$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/08AF618871AB11EFB81ED37EC4F9AE02.roa File: 08AF618871AB11EFB81ED37EC4F9AE02.roa (raw, json) Hash identifier: H6wFp/NH+6z23J96UWXmKdMRoLofVK3B3YCLmq4N9xk= Subject key identifier: 99:ED:27:FE:A1:DF:13:DD:DC:DD:24:12:17:07:B1:04:4B:54:5A:26 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: A4 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/08AF618871AB11EFB81ED37EC4F9AE02.roa Signing time: Sat 21 Dec 2024 05:49:41 +0000 ROA not before: Sat 21 Dec 2024 05:49:41 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 133919 IP address blocks: 202.29.104.0/24 maxlen: 24 2001:3c8:100f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2 Validity Not Before: Dec 21 05:49:41 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676656f5-36cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:fe:27:e0:0a:0b:5b:bb:d6:8e:a3:85:55: 28:64:a3:0f:84:9d:f7:d8:17:4d:84:cc:ed:db:03: 8f:b5:91:d8:67:a9:d3:89:18:cd:1d:0d:30:c1:9f: d9:91:85:da:f0:e8:9b:f7:54:63:34:a0:d4:2d:1e: 2c:57:84:39:bd:cc:b2:f1:43:6f:35:7a:2b:78:fd: 16:fa:fd:65:07:81:85:8d:2f:8a:dd:0d:41:14:07: 3c:f9:54:c0:c1:29:2f:fe:69:fb:cc:5a:a6:c3:f7: bd:9e:b2:98:f6:f1:3c:35:23:9a:a6:a0:d2:7c:9e: 2f:df:5d:2f:ed:29:bf:4d:cf:47:4f:74:d6:13:d7: 80:71:55:70:fe:54:9b:86:60:ff:e9:8a:e3:19:d1: d8:25:22:b6:23:9d:f3:38:21:48:57:f9:82:3a:46: ac:de:6f:59:12:33:e0:26:1f:df:00:db:27:36:b7: 90:22:e4:f7:6d:1c:2d:a9:e8:e7:22:cf:e1:9c:86: e6:53:cf:c3:16:34:b8:a6:59:60:e9:cc:47:a5:0e: 89:c8:15:da:d5:67:3c:7b:b9:18:85:1b:2d:3d:ec: 63:92:78:50:8d:1d:7c:63:1e:ea:81:27:d2:54:82: 4b:bc:35:1c:a6:19:9e:03:eb:6e:a6:5d:65:96:94: f8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:ED:27:FE:A1:DF:13:DD:DC:DD:24:12:17:07:B1:04:4B:54:5A:26 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/08AF618871AB11EFB81ED37EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.104.0/24 IPv6: 2001:3c8:100f::/48 Signature Algorithm: sha256WithRSAEncryption 47:c9:2d:c6:52:64:39:ba:d1:ae:a9:66:2b:73:c8:8f:4c:a5: 3e:5e:0d:cb:b0:19:ee:f2:16:a3:98:38:78:89:81:b1:98:52: f5:5c:6e:b6:15:9d:f0:27:ad:9d:01:95:a5:a6:bc:3b:4f:15: 42:20:58:3b:d9:83:90:f2:b7:7f:a6:8f:de:e4:7e:bd:67:b6: 10:1e:f7:de:6b:8a:04:20:a6:d3:99:62:74:33:fb:f0:32:71: 3b:25:20:a9:ca:00:97:c8:bd:75:1f:c1:d7:49:08:12:ea:6e: 7c:8a:63:93:2f:63:a5:b4:97:d3:db:20:26:c9:4c:64:c0:6e: c4:1a:74:ae:69:09:7f:8d:ee:be:1d:bb:3f:04:0f:7f:72:1e: 42:94:f9:14:67:fb:24:16:cb:36:9f:a7:74:e1:18:5b:4e:bb: 9a:77:da:3e:65:ff:0d:93:c2:48:94:10:d4:7c:ba:e4:23:fc: ac:ff:3f:74:ea:55:3f:75:ca:56:f6:a8:bc:e9:fb:c7:68:86: 8c:04:c3:15:59:c4:6b:23:39:d7:88:2f:c7:89:25:ef:11:81: b5:f5:f0:b2:ae:e4:8e:84:fa:ad:5e:fa:85:7b:9a:c6:37:bb: 6e:9e:7c:76:1c:39:41:28:65:4b:6b:ac:a7:2e:97:fb:14:44: 57:c7:0b:f9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjQxMjIxMDU0OTQxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY2NTZmNS0zNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZz+J+AKC1u71o6jhVUoZKMPhJ332BdNhMzt2wOPtZHYZ6nTiRjNHQ0wwZ/Z kYXa8Oib91RjNKDULR4sV4Q5vcyy8UNvNXoreP0W+v1lB4GFjS+K3Q1BFAc8+VTA wSkv/mn7zFqmw/e9nrKY9vE8NSOapqDSfJ4v310v7Sm/Tc9HT3TWE9eAcVVw/lSb hmD/6YrjGdHYJSK2I53zOCFIV/mCOkas3m9ZEjPgJh/fANsnNreQIuT3bRwtqejn Is/hnIbmU8/DFjS4pllg6cxHpQ6JyBXa1Wc8e7kYhRstPexjknhQjR18Yx7qgSfS VIJLvDUcphmeA+tupl1llpT46wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJntJ/6h 3xPd3N0kEhcHsQRLVFomMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvMDhBRjYxODg3 MUFCMTFFRkI4MUVEMzdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADKHWgwDwQCAAIwCQMHACABA8gQDzANBgkqhkiG9w0BAQsF AAOCAQEAR8ktxlJkObrRrqlmK3PIj0ylPl4Ny7AZ7vIWo5g4eImBsZhS9VxuthWd 8CetnQGVpaa8O08VQiBYO9mDkPK3f6aP3uR+vWe2EB733muKBCCm05lidDP78DJx OyUgqcoAl8i9dR/B10kIEupufIpjky9jpbSX09sgJslMZMBuxBp0rmkJf43uvh27 PwQPf3IeQpT5FGf7JBbLNp+ndOEYW067mnfaPmX/DZPCSJQQ1Hy65CP8rP8/dOpV P3XKVvaovOn7x2iGjATDFVnEayM514gvx4kl7xGBtfXwsq7kjoT6rV76hXuaxje7 bp58dhw5QShlS2uspy6X+xREV8cL+Q== -----END CERTIFICATE-----Generated at Sat Apr 5 01:50:37 2025 by rpki-client