$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/39D8CF1893EB11EEB45D3A32C4F9AE02.roa File: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (raw, json) Hash identifier: XywXcqM8LylZUO+8HhF5lXgoC53AhfoKIh2RM8hlEZY= Subject key identifier: F0:82:7C:54:72:46:27:5F:EA:BB:F4:87:10:4D:14:F1:26:F6:10:40 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 044C Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/39D8CF1893EB11EEB45D3A32C4F9AE02.roa Signing time: Tue 13 Feb 2024 01:53:54 +0000 ROA not before: Tue 13 Feb 2024 01:53:54 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 38621 IP address blocks: 203.9.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1100 (0x44c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Feb 13 01:53:54 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65cacbb2-b16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a4:0d:17:e0:9b:91:72:5e:e8:18:da:54:53: 71:c7:dc:a1:24:67:7b:5b:94:33:18:b8:11:40:b2: c2:76:a0:e6:a8:75:6a:2b:49:45:85:b7:1e:e0:08: 14:07:e0:cd:b6:51:49:55:8b:e8:7f:33:57:a6:69: 57:55:7d:0a:2d:89:97:0f:86:f8:d5:27:d2:86:b3: 38:2a:6c:fe:a1:c8:ea:c1:f6:d9:b5:47:92:3e:d0: bf:b6:5d:8a:fe:4d:9f:75:85:96:51:7f:40:c8:19: cf:da:42:12:fd:b1:8f:48:9c:35:0e:7e:e1:3b:e9: 15:1b:35:1f:54:4e:51:68:b5:aa:ec:9b:a1:f5:4b: ec:06:17:8e:f9:a7:6d:d8:fd:e1:0c:70:6e:36:fe: d9:f9:4a:d4:6a:5d:99:41:ff:87:dc:54:75:ec:e4: 54:4d:a8:b7:bc:b2:71:41:00:58:29:98:44:37:1b: c8:4a:9f:64:90:6d:41:c8:bf:c0:0d:75:59:ff:d3: 39:83:3e:d4:1b:9b:58:e8:48:bb:62:0d:7f:88:c1: 85:4d:e9:3e:ac:1f:f1:ff:1e:69:f4:e3:f5:11:a7: 79:c0:29:df:3e:a6:f3:49:76:96:1f:94:a8:73:8e: 25:8a:65:40:da:79:00:5f:56:6b:ef:5e:a0:39:49: 9d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:82:7C:54:72:46:27:5F:EA:BB:F4:87:10:4D:14:F1:26:F6:10:40 X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/39D8CF1893EB11EEB45D3A32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.9.179.0/24 Signature Algorithm: sha256WithRSAEncryption a7:a4:4e:06:9e:17:0a:5d:32:61:45:57:00:1b:df:7e:f2:1d: 0b:5b:4a:5d:d9:51:05:bd:e6:29:52:0e:88:da:f1:86:ea:b6: d5:51:52:e0:60:ed:d8:cd:45:09:1d:2e:eb:15:e9:0e:61:c7: c9:67:00:48:48:1c:81:95:ad:a3:21:be:7a:44:9f:75:b6:95: 54:b2:c6:db:a9:ab:d1:94:83:74:fa:54:e5:f2:19:86:b5:c8: e3:c5:2e:09:05:a8:7e:50:06:9b:83:fd:00:f6:3a:34:f1:15: d1:49:02:93:6a:12:97:d8:52:89:bf:6f:12:c8:61:e7:f3:e8: 47:bf:12:b3:47:7f:1a:b9:b3:f4:e1:e5:e5:87:c4:3f:07:61: 1d:55:66:c3:05:bf:af:34:b3:95:b7:29:0b:f8:6c:de:6e:6e: dc:f8:b5:5a:54:44:7e:67:f9:5e:a6:a1:4a:2c:f1:23:ac:54: 1c:4a:4c:2c:06:ab:fb:08:21:7b:eb:ab:fa:e6:58:4e:1e:5d: cc:4b:14:cc:95:e1:69:a4:25:e1:00:75:b9:1f:fe:9d:16:bd: bb:cc:80:b2:7d:e0:a2:58:c2:e8:9f:2c:d6:65:3c:eb:e9:fb: 80:57:4e:dd:b5:d8:dd:3d:8e:b1:42:a2:33:45:2e:3d:cd:07: e8:fe:e5:79 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjQwMjEzMDE1MzU0WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNhY2JiMi1iMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qQNF+CbkXJe6BjaVFNxx9yhJGd7W5QzGLgRQLLCdqDmqHVqK0lFhbce4AgU B+DNtlFJVYvofzNXpmlXVX0KLYmXD4b41SfShrM4Kmz+ocjqwfbZtUeSPtC/tl2K /k2fdYWWUX9AyBnP2kIS/bGPSJw1Dn7hO+kVGzUfVE5RaLWq7Juh9UvsBheO+adt 2P3hDHBuNv7Z+UrUal2ZQf+H3FR17ORUTai3vLJxQQBYKZhENxvISp9kkG1ByL/A DXVZ/9M5gz7UG5tY6Ei7Yg1/iMGFTek+rB/x/x5p9OP1Ead5wCnfPqbzSXaWH5So c44limVA2nkAX1Zr716gOUmdqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPCCfFRy Ridf6rv0hxBNFPEm9hBAMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyNjgvQzc4RUJDRUEyMTkzMTFFQzkwMEM1NjUzQzRGOUFFMDIvMzlEOENGMTg5 M0VCMTFFRUI0NUQzQTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLCbMwDQYJKoZIhvcNAQELBQADggEBAKekTgaeFwpdMmFF VwAb337yHQtbSl3ZUQW95ilSDoja8YbqttVRUuBg7djNRQkdLusV6Q5hx8lnAEhI HIGVraMhvnpEn3W2lVSyxtupq9GUg3T6VOXyGYa1yOPFLgkFqH5QBpuD/QD2OjTx FdFJApNqEpfYUom/bxLIYefz6Ee/ErNHfxq5s/Th5eWHxD8HYR1VZsMFv680s5W3 KQv4bN5ubtz4tVpURH5n+V6moUos8SOsVBxKTCwGq/sIIXvrq/rmWE4eXcxLFMyV 4WmkJeEAdbkf/p0WvbvMgLJ94KJYwuifLNZlPOvp+4BXTt212N09jrFCojNFLj3N B+j+5Xk= -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:25 2024 by rpki-client on console-fra.rpki-client.org