$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/E0AFFE78218611EF8555476BC4F9AE02.roa File: E0AFFE78218611EF8555476BC4F9AE02.roa (raw, json) Hash identifier: XPqY0woMSgGHHJi67ytPD7kMeIAIbv62WWP0UCAlSpE= Subject key identifier: 8D:0A:18:B0:54:D1:C9:AC:3D:0E:3D:A8:9B:3D:58:4A:C1:50:2A:FF Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 3435 Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/E0AFFE78218611EF8555476BC4F9AE02.roa Signing time: Mon 02 Sep 2024 14:50:48 +0000 ROA not before: Mon 02 Sep 2024 14:50:48 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 3758 IP address blocks: 111.65.100.0/24 maxlen: 24 111.65.101.0/24 maxlen: 24 111.65.102.0/23 maxlen: 23 111.65.104.0/21 maxlen: 22 111.65.112.0/20 maxlen: 20 202.78.52.0/22 maxlen: 22 202.78.55.0/24 maxlen: 24 2400:1c00:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Oct 2024 14:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13365 (0x3435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Sep 2 14:50:48 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d5d0c8-647a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:eb:f5:47:0c:72:8d:49:69:4c:84:4c:2b: 01:d9:0b:83:77:be:e2:1d:da:63:b9:df:05:6c:0f: 06:8f:7d:e9:b4:d9:e8:58:48:3c:ed:bc:11:75:5f: b4:97:4f:e3:02:a7:56:1e:19:24:cc:e3:30:53:75: 8e:36:83:d1:4d:4b:73:ec:70:4e:38:4d:7e:3b:42: 7c:c7:ab:02:12:50:b9:f7:ba:43:3a:6b:17:4f:f2: 19:5e:24:94:ff:11:2a:3d:12:23:1c:ba:ff:f5:40: cb:31:28:bd:eb:d1:02:75:f5:79:fd:44:ef:29:1f: bf:46:01:1f:f8:b1:32:48:bc:73:df:ae:7a:e4:fa: ed:5d:4f:22:e0:2e:23:9a:2b:dd:43:5e:53:2a:22: 82:36:60:f0:d4:8b:b9:8c:12:d9:e0:76:56:37:ce: bd:e2:13:bf:70:ab:5c:46:65:39:43:2d:6a:88:6b: 57:4d:a1:3c:1f:c1:8e:39:07:7f:9f:66:12:65:3e: db:3c:6f:ed:fd:2c:b3:a0:a2:03:20:93:d8:ba:0e: d8:a7:a4:8b:79:75:f2:79:13:32:4e:44:ea:26:17: c8:ff:0a:7b:1e:1f:c9:f2:61:61:6e:cb:bb:2d:ea: 8e:29:bd:12:93:52:a7:2a:3c:a0:78:5e:69:e5:85: eb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0A:18:B0:54:D1:C9:AC:3D:0E:3D:A8:9B:3D:58:4A:C1:50:2A:FF X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/E0AFFE78218611EF8555476BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.65.100.0-111.65.127.255 202.78.52.0/22 IPv6: 2400:1c00:13::/48 Signature Algorithm: sha256WithRSAEncryption b3:af:03:8c:d8:cd:7b:ae:af:c9:60:e0:de:b3:fc:7e:80:bd: 60:1d:7b:e4:11:06:48:3a:8a:b4:06:ba:ba:53:b4:dd:f8:d3: de:2f:76:55:a4:a9:8c:a1:06:e2:71:83:c8:73:13:d6:54:7f: c2:1a:f6:06:8a:da:73:c6:6e:b5:19:de:f0:47:04:5f:04:2b: 24:8d:ff:d5:d0:a5:1b:3e:f1:86:cb:35:46:00:b0:db:e0:35: dc:66:a6:0d:47:99:08:a0:3e:f5:18:2f:bb:27:ca:7b:94:85: 42:11:64:fe:3e:ab:89:34:e2:44:7e:ac:62:df:41:e5:55:f8: ed:f4:9d:6e:46:a8:6f:16:c6:0d:2b:f5:74:63:b4:5d:aa:6f: 20:fb:c9:64:d9:88:25:46:ef:8a:8a:d4:c0:ac:86:1b:6d:e6: 21:c2:bb:ab:9b:b6:15:00:8c:ef:2e:8e:16:a6:9b:46:b7:9c: 3c:e9:b8:42:21:af:57:d4:c5:a4:54:c4:0a:02:2d:a6:05:bd: 9c:53:d6:c6:c0:7d:d5:ca:fd:85:85:1d:c7:ff:14:cb:7f:38: ee:3d:e7:cd:00:fe:2e:69:5e:33:b4:2b:3b:a7:eb:28:d8:99: 71:81:4d:49:53:66:79:25:5d:54:29:d2:4c:db:45:27:b5:f9: 5c:75:fe:86 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICNDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjQwOTAyMTQ1MDQ4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ1ZDBjOC02NDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroDr9UcMco1JaUyETCsB2QuDd77iHdpjud8FbA8Gj33ptNnoWEg87bwRdV+0 l0/jAqdWHhkkzOMwU3WONoPRTUtz7HBOOE1+O0J8x6sCElC597pDOmsXT/IZXiSU /xEqPRIjHLr/9UDLMSi969ECdfV5/UTvKR+/RgEf+LEySLxz36565PrtXU8i4C4j mivdQ15TKiKCNmDw1Iu5jBLZ4HZWN8694hO/cKtcRmU5Qy1qiGtXTaE8H8GOOQd/ n2YSZT7bPG/t/SyzoKIDIJPYug7Yp6SLeXXyeRMyTkTqJhfI/wp7Hh/J8mFhbsu7 LeqOKb0Sk1KnKjygeF5p5YXrhwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFI0KGLBU 0cmsPQ49qJs9WErBUCr/MB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUE0OEYvOEM4MUE4NTYxRDhEMTFFMjg2NkM1MEVCMDhCMDJDRDIvRTBBRkZFNzgy MTg2MTFFRjg1NTU0NzZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPgYIKwYBBQUHAQcBAf8E LzAtMBoEAgABMBQwDAMEAm9BZAMEB29BAAMEAspONDAPBAIAAjAJAwcAJAAcAAAT MA0GCSqGSIb3DQEBCwUAA4IBAQCzrwOM2M17rq/JYODes/x+gL1gHXvkEQZIOoq0 Brq6U7Td+NPeL3ZVpKmMoQbicYPIcxPWVH/CGvYGitpzxm61Gd7wRwRfBCskjf/V 0KUbPvGGyzVGALDb4DXcZqYNR5kIoD71GC+7J8p7lIVCEWT+PquJNOJEfqxi30Hl Vfjt9J1uRqhvFsYNK/V0Y7Rdqm8g+8lk2YglRu+KitTArIYbbeYhwrurm7YVAIzv Lo4WpptGt5w86bhCIa9X1MWkVMQKAi2mBb2cU9bGwH3Vyv2FhR3H/xTLfzjuPefN AP4uaV4ztCs7p+so2JlxgU1JU2Z5JV1UKdJM20Untflcdf6G -----END CERTIFICATE-----Generated at Thu Sep 26 17:18:37 2024 by rpki-client on console-fra.rpki-client.org