$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa File: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (raw, json) Hash identifier: 1dpcwbxbOmSptn78t7IKa9RvI5w/WLT63SPq7v5q1Ls= Subject key identifier: E6:D6:9C:4A:B3:60:5A:DA:8A:84:24:BB:05:20:EB:DA:AC:4E:AB:9F Certificate issuer: /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Certificate serial: 48 Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa Signing time: Wed 31 Jan 2024 07:29:05 +0000 ROA not before: Wed 31 Jan 2024 07:29:05 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 138015 IP address blocks: 203.57.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Validity Not Before: Jan 31 07:29:05 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b9f6c1-3abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:07:03:ac:62:63:b5:53:6d:40:90:66:59: 58:e7:af:ba:85:d9:54:e9:56:ed:14:69:05:5f:01: 02:c3:8f:9c:60:11:07:d6:8a:80:23:7a:04:26:ff: 1d:3d:4b:bf:c9:0b:a0:aa:b9:ea:89:37:15:11:53: ce:c4:8c:eb:18:70:f1:19:79:17:58:4e:51:c1:dc: 31:ae:77:84:98:93:18:89:aa:67:54:5d:7e:4c:83: 99:e1:4a:1a:ee:c4:0b:c7:0b:ad:dd:80:15:2c:99: 29:ce:1a:3a:b9:d2:48:94:bc:dd:40:2c:7b:bd:aa: 96:88:4b:5f:fd:cc:b9:05:47:ee:a0:98:08:bf:88: 7c:30:c1:e1:a0:16:ca:7d:17:da:f2:88:fd:55:5c: 0c:3f:e8:df:68:70:18:3d:02:42:c3:86:5f:81:bc: d1:79:79:ba:19:27:42:80:8f:09:2c:53:4d:88:b8: 39:3d:e5:02:f2:4e:ef:b9:35:c4:0d:2a:10:85:10: f0:93:75:b6:dd:08:ac:5e:b2:8e:c5:1d:95:24:dc: ee:e3:26:57:e2:89:20:55:70:04:b3:9c:6f:b5:87: 71:6d:2b:22:f1:80:b6:f2:f6:2f:9e:d6:08:90:77: 10:8d:db:53:cd:18:d3:1f:15:20:df:e6:81:a5:11: 6c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D6:9C:4A:B3:60:5A:DA:8A:84:24:BB:05:20:EB:DA:AC:4E:AB:9F X509v3 Authority Key Identifier: keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.57.29.0/24 Signature Algorithm: sha256WithRSAEncryption 34:a6:69:9e:2d:ab:b7:ae:4a:2d:a4:fd:cb:d3:4b:66:f6:eb: a6:54:27:bb:01:17:24:ce:aa:ba:8a:f6:67:d9:62:a0:80:5a: c8:b7:f3:a7:ba:9d:42:e5:95:3b:bb:c2:d2:5d:cf:3d:fc:2a: 29:87:05:af:8d:67:a0:ca:e4:c1:b4:e8:a9:01:79:e2:a3:fc: 28:00:25:d4:b8:c4:27:d2:1d:b0:9a:e8:b2:5a:1a:ba:6f:6b: c1:89:29:46:b1:14:67:bd:12:db:f7:46:5f:8c:f1:81:cb:58: eb:ae:73:d2:49:7d:f0:ed:73:96:ed:1d:46:99:cf:7b:f5:e7: 9e:5d:26:a8:0d:22:c3:93:be:8f:ee:88:7c:11:71:d1:aa:22: ba:e3:52:13:c2:f0:51:55:80:e6:0f:f5:e0:1b:6f:f0:12:92: 16:e8:51:15:cb:6b:d8:b1:87:01:71:9d:f4:e6:87:9a:3f:37: 71:04:1e:44:ce:7a:5d:b4:99:a8:55:7a:f7:da:87:92:b4:79: b3:59:16:24:64:1b:8f:77:24:ac:6c:e5:ad:9a:61:7b:10:47: ea:43:8b:55:ce:a9:d5:21:a7:c5:52:2a:73:e5:58:9f:2e:52: 57:15:ef:f9:3d:6f:dc:50:56:6e:ca:0f:71:e6:75:d1:69:15: 76:c3:1d:70 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzlFODExMC8GA1UEBRMoODUyOTlGMERCMTRDOEYwQTUzRDI0NDZFRkRCMENDMDU5 QzE1MjRCRjAeFw0yNDAxMzEwNzI5MDVaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YjlmNmMxLTNhYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPHgcDrGJjtVNtQJBmWVjnr7qF2VTpVu0UaQVfAQLDj5xgEQfWioAjegQm/x09 S7/JC6CqueqJNxURU87EjOsYcPEZeRdYTlHB3DGud4SYkxiJqmdUXX5Mg5nhShru xAvHC63dgBUsmSnOGjq50kiUvN1ALHu9qpaIS1/9zLkFR+6gmAi/iHwwweGgFsp9 F9ryiP1VXAw/6N9ocBg9AkLDhl+BvNF5eboZJ0KAjwksU02IuDk95QLyTu+5NcQN KhCFEPCTdbbdCKxeso7FHZUk3O7jJlfiiSBVcASznG+1h3FtKyLxgLby9i+e1giQ dxCN21PNGNMfFSDf5oGlEWznAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU5tacSrNg WtqKhCS7BSDr2qxOq58wHwYDVR0jBBgwFoAUhSmfDbFMjwpT0kRu/bDMBZwVJL8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDOUU4L0ZERjY3MzA2NThG RDExRUU5RDJEMjM3NkM0RjlBRTAyL2hTbWZEYkZNandwVDBrUnVfYkRNQlp3VkpM OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFNtZkRiRk1qd3BUMGtSdV9iRE1CWndWSkw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzlFOC9GREY2NzMwNjU4RkQxMUVFOUQyRDIzNzZDNEY5QUUwMi9FMzlGNEVENjVD MjQxMUVFQjU0QzRGNDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMs5HTANBgkqhkiG9w0BAQsFAAOCAQEANKZpni2rt65KLaT9 y9NLZvbrplQnuwEXJM6quor2Z9lioIBayLfzp7qdQuWVO7vC0l3PPfwqKYcFr41n oMrkwbToqQF54qP8KAAl1LjEJ9IdsJrosloaum9rwYkpRrEUZ70S2/dGX4zxgctY 665z0kl98O1zlu0dRpnPe/Xnnl0mqA0iw5O+j+6IfBFx0aoiuuNSE8LwUVWA5g/1 4Btv8BKSFuhRFctr2LGHAXGd9OaHmj83cQQeRM56XbSZqFV699qHkrR5s1kWJGQb j3ckrGzlrZphexBH6kOLVc6p1SGnxVIqc+VYny5SVxXv+T1v3FBWbsoPceZ10WkV dsMdcA== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org