$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/08990BC0084E11EF89D29620C4F9AE02.roa File: 08990BC0084E11EF89D29620C4F9AE02.roa (raw, json) Hash identifier: i1fkph3atVfnVEbnt9xSvvG/cUJYGzp+on9uV8ITB20= Subject key identifier: 08:71:2A:E5:C2:DB:7D:F2:E0:E4:44:12:55:D4:37:83:B0:18:48:DC Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Certificate serial: 04AD Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/08990BC0084E11EF89D29620C4F9AE02.roa Signing time: Thu 02 May 2024 06:34:32 +0000 ROA not before: Thu 02 May 2024 06:34:32 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 45270 IP address blocks: 223.25.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Sep 2024 23:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1197 (0x4ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Validity Not Before: May 2 06:34:32 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=663333f7-bed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f9:77:ee:52:85:61:0a:0d:d9:2d:ed:5e:f8: 89:71:37:40:ed:3b:0b:2b:a2:aa:52:a8:ee:56:69: 77:d4:27:4e:9a:d3:51:9f:ec:5d:a0:b4:50:0e:2f: ea:7e:6a:f0:bf:29:ac:c6:4d:3b:bf:8e:10:b8:48: 76:03:f1:95:19:33:97:f5:4e:3d:9a:80:11:d6:5b: 85:9b:7f:54:ed:49:37:47:f9:c8:90:f9:c4:4a:df: ce:e8:5d:5f:d1:4e:06:fc:42:3d:3b:29:a7:6b:15: 4d:2a:77:a3:0d:12:6f:39:af:1b:70:62:fb:ff:b2: ec:18:f8:44:b6:c2:c7:d1:ac:cc:e6:37:ff:46:92: a5:fe:94:1e:6e:26:b2:39:ee:1e:bc:70:b6:a1:94: 13:63:8c:79:b2:5c:27:e6:84:e3:cb:d7:21:56:dd: 4f:f6:a0:9c:08:59:59:95:6b:a3:4f:94:24:aa:ec: fb:49:87:13:e7:c2:88:8f:2d:3f:5c:f0:12:c7:cd: 88:2d:9e:d5:37:87:2e:96:64:a8:4c:5f:5a:29:5f: 3d:f5:61:09:71:31:ea:dd:8c:9d:15:cc:4c:f0:fa: 68:5a:ee:ae:f3:bd:6e:d5:52:37:63:37:5d:59:de: 7d:df:bf:b2:07:df:45:0b:d3:38:47:29:c2:4e:a3: 54:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:71:2A:E5:C2:DB:7D:F2:E0:E4:44:12:55:D4:37:83:B0:18:48:DC X509v3 Authority Key Identifier: keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/08990BC0084E11EF89D29620C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.25.224.0/22 Signature Algorithm: sha256WithRSAEncryption 32:91:ff:db:a3:9b:7a:ec:d0:ef:f7:69:87:f7:94:aa:e8:dc: 1c:8f:a0:34:97:b5:de:35:6b:d9:23:df:33:39:29:30:26:70: b4:e0:b2:eb:bd:45:ee:43:c7:55:4e:8e:ee:78:8c:36:70:67: 3e:54:cb:b3:57:d0:f5:c9:10:61:0b:ff:78:ec:48:06:be:47: a5:76:d6:41:54:4e:d8:fb:f0:24:71:2f:63:77:26:bd:99:94: e9:f3:38:bd:ed:d7:52:b3:0c:76:46:f6:41:41:67:55:a1:12: 46:93:87:eb:c1:91:01:5b:aa:b6:32:d4:13:e7:e6:01:8a:bc: 3b:7f:39:a5:92:57:ba:32:02:d9:53:70:42:ad:3e:b9:24:ec: 25:ec:55:5e:75:7d:7a:bb:c4:3c:93:dc:9e:45:55:ee:41:35: 94:a4:94:88:db:0f:95:39:1c:11:4d:58:c2:20:d5:da:27:17: 35:b7:d5:79:b8:90:cd:e4:69:fd:a6:b9:19:36:f5:d5:7b:16: 2e:59:df:05:bc:5d:30:40:cd:b2:28:51:40:07:2f:8f:f9:65: f7:b2:2c:92:2f:b6:80:68:c2:1e:36:36:e5:15:00:29:89:f2: f1:86:80:c5:a2:46:f3:ec:32:bc:34:7a:dd:20:79:d4:ce:6d: 61:36:9b:2f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1RTQxMTAvBgNVBAUTKDg1RUU5MDM4RkZDMzU0MUFCREZCN0REOUVEMzNGMkFB RTM3MkU3OEMwHhcNMjQwNTAyMDYzNDMyWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzMzNmNy1iZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/l37lKFYQoN2S3tXviJcTdA7TsLK6KqUqjuVml31CdOmtNRn+xdoLRQDi/q fmrwvymsxk07v44QuEh2A/GVGTOX9U49moAR1luFm39U7Uk3R/nIkPnESt/O6F1f 0U4G/EI9OymnaxVNKnejDRJvOa8bcGL7/7LsGPhEtsLH0azM5jf/RpKl/pQebiay Oe4evHC2oZQTY4x5slwn5oTjy9chVt1P9qCcCFlZlWujT5Qkquz7SYcT58KIjy0/ XPASx82ILZ7VN4culmSoTF9aKV899WEJcTHq3YydFcxM8PpoWu6u871u1VI3Yzdd Wd5937+yB99FC9M4RynCTqNU+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFAhxKuXC 233y4OREElXUN4OwGEjcMB8GA1UdIwQYMBaAFIXukDj/w1Qavft92e0z8qrjcueM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVFNC9FRDA3OURGRUUz ODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZCcTktMzNaN1RQeXF1Tnk1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNlFPUF9EVkJxOS0zM1o3VFB5cXVOeTU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY1RTQvRUQwNzlERkVFMzg0MTFFQkE4NTkzQjY1QzRGOUFFMDIvMDg5OTBCQzAw ODRFMTFFRjg5RDI5NjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALfGeAwDQYJKoZIhvcNAQELBQADggEBADKR/9ujm3rs0O/3 aYf3lKro3ByPoDSXtd41a9kj3zM5KTAmcLTgsuu9Re5Dx1VOju54jDZwZz5Uy7NX 0PXJEGEL/3jsSAa+R6V21kFUTtj78CRxL2N3Jr2ZlOnzOL3t11KzDHZG9kFBZ1Wh EkaTh+vBkQFbqrYy1BPn5gGKvDt/OaWSV7oyAtlTcEKtPrkk7CXsVV51fXq7xDyT 3J5FVe5BNZSklIjbD5U5HBFNWMIg1donFzW31Xm4kM3kaf2muRk29dV7Fi5Z3wW8 XTBAzbIoUUAHL4/5ZfeyLJIvtoBowh42NuUVACmJ8vGGgMWiRvPsMrw0et0gedTO bWE2my8= -----END CERTIFICATE-----Generated at Thu Sep 19 01:17:52 2024 by rpki-client on console-ams.rpki-client.org