$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/7DBDA87C561A11E79F98831DC4F9AE02.roa File: 7DBDA87C561A11E79F98831DC4F9AE02.roa (raw, json) Hash identifier: SI+LLofCjizJ4ADDiYbKrAg1//cncoxs2Ga5Zj0MMu4= Subject key identifier: A2:24:05:48:F4:A7:54:74:20:BB:9A:DB:A8:E0:8A:2B:51:D1:7D:D7 Certificate issuer: /CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07 Certificate serial: 22F7 Authority key identifier: 02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/7DBDA87C561A11E79F98831DC4F9AE02.roa Signing time: Thu 02 May 2024 16:33:31 +0000 ROA not before: Thu 02 May 2024 16:33:31 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 18014 IP address blocks: 113.29.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8951 (0x22f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07 Validity Not Before: May 2 16:33:31 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6633c05b-57d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:ff:fd:3d:94:4f:f8:ad:09:17:e2:89:10: f4:da:51:b3:8d:44:b2:f2:ad:e0:dd:4b:89:9c:6c: 58:78:fc:af:a8:5c:3c:5c:3e:77:f1:90:14:a6:c3: 5c:53:7c:22:70:f6:50:b3:71:69:cd:3b:a1:99:cb: 0a:2d:7c:2d:cc:ba:f1:86:a0:ce:95:45:0a:26:54: a5:d9:68:e1:85:b9:a7:ca:02:78:50:5f:dd:26:94: d4:c3:06:d0:c6:5b:5a:ca:fc:5b:7c:8e:f5:83:e0: 60:97:47:8e:c6:c3:83:df:25:a2:70:c1:b4:9e:65: d1:cb:36:2a:da:e1:dc:77:67:a8:19:6e:bc:e8:0d: 9d:1c:01:d3:6a:9e:32:b8:7b:32:11:36:c5:2f:59: e3:b2:05:a1:22:93:6f:92:6b:e5:7d:6f:10:34:b2: 09:fb:db:97:9d:09:e9:ce:46:d1:45:37:de:9e:6b: 0f:1c:24:9b:a0:1c:07:2f:f0:d3:9e:10:f8:b2:16: de:19:93:a0:ce:a3:7e:95:fb:69:7e:58:f2:af:71: c0:41:e8:cb:8e:47:16:98:69:7e:78:03:45:37:fc: c0:18:36:37:dc:39:19:da:cf:df:41:c8:0c:dc:3c: 36:ce:ac:eb:7b:cf:89:43:64:08:43:e2:fb:0b:10: 92:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:24:05:48:F4:A7:54:74:20:BB:9A:DB:A8:E0:8A:2B:51:D1:7D:D7 X509v3 Authority Key Identifier: keyid:02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/7DBDA87C561A11E79F98831DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.29.248.0/22 Signature Algorithm: sha256WithRSAEncryption 02:5e:c3:d0:93:96:57:f7:6e:df:da:06:f6:34:f3:0b:58:6f: 13:a7:22:f3:f4:4b:3b:1b:1f:2e:d6:48:83:0c:b4:c8:9a:3e: ec:56:04:1c:54:58:10:6d:8d:34:df:4d:01:6b:62:22:35:93: 3c:b4:22:1a:2e:3c:8b:c2:46:d8:96:f2:2d:cb:0b:bc:5a:b9: 4d:b0:5c:88:e6:8d:a8:91:00:33:03:e4:a7:bf:cb:15:a0:fb: 2a:77:fa:f3:6c:51:80:2c:c2:90:48:a1:78:3d:5e:7e:06:a0: f2:aa:a0:25:97:c9:78:cd:8b:20:3c:05:6e:79:94:5d:00:3d: ce:64:34:dc:c6:a7:40:12:6e:c0:17:04:dc:07:e2:af:ee:91: c0:99:b3:65:e8:63:56:6a:6c:fb:80:a6:9e:da:a4:76:4d:28: 2c:29:d0:dc:ff:c3:c3:55:eb:f3:3c:6a:24:7b:cd:40:17:db: cb:19:09:5c:05:70:21:67:64:90:af:b3:77:50:0b:14:75:3b: 68:f7:ce:dc:0e:fd:17:6f:37:84:b7:ab:72:52:0c:0d:ee:f3: ca:f9:6f:bd:7e:fb:3e:4d:dc:4a:7f:29:79:c1:34:f3:1f:9f: 44:36:1c:4e:61:35:89:bb:be:f0:e9:76:89:50:0f:13:d6:29: cb:a4:fd:d3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QzYxMTAvBgNVBAUTKDAyMjMwRDk1NEU0RjNENkFBRDQ0OTVENzRDREIzRUUw RjI4N0NBMDcwHhcNMjQwNTAyMTYzMzMxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzYzA1Yi01N2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYX//T2UT/itCRfiiRD02lGzjUSy8q3g3UuJnGxYePyvqFw8XD538ZAUpsNc U3wicPZQs3FpzTuhmcsKLXwtzLrxhqDOlUUKJlSl2WjhhbmnygJ4UF/dJpTUwwbQ xltayvxbfI71g+Bgl0eOxsOD3yWicMG0nmXRyzYq2uHcd2eoGW686A2dHAHTap4y uHsyETbFL1njsgWhIpNvkmvlfW8QNLIJ+9uXnQnpzkbRRTfenmsPHCSboBwHL/DT nhD4shbeGZOgzqN+lftpfljyr3HAQejLjkcWmGl+eANFN/zAGDY33DkZ2s/fQcgM 3Dw2zqzre8+JQ2QIQ+L7CxCShQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKIkBUj0 p1R0ILua26jgiitR0X3XMB8GA1UdIwQYMBaAFAIjDZVOTz1qrUSV10zbPuDyh8oH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRDNi84REZFNjI4ODc4 QTExMUU1QURFOTcwODJDNEY5QUUwMi9BaU1ObFU1UFBXcXRSSlhYVE5zLTRQS0h5 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FpTU5sVTVQUFdxdFJKWFhUTnMtNFBLSHlnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I0QzYvOERGRTYyODg3OEExMTFFNUFERTk3MDgyQzRGOUFFMDIvN0RCREE4N0M1 NjFBMTFFNzlGOTg4MzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJxHfgwDQYJKoZIhvcNAQELBQADggEBAAJew9CTllf3bt/a BvY08wtYbxOnIvP0SzsbHy7WSIMMtMiaPuxWBBxUWBBtjTTfTQFrYiI1kzy0Ihou PIvCRtiW8i3LC7xauU2wXIjmjaiRADMD5Ke/yxWg+yp3+vNsUYAswpBIoXg9Xn4G oPKqoCWXyXjNiyA8BW55lF0APc5kNNzGp0ASbsAXBNwH4q/ukcCZs2XoY1ZqbPuA pp7apHZNKCwp0Nz/w8NV6/M8aiR7zUAX28sZCVwFcCFnZJCvs3dQCxR1O2j3ztwO /RdvN4S3q3JSDA3u88r5b71++z5N3Ep/KXnBNPMfn0Q2HE5hNYm7vvDpdolQDxPW Kcuk/dM= -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:08 2024 by rpki-client on console-fra.rpki-client.org