$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ED32AF1C721A11EFBDE87567C4F9AE02.roa File: ED32AF1C721A11EFBDE87567C4F9AE02.roa (raw, json) Hash identifier: 45sswAgQ+rARSiY0Ud7lRk7jzV70qXBE2pd7uDxrUNs= Subject key identifier: CE:20:56:EC:41:6B:AC:46:CE:EC:A5:0D:76:1B:11:DC:44:59:6C:22 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 44 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ED32AF1C721A11EFBDE87567C4F9AE02.roa Signing time: Fri 13 Sep 2024 21:55:45 +0000 ROA not before: Fri 13 Sep 2024 21:55:45 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 131257 IP address blocks: 202.29.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:55:45 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4b4e0-ffec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:ec:c6:2a:ac:91:ea:7b:82:9e:11:9a:cb: 9d:46:9e:d2:43:06:f1:25:7c:11:88:6e:37:86:dc: 6c:64:e9:f1:19:b8:57:ea:7e:f9:e5:b7:3c:6a:2b: 35:31:e2:17:6e:19:24:2e:22:28:2a:d6:55:b0:d7: 4e:a5:71:1f:6a:9b:1c:fb:1e:6d:33:bf:93:1d:8f: 0c:62:a7:2c:5d:49:a1:8b:0a:7b:dd:a6:05:40:04: 85:23:47:df:7d:f1:e5:76:4e:5e:1e:ec:ba:0b:af: 28:fc:19:eb:e8:67:fa:63:df:e4:be:33:b9:e6:e6: 96:57:a4:9f:05:00:ce:10:a4:97:ca:14:5c:da:e6: 18:4d:0c:ca:42:68:49:cb:ec:0f:73:4d:d8:b6:2b: a0:d2:58:0b:98:52:e4:fa:67:9b:e3:2b:ba:c3:4b: c8:25:f5:65:65:d8:57:dc:40:8b:ac:df:c1:ad:7d: ae:8b:2d:93:04:f1:92:54:64:a5:e1:6d:b5:d3:05: e9:65:ee:85:e2:17:07:e8:a1:2f:63:67:8a:d7:ed: 90:33:73:a1:b4:6d:de:9d:1a:f6:6c:c8:d4:8f:46: 62:46:0b:4f:7b:fa:c5:0d:5f:f8:1d:05:59:69:a3: 7f:ad:6b:37:51:cb:8e:55:c9:2f:bd:70:37:53:3d: 54:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:20:56:EC:41:6B:AC:46:CE:EC:A5:0D:76:1B:11:DC:44:59:6C:22 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ED32AF1C721A11EFBDE87567C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.18.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:e8:cf:cf:d5:2b:03:40:ef:60:77:4d:e4:41:1e:f1:8d:1b: 3b:60:c3:3d:8f:5f:7e:de:83:2b:30:6c:70:73:e4:11:31:8f: b1:77:d8:35:0f:ce:ff:72:d9:4f:ba:69:f2:06:24:87:02:35: 10:38:24:dd:97:74:91:52:ca:7b:6d:2e:58:79:b6:57:0d:65: 54:f5:7e:ff:0b:ad:6d:b6:8c:69:4f:32:c9:fc:2b:1b:72:6c: f4:95:5a:90:27:42:6b:16:5d:61:30:ca:d6:35:64:d6:4a:07: 8a:e7:de:c2:a4:75:d5:fd:1f:d2:cb:77:a4:c9:1b:48:23:ba: 05:c0:2e:2f:09:34:ce:3f:5d:64:89:f6:04:48:3e:c9:be:8a: d9:43:f9:1d:2f:20:65:3f:35:4e:e0:dd:99:f3:4a:72:9a:db: f5:2f:10:98:7c:7c:56:a9:bb:59:9d:d0:01:30:a7:7f:dd:2a: 19:4d:1b:35:07:e4:50:34:03:39:55:1e:99:22:3c:b1:a4:60: 03:aa:85:24:16:ec:62:fa:f0:45:ca:3d:3a:af:98:e4:1d:8a: 25:e2:b5:f1:2f:01:9a:72:9b:d2:d6:94:21:80:10:1d:49:82: 7c:66:76:1e:34:64:37:d9:c0:b3:da:4b:c2:a4:84:e1:d4:d7: 3b:42:10:92 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTU1NDVaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRiNGUwLWZmZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4z+zGKqyR6nuCnhGay51GntJDBvElfBGIbjeG3Gxk6fEZuFfqfvnltzxqKzUx 4hduGSQuIigq1lWw106lcR9qmxz7Hm0zv5MdjwxipyxdSaGLCnvdpgVABIUjR999 8eV2Tl4e7LoLryj8GevoZ/pj3+S+M7nm5pZXpJ8FAM4QpJfKFFza5hhNDMpCaEnL 7A9zTdi2K6DSWAuYUuT6Z5vjK7rDS8gl9WVl2FfcQIus38Gtfa6LLZME8ZJUZKXh bbXTBell7oXiFwfooS9jZ4rX7ZAzc6G0bd6dGvZsyNSPRmJGC097+sUNX/gdBVlp o3+tazdRy45VyS+9cDdTPVT5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUziBW7EFr rEbO7KUNdhsR3ERZbCIwHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi9FRDMyQUYxQzcy MUExMUVGQkRFODc1NjdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAModEjANBgkqhkiG9w0BAQsFAAOCAQEAaujPz9UrA0DvYHdN 5EEe8Y0bO2DDPY9fft6DKzBscHPkETGPsXfYNQ/O/3LZT7pp8gYkhwI1EDgk3Zd0 kVLKe20uWHm2Vw1lVPV+/wutbbaMaU8yyfwrG3Js9JVakCdCaxZdYTDK1jVk1koH iufewqR11f0f0st3pMkbSCO6BcAuLwk0zj9dZIn2BEg+yb6K2UP5HS8gZT81TuDd mfNKcprb9S8QmHx8Vqm7WZ3QATCnf90qGU0bNQfkUDQDOVUemSI8saRgA6qFJBbs YvrwRco9Oq+Y5B2KJeK18S8BmnKb0taUIYAQHUmCfGZ2HjRkN9nAs9pLwqSE4dTX O0IQkg== -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org