$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ECF72566721311EFA9D7CA3AC4F9AE02.roa File: ECF72566721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: 08bel51vr88qgiw7fhJM1Wh7Sh3nRgzqLHadTGrmEVM= Subject key identifier: 8B:33:CE:D1:88:0E:32:51:AC:C6:53:3C:DB:B6:E2:10:23:23:08:95 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 1A Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ECF72566721311EFA9D7CA3AC4F9AE02.roa Signing time: Fri 13 Sep 2024 21:05:38 +0000 ROA not before: Fri 13 Sep 2024 21:05:38 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 135616 IP address blocks: 202.28.64.0/24 maxlen: 24 202.28.66.0/24 maxlen: 24 202.28.67.0/24 maxlen: 24 2001:3c8:9006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:05:38 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4a922-8e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1f:75:f0:50:14:96:b3:25:36:7b:9a:da:3a: 76:b3:7d:47:b5:a3:6d:f3:16:f9:a2:73:e5:3e:e1: b6:40:db:e1:fe:b9:48:40:f4:0b:b3:01:39:76:fa: d3:dc:cd:db:5c:d6:7b:67:e9:59:5b:dc:86:1b:df: 7f:0e:d9:a9:08:85:4c:7a:93:c1:f9:68:18:bc:6f: 84:0b:a7:b2:3a:35:be:33:6f:bd:96:bc:4c:dd:40: 58:40:47:3d:71:39:bc:69:36:b9:e5:46:6f:76:ce: 34:92:e2:a2:d6:cb:85:40:74:0b:67:cc:47:77:44: 3b:3e:bf:9f:ca:d9:30:d4:fc:75:a3:db:a8:18:b7: eb:86:85:6b:48:4c:ee:d9:68:98:06:3b:43:a2:9a: 50:dc:93:08:d0:bb:df:4c:df:1a:98:f3:0a:bd:83: 88:66:85:b1:be:de:8e:69:63:c5:0b:b4:75:4e:6d: df:56:1f:56:92:6a:91:8b:87:f9:60:f5:dd:5d:4a: 24:8c:c5:bb:a5:b5:30:0e:87:04:6c:d4:37:f5:53: c1:22:cc:2c:b3:d8:e9:4c:32:e4:02:ca:53:78:87: d7:46:b3:05:7e:c7:6c:08:73:08:a9:6a:53:1f:62: 97:f5:76:3a:7c:57:54:c6:5b:c5:a5:17:86:fe:51: 86:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:33:CE:D1:88:0E:32:51:AC:C6:53:3C:DB:B6:E2:10:23:23:08:95 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ECF72566721311EFA9D7CA3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.64.0/24 202.28.66.0/23 IPv6: 2001:3c8:9006::/48 Signature Algorithm: sha256WithRSAEncryption 80:dc:54:f2:3d:0b:c3:ce:b2:ec:94:a2:74:ea:dc:fa:bb:ea: 5c:a3:35:ff:2a:b9:20:a5:51:59:18:33:db:38:18:e5:d2:ec: b3:34:b8:44:e4:b1:e4:06:0e:19:c5:2c:73:56:ac:30:8b:a5: 7b:36:77:69:87:57:19:7f:ea:2b:ae:98:b7:c2:4c:c2:51:ef: 65:d5:64:72:0c:81:ff:0e:9f:0b:0b:0c:c1:39:ce:1d:3a:fd: fe:ce:54:6e:be:95:b4:f3:fa:ce:85:e6:f8:a1:06:b9:fe:71: 3f:59:ac:bd:52:27:68:9e:00:56:ff:60:9d:52:b7:84:b7:d5: 7d:80:ec:6b:2f:8d:3b:a2:3e:8f:f6:4f:87:cb:37:59:92:82: 66:0a:d6:38:36:8b:b4:83:e1:ef:9f:99:9f:53:04:3f:8e:65: 5e:99:99:fe:4f:0e:da:ea:f8:0d:3d:8d:37:15:6a:13:ab:95: eb:51:70:41:a4:a8:98:35:89:ad:7a:91:98:16:04:a7:d4:9c: d2:0d:3c:75:ff:52:af:2c:90:27:ba:ed:91:e3:e5:81:a3:d6: ac:1a:10:c8:ff:46:14:df:b7:fc:94:df:f5:67:a8:20:51:ca: e8:18:60:c9:cf:59:47:7f:61:2a:7e:03:ac:df:f1:fe:23:9c: 1f:5d:dd:a9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTA1MzhaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRhOTIyLThlODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpH3XwUBSWsyU2e5raOnazfUe1o23zFvmic+U+4bZA2+H+uUhA9AuzATl2+tPc zdtc1ntn6Vlb3IYb338O2akIhUx6k8H5aBi8b4QLp7I6Nb4zb72WvEzdQFhARz1x ObxpNrnlRm92zjSS4qLWy4VAdAtnzEd3RDs+v5/K2TDU/HWj26gYt+uGhWtITO7Z aJgGO0OimlDckwjQu99M3xqY8wq9g4hmhbG+3o5pY8ULtHVObd9WH1aSapGLh/lg 9d1dSiSMxbultTAOhwRs1Df1U8EizCyz2OlMMuQCylN4h9dGswV+x2wIcwipalMf Ypf1djp8V1TGW8WlF4b+UYbZAgMBAAGjggKsMIICqDAdBgNVHQ4EFgQUizPO0YgO MlGsxlM827biECMjCJUwHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi9FQ0Y3MjU2Njcy MTMxMUVGQTlEN0NBM0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA2BggrBgEFBQcBBwEB/wQn MCUwEgQCAAEwDAMEAMocQAMEAcocQjAPBAIAAjAJAwcAIAEDyJAGMA0GCSqGSIb3 DQEBCwUAA4IBAQCA3FTyPQvDzrLslKJ06tz6u+pcozX/KrkgpVFZGDPbOBjl0uyz NLhE5LHkBg4ZxSxzVqwwi6V7Nndph1cZf+orrpi3wkzCUe9l1WRyDIH/Dp8LCwzB Oc4dOv3+zlRuvpW08/rOheb4oQa5/nE/Way9UidongBW/2CdUreEt9V9gOxrL407 oj6P9k+HyzdZkoJmCtY4Nou0g+Hvn5mfUwQ/jmVemZn+Tw7a6vgNPY03FWoTq5Xr UXBBpKiYNYmtepGYFgSn1JzSDTx1/1KvLJAnuu2R4+WBo9asGhDI/0YU37f8lN/1 Z6ggUcroGGDJz1lHf2EqfgOs3/H+I5wfXd2p -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org