$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/CA761A36760A11EC8FB55C23C4F9AE02.roa File: CA761A36760A11EC8FB55C23C4F9AE02.roa (raw, json) Hash identifier: XcKMqxWrgr72X1rDOMRNGWOhRv7K/Bosj9SE1/JpnIk= Subject key identifier: 88:F2:22:FA:A4:27:53:52:E9:85:E2:BA:D7:6A:0D:F3:C6:50:A3:14 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0D36 Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/CA761A36760A11EC8FB55C23C4F9AE02.roa Signing time: Tue 05 Nov 2024 10:40:40 +0000 ROA not before: Tue 05 Nov 2024 10:40:40 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 55448 IP address blocks: 27.50.4.0/23 maxlen: 24 27.50.6.0/23 maxlen: 24 202.52.56.0/23 maxlen: 23 202.52.56.0/24 maxlen: 24 202.52.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3382 (0xd36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Nov 5 10:40:40 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6729f628-1492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5a:c1:a4:9f:03:66:11:81:28:e5:8a:83:d6: be:b1:f6:92:45:73:a3:fe:c5:86:50:9d:25:8e:8e: 6a:7b:56:a0:c2:ef:6a:d2:fa:02:26:e4:f8:f3:be: 0f:65:6a:21:c3:98:a8:01:b0:f7:dc:80:70:5c:17: 11:9e:2a:f0:c3:b9:ad:fe:50:ad:6d:e1:b0:58:a3: 99:d9:d1:eb:08:9b:84:4b:8c:60:54:2b:f7:46:a9: 5c:83:48:e3:28:40:56:8a:22:83:1a:11:65:2d:ce: 6a:da:38:c3:d9:8b:66:5b:ac:1d:36:35:1c:96:4d: 5e:3b:34:ab:bb:8a:f3:48:ee:bc:d6:e4:a5:1d:34: f4:fc:03:81:1f:1c:a7:f7:ad:bb:95:57:d5:8a:8a: 9b:4b:5b:47:6d:e2:05:2c:b4:d9:11:f5:e4:e2:02: bb:f4:81:80:57:0b:26:e1:18:9b:76:40:64:44:91: 8b:1e:e8:c5:96:2b:b1:71:08:6b:20:e3:9b:9b:35: f8:0c:b0:bc:73:d3:91:f7:eb:43:15:a8:a3:de:19: 3e:e0:01:83:c7:d2:bf:6a:24:68:cb:a1:c9:b9:b2: d6:b6:c4:8b:9b:ac:a6:b3:69:b9:30:39:ed:b9:c0: 69:0c:f9:7a:3a:77:5c:f6:a0:0a:3b:84:68:09:08: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F2:22:FA:A4:27:53:52:E9:85:E2:BA:D7:6A:0D:F3:C6:50:A3:14 X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/CA761A36760A11EC8FB55C23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.50.4.0/22 202.52.56.0/23 Signature Algorithm: sha256WithRSAEncryption 01:2a:ac:2c:ef:92:a2:31:37:ca:80:57:23:11:7e:e0:5e:de: b4:91:01:b5:da:4d:91:1c:fe:41:67:ef:e1:e8:a9:f8:9d:b8: 23:46:21:77:76:1a:af:5d:2d:6e:dd:5a:87:5a:40:75:f4:3c: 96:b8:d6:65:96:67:b3:9a:1d:0d:ba:33:44:e6:e0:08:d5:4b: a2:16:4b:db:80:70:ab:d0:d3:3f:f9:e7:61:0f:e6:37:d9:8a: ea:ec:4c:74:a9:4d:22:41:3f:d2:51:96:4c:de:7f:03:d2:99: d4:31:4d:26:99:bf:73:33:d7:c5:4e:55:41:21:55:31:7d:dc: 47:3a:76:30:cd:52:26:b8:2e:3a:d9:39:6f:41:05:59:4d:5c: 65:20:0e:b3:3c:30:77:79:11:36:d8:ff:47:ac:f3:03:bc:9c: b4:aa:05:d8:05:37:67:5a:85:9e:16:6d:6a:ed:c4:2d:11:36: a2:70:cd:ed:92:55:58:7b:30:d6:f7:b5:7b:b2:7c:74:bc:dd: 20:65:ae:cc:91:b2:5d:06:0d:22:0c:85:3b:67:82:2e:4c:49: b7:c9:20:6f:2d:99:cd:5b:9e:28:62:dd:05:56:89:28:78:14: 72:aa:35:44:c4:cf:d9:45:73:c1:e8:2d:47:1e:ed:46:ae:78: ef:96:e0:68 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjQxMTA1MTA0MDQwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI5ZjYyOC0xNDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lrBpJ8DZhGBKOWKg9a+sfaSRXOj/sWGUJ0ljo5qe1agwu9q0voCJuT4874P ZWohw5ioAbD33IBwXBcRnirww7mt/lCtbeGwWKOZ2dHrCJuES4xgVCv3Rqlcg0jj KEBWiiKDGhFlLc5q2jjD2YtmW6wdNjUclk1eOzSru4rzSO681uSlHTT0/AOBHxyn 9627lVfVioqbS1tHbeIFLLTZEfXk4gK79IGAVwsm4RibdkBkRJGLHujFliuxcQhr IOObmzX4DLC8c9OR9+tDFaij3hk+4AGDx9K/aiRoy6HJubLWtsSLm6yms2m5MDnt ucBpDPl6Ondc9qAKO4RoCQgK6QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIjyIvqk J1NS6YXiutdqDfPGUKMUMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjRCRDMvMEU0RDg2N0FDNjhEMTFFOTlCNDUyRDEzQzRGOUFFMDIvQ0E3NjFBMzY3 NjBBMTFFQzhGQjU1QzIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIbMgQDBAHKNDgwDQYJKoZIhvcNAQELBQADggEBAAEqrCzv kqIxN8qAVyMRfuBe3rSRAbXaTZEc/kFn7+HoqfiduCNGIXd2Gq9dLW7dWodaQHX0 PJa41mWWZ7OaHQ26M0Tm4AjVS6IWS9uAcKvQ0z/552EP5jfZiursTHSpTSJBP9JR lkzefwPSmdQxTSaZv3Mz18VOVUEhVTF93Ec6djDNUia4LjrZOW9BBVlNXGUgDrM8 MHd5ETbY/0es8wO8nLSqBdgFN2dahZ4WbWrtxC0RNqJwze2SVVh7MNb3tXuyfHS8 3SBlrsyRsl0GDSIMhTtngi5MSbfJIG8tmc1bnihi3QVWiSh4FHKqNUTEz9lFc8Ho LUce7UaueO+W4Gg= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org