$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/D27AE4B27E9511ECA9132A0BC4F9AE02.roa File: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (raw, json) Hash identifier: TvzuvljGMYe65nUWCoyGwWoTpT0hk8WJPlKCbHuFU80= Subject key identifier: 16:44:89:13:B7:D5:8E:3A:63:2F:6E:4F:B1:A7:AC:1B:76:3B:2F:FF Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 2411 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/D27AE4B27E9511ECA9132A0BC4F9AE02.roa Signing time: Fri 02 Aug 2024 15:30:57 +0000 ROA not before: Fri 02 Aug 2024 15:30:57 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 15133 IP address blocks: 136.228.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9233 (0x2411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958 Validity Not Before: Aug 2 15:30:57 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66acfbb1-8fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:28:8f:49:8d:8a:65:5c:39:3b:1a:f0:49: 6b:e3:23:56:25:f4:1f:34:75:76:ba:38:7f:09:4e: da:d2:1f:2c:35:2f:b5:75:b7:6b:c1:31:47:9c:53: 63:00:c5:b4:24:8d:17:99:d2:c5:b3:e6:7f:8b:d3: a3:c7:1d:2b:c2:87:8d:87:23:bc:72:f2:28:a9:3d: ca:b3:4d:11:54:54:7d:06:cc:70:79:ea:a7:b3:37: 70:95:00:e4:7d:85:8c:58:c7:e0:64:9e:b9:f2:1b: 2c:a9:78:99:44:35:63:cd:ec:56:96:9b:b3:ea:67: 52:96:75:5c:c7:31:b8:0b:f1:b8:50:e3:89:65:7d: 62:cf:c9:73:31:1f:64:d5:5d:5a:2a:e7:c5:a6:e2: 2e:6b:9a:c3:02:26:72:ba:d3:59:01:26:03:83:02: 05:0e:bc:12:b8:f3:df:77:8f:1b:47:13:73:94:0a: 0e:a9:88:60:91:d2:51:b4:04:77:b9:46:a1:94:43: 3d:26:71:50:d1:df:a2:a4:16:86:1c:cd:e4:96:3c: 14:28:b4:47:39:f8:b2:10:49:f9:c4:7c:0c:85:28: de:99:c5:48:48:c9:d2:d9:82:72:d1:44:cb:4e:3c: 12:22:e1:b9:28:25:94:66:06:ba:c6:2f:b7:3f:7f: 88:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:44:89:13:B7:D5:8E:3A:63:2F:6E:4F:B1:A7:AC:1B:76:3B:2F:FF X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/D27AE4B27E9511ECA9132A0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 136.228.144.0/24 Signature Algorithm: sha256WithRSAEncryption 47:18:2c:82:48:99:e3:9e:a8:3e:4d:54:b8:d9:2a:a1:53:c1: 39:87:e8:fb:64:b9:b4:66:b2:07:45:b7:5d:92:b6:5a:09:d9: c9:a2:38:ff:d9:c1:08:c9:6b:9a:15:35:16:10:5a:cf:5d:45: fe:01:c6:ee:07:8f:f5:fd:b2:09:f3:b1:9b:de:b4:5b:8f:e5: b6:b8:8c:8e:24:ae:a6:4e:2f:99:ce:46:83:71:27:90:c1:57: c4:25:10:b5:26:c3:61:c3:ec:ec:23:71:cd:f6:06:5c:57:4f: 17:34:18:49:9a:2b:ca:ed:5d:37:a9:c6:18:48:15:a6:e2:2b: 8d:47:48:b2:9b:d7:51:97:8e:c4:72:26:9c:3a:90:aa:ff:b3: d4:fa:b1:37:30:65:d7:d4:66:32:b9:a5:44:be:a8:d1:cf:b7: ef:03:80:9e:de:e4:ee:9e:75:dc:af:b8:67:cc:e5:81:7a:dd: a6:e4:74:63:e1:b7:bf:cf:31:b6:ae:bb:1e:8a:ce:b1:d0:a4: 21:f2:c7:17:b0:28:71:44:25:c6:fc:5c:e5:cf:83:89:ea:17: d5:74:db:a3:43:ab:15:57:6a:23:6b:cf:9c:04:64:38:dd:c1: 81:a7:f8:c3:dc:57:f7:de:6e:73:2a:37:6c:ef:fc:04:1b:bb: 26:52:a8:45 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjQwODAyMTUzMDU3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFjZmJiMS04ZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN0oj0mNimVcOTsa8Elr4yNWJfQfNHV2ujh/CU7a0h8sNS+1dbdrwTFHnFNj AMW0JI0XmdLFs+Z/i9Ojxx0rwoeNhyO8cvIoqT3Ks00RVFR9BsxweeqnszdwlQDk fYWMWMfgZJ658hssqXiZRDVjzexWlpuz6mdSlnVcxzG4C/G4UOOJZX1iz8lzMR9k 1V1aKufFpuIua5rDAiZyutNZASYDgwIFDrwSuPPfd48bRxNzlAoOqYhgkdJRtAR3 uUahlEM9JnFQ0d+ipBaGHM3kljwUKLRHOfiyEEn5xHwMhSjemcVISMnS2YJy0UTL TjwSIuG5KCWUZga6xi+3P3+IHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBZEiRO3 1Y46Yy9uT7GnrBt2Oy//MB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE5NTgvRkRFRkQ3MzY0QkQ2MTFFNUE3Q0EzMDMzQzRGOUFFMDIvRDI3QUU0QjI3 RTk1MTFFQ0E5MTMyQTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACI5JAwDQYJKoZIhvcNAQELBQADggEBAEcYLIJImeOeqD5N VLjZKqFTwTmH6PtkubRmsgdFt12StloJ2cmiOP/ZwQjJa5oVNRYQWs9dRf4Bxu4H j/X9sgnzsZvetFuP5ba4jI4krqZOL5nORoNxJ5DBV8QlELUmw2HD7Owjcc32BlxX Txc0GEmaK8rtXTepxhhIFabiK41HSLKb11GXjsRyJpw6kKr/s9T6sTcwZdfUZjK5 pUS+qNHPt+8DgJ7e5O6eddyvuGfM5YF63abkdGPht7/PMbauux6KzrHQpCHyxxew KHFEJcb8XOXPg4nqF9V026NDqxVXaiNrz5wEZDjdwYGn+MPcV/febnMqN2zv/AQb uyZSqEU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:47:01 2025 by rpki-client