$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa File: 505CFB7465D211EFB4348E63C4F9AE02.roa (raw, json) Hash identifier: DKJpMcXJHs6ZKkb3zreaYt9LvCsKbBWSI6cQ9HPP9sc= Subject key identifier: 45:E9:57:F9:A0:B0:DF:4C:B7:98:DB:0D:0A:99:65:D8:E1:0F:E6:6C Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Certificate serial: 0645 Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa Signing time: Thu 29 Aug 2024 06:45:44 +0000 ROA not before: Thu 29 Aug 2024 06:45:44 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 4229 IP address blocks: 162.128.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Validity Not Before: Aug 29 06:45:44 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66d01918-8aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c4:98:16:5b:09:af:00:e1:2f:6c:90:6e:64: 98:6f:3e:c5:ad:82:2b:66:78:87:11:a0:1a:ac:fa: 6a:74:08:e3:c2:ba:8c:18:0f:e2:2e:15:99:e3:99: 00:8f:4d:e7:89:b3:6d:e1:61:24:a8:12:8e:23:ac: d4:a9:57:a4:c0:ca:13:b6:62:a0:02:f2:64:68:6b: 61:dd:5d:eb:a0:a8:ef:00:83:15:2a:3c:bf:60:db: 32:ac:92:bd:b7:e7:9b:72:4c:9a:41:f5:98:c6:e2: f5:0e:1a:44:ec:36:1d:dd:55:d2:c8:bd:5a:ba:cc: f4:03:c7:88:78:2a:d4:0c:9d:e5:cd:5c:26:ba:56: e4:17:88:37:9e:8a:9b:95:e9:ef:23:26:f6:40:4f: 51:31:09:a3:27:53:6e:33:74:07:53:37:81:ac:f4: c9:3a:41:b2:9d:ee:2b:9f:25:2a:54:89:cf:c4:be: 72:0f:4d:04:25:54:f6:d7:fb:c9:1b:55:ae:48:cc: 0a:cc:82:8d:b3:85:30:86:41:08:e4:85:60:7c:cd: bf:bd:ab:91:fd:f3:81:2e:09:a8:b7:06:00:92:10: 63:55:5e:19:29:a6:66:9f:da:16:d9:74:d0:6b:e2: 85:56:db:a7:fc:bb:fc:29:0f:23:d2:09:81:3a:b0: d4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E9:57:F9:A0:B0:DF:4C:B7:98:DB:0D:0A:99:65:D8:E1:0F:E6:6C X509v3 Authority Key Identifier: keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 162.128.0.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:b9:45:6d:b3:da:0d:3f:ae:c4:28:9b:74:41:6a:13:36:d1: 51:24:38:44:fc:37:75:28:1f:77:25:bf:20:91:25:f7:fc:ac: cc:13:36:2b:25:07:9b:68:25:57:cd:8d:3a:8f:2d:f8:e6:fa: 9a:47:31:d6:dc:3d:44:22:70:92:6e:66:5b:8f:29:e0:94:fd: 05:71:00:78:ad:6a:34:6c:a9:22:4d:a1:8e:38:62:d9:5b:60: b2:37:2b:6a:36:3d:e7:3d:c7:f6:88:03:3f:ea:3a:0c:29:20: ad:8f:36:81:86:52:dd:a6:c6:44:de:f7:6e:81:92:bc:e2:2b: 32:96:88:34:2c:61:d8:59:68:c7:60:27:93:a3:79:55:17:c0: da:ec:30:6f:01:a4:a1:c3:09:7a:22:ce:f4:11:d9:03:bf:60: 45:9d:db:21:99:1d:ee:fa:9b:6d:fb:03:e6:d3:1f:36:a5:94: be:86:04:1b:5c:f3:31:6b:30:ba:39:b1:09:05:c5:f4:f7:9b: 6d:35:ba:83:63:bb:1b:46:e6:c8:83:37:09:7b:f1:d0:ac:ca: 1a:d1:bd:65:9e:a4:32:a4:8b:60:4e:49:bf:02:93:2b:ef:3f: 86:0c:e6:a0:05:47:69:8b:07:22:0b:c5:e4:93:1e:fe:93:0c: bf:7b:7a:27 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE RTA3MkI3RjMwHhcNMjQwODI5MDY0NTQ0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQwMTkxOC04YWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysSYFlsJrwDhL2yQbmSYbz7FrYIrZniHEaAarPpqdAjjwrqMGA/iLhWZ45kA j03nibNt4WEkqBKOI6zUqVekwMoTtmKgAvJkaGth3V3roKjvAIMVKjy/YNsyrJK9 t+ebckyaQfWYxuL1DhpE7DYd3VXSyL1ausz0A8eIeCrUDJ3lzVwmulbkF4g3noqb lenvIyb2QE9RMQmjJ1NuM3QHUzeBrPTJOkGyne4rnyUqVInPxL5yD00EJVT21/vJ G1WuSMwKzIKNs4UwhkEI5IVgfM2/vauR/fOBLgmotwYAkhBjVV4ZKaZmn9oW2XTQ a+KFVtun/Lv8KQ8j0gmBOrDUdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEXpV/mg sN9Mt5jbDQqZZdjhD+ZsMB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0 X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURCMzcvNERFNjM1RTA3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvNTA1Q0ZCNzQ2 NUQyMTFFRkI0MzQ4RTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGigAAwDQYJKoZIhvcNAQELBQADggEBAC25RW2z2g0/rsQo m3RBahM20VEkOET8N3UoH3clvyCRJff8rMwTNislB5toJVfNjTqPLfjm+ppHMdbc PUQicJJuZluPKeCU/QVxAHitajRsqSJNoY44YtlbYLI3K2o2Pec9x/aIAz/qOgwp IK2PNoGGUt2mxkTe926BkrziKzKWiDQsYdhZaMdgJ5OjeVUXwNrsMG8BpKHDCXoi zvQR2QO/YEWd2yGZHe76m237A+bTHzallL6GBBtc8zFrMLo5sQkFxfT3m201uoNj uxtG5siDNwl78dCsyhrRvWWepDKki2BOSb8CkyvvP4YM5qAFR2mLByILxeSTHv6T DL97eic= -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:02 2024 by rpki-client on console-ams.rpki-client.org