$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa File: AEEA3AE45BF611E984E25E54C4F9AE02.roa (raw, json) Hash identifier: wWIX9EdMzw9FHq+10kKQX1T2XmTjf4AGFJrSC1E2yfQ= Subject key identifier: 9D:CD:D3:92:DD:C6:1F:25:88:3D:4E:D5:2D:BE:0C:64:74:5B:C5:9E Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 25B1 Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa Signing time: Tue 24 Sep 2024 15:53:03 +0000 ROA not before: Tue 24 Sep 2024 15:53:03 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 17724 IP address blocks: 111.84.16.0/24 maxlen: 24 111.84.20.0/24 maxlen: 24 111.84.52.0/23 maxlen: 24 111.84.54.0/23 maxlen: 24 111.84.178.0/23 maxlen: 24 111.84.180.0/23 maxlen: 24 202.91.16.0/23 maxlen: 24 202.91.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9649 (0x25b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Sep 24 15:53:03 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f2e05f-90b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:ae:c3:95:04:4c:8c:fa:30:4c:5f:63:52: 11:94:77:a6:4f:c6:d7:2e:f7:d6:0a:63:10:07:fe: c8:d9:66:05:f2:22:7c:ff:5d:8e:e1:75:ce:97:96: f1:6b:25:06:ac:25:e5:f3:27:af:31:73:74:04:0f: ed:86:0b:64:46:6d:67:fc:71:f9:e3:6e:ea:ce:44: 32:3b:74:dd:51:74:5d:cc:b3:a3:02:ff:27:37:84: c6:37:c9:f1:5f:5c:8f:18:30:19:ff:0c:6a:e4:40: 0d:ba:9d:d8:74:29:9e:d8:a0:c3:3b:93:7e:5c:b1: 50:10:39:60:a2:46:3d:51:9f:45:3b:60:e4:6b:7e: 46:ba:22:d7:b6:30:d6:66:a7:27:af:fa:da:a0:2c: 33:9c:13:58:83:e6:7f:08:0c:28:06:73:2e:c2:8d: 16:26:dc:38:8a:0b:10:02:9b:2d:d0:68:0d:76:a3: f5:f4:1b:78:fa:2b:3e:3e:9c:59:23:a1:a6:0e:07: 40:95:b1:24:fa:e8:1a:e7:ad:92:27:a6:4a:e7:89: 22:2c:0f:61:22:0e:45:3e:32:e0:46:d9:18:62:59: 17:8b:e8:45:36:0f:9c:77:25:3f:ca:e5:ee:2a:8d: 5b:ff:a1:91:ae:b7:ba:0c:6b:07:87:a8:ac:a9:b5: 6a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CD:D3:92:DD:C6:1F:25:88:3D:4E:D5:2D:BE:0C:64:74:5B:C5:9E X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.84.16.0/24 111.84.20.0/24 111.84.52.0/22 111.84.178.0-111.84.181.255 202.91.16.0/23 202.91.20.0/22 Signature Algorithm: sha256WithRSAEncryption 20:c1:63:54:8a:28:32:3e:4e:2a:be:52:6a:7c:c5:4f:04:89: 81:32:68:a2:e6:53:63:a7:fe:ed:d9:44:cd:62:e8:fa:46:c9: 03:e7:f8:93:04:ea:b5:17:9d:bd:c7:ae:95:a8:57:f6:f1:e5: 1f:b2:67:49:70:9b:1e:27:04:ab:c1:0e:48:f9:39:e4:75:6d: ea:30:ef:b1:f5:91:50:de:36:ac:e9:d6:16:e7:72:31:9c:f8: 83:f1:57:c0:f7:89:f4:82:71:e9:70:8f:e9:9d:1b:de:c2:02: 53:7a:f7:b8:71:47:c5:7d:39:98:0e:6d:36:32:a3:e4:04:63: 23:82:8d:03:e2:32:15:df:63:0b:2b:fe:93:3b:61:54:be:74: 7f:c9:84:15:08:1c:17:ae:e2:bc:3f:87:a4:39:01:a8:b0:7f: 36:b5:0e:b9:f8:44:3c:30:80:2b:de:d8:8c:a2:ae:b3:37:db: 6a:e6:05:d2:6a:4f:0c:6f:63:0a:ca:27:d4:98:e1:68:35:19: 84:62:52:5d:fd:2b:1f:f0:0e:cd:6d:86:d2:03:e7:fe:d8:e1: 5c:af:e2:ba:1f:d0:17:47:68:a6:d3:25:53:80:9a:6a:98:7c: d5:cc:f6:eb:dd:c8:12:bf:9a:80:64:38:0a:a3:26:40:bf:66: c4:9c:d2:ca -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICJbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjQwOTI0MTU1MzAzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYyZTA1Zi05MGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkSuw5UETIz6MExfY1IRlHemT8bXLvfWCmMQB/7I2WYF8iJ8/12O4XXOl5bx ayUGrCXl8yevMXN0BA/thgtkRm1n/HH5427qzkQyO3TdUXRdzLOjAv8nN4TGN8nx X1yPGDAZ/wxq5EANup3YdCme2KDDO5N+XLFQEDlgokY9UZ9FO2Dka35GuiLXtjDW Zqcnr/raoCwznBNYg+Z/CAwoBnMuwo0WJtw4igsQApst0GgNdqP19Bt4+is+PpxZ I6GmDgdAlbEk+uga562SJ6ZK54kiLA9hIg5FPjLgRtkYYlkXi+hFNg+cdyU/yuXu Ko1b/6GRrre6DGsHh6isqbVq+wIDAQABo4ICuzCCArcwHQYDVR0OBBYEFJ3N05Ld xh8liD1O1S2+DGR0W8WeMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvQUVFQTNBRTQ1 QkY2MTFFOTg0RTI1RTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwDBABvVBADBABvVBQDBAJvVDQwDAMEAW9UsgMEAW9UtAMEAcpb EAMEAspbFDANBgkqhkiG9w0BAQsFAAOCAQEAIMFjVIooMj5OKr5SanzFTwSJgTJo ouZTY6f+7dlEzWLo+kbJA+f4kwTqtRedvceulahX9vHlH7JnSXCbHicEq8EOSPk5 5HVt6jDvsfWRUN42rOnWFudyMZz4g/FXwPeJ9IJx6XCP6Z0b3sICU3r3uHFHxX05 mA5tNjKj5ARjI4KNA+IyFd9jCyv+kzthVL50f8mEFQgcF67ivD+HpDkBqLB/NrUO ufhEPDCAK97YjKKuszfbauYF0mpPDG9jCson1JjhaDUZhGJSXf0rH/AOzW2G0gPn /tjhXK/iuh/QF0doptMlU4Caaph81cz2693IEr+agGQ4CqMmQL9mxJzSyg== -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org