$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C241C00E721511EF9D7B9F3DC4F9AE02.roa File: C241C00E721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: sBnKPBZyYuXcevrt0syeI3dY2bIL35zx4ZEtw9Y/ucs= Subject key identifier: 14:84:EA:C4:94:A0:A2:60:ED:76:CE:30:F0:27:D3:F8:AB:0F:83:B3 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 2F Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C241C00E721511EF9D7B9F3DC4F9AE02.roa Signing time: Fri 13 Sep 2024 21:18:45 +0000 ROA not before: Fri 13 Sep 2024 21:18:45 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 137198 IP address blocks: 202.29.26.0/24 maxlen: 24 2001:3c8:1306::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:18:45 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4ac35-ad14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:eb:45:c6:e7:e3:ac:58:50:15:2a:42:7d: b6:34:0c:b9:a0:3f:24:de:61:69:fb:77:77:bf:8c: ff:a5:4a:c9:2e:24:32:91:5f:56:cc:5d:23:7c:fc: 63:cb:fc:3e:c4:4c:71:1c:7d:04:47:9d:1f:a0:cd: 8c:f3:4b:67:7a:5d:ad:1f:4d:dc:03:bb:28:6a:9d: 3c:d1:c2:34:03:81:1a:76:8a:2b:58:5c:e8:1b:61: 2e:dd:1d:fe:63:40:24:1b:6a:4b:86:8c:7e:08:75: f1:08:9c:fa:f4:d9:4e:d1:4a:67:42:33:41:d1:34: 06:d0:c3:d2:f1:50:8b:24:bd:c2:4f:5f:39:aa:85: a1:39:66:8a:7b:3a:77:43:39:39:2d:54:e7:0f:42: 35:7d:74:06:79:66:09:9b:fb:d9:8c:29:82:29:b8: e3:48:d4:9d:9c:79:12:e6:22:5f:d7:b0:36:59:cd: a4:78:a3:24:03:46:d2:f2:16:cc:ab:9b:dd:5b:a1: b7:dc:b2:46:11:28:7a:1e:b9:3f:dd:ae:74:1e:eb: 05:1b:c8:c4:65:b9:da:d9:4b:74:cc:32:69:b2:95: b9:58:51:53:19:45:50:6d:d0:44:d1:2f:f0:89:52: cb:0d:28:91:f9:f2:bc:f4:8b:11:04:c5:1a:e4:24: 2c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:84:EA:C4:94:A0:A2:60:ED:76:CE:30:F0:27:D3:F8:AB:0F:83:B3 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C241C00E721511EF9D7B9F3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.26.0/24 IPv6: 2001:3c8:1306::/48 Signature Algorithm: sha256WithRSAEncryption 03:b1:02:20:a9:f0:9d:87:61:45:72:a1:77:16:9f:8d:98:4e: d1:e7:f6:e6:82:b1:eb:fe:2f:a7:b7:b2:68:89:fd:b4:fc:78: a6:92:7d:35:b7:45:cd:0e:32:ac:33:94:b0:6a:58:61:70:3d: fd:60:ea:ac:9d:5a:35:ba:f5:43:7d:e9:34:69:ed:fd:c8:cf: 65:c1:b5:e4:a4:d4:55:79:3e:79:e4:77:67:c3:26:12:c8:a1: 76:45:4b:af:ed:f2:c0:45:fe:a6:73:b6:f1:d8:ed:ad:e6:a7: 57:9a:d7:19:ed:d5:9b:f8:ee:1b:93:c3:bb:8f:5c:7c:04:1f: 48:f6:7e:74:dc:4e:e2:08:ae:0a:d0:82:d4:df:e4:82:8e:a0: 28:82:e6:bd:27:e3:2b:84:c7:2e:f7:13:21:71:d0:d7:5e:ad: 29:f5:cf:2e:c5:47:2c:d6:89:59:9d:25:47:6a:e5:ec:d6:a8: e7:2d:a8:01:55:24:f0:66:85:1c:ad:08:02:13:e7:19:6c:69: 42:38:7e:a3:ac:4a:54:de:6b:11:2b:3b:6a:af:a3:ae:e5:19: 8f:93:1f:c3:a3:1e:38:c8:73:86:4d:9d:30:66:a9:1c:19:09: 2e:a4:85:58:d8:01:54:81:41:3e:27:0c:be:26:89:3c:2a:39: 83:07:a4:57 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTE4NDVaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRhYzM1LWFkMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzcutFxufjrFhQFSpCfbY0DLmgPyTeYWn7d3e/jP+lSskuJDKRX1bMXSN8/GPL /D7ETHEcfQRHnR+gzYzzS2d6Xa0fTdwDuyhqnTzRwjQDgRp2iitYXOgbYS7dHf5j QCQbakuGjH4IdfEInPr02U7RSmdCM0HRNAbQw9LxUIskvcJPXzmqhaE5Zop7OndD OTktVOcPQjV9dAZ5Zgmb+9mMKYIpuONI1J2ceRLmIl/XsDZZzaR4oyQDRtLyFsyr m91bobfcskYRKHoeuT/drnQe6wUbyMRludrZS3TMMmmylblYUVMZRVBt0ETRL/CJ UssNKJH58rz0ixEExRrkJCxZAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUFITqxJSg omDtds4w8CfT+KsPg7MwHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi9DMjQxQzAwRTcy MTUxMUVGOUQ3QjlGM0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAModGjAPBAIAAjAJAwcAIAEDyBMGMA0GCSqGSIb3DQEBCwUA A4IBAQADsQIgqfCdh2FFcqF3Fp+NmE7R5/bmgrHr/i+nt7Joif20/Himkn01t0XN DjKsM5SwalhhcD39YOqsnVo1uvVDfek0ae39yM9lwbXkpNRVeT555HdnwyYSyKF2 RUuv7fLARf6mc7bx2O2t5qdXmtcZ7dWb+O4bk8O7j1x8BB9I9n503E7iCK4K0ILU 3+SCjqAogua9J+MrhMcu9xMhcdDXXq0p9c8uxUcs1olZnSVHauXs1qjnLagBVSTw ZoUcrQgCE+cZbGlCOH6jrEpU3msRKztqr6Ou5RmPkx/Dox44yHOGTZ0wZqkcGQku pIVY2AFUgUE+Jwy+Jok8KjmDB6RX -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org