$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/0B2052EA6D0D11EEA65D7522C4F9AE02.roa File: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (raw, json) Hash identifier: romYbuiWzdOqklzJCkUsUwW/w4kh63Rd2xMFubLjgPo= Subject key identifier: 0C:35:FC:76:7F:4A:ED:E9:FF:A5:73:A0:A4:3A:4C:F0:94:5D:FF:C6 Certificate issuer: /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69 Certificate serial: C6 Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/0B2052EA6D0D11EEA65D7522C4F9AE02.roa Signing time: Wed 23 Oct 2024 04:38:57 +0000 ROA not before: Wed 23 Oct 2024 04:38:56 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 150335 IP address blocks: 223.130.8.0/23 maxlen: 23 223.130.8.0/24 maxlen: 24 223.130.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69 Validity Not Before: Oct 23 04:38:56 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67187de0-1f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:56:73:dc:7b:ed:5a:0d:5b:44:40:42:f0:89: f2:45:a1:4f:8d:5e:0a:8a:84:7f:c1:06:13:24:f2: bc:59:2f:10:90:84:19:87:7e:08:b3:e0:d0:89:c7: 8f:15:ba:da:21:6b:d2:8a:11:e2:3c:30:ef:82:29: 26:99:84:79:cb:e6:21:6c:47:70:43:ff:d4:05:e5: a7:2f:8e:e9:8a:e5:a9:53:12:9f:c3:1e:3c:7e:77: a1:0d:8a:f7:46:67:51:dd:e2:67:d1:c1:b7:8a:33: e6:9d:3a:f5:3b:01:b5:53:c2:34:c2:74:a5:49:57: 30:6b:7f:c9:11:09:0a:ff:31:80:87:89:51:a4:35: 34:e0:47:cb:51:6a:90:d6:ba:4e:41:ed:7d:75:a7: 9e:94:d7:8f:56:6f:b8:fe:0d:ab:f3:1b:e0:5d:1f: 56:46:db:be:ab:e9:c1:18:2e:ca:d8:7b:06:d4:ef: f0:97:ae:de:2d:4d:4a:dc:79:f6:e0:3b:c7:56:66: ac:7c:2c:31:89:08:4f:bc:5f:1e:4e:b6:b5:e3:14: 37:5c:11:e8:ea:e2:8b:0b:45:50:62:44:ab:92:0e: 01:cc:c7:2c:18:12:67:64:cf:ae:98:dd:39:13:40: 3a:24:05:92:fd:4d:45:1d:04:c5:fe:2e:9a:31:7f: 13:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:35:FC:76:7F:4A:ED:E9:FF:A5:73:A0:A4:3A:4C:F0:94:5D:FF:C6 X509v3 Authority Key Identifier: keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/0B2052EA6D0D11EEA65D7522C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.130.8.0/23 Signature Algorithm: sha256WithRSAEncryption a2:fb:c7:9c:1f:0b:5f:2a:9c:39:db:0c:1e:e6:9b:42:a7:5f: b5:b6:89:9e:1b:62:e6:f5:df:db:13:6b:a8:82:76:dc:e8:7f: e5:56:5b:38:5e:d4:58:f8:a7:46:0e:e9:37:48:1f:08:dc:96: 14:96:5f:dd:86:ed:35:b3:00:f5:25:a4:ac:ab:c0:1d:21:40: a7:2c:83:3e:dc:cb:33:f3:53:4c:81:9b:8c:c9:83:6a:6f:7d: d3:eb:a7:95:ec:f9:04:e7:29:ca:6e:62:b1:4c:55:9d:15:02: 33:f8:a2:4b:6e:14:04:6b:98:68:fb:b9:29:bd:d7:9f:e0:39: ef:ba:2f:72:20:8b:10:92:16:40:ea:23:64:f4:27:aa:07:36: 0f:03:13:90:03:23:9f:56:b3:91:ab:90:5c:f3:cd:e9:dc:a1: 52:10:58:2d:e6:4d:3e:da:5b:20:48:9d:5f:e7:ef:93:c1:9c: f1:2d:f1:2b:3d:8b:a1:b1:24:67:ef:b3:11:06:6f:e5:d9:8c: b1:b7:8f:58:b1:fc:ff:ec:5a:78:1d:d9:bd:35:11:6d:05:64: f0:14:b4:d5:41:53:c4:22:30:12:f0:7c:21:4e:f1:b9:d9:01: 0a:77:f9:52:e4:e0:c2:36:54:44:74:d8:17:ab:ef:c2:a1:7b: 62:23:7a:ca -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBDQUUxMTAvBgNVBAUTKDI5ODExRTFEQjA2OEJEQkJBQkZCN0FCNjk1Rjg1ODk4 QkQ2MThDNjkwHhcNMjQxMDIzMDQzODU2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE4N2RlMC0xZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lZz3HvtWg1bREBC8InyRaFPjV4KioR/wQYTJPK8WS8QkIQZh34Is+DQiceP FbraIWvSihHiPDDvgikmmYR5y+YhbEdwQ//UBeWnL47piuWpUxKfwx48fnehDYr3 RmdR3eJn0cG3ijPmnTr1OwG1U8I0wnSlSVcwa3/JEQkK/zGAh4lRpDU04EfLUWqQ 1rpOQe19daeelNePVm+4/g2r8xvgXR9WRtu+q+nBGC7K2HsG1O/wl67eLU1K3Hn2 4DvHVmasfCwxiQhPvF8eTra14xQ3XBHo6uKLC0VQYkSrkg4BzMcsGBJnZM+umN05 E0A6JAWS/U1FHQTF/i6aMX8TBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAw1/HZ/ Su3p/6VzoKQ6TPCUXf/GMB8GA1UdIwQYMBaAFCmBHh2waL27q/t6tpX4WJi9YYxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMENBRS83QzY0NEVFNjZB NzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3ZidXItM3EybGZoWW1MMWhq R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tZRWVIYkJvdmJ1ci0zcTJsZmhZbUwxaGpHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjBDQUUvN0M2NDRFRTY2QTcxMTFFRUE1QjRDQjI2QzRGOUFFMDIvMEIyMDUyRUE2 RDBEMTFFRUE2NUQ3NTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHfgggwDQYJKoZIhvcNAQELBQADggEBAKL7x5wfC18qnDnb DB7mm0KnX7W2iZ4bYub139sTa6iCdtzof+VWWzhe1Fj4p0YO6TdIHwjclhSWX92G 7TWzAPUlpKyrwB0hQKcsgz7cyzPzU0yBm4zJg2pvfdPrp5Xs+QTnKcpuYrFMVZ0V AjP4oktuFARrmGj7uSm915/gOe+6L3IgixCSFkDqI2T0J6oHNg8DE5ADI59Ws5Gr kFzzzencoVIQWC3mTT7aWyBInV/n75PBnPEt8Ss9i6GxJGfvsxEGb+XZjLG3j1ix /P/sWngd2b01EW0FZPAUtNVBU8QiMBLwfCFO8bnZAQp3+VLk4MI2VER02Ber78Kh e2Ijeso= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org