$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/EF4B2E301CE411EB95E5A216C4F9AE02.roa File: EF4B2E301CE411EB95E5A216C4F9AE02.roa (raw, json) Hash identifier: hl/3X6BX11WafllMiNd1LQR2jHaTy4LdnM1ilVWB8H4= Subject key identifier: 9E:6A:28:F0:6F:78:57:58:64:97:00:B5:9A:2E:50:E0:1E:16:03:7D Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Certificate serial: 0A19 Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/EF4B2E301CE411EB95E5A216C4F9AE02.roa Signing time: Sat 22 Jun 2024 20:32:49 +0000 ROA not before: Sat 22 Jun 2024 20:32:49 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 134974 IP address blocks: 110.92.25.0/24 maxlen: 24 110.92.26.0/24 maxlen: 24 110.92.27.0/24 maxlen: 24 110.92.31.0/24 maxlen: 24 202.61.64.0/24 maxlen: 24 202.61.65.0/24 maxlen: 24 202.61.66.0/24 maxlen: 24 202.61.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2585 (0xa19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Validity Not Before: Jun 22 20:32:49 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667734f1-1876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:54:26:8f:75:f7:ac:51:8e:6f:39:da:08:9c: 00:0c:17:46:78:7b:6c:0a:45:bd:02:45:bc:34:bd: f5:60:80:d9:d5:ba:31:db:90:fc:5a:4c:32:6c:65: 73:d9:51:77:0c:8a:4c:3d:22:83:1b:83:3d:29:2d: 9a:60:2e:a9:24:99:9d:d1:c3:1a:19:f1:6d:34:07: aa:8e:e2:81:09:4a:01:52:ea:6a:4d:1a:ad:70:3e: e2:67:59:87:bb:94:2a:dc:70:53:68:f5:af:68:b4: 83:ed:20:cc:fe:07:51:81:ba:c5:92:27:f3:f7:e8: c5:ba:57:26:08:cf:a0:1d:2d:33:c3:ae:25:bf:0c: 26:5e:a5:a3:0e:75:aa:7c:e6:f3:59:6d:04:57:fb: d1:5f:75:42:36:b3:e5:15:d9:f8:b2:6b:62:53:c1: 54:04:44:6f:38:f9:6c:98:9a:07:11:5f:6b:c4:88: c4:51:14:67:c9:ec:8c:81:91:2f:07:a9:35:2b:24: b1:f9:b1:ac:28:1d:6c:02:77:07:a7:32:71:45:82: be:8f:1f:cb:c8:72:ef:6b:08:ea:e5:5d:38:ad:40: af:43:21:6d:bc:54:4e:1b:3b:c5:98:8a:1b:b9:ea: 37:6c:cf:ba:30:3c:f8:e2:d4:1c:4d:39:4a:9b:26: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6A:28:F0:6F:78:57:58:64:97:00:B5:9A:2E:50:E0:1E:16:03:7D X509v3 Authority Key Identifier: keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/EF4B2E301CE411EB95E5A216C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.92.25.0-110.92.27.255 110.92.31.0/24 202.61.64.0/22 Signature Algorithm: sha256WithRSAEncryption 77:82:32:cb:66:ac:07:e2:be:41:5b:64:83:03:7d:86:20:5b: b7:65:5e:e4:74:cf:80:3b:56:18:da:a5:ef:1b:54:83:f4:d0: 60:b1:34:fb:90:97:b8:f9:33:63:74:7e:69:8c:6a:f3:9e:99: 36:48:a7:39:77:62:3b:81:a4:a4:78:4c:a3:b2:98:b1:63:71: 6a:24:5e:48:03:c2:b2:97:db:09:c6:76:d5:de:85:b1:f7:ad: 15:02:74:3f:ad:3c:44:8d:19:47:0c:c1:bd:08:08:15:a7:a1: 3d:94:b7:6c:91:3c:96:44:bf:7f:02:aa:f6:a9:41:35:08:1e: 6a:96:93:b0:d8:97:f2:40:e5:75:a3:7b:a0:24:a2:2b:9b:c8: 61:79:ab:b3:10:8c:e3:ec:19:08:e2:ed:34:a7:73:9f:88:02: 3f:3b:f0:bd:86:3a:4e:6b:f5:d7:48:fe:8a:79:0d:2b:f7:2c: 2b:04:03:8d:14:ef:c0:5a:0d:e1:f8:1c:0d:5b:f3:3d:e9:4a: f7:89:68:61:c4:30:9a:4d:0f:9a:ec:82:ad:20:8e:a5:c0:d2: 2c:f2:70:a8:e6:7d:f8:73:f6:46:93:98:f2:19:9f:b2:20:61: 3c:6c:5a:a9:60:71:4d:7d:c6:d6:35:8e:cf:cc:5a:e5:d3:a6: 1d:29:b2:ee -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICChkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENEMkQxMTAvBgNVBAUTKDMyOTUyRUE0NjE5NTYzNTZEMzc3RUJERDRCRkExODcy QThFMUU0NDMwHhcNMjQwNjIyMjAzMjQ5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc3MzRmMS0xODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFQmj3X3rFGObznaCJwADBdGeHtsCkW9AkW8NL31YIDZ1box25D8WkwybGVz 2VF3DIpMPSKDG4M9KS2aYC6pJJmd0cMaGfFtNAeqjuKBCUoBUupqTRqtcD7iZ1mH u5Qq3HBTaPWvaLSD7SDM/gdRgbrFkifz9+jFulcmCM+gHS0zw64lvwwmXqWjDnWq fObzWW0EV/vRX3VCNrPlFdn4smtiU8FUBERvOPlsmJoHEV9rxIjEURRnyeyMgZEv B6k1KySx+bGsKB1sAncHpzJxRYK+jx/LyHLvawjq5V04rUCvQyFtvFROGzvFmIob ueo3bM+6MDz44tQcTTlKmyYE9QIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFJ5qKPBv eFdYZJcAtZouUOAeFgN9MB8GA1UdIwQYMBaAFDKVLqRhlWNW03fr3Uv6GHKo4eRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0QyRC85NEZGMUZCQzU4 ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkxYlRkLXZkU19vWWNxamg1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wVXVwR0dWWTFiVGQtdmRTX29ZY3FqaDVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENEMkQvOTRGRjFGQkM1ODgyMTFFQTk1QjQ3RjUxQzRGOUFFMDIvRUY0QjJFMzAx Q0U0MTFFQjk1RTVBMjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEAG5cGQMEAm5cGAMEAG5cHwMEAso9QDANBgkqhkiG9w0B AQsFAAOCAQEAd4Iyy2asB+K+QVtkgwN9hiBbt2Ve5HTPgDtWGNql7xtUg/TQYLE0 +5CXuPkzY3R+aYxq856ZNkinOXdiO4GkpHhMo7KYsWNxaiReSAPCspfbCcZ21d6F sfetFQJ0P608RI0ZRwzBvQgIFaehPZS3bJE8lkS/fwKq9qlBNQgeapaTsNiX8kDl daN7oCSiK5vIYXmrsxCM4+wZCOLtNKdzn4gCPzvwvYY6Tmv110j+inkNK/csKwQD jRTvwFoN4fgcDVvzPelK94loYcQwmk0PmuyCrSCOpcDSLPJwqOZ9+HP2RpOY8hmf siBhPGxaqWBxTX3G1jWOz8xa5dOmHSmy7g== -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org