$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/2428B7AE5D3A11EBA0F5C625C4F9AE02.roa File: 2428B7AE5D3A11EBA0F5C625C4F9AE02.roa (raw, json) Hash identifier: uGyiffgSVa017Vx7fUECky0Rn5Nr1nPji4RP81NPr/I= Subject key identifier: CA:FD:C7:1A:F3:24:64:D8:DF:71:A9:AB:9A:A7:AA:25:C1:5B:16:B1 Certificate issuer: /CN=A916B95C/serialNumber=5BADFED330D65CA0BAB3F73901CB95305A207DC3 Certificate serial: 062B Authority key identifier: 5B:AD:FE:D3:30:D6:5C:A0:BA:B3:F7:39:01:CB:95:30:5A:20:7D:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/2428B7AE5D3A11EBA0F5C625C4F9AE02.roa Signing time: Tue 06 Aug 2024 23:11:38 +0000 ROA not before: Tue 06 Aug 2024 23:11:38 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 4825 IP address blocks: 202.61.4.0/24 maxlen: 24 202.61.5.0/24 maxlen: 24 202.61.6.0/24 maxlen: 24 202.61.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.crl rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1579 (0x62b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95C/serialNumber=5BADFED330D65CA0BAB3F73901CB95305A207DC3 Validity Not Before: Aug 6 23:11:38 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b2adaa-50bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9f:08:eb:6a:b2:6b:30:c6:d1:dc:22:50:13: 4b:fc:c5:7f:24:e2:36:2c:69:2e:fa:8a:5f:5d:a5: d6:69:f1:c9:67:3d:a7:35:d6:41:ad:a7:d5:05:f0: 30:e1:86:2b:e7:e5:80:76:d4:a4:df:94:b4:63:f0: d1:0a:ce:14:ae:b9:3e:da:a0:8a:b6:fd:b9:c3:ce: d6:e7:85:ff:28:c7:d3:aa:9c:e0:7d:b2:42:31:69: 7a:a4:bf:0f:2b:b2:5d:5d:0e:1f:ad:a1:dd:a8:a9: 9d:ed:f3:9d:71:0c:65:85:17:01:6e:52:ec:99:d6: 32:b7:cf:3f:e7:5d:27:40:fd:24:29:25:ea:95:54: 76:a2:17:70:11:73:61:bc:75:6d:81:f9:72:22:9a: 31:87:91:6d:23:0a:72:0a:09:67:77:3c:47:28:0b: c8:0b:ed:18:c9:e2:57:0d:23:26:c2:bd:6f:97:03: ae:f9:20:74:15:14:f1:33:37:4c:1d:49:b1:57:38: c4:03:60:5a:c3:ae:05:13:79:3b:84:ce:9e:a4:40: a5:1b:fc:15:25:d5:f2:65:43:b0:dc:1d:a3:d3:b3: e0:12:13:c4:d6:22:d6:ec:2f:99:23:71:48:83:3f: 33:a1:38:83:d6:f6:4c:de:5e:c4:56:fd:76:3e:de: ff:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FD:C7:1A:F3:24:64:D8:DF:71:A9:AB:9A:A7:AA:25:C1:5B:16:B1 X509v3 Authority Key Identifier: keyid:5B:AD:FE:D3:30:D6:5C:A0:BA:B3:F7:39:01:CB:95:30:5A:20:7D:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/2428B7AE5D3A11EBA0F5C625C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.61.4.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:ce:6d:2d:5d:fa:ca:14:be:d0:ab:00:84:9c:80:58:43:03: c5:78:eb:fe:aa:e3:2e:99:aa:9f:fb:5b:ed:32:37:bc:0d:a1: d1:ac:50:3d:2e:ce:59:30:9c:c2:9a:f0:5d:ba:19:00:be:0e: 3c:6f:96:9d:bc:67:5d:af:74:65:7a:51:9d:c2:d7:84:62:56: b4:02:f3:d1:60:98:78:ea:07:48:5b:9f:b0:b6:37:82:7c:b1: 31:a5:3a:1b:e2:5c:6c:8a:0d:83:86:30:fa:d3:a7:b6:63:ea: 18:8a:66:9e:fe:e4:66:05:fb:2a:97:2f:b0:e7:ae:94:0e:3f: b5:11:fe:42:8a:0e:e8:de:43:68:44:af:ee:d4:bc:ea:c3:d7: 3a:27:5b:99:f8:ad:71:b1:a6:c3:44:b2:14:ae:1f:7f:cc:23: 40:63:fd:c5:13:cb:76:2b:59:9e:58:b7:c6:0e:08:1d:8f:63: f5:33:4c:c9:16:97:20:47:0a:52:99:49:b5:94:36:f4:05:39: 6c:c5:6f:b0:8f:8f:2e:40:35:84:a4:76:52:ca:b4:50:53:72: b5:70:c5:6d:04:6d:17:1d:11:7a:39:f2:3e:30:0a:dc:1d:09: 44:25:3e:38:81:62:02:e0:c9:43:ca:48:ed:39:c1:37:07:61: 16:3b:59:19 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUMxMTAvBgNVBAUTKDVCQURGRUQzMzBENjVDQTBCQUIzRjczOTAxQ0I5NTMw NUEyMDdEQzMwHhcNMjQwODA2MjMxMTM4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIyYWRhYS01MGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2p8I62qyazDG0dwiUBNL/MV/JOI2LGku+opfXaXWafHJZz2nNdZBrafVBfAw 4YYr5+WAdtSk35S0Y/DRCs4Urrk+2qCKtv25w87W54X/KMfTqpzgfbJCMWl6pL8P K7JdXQ4fraHdqKmd7fOdcQxlhRcBblLsmdYyt88/510nQP0kKSXqlVR2ohdwEXNh vHVtgflyIpoxh5FtIwpyCglndzxHKAvIC+0YyeJXDSMmwr1vlwOu+SB0FRTxMzdM HUmxVzjEA2Baw64FE3k7hM6epEClG/wVJdXyZUOw3B2j07PgEhPE1iLW7C+ZI3FI gz8zoTiD1vZM3l7EVv12Pt7/aQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMr9xxrz JGTY33Gpq5qnqiXBWxaxMB8GA1UdIwQYMBaAFFut/tMw1lygurP3OQHLlTBaIH3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1Qy8yNzI2NDdBMjVE MzgxMUVCQTIwMkRGMUVDNEY5QUUwMi9XNjMtMHpEV1hLQzZzX2M1QWN1Vk1Gb2dm Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2My0wekRXWEtDNnNfYzVBY3VWTUZvZ2ZjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI5NUMvMjcyNjQ3QTI1RDM4MTFFQkEyMDJERjFFQzRGOUFFMDIvMjQyOEI3QUU1 RDNBMTFFQkEwRjVDNjI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKPQQwDQYJKoZIhvcNAQELBQADggEBAEvObS1d+soUvtCr AIScgFhDA8V46/6q4y6Zqp/7W+0yN7wNodGsUD0uzlkwnMKa8F26GQC+Djxvlp28 Z12vdGV6UZ3C14RiVrQC89FgmHjqB0hbn7C2N4J8sTGlOhviXGyKDYOGMPrTp7Zj 6hiKZp7+5GYF+yqXL7DnrpQOP7UR/kKKDujeQ2hEr+7UvOrD1zonW5n4rXGxpsNE shSuH3/MI0Bj/cUTy3YrWZ5Yt8YOCB2PY/UzTMkWlyBHClKZSbWUNvQFOWzFb7CP jy5ANYSkdlLKtFBTcrVwxW0EbRcdEXo58j4wCtwdCUQlPjiBYgLgyUPKSO05wTcH YRY7WRk= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:28 2024 by rpki-client on console-fra.rpki-client.org