$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/0F440AB26E7711EFAA4A1C1AC4F9AE02.roa File: 0F440AB26E7711EFAA4A1C1AC4F9AE02.roa (raw, json) Hash identifier: jl6j4Zl1ySra6BuQln0dyvcQ4SJ2ODMpW1lq9LnWlSQ= Subject key identifier: 6E:28:0A:91:FE:0C:1E:E9:28:2C:83:1A:5E:22:3C:51:A4:19:24:6E Certificate issuer: /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Certificate serial: 9B Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/0F440AB26E7711EFAA4A1C1AC4F9AE02.roa Signing time: Mon 09 Sep 2024 06:45:11 +0000 ROA not before: Mon 09 Sep 2024 06:45:11 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152138 IP address blocks: 210.87.68.0/24 maxlen: 24 2001:df3:3dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Validity Not Before: Sep 9 06:45:11 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66de9977-d444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ae:70:01:de:8c:6b:ab:6d:07:b6:34:14:fe: 29:48:c6:f5:0f:3c:4e:dd:fb:1f:8c:11:c8:20:ad: 2a:20:f5:3c:2d:c6:b8:fd:a7:bb:b7:cf:e0:d7:57: 6b:71:45:23:6c:01:2d:68:2d:46:55:8a:18:91:70: cf:84:c9:f0:79:4c:df:4b:05:0c:d4:ec:db:ef:a9: a7:e7:04:11:48:bb:c3:ac:3f:02:53:6d:c0:29:ad: 05:ca:15:d5:e6:6a:80:f5:d0:6f:59:81:83:55:91: d0:93:7b:26:3d:d6:be:97:dd:57:b3:dd:9e:ef:b7: 7a:cb:9e:b2:65:61:ad:f0:ba:a6:0b:38:09:f5:83: 5c:86:20:2d:b0:f4:6c:27:ec:99:6c:84:69:a9:03: 56:9a:5d:30:5a:a4:94:04:be:96:eb:b4:ed:97:99: b3:38:3f:48:61:9a:d5:6a:c3:f6:ed:2a:3c:ab:07: 38:63:5c:5b:8b:46:48:bf:d6:1c:c0:82:b3:ba:79: ca:b0:86:6b:32:9e:36:79:00:17:f3:6e:0e:28:16: 03:df:fd:71:98:5d:fb:e7:bb:56:d3:ea:10:66:9b: 72:cb:13:90:55:b9:3b:19:9d:32:2e:26:78:d3:48: 27:7f:17:cd:93:73:69:1b:f1:2b:23:8c:8d:99:0e: 47:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:28:0A:91:FE:0C:1E:E9:28:2C:83:1A:5E:22:3C:51:A4:19:24:6E X509v3 Authority Key Identifier: keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/0F440AB26E7711EFAA4A1C1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.87.68.0/24 IPv6: 2001:df3:3dc0::/48 Signature Algorithm: sha256WithRSAEncryption 7b:eb:4b:7a:10:28:e0:01:fb:00:5f:f6:a8:f9:67:b5:e0:fe: 4c:e8:4b:a3:3d:a1:67:63:69:04:4d:96:aa:06:cc:e3:c9:27: 23:13:6b:a0:93:99:d2:bd:59:a5:fc:bd:89:2a:46:d7:86:d7: e0:54:6e:8b:cd:12:76:35:29:d4:09:03:ea:40:72:e1:06:ad: 94:e9:68:db:16:8a:4a:3a:19:0b:f7:8f:5f:4c:2c:de:18:53: a1:a6:23:d4:8e:a7:72:8f:c5:68:9a:be:90:94:b6:6e:32:b8: 52:58:a2:fe:92:6e:64:68:1a:24:43:71:56:ed:89:ce:69:9d: c3:d5:1c:e9:b0:94:52:c5:1c:e9:ba:b0:7d:69:da:45:2d:e4: f6:ae:ae:00:85:71:e3:ca:f7:e6:e8:a8:5d:f9:54:b9:57:41: 05:df:c3:d6:f5:91:78:10:87:e4:ae:f3:29:d3:15:06:2b:70: 8c:f8:d3:05:d3:05:7b:0a:94:c4:cd:39:e9:60:3b:1d:5b:4c: 16:07:22:4d:5d:da:18:b1:78:89:26:db:e4:13:6d:98:4d:9d: 27:c3:91:99:83:10:5c:6f:c5:d9:ab:57:08:29:41:cb:fa:f0: 5d:bd:7e:ed:3f:11:25:ef:21:34:59:0a:1b:0c:f8:38:95:82: 11:43:76:9a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIxMDMxMTAvBgNVBAUTKDU0NUM0N0MwRTQzMTMzMzhEQzlCNDQwMkMxMkJBRENC NEU5ODU3QzEwHhcNMjQwOTA5MDY0NTExWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmRlOTk3Ny1kNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA365wAd6Ma6ttB7Y0FP4pSMb1DzxO3fsfjBHIIK0qIPU8Lca4/ae7t8/g11dr cUUjbAEtaC1GVYoYkXDPhMnweUzfSwUM1Ozb76mn5wQRSLvDrD8CU23AKa0FyhXV 5mqA9dBvWYGDVZHQk3smPda+l91Xs92e77d6y56yZWGt8LqmCzgJ9YNchiAtsPRs J+yZbIRpqQNWml0wWqSUBL6W67Ttl5mzOD9IYZrVasP27So8qwc4Y1xbi0ZIv9Yc wIKzunnKsIZrMp42eQAX824OKBYD3/1xmF3757tW0+oQZptyyxOQVbk7GZ0yLiZ4 00gnfxfNk3NpG/ErI4yNmQ5HrwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG4oCpH+ DB7pKCyDGl4iPFGkGSRuMB8GA1UdIwQYMBaAFFRcR8DkMTM43JtEAsErrctOmFfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjEwMy8yRkI5ODUwODkz RkIxMUVFOTY4RUU0NDJDNEY5QUUwMi9WRnhId09ReE16amNtMFFDd1N1dHkwNllW OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGeEh3T1F4TXpqY20wUUN3U3V0eTA2WVY4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkIxMDMvMkZCOTg1MDg5M0ZCMTFFRTk2OEVFNDQyQzRGOUFFMDIvMEY0NDBBQjI2 RTc3MTFFRkFBNEExQzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADSV0QwDwQCAAIwCQMHACABDfM9wDANBgkqhkiG9w0BAQsF AAOCAQEAe+tLehAo4AH7AF/2qPlnteD+TOhLoz2hZ2NpBE2WqgbM48knIxNroJOZ 0r1Zpfy9iSpG14bX4FRui80SdjUp1AkD6kBy4QatlOlo2xaKSjoZC/ePX0ws3hhT oaYj1I6nco/FaJq+kJS2bjK4Ulii/pJuZGgaJENxVu2Jzmmdw9Uc6bCUUsUc6bqw fWnaRS3k9q6uAIVx48r35uioXflUuVdBBd/D1vWReBCH5K7zKdMVBitwjPjTBdMF ewqUxM056WA7HVtMFgciTV3aGLF4iSbb5BNtmE2dJ8ORmYMQXG/F2atXCClBy/rw Xb1+7T8RJe8hNFkKGwz4OJWCEUN2mg== -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:23 2024 by rpki-client on console-ams.rpki-client.org