$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/18B1B5361CE611EBB543881CC4F9AE02.roa File: 18B1B5361CE611EBB543881CC4F9AE02.roa (raw, json) Hash identifier: PGnvpZG9j+8PVGDfoWU78CHdTxQL71RyxM1cORWBi1E= Subject key identifier: 17:60:5B:A6:6C:F9:B1:B6:DD:F0:BA:A2:E0:DA:E3:C1:AC:18:64:62 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 0763 Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/18B1B5361CE611EBB543881CC4F9AE02.roa Signing time: Fri 22 Dec 2023 19:07:02 +0000 ROA not before: Fri 22 Dec 2023 19:07:02 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 31665 IP address blocks: 206.209.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1891 (0x763) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Dec 22 19:07:02 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6585de56-61a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:a4:a8:b6:36:07:e2:47:cb:7c:48:9a:e3: ad:c1:a1:bf:4e:e4:f3:b8:61:06:b0:34:a5:3e:85: e3:c9:47:e3:34:ac:3b:28:0c:05:4c:c6:e6:2a:64: 7a:15:37:35:45:fd:11:f1:6d:46:e1:7e:35:9d:ab: 1c:50:4d:2d:b9:d8:e6:86:49:3e:97:ca:e4:7f:28: 63:02:e6:08:3c:82:86:9f:ab:ef:3d:5e:05:dc:70: dc:75:b8:9d:79:18:88:77:ec:39:6a:ef:16:72:7e: 98:0a:45:fa:35:2b:05:02:7a:a9:d5:80:9e:38:5c: a1:d0:08:e2:cd:a8:6b:27:cd:27:62:26:22:62:3b: 9e:56:d8:7c:ff:41:d1:fc:4c:2a:d6:4a:d2:03:96: 0a:51:2f:d0:0b:e1:e4:89:3f:f2:83:35:60:07:ee: 92:05:b6:3c:1b:b5:e0:03:c9:b9:6d:86:f7:95:34: 43:e3:68:2f:9b:a4:aa:2f:3c:fd:f2:b8:6e:a4:84: 08:ba:7b:f0:20:65:ce:9e:0f:94:61:d7:f3:4f:a4: c0:07:72:23:ce:bb:f9:5f:90:47:c1:08:14:b3:30: d6:cb:48:07:46:bc:28:65:51:8d:9b:63:22:3d:4c: 41:72:b5:23:41:69:55:9d:e5:be:ee:68:78:4e:d4: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:60:5B:A6:6C:F9:B1:B6:DD:F0:BA:A2:E0:DA:E3:C1:AC:18:64:62 X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/18B1B5361CE611EBB543881CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 206.209.79.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:a0:f7:b9:8f:cf:26:83:dc:90:d8:9d:92:c3:de:8d:32:29: fe:f6:13:d1:c9:c1:6d:1c:c7:a4:d6:b2:65:f0:11:98:a9:d3: 70:16:82:0a:4c:79:6a:59:df:05:ea:54:b0:4f:3d:fb:08:ae: 0b:5b:23:e0:52:40:4a:79:c8:dc:36:5e:5c:b9:58:ea:79:2f: bb:75:3f:dc:91:54:b0:b4:dc:f9:5f:38:23:15:28:5c:b6:b5: 27:5a:1e:00:9d:ba:b2:25:38:da:35:3d:13:c8:99:85:20:f2: fa:4b:da:49:dc:6a:37:72:fb:cc:ee:21:2f:c5:f5:c6:5f:15: 49:cf:8b:d7:96:dd:94:8c:15:ff:d5:b7:b0:c2:e1:d0:b6:96: 30:f7:41:41:b0:39:c1:70:35:17:68:70:e7:91:fc:24:d8:fe: 76:57:e7:06:b4:7c:ac:06:eb:4e:6f:da:c8:8d:03:2e:96:4c: 22:c5:bf:f7:b8:52:22:8d:b1:08:7c:76:37:34:c3:e0:4b:9d: 10:b4:12:3c:e7:cd:54:9e:31:22:c9:a1:3a:07:3c:e8:45:39: 4b:b6:6d:4f:96:43:6c:81:f4:a3:46:2f:e3:a7:99:5a:8b:82: 2d:1c:d6:e9:8f:a7:1a:db:43:19:b8:7c:7f:b1:54:f1:a9:fa: 26:65:c4:a9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjMxMjIyMTkwNzAyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTg1ZGU1Ni02MWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuG6kqLY2B+JHy3xImuOtwaG/TuTzuGEGsDSlPoXjyUfjNKw7KAwFTMbmKmR6 FTc1Rf0R8W1G4X41nascUE0tudjmhkk+l8rkfyhjAuYIPIKGn6vvPV4F3HDcdbid eRiId+w5au8Wcn6YCkX6NSsFAnqp1YCeOFyh0AjizahrJ80nYiYiYjueVth8/0HR /Ewq1krSA5YKUS/QC+HkiT/ygzVgB+6SBbY8G7XgA8m5bYb3lTRD42gvm6SqLzz9 8rhupIQIunvwIGXOng+UYdfzT6TAB3Ijzrv5X5BHwQgUszDWy0gHRrwoZVGNm2Mi PUxBcrUjQWlVneW+7mh4TtRDrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBdgW6Zs +bG23fC6ouDa48GsGGRiMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5QTYvRTRFREFDMThDQjFBMTFFQTg3Q0Q1NTQ0QzRGOUFFMDIvMThCMUI1MzYx Q0U2MTFFQkI1NDM4ODFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADO0U8wDQYJKoZIhvcNAQELBQADggEBAB6g97mPzyaD3JDY nZLD3o0yKf72E9HJwW0cx6TWsmXwEZip03AWggpMeWpZ3wXqVLBPPfsIrgtbI+BS QEp5yNw2Xly5WOp5L7t1P9yRVLC03PlfOCMVKFy2tSdaHgCdurIlONo1PRPImYUg 8vpL2kncajdy+8zuIS/F9cZfFUnPi9eW3ZSMFf/Vt7DC4dC2ljD3QUGwOcFwNRdo cOeR/CTY/nZX5wa0fKwG605v2siNAy6WTCLFv/e4UiKNsQh8djc0w+BLnRC0Ejzn zVSeMSLJoToHPOhFOUu2bU+WQ2yB9KNGL+OnmVqLgi0c1umPpxrbQxm4fH+xVPGp +iZlxKk= -----END CERTIFICATE-----Generated at Mon May 6 20:19:23 2024 by rpki-client on console-fra.rpki-client.org