$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/1F63E4347ABC11EF9E53E753C4F9AE02.roa File: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (raw, json) Hash identifier: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw= Subject key identifier: B1:F5:D3:CD:21:1B:14:C9:27:61:99:86:AF:78:61:F4:4E:25:C0:0C Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: 1A Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/1F63E4347ABC11EF9E53E753C4F9AE02.roa Signing time: Tue 05 Nov 2024 05:59:02 +0000 ROA not before: Tue 05 Nov 2024 05:59:02 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 1221 IP address blocks: 203.62.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Nov 5 05:59:02 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6729b426-c5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:19:50:2a:a9:21:ae:d8:0f:b7:e2:92:b7: dd:ca:41:c3:6f:d5:ea:40:52:e9:ae:e0:9c:db:a9: 92:4b:83:7e:63:da:65:70:70:a6:78:f0:bb:2d:34: 7b:72:62:a0:6c:19:fb:b4:d1:a3:cc:e4:3c:70:27: 48:c8:de:c9:a9:97:c3:56:99:cb:2c:82:3d:75:81: 8b:a6:ec:45:5a:72:a3:3f:0f:fe:ae:5b:12:2f:59: 12:60:9e:de:5c:64:c3:0a:b3:c9:96:04:81:e9:cc: 1b:54:36:36:0f:bc:5b:88:18:aa:6e:51:e9:87:d2: fc:dc:84:ad:6f:f5:9c:53:af:34:59:d2:24:ad:f1: c2:91:34:75:6a:7f:a3:0f:42:ef:0c:5a:7c:d8:be: c3:8a:84:61:a3:23:87:e1:d1:33:0b:42:71:6a:8e: 5b:6b:64:de:1f:21:0b:a2:ae:b7:96:67:38:c3:9d: 99:5e:64:4c:b1:ff:6a:4d:b9:85:e1:32:02:f5:71: 0a:14:07:b4:16:c6:aa:4d:25:94:07:98:73:51:3d: 6a:92:e9:db:4f:a7:da:66:1e:53:b7:be:4d:86:53: ca:85:6e:f9:35:e4:5e:11:aa:c5:73:04:4e:28:da: 89:3d:fb:b4:4a:24:46:1b:f4:28:d0:88:b3:e9:3c: 79:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F5:D3:CD:21:1B:14:C9:27:61:99:86:AF:78:61:F4:4E:25:C0:0C X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/1F63E4347ABC11EF9E53E753C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.62.205.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:83:d9:4b:08:31:0c:37:50:7d:c2:49:bd:ea:85:6e:ef:d2: 2a:61:29:fc:36:2c:f7:97:76:53:9f:cf:79:70:e1:d7:a5:66: 96:53:85:76:26:bb:ef:86:e0:66:7c:ae:88:07:c1:67:ea:1d: 22:61:65:b2:ec:25:d2:52:92:fd:64:29:8b:77:98:e0:7f:e5: 0e:29:69:77:45:c6:f7:20:c5:7f:7b:20:ff:03:11:15:7a:db: 35:90:00:3e:d2:e2:91:f4:75:7f:86:78:fb:0e:c2:93:b6:69: d8:cd:e1:16:dc:54:7c:23:e4:b1:b7:c9:21:c2:fb:19:6d:53: 0f:c3:e1:cd:35:c6:4e:9e:7b:b5:08:83:c1:97:f1:65:01:03: 02:6e:d6:d9:66:08:07:bd:9e:eb:d7:37:81:e8:6b:06:29:34: 1d:07:b6:a1:99:20:98:0f:2b:72:05:47:8c:77:24:6c:f6:28: 10:64:6d:8c:cf:56:2d:9f:12:18:df:3e:95:4b:0b:e0:d5:7b: 22:5a:d1:57:fa:79:92:6e:28:f5:4a:83:f9:08:63:7c:71:39: df:08:60:42:4b:1e:1b:4c:5d:d9:58:03:84:b2:dd:9e:88:0f: d0:cc:5d:bf:3c:43:bb:57:bf:cc:3a:e6:91:fb:71:c0:93:ea: e6:70:29:f3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDBBNTExMC8GA1UEBRMoREU4NkU2NUVFQTFFMEIzMEU0RkQ4RDkyNDU4N0VERjU3 MjNENTA3RDAeFw0yNDExMDUwNTU5MDJaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MjliNDI2LWM1Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg1RlQKqkhrtgPt+KSt93KQcNv1epAUumu4JzbqZJLg35j2mVwcKZ48LstNHty YqBsGfu00aPM5DxwJ0jI3smpl8NWmcssgj11gYum7EVacqM/D/6uWxIvWRJgnt5c ZMMKs8mWBIHpzBtUNjYPvFuIGKpuUemH0vzchK1v9ZxTrzRZ0iSt8cKRNHVqf6MP Qu8MWnzYvsOKhGGjI4fh0TMLQnFqjltrZN4fIQuirreWZzjDnZleZEyx/2pNuYXh MgL1cQoUB7QWxqpNJZQHmHNRPWqS6dtPp9pmHlO3vk2GU8qFbvk15F4RqsVzBE4o 2ok9+7RKJEYb9CjQiLPpPHlvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUsfXTzSEb FMknYZmGr3hh9E4lwAwwHwYDVR0jBBgwFoAU3obmXuoeCzDk/Y2SRYft9XI9UH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMEE1L0E2NDgzQTNDN0FC QjExRUY5Mzc5QUU1MkM0RjlBRTAyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM29ibVh1b2VDekRrX1kyU1JZZnQ5WEk5VUgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8xRjYzRTQzNDdB QkMxMUVGOUU1M0U3NTNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMs+zTANBgkqhkiG9w0BAQsFAAOCAQEAXoPZSwgxDDdQfcJJ veqFbu/SKmEp/DYs95d2U5/PeXDh16VmllOFdia774bgZnyuiAfBZ+odImFlsuwl 0lKS/WQpi3eY4H/lDilpd0XG9yDFf3sg/wMRFXrbNZAAPtLikfR1f4Z4+w7Ck7Zp 2M3hFtxUfCPksbfJIcL7GW1TD8PhzTXGTp57tQiDwZfxZQEDAm7W2WYIB72e69c3 gehrBik0HQe2oZkgmA8rcgVHjHckbPYoEGRtjM9WLZ8SGN8+lUsL4NV7IlrRV/p5 km4o9UqD+QhjfHE53whgQkseG0xd2VgDhLLdnogP0MxdvzxDu1e/zDrmkftxwJPq 5nAp8w== -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org