$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/9A36771A8C8E11EF86852961C4F9AE02.roa File: 9A36771A8C8E11EF86852961C4F9AE02.roa (raw, json) Hash identifier: 9OuRCyTKARyxu0HVGwX+7EOD8zJcO3DB6HwcIsyXsFM= Subject key identifier: 01:18:4E:06:C8:15:83:FB:32:6C:D9:73:BE:13:86:E9:AF:D4:47:98 Certificate issuer: /CN=A91A0847/serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Certificate serial: 02 Authority key identifier: E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/9A36771A8C8E11EF86852961C4F9AE02.roa Signing time: Thu 17 Oct 2024 13:49:17 +0000 ROA not before: Thu 17 Oct 2024 13:49:17 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 151617 IP address blocks: 203.20.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0847/serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Validity Not Before: Oct 17 13:49:17 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=671115dd-89cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:a8:9a:a6:0d:8a:ca:1a:46:3f:2c:fc:2a: 2c:c5:b3:3b:c6:f8:0b:69:cf:5d:59:e4:80:6f:00: b2:c1:6a:89:b7:0e:7e:86:c1:ea:9d:93:f9:bf:a2: 4d:7b:c4:a3:4a:6a:ef:82:54:05:d5:52:c0:6e:71: 30:f0:e0:a4:92:0a:1a:65:d9:19:9c:65:0e:a9:59: c2:80:41:e7:fa:7d:b6:28:53:57:cf:8e:06:76:87: 54:fa:ff:d7:b3:cb:1f:9f:1e:89:d3:f4:c2:28:02: 5d:6c:86:4c:4b:ec:30:d7:f6:d2:f4:c7:52:48:13: 96:d1:62:2c:2c:04:ac:3c:35:7b:36:5c:aa:d9:ec: 02:37:81:0a:1d:16:9d:fb:65:c5:c3:20:be:5a:f5: 7d:17:de:18:76:93:3f:fb:9b:80:38:a2:ac:b6:49: c4:e1:54:4b:f9:0c:c9:b5:f3:8f:45:02:c1:8f:fa: 54:27:5e:78:44:0a:3c:cb:b3:48:94:fb:85:64:78: 1e:5d:7b:6c:2a:d9:01:52:94:dc:37:e8:cf:87:c8: b7:03:6d:30:25:c4:4b:5d:68:e7:a2:83:5d:c3:6d: 5c:d8:fb:39:90:95:10:8c:b9:0a:d1:d3:a6:09:a4: d0:95:41:9b:b8:81:d7:33:2c:bb:58:8c:b3:41:1e: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:18:4E:06:C8:15:83:FB:32:6C:D9:73:BE:13:86:E9:AF:D4:47:98 X509v3 Authority Key Identifier: keyid:E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/9A36771A8C8E11EF86852961C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.116.0/24 Signature Algorithm: sha256WithRSAEncryption a1:58:2d:34:e1:98:e2:2a:25:1d:60:7e:98:6c:e7:d9:95:0e: e5:69:89:bc:92:15:d7:34:fb:19:6c:cb:90:05:47:9c:f6:7f: 9d:1a:a1:cd:a2:1f:bf:dd:90:ef:a6:44:17:02:ed:01:49:85: 1e:63:e9:1a:e3:b5:7b:13:a8:53:36:50:be:3c:b6:cc:2f:03: 2a:cf:5f:88:82:a4:a4:2c:b4:b2:58:51:85:46:1d:78:4e:20: a1:ac:eb:91:ae:bc:39:32:e6:f9:28:40:68:df:8a:d8:00:8d: e4:71:ce:b3:f6:72:56:3d:28:ca:73:22:95:d1:52:b9:37:e5: e2:59:2c:f8:ee:6d:8e:5c:79:b8:86:6d:57:76:12:28:b3:b9: f6:f1:b3:57:85:50:a7:eb:b8:11:fc:4e:05:7a:e5:08:7d:2c: c7:2e:3a:56:95:8e:1f:31:76:0c:c5:94:1d:23:f6:14:f1:9e: 2c:c3:7e:d8:3d:dd:e8:d8:91:c3:7b:59:5b:03:f1:82:a6:41: 4e:5e:f5:aa:84:4d:1e:21:24:78:3b:42:14:09:c6:bc:a1:6b: ab:1d:65:71:28:bb:e1:84:41:f4:c0:bc:95:e3:2d:c8:27:11: 2b:e5:82:38:d2:47:02:c6:37:02:cc:ef:50:ce:a5:e8:ea:02: 64:91:2c:8b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDg0NzExMC8GA1UEBRMoRTg2MTQwMDIzRjBDQTA1RjE3MTRCOEE3MERDOTk1NUZG Nzk3QkRCMTAeFw0yNDEwMTcxMzQ5MTdaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MTExNWRkLTg5Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgU6iapg2KyhpGPyz8KizFszvG+Atpz11Z5IBvALLBaom3Dn6Gweqdk/m/ok17 xKNKau+CVAXVUsBucTDw4KSSChpl2RmcZQ6pWcKAQef6fbYoU1fPjgZ2h1T6/9ez yx+fHonT9MIoAl1shkxL7DDX9tL0x1JIE5bRYiwsBKw8NXs2XKrZ7AI3gQodFp37 ZcXDIL5a9X0X3hh2kz/7m4A4oqy2ScThVEv5DMm1849FAsGP+lQnXnhECjzLs0iU +4VkeB5de2wq2QFSlNw36M+HyLcDbTAlxEtdaOeig13DbVzY+zmQlRCMuQrR06YJ pNCVQZu4gdczLLtYjLNBHi33AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUARhOBsgV g/sybNlzvhOG6a/UR5gwHwYDVR0jBBgwFoAU6GFAAj8MoF8XFLinDcmVX/eXvbEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwODQ3LzMzQjIzRjdFOEM4 RTExRUZBMkRDNTM2MEM0RjlBRTAyLzZHRkFBajhNb0Y4WEZMaW5EY21WWF9lWHZi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkdGQUFqOE1vRjhYRkxpbkRjbVZYX2VYdmJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0Ny8zM0IyM0Y3RThDOEUxMUVGQTJEQzUzNjBDNEY5QUUwMi85QTM2NzcxQThD OEUxMUVGODY4NTI5NjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsUdDANBgkqhkiG9w0BAQsFAAOCAQEAoVgtNOGY4iolHWB+ mGzn2ZUO5WmJvJIV1zT7GWzLkAVHnPZ/nRqhzaIfv92Q76ZEFwLtAUmFHmPpGuO1 exOoUzZQvjy2zC8DKs9fiIKkpCy0slhRhUYdeE4goazrka68OTLm+ShAaN+K2ACN 5HHOs/ZyVj0oynMildFSuTfl4lks+O5tjlx5uIZtV3YSKLO59vGzV4VQp+u4EfxO BXrlCH0sxy46VpWOHzF2DMWUHSP2FPGeLMN+2D3d6NiRw3tZWwPxgqZBTl71qoRN HiEkeDtCFAnGvKFrqx1lcSi74YRB9MC8leMtyCcRK+WCONJHAsY3AszvUM6l6OoC ZJEsiw== -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org