$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BF1B2E7E721511EF9D7B9F3DC4F9AE02.roa File: BF1B2E7E721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: A/NANK7SDLbtuY25Rj4RoCIAPL4+bFRgQ67CcLdzEfU= Subject key identifier: 95:A0:9A:03:0D:DF:F8:18:93:59:F3:3B:B4:F9:AC:59:59:E0:F8:6A Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 2A Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BF1B2E7E721511EF9D7B9F3DC4F9AE02.roa Signing time: Fri 13 Sep 2024 21:18:40 +0000 ROA not before: Fri 13 Sep 2024 21:18:40 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 132701 IP address blocks: 202.29.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:18:40 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4ac30-2c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9f:d1:84:f7:11:09:66:ea:a6:6c:0b:ac:fa: a8:e5:e1:f6:ad:e4:cf:4d:99:92:06:ea:9a:f8:cd: ec:94:83:63:ab:63:38:58:fb:30:05:0f:34:2b:ce: 91:99:d2:36:f0:81:cb:d6:cd:f1:05:ad:37:a3:7d: 3a:73:d3:a7:c4:6a:4f:73:1f:b8:55:6b:e4:00:39: d7:41:3a:ab:4e:74:8d:51:c5:4a:6e:ec:5c:74:3f: 3a:61:a8:8e:e0:43:de:65:5e:6b:d3:4b:98:d8:4b: ee:2c:d4:9f:6e:72:ef:72:4a:c5:55:66:ce:15:23: 70:43:3c:b7:49:db:1f:4a:7b:c9:7d:cc:18:81:ed: b3:8f:a4:40:46:61:0d:72:7b:23:14:95:39:1d:89: 48:83:74:5e:fb:1d:b7:99:ad:4b:16:0a:25:99:00: dc:d6:2a:57:00:f7:7a:46:12:fb:0b:c5:90:71:a3: 5c:e5:74:2c:9e:cb:3e:11:0d:01:88:53:57:cc:5c: e4:a0:63:ef:a2:04:c2:49:5d:d5:7b:73:5a:5e:96: 8f:36:ac:89:d2:e1:43:9e:01:5d:87:d9:ba:53:ac: f9:95:0e:9d:3d:7d:0f:c3:7b:d1:a9:a9:96:3b:07: 1e:4d:61:94:37:f6:6d:40:a5:21:eb:d5:67:cb:26: 17:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A0:9A:03:0D:DF:F8:18:93:59:F3:3B:B4:F9:AC:59:59:E0:F8:6A X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BF1B2E7E721511EF9D7B9F3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.52.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:bb:40:bf:68:6d:e8:73:4b:fc:09:4a:5e:e6:b4:3d:f0:77: 39:5f:c5:b2:c1:d4:ca:24:74:54:31:5d:2c:5b:ca:2c:8e:f2: bc:62:11:e8:b5:58:51:a6:45:ed:50:ab:b1:51:f4:47:bd:df: 02:bf:17:02:7f:30:71:20:43:59:be:cd:68:ef:51:8c:d9:d4: c1:a4:9a:31:5c:a9:df:31:5f:03:ae:4f:9e:93:bc:7f:e6:4d: 94:93:d6:2d:e2:f9:51:9e:4f:b9:7c:fc:6f:fb:4a:30:f2:b9: 9f:41:bb:23:9f:79:0a:a3:39:4d:1b:ac:7a:d3:1b:00:54:16: c6:a4:00:56:51:98:4a:97:ce:8a:ba:4e:8b:ff:16:f7:af:88: 4e:30:63:62:38:15:14:be:51:e5:b7:99:f0:52:67:c2:8e:5a: d5:01:f1:2c:af:32:44:b0:20:de:11:fd:79:e0:b2:0a:9e:db: 86:08:7c:a4:63:4e:50:b5:74:4b:54:eb:43:fe:be:ba:bb:3f: d4:f0:85:7d:bd:de:01:13:15:07:42:67:95:c7:c1:96:69:af: 66:1d:ef:d5:c8:fa:54:ac:e2:90:72:b4:68:41:28:6e:a6:85: c7:37:de:75:8a:e7:db:ca:6a:21:7d:0d:e9:6b:85:3d:75:43: 53:84:b5:a2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTE4NDBaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRhYzMwLTJjNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSn9GE9xEJZuqmbAus+qjl4fat5M9NmZIG6pr4zeyUg2OrYzhY+zAFDzQrzpGZ 0jbwgcvWzfEFrTejfTpz06fEak9zH7hVa+QAOddBOqtOdI1RxUpu7Fx0PzphqI7g Q95lXmvTS5jYS+4s1J9ucu9ySsVVZs4VI3BDPLdJ2x9Ke8l9zBiB7bOPpEBGYQ1y eyMUlTkdiUiDdF77HbeZrUsWCiWZANzWKlcA93pGEvsLxZBxo1zldCyeyz4RDQGI U1fMXOSgY++iBMJJXdV7c1pelo82rInS4UOeAV2H2bpTrPmVDp09fQ/De9GpqZY7 Bx5NYZQ39m1ApSHr1WfLJhchAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUlaCaAw3f +BiTWfM7tPmsWVng+GowHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi9CRjFCMkU3RTcy MTUxMUVGOUQ3QjlGM0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAModNDANBgkqhkiG9w0BAQsFAAOCAQEAXrtAv2ht6HNL/AlK Xua0PfB3OV/FssHUyiR0VDFdLFvKLI7yvGIR6LVYUaZF7VCrsVH0R73fAr8XAn8w cSBDWb7NaO9RjNnUwaSaMVyp3zFfA65PnpO8f+ZNlJPWLeL5UZ5PuXz8b/tKMPK5 n0G7I595CqM5TRusetMbAFQWxqQAVlGYSpfOirpOi/8W96+ITjBjYjgVFL5R5beZ 8FJnwo5a1QHxLK8yRLAg3hH9eeCyCp7bhgh8pGNOULV0S1TrQ/6+urs/1PCFfb3e ARMVB0JnlcfBlmmvZh3v1cj6VKzikHK0aEEobqaFxzfedYrn28pqIX0N6WuFPXVD U4S1og== -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org