$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F0ED627A721311EFA9D7CA3AC4F9AE02.roa File: F0ED627A721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: 8VnanE4T86MpgpGE0FIzz7V6SzYX83/kSvPCQjR27fs= Subject key identifier: DC:31:90:55:66:AB:B7:AF:BA:47:E5:C7:74:A0:B5:3E:59:CB:09:0D Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 20 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F0ED627A721311EFA9D7CA3AC4F9AE02.roa Signing time: Fri 13 Sep 2024 21:05:44 +0000 ROA not before: Fri 13 Sep 2024 21:05:44 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 141714 IP address blocks: 202.29.8.0/24 maxlen: 24 202.29.9.0/24 maxlen: 24 202.29.10.0/24 maxlen: 24 202.29.11.0/24 maxlen: 24 2001:3c8:2808::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:05:44 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4a928-c6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:ab:10:ba:a2:85:ee:cf:0b:fa:05:0f:71: f4:c2:29:35:c9:60:a9:d3:e6:4b:ba:e1:66:c6:63: 64:75:d9:cc:fa:16:7e:e3:2a:f2:9b:50:8a:e9:7e: 5f:98:9b:bd:58:f7:33:3b:77:e7:4a:6e:64:1a:c3: 2e:96:1e:75:d0:2d:12:d3:c9:c6:d9:1f:9b:bd:b9: 7b:a7:10:a4:29:b5:80:69:f3:e2:06:c7:31:a5:63: c5:91:9c:26:32:4c:cc:aa:08:f2:4a:a7:4a:39:c2: 00:81:16:24:58:8b:10:8d:e7:af:31:b2:64:cf:74: 7e:cf:06:34:d2:02:c8:5b:d7:b2:39:9b:fe:ba:99: 94:3e:17:f8:6c:d2:75:cf:1c:bd:e3:c0:f4:32:50: fd:b9:f5:e1:64:c1:d1:d2:02:20:08:b5:c0:ce:89: 02:ac:3b:f6:ee:ea:43:c0:36:fc:08:e0:08:cc:84: 8e:ed:7e:a0:27:ab:1f:6f:16:e8:9f:b6:73:29:74: 52:68:7b:bc:2f:f9:27:29:e7:ab:98:28:ca:d7:8c: 81:df:bc:c2:00:4a:91:df:75:e4:ae:ab:5a:bc:5f: 08:e7:ac:67:5f:62:a1:75:e0:15:07:6c:6a:06:c7: 71:e7:18:86:74:27:5f:10:31:3d:87:a3:b1:8e:a8: e0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:31:90:55:66:AB:B7:AF:BA:47:E5:C7:74:A0:B5:3E:59:CB:09:0D X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F0ED627A721311EFA9D7CA3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.8.0/22 IPv6: 2001:3c8:2808::/48 Signature Algorithm: sha256WithRSAEncryption 81:04:86:df:5a:bf:fe:08:d0:27:9c:1e:a1:64:d4:4a:8f:cd: 0f:47:28:ca:22:d3:7b:77:bd:7e:7b:a9:61:ee:61:86:fb:66: ec:0e:61:55:99:a7:39:97:43:ca:e7:b8:63:26:c7:be:4d:34: f1:0b:61:12:ba:ff:35:0f:ec:96:a0:f0:91:fd:f5:5d:5a:b2: c2:a1:59:f9:f5:a6:b5:b6:a5:24:24:9f:09:25:48:33:76:b3: d7:d8:e1:85:ee:26:d8:74:90:eb:ae:0a:1a:02:24:97:e5:d9: 6a:8e:94:25:8b:70:6a:71:bb:31:6f:3b:dc:b6:51:59:1b:9d: e4:8a:33:b6:14:d3:a1:e5:fb:27:ab:b1:f7:61:28:23:a0:00: 51:41:e1:d8:ae:fd:3d:bf:e8:52:f2:e1:8b:fc:40:ec:8d:f3: a8:e6:88:b3:44:cd:65:c1:95:47:6e:d0:5e:69:f2:48:46:53: 03:e3:04:c3:a2:3c:01:ab:54:9f:35:48:b4:35:47:ff:f3:70: ef:ca:b1:07:b7:ca:d9:6d:ed:aa:1e:3a:bd:34:74:e7:2e:aa: f6:47:bb:77:4b:70:6e:ff:6a:4a:fa:cd:b0:47:a5:0b:be:8c: 7c:32:69:f0:9f:73:fc:55:0d:cf:f9:80:71:84:18:c3:e5:ec: 95:c6:18:34 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTA1NDRaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRhOTI4LWM2YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkDKsQuqKF7s8L+gUPcfTCKTXJYKnT5ku64WbGY2R12cz6Fn7jKvKbUIrpfl+Y m71Y9zM7d+dKbmQawy6WHnXQLRLTycbZH5u9uXunEKQptYBp8+IGxzGlY8WRnCYy TMyqCPJKp0o5wgCBFiRYixCN568xsmTPdH7PBjTSAshb17I5m/66mZQ+F/hs0nXP HL3jwPQyUP259eFkwdHSAiAItcDOiQKsO/bu6kPANvwI4AjMhI7tfqAnqx9vFuif tnMpdFJoe7wv+Scp56uYKMrXjIHfvMIASpHfdeSuq1q8XwjnrGdfYqF14BUHbGoG x3HnGIZ0J18QMT2Ho7GOqOCLAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU3DGQVWar t6+6R+XHdKC1PlnLCQ0wHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi9GMEVENjI3QTcy MTMxMUVGQTlEN0NBM0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAsodCDAPBAIAAjAJAwcAIAEDyCgIMA0GCSqGSIb3DQEBCwUA A4IBAQCBBIbfWr/+CNAnnB6hZNRKj80PRyjKItN7d71+e6lh7mGG+2bsDmFVmac5 l0PK57hjJse+TTTxC2ESuv81D+yWoPCR/fVdWrLCoVn59aa1tqUkJJ8JJUgzdrPX 2OGF7ibYdJDrrgoaAiSX5dlqjpQli3BqcbsxbzvctlFZG53kijO2FNOh5fsnq7H3 YSgjoABRQeHYrv09v+hS8uGL/EDsjfOo5oizRM1lwZVHbtBeafJIRlMD4wTDojwB q1SfNUi0NUf/83DvyrEHt8rZbe2qHjq9NHTnLqr2R7t3S3Bu/2pK+s2wR6ULvox8 Mmnwn3P8VQ3P+YBxhBjD5eyVxhg0 -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org