$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/2D9CB54A5E1011EE8840607FC4F9AE02.roa File: 2D9CB54A5E1011EE8840607FC4F9AE02.roa (raw, json) Hash identifier: lTxo7bPdLOaD2mxC4XWL5ydJFXM8ZPTeRARVgNJMA1I= Subject key identifier: 38:85:E6:7B:17:D9:AC:D3:DF:31:07:AB:15:DC:BB:EE:DB:C2:82:2C Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0CEC Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/2D9CB54A5E1011EE8840607FC4F9AE02.roa Signing time: Thu 28 Sep 2023 15:03:28 +0000 ROA not before: Thu 28 Sep 2023 15:03:28 +0000 ROA not after: Wed 29 May 2024 00:00:00 +0000 asID: 133542 IP address blocks: 59.152.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jan 2024 17:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3308 (0xcec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Sep 28 15:03:28 2023 GMT Not After : May 29 00:00:00 2024 GMT Subject: CN=651595bf-7979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5a:c3:e4:cb:da:a7:41:22:5b:71:61:82:24: c6:90:b9:dc:99:98:e7:3e:fc:e9:70:82:71:fe:2a: 94:d7:ff:2b:39:5b:88:ee:47:a2:50:3e:40:02:54: 14:17:b5:4d:0a:53:cc:9e:25:53:64:90:28:ae:c4: 33:c7:e8:f1:80:8e:a4:dc:63:fa:e6:08:7f:44:da: d6:c4:7e:b4:91:63:f4:32:a8:9d:25:b6:29:28:c4: 90:92:8f:fd:66:34:99:99:5c:dd:9b:a0:0d:b5:53: 5c:91:52:99:c4:d6:49:ac:80:94:1d:be:bc:f8:3e: 9d:8d:01:f6:f5:dd:c7:67:9b:71:8f:58:e2:be:27: d2:37:ea:11:26:7d:b4:a5:93:ac:65:ea:01:4c:16: 79:6d:4f:0a:10:10:e2:5f:d4:77:84:08:91:af:a7: 7a:4e:b3:8b:a5:41:c3:44:9b:e3:75:6a:4b:93:16: 11:31:a4:cc:65:98:29:73:6a:5d:7f:28:3b:e3:3f: 96:49:15:95:ab:29:0b:60:5a:63:ff:5c:13:a6:29: 41:9d:fb:57:4c:2c:3a:02:42:8d:ee:83:9f:d7:37: 2d:26:5c:00:1e:eb:5c:9d:c1:c0:a9:aa:35:b4:ef: fe:57:d3:15:aa:7e:db:b3:24:46:b0:27:f6:71:ce: 19:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:85:E6:7B:17:D9:AC:D3:DF:31:07:AB:15:DC:BB:EE:DB:C2:82:2C X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/2D9CB54A5E1011EE8840607FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.152.11.0/24 Signature Algorithm: sha256WithRSAEncryption b6:ff:a8:9c:75:0f:f6:6e:77:4f:27:01:25:27:76:d0:01:2d: 36:84:e3:bc:9f:31:52:08:37:53:09:cf:f1:f8:af:ca:f0:2d: b6:4d:86:eb:73:d8:2d:c2:bd:c0:85:2a:9d:3a:69:b5:96:cf: 17:38:a3:b7:ec:cb:51:23:3f:e0:f4:53:bb:01:86:9d:9d:4d: 38:b4:c4:2d:bc:39:eb:9c:a0:75:a8:00:1d:c3:dc:1e:20:c7: cb:bf:25:be:d4:8b:0a:30:14:ae:a5:15:fd:9c:c8:b2:df:24: b2:26:6f:69:64:85:ac:48:71:7d:8b:fc:b8:2e:b4:74:a7:df: ca:a7:dd:4f:95:24:17:1a:b5:9e:7b:e2:bc:d3:a3:50:68:fb: 32:c3:94:04:04:03:d3:2d:fb:ed:db:82:c1:fc:a7:59:3f:f4: 1b:be:a5:3c:4b:ac:5e:5c:b4:78:43:29:8f:7e:dd:34:fc:49: e9:f3:c5:b0:59:18:c9:d8:a3:cd:97:36:ca:a6:1c:ce:73:41: 61:d3:69:f9:f2:f7:b6:2d:1d:e0:97:d1:e8:1f:1d:50:ca:54: cd:d9:11:9d:64:3e:dc:54:e2:15:31:fc:ae:f7:e0:c9:5f:d9: 99:58:58:87:16:41:d6:79:89:81:73:1c:4b:a4:11:de:4c:6f: cf:0d:89:07 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjMwOTI4MTUwMzI4WhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD VQQDEw02NTE1OTViZi03OTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lrD5Mvap0EiW3FhgiTGkLncmZjnPvzpcIJx/iqU1/8rOVuI7keiUD5AAlQU F7VNClPMniVTZJAorsQzx+jxgI6k3GP65gh/RNrWxH60kWP0MqidJbYpKMSQko/9 ZjSZmVzdm6ANtVNckVKZxNZJrICUHb68+D6djQH29d3HZ5txj1jivifSN+oRJn20 pZOsZeoBTBZ5bU8KEBDiX9R3hAiRr6d6TrOLpUHDRJvjdWpLkxYRMaTMZZgpc2pd fyg74z+WSRWVqykLYFpj/1wTpilBnftXTCw6AkKN7oOf1zctJlwAHutcncHAqao1 tO/+V9MVqn7bsyRGsCf2cc4Z6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDiF5nsX 2azT3zEHqxXcu+7bwoIsMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUIwNkMvRTlENjJFNzRGRUFFMTFFODkxMEQ0RDY2QzRGOUFFMDIvMkQ5Q0I1NEE1 RTEwMTFFRTg4NDA2MDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA7mAswDQYJKoZIhvcNAQELBQADggEBALb/qJx1D/Zud08n ASUndtABLTaE47yfMVIIN1MJz/H4r8rwLbZNhutz2C3CvcCFKp06abWWzxc4o7fs y1EjP+D0U7sBhp2dTTi0xC28OeucoHWoAB3D3B4gx8u/Jb7UiwowFK6lFf2cyLLf JLImb2lkhaxIcX2L/LgutHSn38qn3U+VJBcatZ574rzTo1Bo+zLDlAQEA9Mt++3b gsH8p1k/9Bu+pTxLrF5ctHhDKY9+3TT8SenzxbBZGMnYo82XNsqmHM5zQWHTafny 97YtHeCX0egfHVDKVM3ZEZ1kPtxU4hUx/K734Mlf2ZlYWIcWQdZ5iYFzHEukEd5M b88NiQc= -----END CERTIFICATE-----Generated at Wed Dec 27 18:35:47 2023 by rpki-client on console.sobornost.net