$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/7C9E449814B311EEB9CD302AC4F9AE02.roa File: 7C9E449814B311EEB9CD302AC4F9AE02.roa (raw, json) Hash identifier: JgXDvvb08AKpWtQFVgWoJSRrsvnpi7N5Npk5xtbR4bs= Subject key identifier: E4:DE:49:83:F4:72:68:69:47:74:52:DD:37:44:27:56:35:89:A4:7C Certificate issuer: /CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D Certificate serial: F9 Authority key identifier: A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/7C9E449814B311EEB9CD302AC4F9AE02.roa Signing time: Thu 03 Oct 2024 04:08:11 +0000 ROA not before: Thu 03 Oct 2024 04:08:11 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 17828 IP address blocks: 202.1.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D Validity Not Before: Oct 3 04:08:11 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66fe18ab-51da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:5e:d6:42:43:01:bc:42:6f:b6:1f:96:a2: 53:1a:66:27:46:60:4d:62:b2:b6:3e:62:37:67:c7: 1e:07:32:a6:ff:95:0f:a7:8e:26:49:fa:8a:ac:a3: 8a:ff:97:92:99:ba:14:9c:0f:2b:63:c3:03:70:4d: d2:95:49:8e:f3:1f:d5:ae:a8:1a:a1:e5:fb:0a:e2: 48:f5:1f:8a:4f:b1:0b:f9:0f:5c:cb:78:d6:3f:42: 5a:67:7a:ae:21:5b:03:d6:48:57:db:ec:9e:31:b7: b7:35:e7:83:2e:22:a7:8e:80:99:1c:cc:2a:43:e5: fb:eb:06:f5:38:56:d2:5e:56:44:8f:54:92:d5:9d: 57:66:ee:02:89:44:bc:0a:dd:4a:69:3b:03:3d:37: 55:df:eb:e6:9f:68:5a:72:57:a6:af:64:a7:1a:f9: 3f:32:7d:ab:c4:43:94:8d:06:a3:f7:b7:ac:4d:8b: 3e:7a:5e:6c:59:12:df:00:b8:18:cb:67:13:eb:59: a9:49:48:95:13:df:2b:cd:e8:4e:39:d5:ab:93:99: 35:10:1f:89:92:46:4e:a5:4e:25:41:50:9a:c1:4f: 70:da:f7:48:d6:06:03:e7:7d:0c:38:e6:f3:a0:05: 83:ce:14:1d:cd:31:f3:04:f5:75:51:bd:ca:b3:fd: 5d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DE:49:83:F4:72:68:69:47:74:52:DD:37:44:27:56:35:89:A4:7C X509v3 Authority Key Identifier: keyid:A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/7C9E449814B311EEB9CD302AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.1.32.0/20 Signature Algorithm: sha256WithRSAEncryption 81:c1:0d:36:de:7e:5e:9a:15:40:b8:c6:92:8d:96:31:5c:29: 49:a0:2e:72:b9:e9:b3:65:49:38:a5:d0:20:89:07:98:ff:c2: f4:30:57:01:8d:34:b1:ca:f5:d6:3f:fe:74:5f:17:60:a4:54: f6:32:f7:8c:b7:6a:c7:70:3c:4a:ba:c7:99:b7:0f:b3:4f:cd: 52:51:74:86:7f:66:d2:83:a8:ca:b9:f0:83:f5:b2:2a:a3:49: bc:78:79:78:70:43:d7:e7:c5:9f:89:af:ae:04:2c:db:8f:d7: 77:6c:3c:ab:dc:82:2e:46:e9:4a:8b:a1:e8:c9:d6:dd:b5:d9: 7b:c9:7c:26:6e:0c:9e:ec:5b:b7:39:52:fb:42:b9:ca:4b:8d: 3c:87:15:f8:c9:01:b7:07:0a:c7:9e:e8:d3:43:c4:0f:c3:b1: eb:dc:b0:ab:6d:60:62:25:25:57:f9:cd:4a:74:d1:e4:c2:25: 89:92:b9:a1:70:25:38:80:6d:2b:48:4b:97:02:fe:20:58:e3: 0d:03:14:29:91:dc:c9:35:e5:5c:b4:e2:25:ee:c9:85:53:31: 61:a2:8d:64:84:0f:0e:e3:37:b8:46:72:7a:e4:90:d0:1c:8d: 8a:40:79:a0:33:d1:f3:9e:3b:12:06:85:05:e9:75:9c:92:45: a1:d1:ce:66 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2MjMxMTAvBgNVBAUTKEE2MTUwNzgwRTBCQTExRUEwQURDNDM0QUVEMzgzQzhC ODJBODk2MUQwHhcNMjQxMDAzMDQwODExWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZlMThhYi01MWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWVe1kJDAbxCb7YflqJTGmYnRmBNYrK2PmI3Z8ceBzKm/5UPp44mSfqKrKOK /5eSmboUnA8rY8MDcE3SlUmO8x/VrqgaoeX7CuJI9R+KT7EL+Q9cy3jWP0JaZ3qu IVsD1khX2+yeMbe3NeeDLiKnjoCZHMwqQ+X76wb1OFbSXlZEj1SS1Z1XZu4CiUS8 Ct1KaTsDPTdV3+vmn2haclemr2SnGvk/Mn2rxEOUjQaj97esTYs+el5sWRLfALgY y2cT61mpSUiVE98rzehOOdWrk5k1EB+JkkZOpU4lQVCawU9w2vdI1gYD530MOObz oAWDzhQdzTHzBPV1Ub3Ks/1dYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOTeSYP0 cmhpR3RS3TdEJ1Y1iaR8MB8GA1UdIwQYMBaAFKYVB4DguhHqCtxDSu04PIuCqJYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTYyMy80MTA3MzVDQTE0 OUExMUVFQURGMUM2MTBDNEY5QUUwMi9waFVIZ09DNkVlb0szRU5LN1RnOGk0S29s aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoVUhnT0M2RWVvSzNFTks3VGc4aTRLb2xoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE2MjMvNDEwNzM1Q0ExNDlBMTFFRUFERjFDNjEwQzRGOUFFMDIvN0M5RTQ0OTgx NEIzMTFFRUI5Q0QzMDJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBATKASAwDQYJKoZIhvcNAQELBQADggEBAIHBDTbefl6aFUC4 xpKNljFcKUmgLnK56bNlSTil0CCJB5j/wvQwVwGNNLHK9dY//nRfF2CkVPYy94y3 asdwPEq6x5m3D7NPzVJRdIZ/ZtKDqMq58IP1siqjSbx4eXhwQ9fnxZ+Jr64ELNuP 13dsPKvcgi5G6UqLoejJ1t212XvJfCZuDJ7sW7c5UvtCucpLjTyHFfjJAbcHCsee 6NNDxA/DsevcsKttYGIlJVf5zUp00eTCJYmSuaFwJTiAbStIS5cC/iBY4w0DFCmR 3Mk15Vy04iXuyYVTMWGijWSEDw7jN7hGcnrkkNAcjYpAeaAz0fOeOxIGhQXpdZyS RaHRzmY= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:58 2024 by rpki-client on console-fra.rpki-client.org