$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/593FC45EB89011EA8C060064C4F9AE02.roa File: 593FC45EB89011EA8C060064C4F9AE02.roa (raw, json) Hash identifier: GNTtQ5EmAt4jwHyNzDkJrVxnNcCezotTwTzcnNPHMDI= Subject key identifier: AB:4E:00:50:E0:F8:76:09:A7:D4:F8:D7:CE:8B:68:46:D9:2D:70:9C Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Certificate serial: 0849 Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/593FC45EB89011EA8C060064C4F9AE02.roa Signing time: Thu 14 Nov 2024 20:29:11 +0000 ROA not before: Thu 14 Nov 2024 20:29:11 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 45496 IP address blocks: 113.29.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2121 (0x849) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Validity Not Before: Nov 14 20:29:11 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67365d97-8dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:25:78:14:ee:8d:60:ac:65:d5:c8:a5:8c:5f: 4a:eb:ad:84:e0:7d:19:b0:8d:dc:2c:28:71:83:e5: 44:7d:7b:69:f6:44:10:57:44:73:e5:83:58:2e:fd: f9:85:64:cc:98:29:c5:cf:84:1a:96:dc:7e:1f:af: f5:99:d0:8e:a4:5a:46:65:e2:18:61:ee:87:9a:39: 6f:c9:96:3d:76:7f:50:95:b4:88:da:78:6d:00:15: 68:c6:86:68:62:f6:2a:ac:b6:da:8a:ab:a9:88:f2: d0:78:bd:a9:3f:ca:32:aa:4b:6d:c4:1a:fb:0f:38: ae:31:50:75:e7:83:e8:86:5f:36:18:4e:8c:7e:36: 32:a6:1f:f0:4a:84:77:94:e0:b3:34:3e:5f:71:01: f2:91:ef:41:fb:10:c7:9d:ab:8f:5d:6d:ae:73:73: 09:42:12:25:c2:78:ed:6a:d8:47:43:7a:18:40:3c: 03:23:ca:74:37:12:00:45:c7:24:7f:5a:ab:fd:10: d7:fb:2f:c7:b5:ee:59:c1:4f:f4:3f:51:c2:84:60: f5:49:bc:37:c5:7f:35:66:db:77:12:8c:1d:65:73: c0:38:fa:a6:26:9c:f2:a2:6f:c2:b6:eb:c9:9b:08: a6:c2:1a:07:97:e5:ff:87:c4:f0:b0:82:ce:4e:92: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4E:00:50:E0:F8:76:09:A7:D4:F8:D7:CE:8B:68:46:D9:2D:70:9C X509v3 Authority Key Identifier: keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/593FC45EB89011EA8C060064C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.29.252.0/22 Signature Algorithm: sha256WithRSAEncryption 43:02:d2:80:a3:35:b8:cf:55:b2:a7:36:21:cc:cc:5c:e9:0c: 58:87:08:26:5a:6e:5f:63:66:78:ce:e6:99:ee:e3:cc:2f:3e: f1:a1:26:aa:64:46:a7:7d:5d:87:59:27:6f:58:17:aa:52:0e: f7:2f:c1:93:49:78:b3:33:c7:51:22:27:5e:e5:13:a9:e2:da: d6:77:a1:dd:80:be:50:1e:c1:cd:68:03:41:61:3e:76:e4:4a: d5:c9:8c:96:26:a0:81:1a:34:7a:3b:16:bf:0c:71:43:82:bd: ea:d9:de:b8:f8:ea:00:3c:9e:ff:9c:a3:87:1b:ff:0f:96:d4: 2d:60:0c:8d:74:27:2d:69:9e:e1:51:3b:e6:1f:36:e6:35:97: 45:2c:07:cb:93:ec:14:19:82:fc:58:82:b1:31:c8:65:cc:4d: 3a:18:e9:16:5f:62:4e:04:ca:78:13:e5:78:e0:8b:ec:c2:b3: 6d:db:a7:ac:90:d7:36:58:ca:6b:eb:38:32:c9:e6:11:39:5b: 96:bc:16:38:3f:2b:f7:1a:22:18:95:fd:12:80:80:61:40:e2: 2c:15:e4:3b:91:3e:60:1f:73:f5:e3:dd:b5:c0:30:16:d7:d6: b6:31:7c:80:bc:f4:e3:fe:6a:5f:64:a6:3b:c1:65:6f:bc:94: 8d:09:bf:6a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MUQxMTAvBgNVBAUTKDY1Q0I1Q0NCRTUzMUNDNEVGNDJBMUQzMDdERjdCNDVD QjBFOTc0RDkwHhcNMjQxMTE0MjAyOTExWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM2NWQ5Ny04ZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyV4FO6NYKxl1ciljF9K662E4H0ZsI3cLChxg+VEfXtp9kQQV0Rz5YNYLv35 hWTMmCnFz4Qaltx+H6/1mdCOpFpGZeIYYe6HmjlvyZY9dn9QlbSI2nhtABVoxoZo YvYqrLbaiqupiPLQeL2pP8oyqkttxBr7DziuMVB154Pohl82GE6MfjYyph/wSoR3 lOCzND5fcQHyke9B+xDHnauPXW2uc3MJQhIlwnjtathHQ3oYQDwDI8p0NxIARcck f1qr/RDX+y/Hte5ZwU/0P1HChGD1Sbw3xX81Ztt3EowdZXPAOPqmJpzyom/CtuvJ mwimwhoHl+X/h8TwsILOTpL5RQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKtOAFDg +HYJp9T4186LaEbZLXCcMB8GA1UdIwQYMBaAFGXLXMvlMcxO9CodMH33tFyw6XTZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUxRC81Q0IxRUEwNkI4 OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpFNzBLaDB3ZmZlMFhMRHBk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pjdGN5LVV4ekU3MEtoMHdmZmUwWExEcGROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ1MUQvNUNCMUVBMDZCODhFMTFFQUJBMzNBQzYxQzRGOUFFMDIvNTkzRkM0NUVC ODkwMTFFQThDMDYwMDY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJxHfwwDQYJKoZIhvcNAQELBQADggEBAEMC0oCjNbjPVbKn NiHMzFzpDFiHCCZabl9jZnjO5pnu48wvPvGhJqpkRqd9XYdZJ29YF6pSDvcvwZNJ eLMzx1EiJ17lE6ni2tZ3od2AvlAewc1oA0FhPnbkStXJjJYmoIEaNHo7Fr8McUOC verZ3rj46gA8nv+co4cb/w+W1C1gDI10Jy1pnuFRO+YfNuY1l0UsB8uT7BQZgvxY grExyGXMTToY6RZfYk4EyngT5Xjgi+zCs23bp6yQ1zZYymvrODLJ5hE5W5a8Fjg/ K/caIhiV/RKAgGFA4iwV5DuRPmAfc/Xj3bXAMBbX1rYxfIC89OP+al9kpjvBZW+8 lI0Jv2o= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:27 2024 by rpki-client on console-ams.rpki-client.org