$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa File: F4BF2B68721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: T/7ruYrfXdSh46l71lmd0a6U/E0l+k+x/vEINZ/y+lo= Subject key identifier: CB:E3:95:C3:6D:FB:EE:AF:D3:35:9B:F0:2E:A6:35:71:F8:80:30:F0 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 26 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa Signing time: Fri 13 Sep 2024 21:05:51 +0000 ROA not before: Fri 13 Sep 2024 21:05:51 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 38589 IP address blocks: 202.28.16.0/24 maxlen: 24 202.29.108.0/24 maxlen: 24 202.29.109.0/24 maxlen: 24 2001:3c8:1601::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:05:51 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4a92f-9174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6a:fb:cd:95:67:89:7f:00:48:38:c9:9e:67: 9e:4e:6a:a2:52:27:23:5a:97:63:38:b0:03:5d:24: f2:80:cb:1f:84:14:70:c6:c6:a0:1c:e8:9a:42:8f: 33:7a:00:4f:76:00:e8:5c:6d:8d:8a:16:6a:af:ff: 97:83:9d:fd:87:52:f6:ff:61:f3:4c:c2:2d:44:cf: 32:29:5f:f9:1c:5f:f0:b4:37:79:59:a6:3e:a1:63: af:3f:34:4c:42:40:db:aa:2c:1f:68:d9:a0:99:2d: e7:8d:1c:55:f1:7a:c9:60:22:94:40:da:d5:de:1a: 88:85:34:0c:b4:89:94:3a:f0:16:5d:31:05:2e:47: 0f:1d:20:af:8e:ea:a4:12:13:37:43:f0:41:a5:32: 72:ce:4c:ea:b5:12:b6:c5:94:00:15:e6:f3:81:c1: 62:08:d1:4a:17:ac:46:cc:10:9d:fb:bf:d6:48:10: f9:4b:8a:ea:b8:b7:20:0f:0e:55:98:d1:4e:c0:24: 38:50:71:bd:5e:b9:3e:11:34:19:1c:af:f0:76:e9: cf:7d:5f:ac:8a:15:ad:f3:9c:35:93:a6:53:81:9d: 86:0c:c4:54:24:4d:7b:cd:ad:8a:76:5d:78:17:0f: 22:9b:7b:e7:e5:50:31:be:cf:27:0a:3e:0c:b3:b5: ae:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E3:95:C3:6D:FB:EE:AF:D3:35:9B:F0:2E:A6:35:71:F8:80:30:F0 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.16.0/24 202.29.108.0/23 IPv6: 2001:3c8:1601::/48 Signature Algorithm: sha256WithRSAEncryption 84:19:0d:01:e8:a0:4d:c1:ec:3a:c5:6e:7f:55:a0:a5:45:ee: 42:7d:44:d3:ae:55:7e:7e:55:3f:9f:0e:3d:fb:ed:f2:08:f6: 78:4f:c1:91:c9:6b:69:c8:d4:02:01:05:cf:d2:93:5e:69:c1: 3f:84:f6:d7:2e:3a:cb:05:c9:10:8c:f0:84:23:42:77:67:3d: ef:79:b8:ae:aa:99:b9:95:a4:91:6c:30:f7:1c:c1:9a:46:ea: 32:7a:90:1c:7e:fc:9b:8a:48:d3:92:56:d4:bd:32:00:e9:d6: 90:4b:64:e4:d5:be:01:08:d1:f6:14:ab:9a:b6:d3:70:02:e7: 05:2a:8e:06:73:60:95:85:fb:d7:94:0a:0f:97:e9:7e:21:69: 8e:a7:05:32:b5:5c:d4:96:9c:a7:d0:51:59:5c:29:fd:e5:d2: 3e:c2:89:81:ab:4b:4a:1a:07:f2:0f:1c:7b:31:e2:cc:8c:65: fa:42:0f:70:be:2c:fd:41:a0:ac:f6:a2:6f:82:90:c6:b8:52: a0:5c:d9:3e:80:40:1f:1e:46:e3:ba:a8:85:b9:60:ac:32:e6: fe:04:1b:fe:5a:5d:ac:4a:94:1a:2d:f0:6f:91:ed:67:d0:13: 39:f2:48:36:2d:43:a6:af:20:70:31:e4:c3:16:e7:8e:c0:3e: ef:15:87:77 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTA1NTFaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRhOTJmLTkxNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnavvNlWeJfwBIOMmeZ55OaqJSJyNal2M4sANdJPKAyx+EFHDGxqAc6JpCjzN6 AE92AOhcbY2KFmqv/5eDnf2HUvb/YfNMwi1EzzIpX/kcX/C0N3lZpj6hY68/NExC QNuqLB9o2aCZLeeNHFXxeslgIpRA2tXeGoiFNAy0iZQ68BZdMQUuRw8dIK+O6qQS EzdD8EGlMnLOTOq1ErbFlAAV5vOBwWII0UoXrEbMEJ37v9ZIEPlLiuq4tyAPDlWY 0U7AJDhQcb1euT4RNBkcr/B26c99X6yKFa3znDWTplOBnYYMxFQkTXvNrYp2XXgX DyKbe+flUDG+zycKPgyzta6RAgMBAAGjggKsMIICqDAdBgNVHQ4EFgQUy+OVw237 7q/TNZvwLqY1cfiAMPAwHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi9GNEJGMkI2ODcy MTMxMUVGQTlEN0NBM0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA2BggrBgEFBQcBBwEB/wQn MCUwEgQCAAEwDAMEAMocEAMEAcodbDAPBAIAAjAJAwcAIAEDyBYBMA0GCSqGSIb3 DQEBCwUAA4IBAQCEGQ0B6KBNwew6xW5/VaClRe5CfUTTrlV+flU/nw49++3yCPZ4 T8GRyWtpyNQCAQXP0pNeacE/hPbXLjrLBckQjPCEI0J3Zz3vebiuqpm5laSRbDD3 HMGaRuoyepAcfvybikjTklbUvTIA6daQS2Tk1b4BCNH2FKuattNwAucFKo4Gc2CV hfvXlAoPl+l+IWmOpwUytVzUlpyn0FFZXCn95dI+womBq0tKGgfyDxx7MeLMjGX6 Qg9wviz9QaCs9qJvgpDGuFKgXNk+gEAfHkbjuqiFuWCsMub+BBv+Wl2sSpQaLfBv ke1n0BM58kg2LUOmryBwMeTDFueOwD7vFYd3 -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org