:95:fc:c0:e8:56:ee:4b:ff:a6: 2f:eb:de:f3:6f:32:2e:b4:ec:32:15:f1:d5:c2:fd:f2:17:2d: 5e:08:75:e1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjQwNzIxMDQxNjExWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjljOGI4Yi0xOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA421pj3J3jv/x4NKWile4sbR8iiokEo+atF1GpC56eb0N2TsjXfRUixmnAAuD MVYZaN4u6WFs5PF/Y/qHmuQB1lnxRauwprgzxGtVqY6aPsCwufffir5JlyqgfBf3 xWm2N7uKFzK2JLSo4GR68zDd5bVG2mK9W41zaulbt6j8QYyZh9/1AkNTaej6CcSu HpyDepnEAJoP9thxpjmbfl+KcfyljOTk/1wuE4eai58Zr2FSwaJJ33qecv/D+c13 TnBp21Y95FP7tbCsZ9f49iEVMqv90Y05S2MoY/9KO1ZGPp1c4dBjZ8e41g4AQ7uK 0/LqTfpSY+g/DPcQOrn57wY2xQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEBR8SyA LI7GvLxBByTL4eSjHNGIMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ2OTYvRDZBMTFDNEE5MEJGMTFFRDhDQzFFNzgzQzRGOUFFMDIvNjNDQzJBQTgw RkVFMTFFRUJDQzZBRTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLfA4wDQYJKoZIhvcNAQELBQADggEBAEF/LKoBWO5MecUK vLFuwRKrgaa5yFaAzhlpQKCpUq3HmrOARXdokJBS5kR/suUZVsBjaKEAvAnuoMhL 11jgzVPm4Truvjka5t5Re3AhIINk9At9ExfAmHffRaS/WIIslF+O8K/F74ptZvLp XQBxBcPByIGPjxgePU0cPfNg6EASo8mSSMw0jJISmuaetMK3/X+ifks092TS+uQV Q29oyqmzW9UDujBJ4zcnbTGjrZXp5ECj6T/q3gWkM+Z4xjGI00qPLMBYp8UQFuvM UAgTCWCW10mWTdtDOmuZcJJWATp9iZX8wOhW7kv/pi/r3vNvMi607DIV8dXC/fIX LV4IdeE= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:54 2024 by rpki-client on console-ams.rpki-client.org