$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EBDC8598721A11EFBDE87567C4F9AE02.roa File: EBDC8598721A11EFBDE87567C4F9AE02.roa (raw, json) Hash identifier: mjOdr2c5QSpjp3fqVy0B3wqeZvqoEogQZlQD5sKVeuQ= Subject key identifier: 74:F5:4C:54:24:5B:14:FE:33:13:93:6F:D8:2B:3C:FF:70:B5:21:06 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 42 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EBDC8598721A11EFBDE87567C4F9AE02.roa Signing time: Fri 13 Sep 2024 21:55:42 +0000 ROA not before: Fri 13 Sep 2024 21:55:42 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 131221 IP address blocks: 202.29.64.0/24 maxlen: 24 202.29.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:55:42 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4b4de-ae41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:40:a6:43:85:c7:83:be:1c:59:c6:38:73: 36:b9:41:28:59:ab:75:69:93:62:79:d6:48:1e:5c: a9:8c:b4:03:b0:f9:cd:c3:93:69:7e:36:a8:f3:0b: 3f:7f:45:f4:03:53:b4:5c:43:fa:3a:ef:b3:17:6b: 74:64:24:81:31:82:e8:1d:37:57:6e:39:cf:0c:a8: 8a:d6:9e:69:0b:74:81:eb:2b:82:89:77:ef:b4:8e: 0b:6e:fa:96:17:fc:e2:b8:db:78:1b:19:0c:e8:b1: 9b:7a:d7:6f:da:f2:da:de:b2:9c:c2:43:85:e2:80: 02:ed:36:56:dd:a8:eb:47:bf:2b:71:a7:59:3c:e0: de:6f:0c:6a:a4:fb:ba:d5:3f:6b:fb:0c:1f:03:c3: 06:e8:d1:ce:a1:7b:c5:8d:46:73:e9:85:a5:2f:43: 7f:b8:67:c3:c5:df:ba:dd:ef:d2:dd:cc:72:32:2b: 1b:16:86:8a:21:e6:69:61:13:ba:ec:4c:25:23:12: 2f:09:6a:99:00:9d:16:83:cb:e4:f1:c8:64:91:5e: 6f:15:b3:19:74:ce:1f:bd:4c:92:d1:7b:ca:fb:39: 2b:9f:67:e9:30:99:29:7e:eb:e8:a3:20:c8:30:46: b4:40:3d:fb:9b:e9:08:27:fb:21:19:26:08:b6:67: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F5:4C:54:24:5B:14:FE:33:13:93:6F:D8:2B:3C:FF:70:B5:21:06 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EBDC8598721A11EFBDE87567C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.64.0/23 Signature Algorithm: sha256WithRSAEncryption 62:60:c8:86:3d:81:17:a1:c8:91:97:e9:ee:9b:7c:70:e3:37: b1:79:ec:50:40:53:c2:83:10:17:17:18:89:dd:1d:e8:b7:35: a2:9f:7a:df:e8:13:f6:04:34:f5:8a:05:9a:b6:6e:d4:b5:09: cf:9c:3f:ae:29:6b:b9:92:1b:cd:25:98:2b:97:ce:e8:3b:60: a9:8d:3a:56:fd:25:97:e3:48:06:5d:03:54:c7:f4:11:1d:dc: 30:52:db:f9:d4:15:7c:ac:92:ba:90:2c:01:02:47:6f:7b:16: cc:48:f2:c2:cf:01:be:0f:81:3e:28:40:b9:67:87:cd:a2:7f: 13:b1:00:e2:7f:e1:96:c5:c8:77:e6:c8:00:32:5d:55:35:a3: 4a:30:6f:1a:dc:dc:89:2c:1c:73:bd:f3:18:85:51:a5:94:e4: bd:9c:72:88:09:81:f8:e8:45:16:fb:d0:23:37:f8:77:a8:16: 11:81:c4:be:ca:ac:50:b2:dd:27:c9:b8:72:f5:7c:b0:3d:a8: 9d:44:a7:1c:a6:22:0f:f6:92:21:3c:b4:de:67:3f:8f:96:bc: 62:29:60:26:bb:8d:65:28:33:51:4f:b8:03:b2:85:c1:b1:0e: 5e:6f:a3:e7:d3:9d:2d:7c:17:fc:98:58:a1:98:2e:f4:5e:b8: 0d:32:42:fd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTU1NDJaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRiNGRlLWFlNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+YUCmQ4XHg74cWcY4cza5QShZq3Vpk2J51kgeXKmMtAOw+c3Dk2l+NqjzCz9/ RfQDU7RcQ/o677MXa3RkJIExgugdN1duOc8MqIrWnmkLdIHrK4KJd++0jgtu+pYX /OK423gbGQzosZt612/a8trespzCQ4XigALtNlbdqOtHvytxp1k84N5vDGqk+7rV P2v7DB8Dwwbo0c6he8WNRnPphaUvQ3+4Z8PF37rd79LdzHIyKxsWhooh5mlhE7rs TCUjEi8JapkAnRaDy+TxyGSRXm8Vsxl0zh+9TJLRe8r7OSufZ+kwmSl+6+ijIMgw RrRAPfub6Qgn+yEZJgi2Z0WlAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUdPVMVCRb FP4zE5Nv2Cs8/3C1IQYwHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi9FQkRDODU5ODcy MUExMUVGQkRFODc1NjdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcodQDANBgkqhkiG9w0BAQsFAAOCAQEAYmDIhj2BF6HIkZfp 7pt8cOM3sXnsUEBTwoMQFxcYid0d6Lc1op963+gT9gQ09YoFmrZu1LUJz5w/rilr uZIbzSWYK5fO6DtgqY06Vv0ll+NIBl0DVMf0ER3cMFLb+dQVfKySupAsAQJHb3sW zEjyws8Bvg+BPihAuWeHzaJ/E7EA4n/hlsXId+bIADJdVTWjSjBvGtzciSwcc73z GIVRpZTkvZxyiAmB+OhFFvvQIzf4d6gWEYHEvsqsULLdJ8m4cvV8sD2onUSnHKYi D/aSITy03mc/j5a8YilgJruNZSgzUU+4A7KFwbEOXm+j59OdLXwX/JhYoZgu9F64 DTJC/Q== -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org