$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/359CBDB28D0D11EF90882959C4F9AE02.roa File: 359CBDB28D0D11EF90882959C4F9AE02.roa (raw, json) Hash identifier: qdwbcsIyL1f3wI2tO7dwB6BR0n7SfSV/G7xRpNDHqtU= Subject key identifier: EF:21:B0:E3:7C:D8:4F:F9:2C:73:F6:2A:D2:2A:D6:61:57:AD:0C:2D Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Certificate serial: 9E Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/359CBDB28D0D11EF90882959C4F9AE02.roa Signing time: Fri 29 Nov 2024 05:28:28 +0000 ROA not before: Fri 29 Nov 2024 05:28:28 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 5666 IP address blocks: 203.86.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Validity Not Before: Nov 29 05:28:28 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674950fb-c33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:90:73:03:e2:48:f5:1f:93:62:f2:62:cc:19: 1b:2e:c2:78:1e:82:92:a2:2e:d5:99:46:02:ba:78: 3a:ce:ec:78:40:7e:7d:ac:b4:8e:94:05:8d:da:7d: 23:e1:f9:1b:18:ce:5c:0e:98:ce:4e:3f:3f:ce:db: 97:9c:2d:da:e5:ab:68:e2:0e:2e:38:1a:8b:90:04: c1:87:66:4f:76:4d:ff:7f:3d:96:8d:37:69:11:7f: 2e:2a:d9:70:49:6a:46:13:33:87:50:d5:8a:2f:90: a9:3b:6c:91:2d:69:83:5a:59:2a:4d:74:5a:5a:79: b9:77:7d:aa:c3:87:c6:4e:99:b9:6d:4d:ef:de:b0: 2a:21:23:bf:43:56:a1:cb:c0:0f:4c:b0:36:99:24: 7f:0a:82:e4:33:00:99:9d:d6:66:44:39:89:a7:67: fa:5e:fc:1d:6f:3a:18:20:27:85:bb:84:9f:d4:48: 2a:bc:98:c7:e8:c1:f9:ce:3d:ef:6f:53:45:5a:fa: 18:23:fe:99:c9:ec:fb:92:e2:f0:ae:7c:62:04:f8: a5:f3:9f:16:2e:e8:f9:d6:7c:f9:e9:35:14:f5:4b: 4c:c5:36:37:b2:92:41:97:67:84:75:76:45:76:68: 50:25:3f:cc:2a:c6:4e:70:de:eb:c6:66:6c:f5:27: e7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:21:B0:E3:7C:D8:4F:F9:2C:73:F6:2A:D2:2A:D6:61:57:AD:0C:2D X509v3 Authority Key Identifier: keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/359CBDB28D0D11EF90882959C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.86.223.0/24 Signature Algorithm: sha256WithRSAEncryption 79:6f:1e:18:11:09:78:2f:1b:6c:21:91:3c:61:0f:bb:a9:b1: 66:99:e3:25:13:39:71:3c:eb:80:45:02:d1:7b:9b:1c:27:f5: cb:59:a7:6d:03:e8:7a:8c:1c:5e:c1:35:2d:a8:d3:39:10:7c: c7:30:4a:49:a6:84:f7:93:25:f2:80:87:6c:c6:70:73:82:09: 5f:62:f2:79:64:b7:5d:08:9b:fc:bd:a6:b6:29:b8:a5:12:d2: c0:c2:33:cd:7b:43:94:9b:f4:72:07:a4:d2:c5:e5:43:bd:92: 5f:fc:50:ea:d9:d9:03:48:8f:37:b9:34:d6:7d:cb:e0:db:92: b7:98:f5:38:b6:c6:67:28:16:31:bd:78:8c:c4:dc:9f:2f:41: a8:bc:1d:14:66:40:54:f8:e4:e3:22:18:db:99:df:08:73:67: 5e:dd:b6:df:5c:af:db:bb:82:10:af:5f:36:75:c5:59:8b:85: 91:67:45:b9:fb:22:b6:36:47:36:f3:5a:8b:c1:a8:dd:ec:ba: 59:bd:4b:0c:ab:eb:8e:2c:dc:b5:d5:74:62:cc:42:32:3a:5e: 6c:c0:7b:6c:83:e5:cd:a7:54:97:d0:b4:ed:01:72:15:c0:a9: 6b:db:dd:70:f2:2c:33:e4:7c:4b:94:e4:66:61:43:72:c4:e8: 06:2c:1f:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3MTExMTAvBgNVBAUTKEU0MjlENDI5RTY2Qjc5N0IzRDhBMUNCRTI0OTE1NzdB REMzOEE0OEUwHhcNMjQxMTI5MDUyODI4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ5NTBmYi1jMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpBzA+JI9R+TYvJizBkbLsJ4HoKSoi7VmUYCung6zux4QH59rLSOlAWN2n0j 4fkbGM5cDpjOTj8/ztuXnC3a5ato4g4uOBqLkATBh2ZPdk3/fz2WjTdpEX8uKtlw SWpGEzOHUNWKL5CpO2yRLWmDWlkqTXRaWnm5d32qw4fGTpm5bU3v3rAqISO/Q1ah y8APTLA2mSR/CoLkMwCZndZmRDmJp2f6XvwdbzoYICeFu4Sf1EgqvJjH6MH5zj3v b1NFWvoYI/6Zyez7kuLwrnxiBPil858WLuj51nz56TUU9UtMxTY3spJBl2eEdXZF dmhQJT/MKsZOcN7rxmZs9SfnCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO8hsON8 2E/5LHP2KtIq1mFXrQwtMB8GA1UdIwQYMBaAFOQp1Cnma3l7PYocviSRV3rcOKSO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzcxMS9DN0QxQjA1NDFF RTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVYczlpaHktSkpGWGV0dzRw STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0M3MTEvQzdEMUIwNTQxRUUzMTFFRjkwRDIxMjM0QzRGOUFFMDIvMzU5Q0JEQjI4 RDBEMTFFRjkwODgyOTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLVt8wDQYJKoZIhvcNAQELBQADggEBAHlvHhgRCXgvG2wh kTxhD7upsWaZ4yUTOXE864BFAtF7mxwn9ctZp20D6HqMHF7BNS2o0zkQfMcwSkmm hPeTJfKAh2zGcHOCCV9i8nlkt10Im/y9prYpuKUS0sDCM817Q5Sb9HIHpNLF5UO9 kl/8UOrZ2QNIjze5NNZ9y+DbkreY9Ti2xmcoFjG9eIzE3J8vQai8HRRmQFT45OMi GNuZ3whzZ17dtt9cr9u7ghCvXzZ1xVmLhZFnRbn7IrY2RzbzWovBqN3sulm9Swyr 644s3LXVdGLMQjI6XmzAe2yD5c2nVJfQtO0BchXAqWvb3XDyLDPkfEuU5GZhQ3LE 6AYsHyI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:24:21 2025 by rpki-client