$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/268ECB3ED5BD11E894FFC250C4F9AE02.roa File: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (raw, json) Hash identifier: w3oachy62b9vS7wqwD6D3HohJubENRLKhLvYOw/CqsQ= Subject key identifier: EE:1F:AF:E1:F4:44:1C:8A:05:27:20:61:E9:71:DD:31:4C:76:85:26 Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 15A8 Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/268ECB3ED5BD11E894FFC250C4F9AE02.roa Signing time: Mon 02 Sep 2024 17:34:54 +0000 ROA not before: Mon 02 Sep 2024 17:34:54 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 45509 IP address blocks: 115.187.88.0/22 maxlen: 22 115.187.88.0/24 maxlen: 24 115.187.89.0/24 maxlen: 24 115.187.90.0/24 maxlen: 24 115.187.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5544 (0x15a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Sep 2 17:34:54 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d5f73e-7de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:69:7a:1c:a0:27:1c:62:32:59:43:d1:01:43: 2e:4f:5d:bb:e1:84:ec:f3:bc:c9:d4:65:a4:ab:83: 86:3c:98:1c:74:49:41:ae:04:4b:08:69:19:b1:fe: 5d:0b:59:ef:8d:24:b7:68:cb:40:ee:3f:b9:91:7f: b2:e7:ca:7d:ce:17:6b:2f:3c:66:da:99:6b:5f:a1: 68:5a:49:71:27:dd:7d:3f:73:8d:33:8a:6d:e0:c8: 08:8a:4c:02:0e:ba:9e:88:b5:48:e0:41:36:fb:ea: 47:44:b1:85:84:48:5d:38:f5:f2:e2:fa:40:dd:52: bb:ec:9b:32:3e:31:bf:1a:9d:27:9d:89:de:3e:df: 06:29:37:7f:3b:ee:10:a7:a3:9a:92:21:83:7d:a1: ac:74:18:d9:3c:38:62:0d:e9:30:c2:fb:ec:75:78: fd:e8:69:42:dc:69:e7:32:f0:8b:74:eb:a4:38:9b: 23:68:85:43:f6:1f:3b:24:65:53:c7:0c:e8:a1:a9: 65:91:89:5c:af:9e:20:88:9b:08:f2:9b:1a:0f:26: 67:17:50:14:17:03:86:d3:b4:6b:0a:ec:fb:9b:db: 1a:54:bf:fe:4f:46:e8:b2:f6:12:33:96:7b:6e:6c: f7:83:0e:d7:b4:ec:99:d5:03:17:0d:a1:bc:92:c8: 63:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1F:AF:E1:F4:44:1C:8A:05:27:20:61:E9:71:DD:31:4C:76:85:26 X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/268ECB3ED5BD11E894FFC250C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.187.88.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:6a:12:9a:4c:c7:10:ce:be:1e:8a:8c:7e:d7:03:a3:a2:ea: 76:3d:75:ed:8e:86:5a:f2:33:5c:2b:dd:7c:c1:43:2d:72:96: c9:e3:93:c5:ba:ba:8b:14:45:15:01:b1:15:6f:23:7c:9a:9f: 1f:e9:20:28:8f:69:97:14:de:1e:9d:8e:4e:76:fd:fd:54:73: 3a:39:af:02:4f:cb:24:8d:03:33:da:98:19:28:74:42:fa:0e: 6c:72:9f:1c:17:68:5c:4d:14:d8:86:27:1a:d1:cc:da:44:ef: f6:62:a3:df:3c:d0:fb:0e:d8:e3:91:80:fd:ee:5c:9d:e6:2a: 4d:f4:07:fd:46:f0:cc:ff:10:d2:49:a3:a8:36:1b:19:8d:b9: fe:b5:f5:69:e2:4a:6f:4e:44:1e:aa:82:55:b4:85:42:05:9f: 28:8b:ab:d9:5a:81:f8:6c:b7:32:65:ec:a4:68:3b:fa:c4:4a: fe:e9:9c:3e:6d:da:0c:62:3a:7e:a4:cb:57:26:64:6e:07:9c: a6:bf:45:f5:22:27:03:c1:68:6e:56:b3:de:94:9c:03:46:50: 15:45:4c:cf:43:a6:bc:54:3f:27:33:1b:60:ea:f7:88:ff:db: 45:14:03:95:66:c4:0b:71:8a:4c:b8:81:a0:76:8a:00:45:ab: 31:bc:03:ca -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjQwOTAyMTczNDU0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ1ZjczZS03ZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Wl6HKAnHGIyWUPRAUMuT1274YTs87zJ1GWkq4OGPJgcdElBrgRLCGkZsf5d C1nvjSS3aMtA7j+5kX+y58p9zhdrLzxm2plrX6FoWklxJ919P3ONM4pt4MgIikwC DrqeiLVI4EE2++pHRLGFhEhdOPXy4vpA3VK77JsyPjG/Gp0nnYnePt8GKTd/O+4Q p6OakiGDfaGsdBjZPDhiDekwwvvsdXj96GlC3GnnMvCLdOukOJsjaIVD9h87JGVT xwzooallkYlcr54giJsI8psaDyZnF1AUFwOG07RrCuz7m9saVL/+T0bosvYSM5Z7 bmz3gw7XtOyZ1QMXDaG8kshjNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO4fr+H0 RByKBScgYelx3TFMdoUmMB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNENEQvMTM3RDAwRDQxNjBFMTFFODg1MkM0MzdFQzRGOUFFMDIvMjY4RUNCM0VE NUJEMTFFODk0RkZDMjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJzu1gwDQYJKoZIhvcNAQELBQADggEBAG9qEppMxxDOvh6K jH7XA6Oi6nY9de2OhlryM1wr3XzBQy1ylsnjk8W6uosURRUBsRVvI3yanx/pICiP aZcU3h6djk52/f1Uczo5rwJPyySNAzPamBkodEL6DmxynxwXaFxNFNiGJxrRzNpE 7/Zio9880PsO2OORgP3uXJ3mKk30B/1G8Mz/ENJJo6g2GxmNuf619WniSm9ORB6q glW0hUIFnyiLq9lagfhstzJl7KRoO/rESv7pnD5t2gxiOn6ky1cmZG4HnKa/RfUi JwPBaG5Ws96UnANGUBVFTM9DprxUPyczG2Dq94j/20UUA5VmxAtxiky4gaB2igBF qzG8A8o= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org