$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F7C832A8721511EFA7D82D3EC4F9AE02.roa File: F7C832A8721511EFA7D82D3EC4F9AE02.roa (raw, json) Hash identifier: WI3EhMCNnncwHUB8ZDu8QooHVIVqSFFdKAAhf3Vsvb0= Subject key identifier: 7E:6F:53:C5:84:1E:40:CF:F1:E9:AB:64:AD:26:48:FF:47:45:D5:57 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 3C Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F7C832A8721511EFA7D82D3EC4F9AE02.roa Signing time: Fri 13 Sep 2024 21:20:15 +0000 ROA not before: Fri 13 Sep 2024 21:20:15 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 9475 IP address blocks: 202.28.68.0/24 maxlen: 24 202.28.69.0/24 maxlen: 24 202.28.70.0/24 maxlen: 24 202.28.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:20:15 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4ac8f-f946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:89:5f:07:1c:72:fc:58:0f:d7:44:05:8f: 0b:32:d3:17:e3:6f:76:4f:91:df:cc:b4:2c:6c:c6: 8e:f5:6a:03:a9:d8:3f:0c:f8:67:71:84:f6:41:bc: a7:62:9d:15:f5:3e:30:d8:48:40:b4:1c:34:c8:43: ed:fc:39:f8:08:f5:de:43:d1:64:a0:1c:d0:06:52: 8b:02:43:06:9f:1d:e3:6f:27:c4:26:46:5d:d8:e6: c9:ac:1c:22:ee:12:19:ea:80:30:5d:01:0f:23:d1: dd:c2:01:b0:73:6a:1f:93:ff:29:a4:a8:0e:a9:6c: 62:dc:e9:68:5e:33:15:de:b5:ee:c1:b5:38:68:69: d4:eb:fb:05:ca:49:2b:18:4c:55:e8:c1:e1:4e:74: 81:98:be:7a:a6:32:e0:bf:44:b5:44:8f:90:41:40: 34:c9:19:01:c6:03:2f:8d:b5:ce:50:02:4c:91:ab: ad:2f:0f:75:12:e7:7f:e3:96:3a:e7:1a:1a:02:1e: 71:6e:b1:7f:32:6a:44:f2:8d:a0:75:81:88:ef:62: 19:1c:bb:1d:ce:ff:77:ba:95:7a:d6:bd:94:88:ec: d5:da:c7:df:3e:1d:fa:b8:6d:cb:c2:13:be:0c:e2: 43:20:03:5c:28:16:7d:4d:3f:6f:94:8c:89:f6:7e: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6F:53:C5:84:1E:40:CF:F1:E9:AB:64:AD:26:48:FF:47:45:D5:57 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F7C832A8721511EFA7D82D3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.68.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:86:6c:ed:4f:28:de:f3:c8:fe:41:ce:c8:1b:c5:90:11:8a: 9c:0d:5d:3b:38:74:bd:01:ec:44:2b:5c:d1:e5:0a:69:91:6f: 96:65:73:1c:4d:4e:3b:9d:d4:a7:f4:07:1c:a4:c1:5e:32:92: 14:ee:cc:48:0b:5e:65:a5:1a:83:4b:b5:89:37:41:98:85:ad: c1:bb:2f:94:15:d0:86:f7:5f:b9:a3:8e:61:ff:c5:9b:63:21: 08:78:89:a9:cb:11:b2:52:ce:e1:19:2d:c0:9b:54:76:cc:3c: c3:2d:68:54:c8:e9:58:7d:da:5f:92:aa:72:74:fe:1c:da:ce: 31:61:af:89:a1:b6:9a:9b:4c:2d:a2:85:fa:29:2c:1c:90:41: dd:30:8a:ad:4f:1d:db:9a:21:d5:a1:5a:02:75:b0:e5:17:03: 42:7c:56:f9:97:4b:92:bf:68:84:59:6c:32:f6:0c:f1:83:95: fa:b0:a3:eb:41:c0:c0:73:87:ed:c5:6e:25:17:9d:58:0e:5a: 1c:61:ee:39:e1:69:00:2a:11:0c:00:09:6e:c6:06:e4:42:81: 0d:5e:cd:d2:e8:b9:f9:b0:43:6b:cb:64:af:11:eb:a8:a7:24: d5:88:c1:91:f8:db:4a:35:4c:4f:6f:da:28:01:ca:47:a1:39: 3a:75:7e:df -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTIwMTVaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRhYzhmLWY5NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFvYlfBxxy/FgP10QFjwsy0xfjb3ZPkd/MtCxsxo71agOp2D8M+GdxhPZBvKdi nRX1PjDYSEC0HDTIQ+38OfgI9d5D0WSgHNAGUosCQwafHeNvJ8QmRl3Y5smsHCLu EhnqgDBdAQ8j0d3CAbBzah+T/ymkqA6pbGLc6WheMxXete7BtThoadTr+wXKSSsY TFXoweFOdIGYvnqmMuC/RLVEj5BBQDTJGQHGAy+Ntc5QAkyRq60vD3US53/jljrn GhoCHnFusX8yakTyjaB1gYjvYhkcux3O/3e6lXrWvZSI7NXax98+Hfq4bcvCE74M 4kMgA1woFn1NP2+UjIn2fp35AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUfm9TxYQe QM/x6atkrSZI/0dF1VcwHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi9GN0M4MzJBODcy MTUxMUVGQTdEODJEM0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAsocRDANBgkqhkiG9w0BAQsFAAOCAQEADIZs7U8o3vPI/kHO yBvFkBGKnA1dOzh0vQHsRCtc0eUKaZFvlmVzHE1OO53Up/QHHKTBXjKSFO7MSAte ZaUag0u1iTdBmIWtwbsvlBXQhvdfuaOOYf/Fm2MhCHiJqcsRslLO4RktwJtUdsw8 wy1oVMjpWH3aX5KqcnT+HNrOMWGviaG2mptMLaKF+iksHJBB3TCKrU8d25oh1aFa AnWw5RcDQnxW+ZdLkr9ohFlsMvYM8YOV+rCj60HAwHOH7cVuJRedWA5aHGHuOeFp ACoRDAAJbsYG5EKBDV7N0ui5+bBDa8tkrxHrqKck1YjBkfjbSjVMT2/aKAHKR6E5 OnV+3w== -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org