$ rpki-client -vvf rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/5CD84EBCC28811EB8BB7245FC4F9AE02.roa File: 5CD84EBCC28811EB8BB7245FC4F9AE02.roa (raw, json) Hash identifier: bfUpyNZCPyo9G8/socIyydOZMRYa1GRdtd4ssZfl3Kk= Subject key identifier: A9:D7:A6:14:57:C1:1C:B0:15:94:6A:12:F4:7E:C9:7A:8A:00:DC:5D Certificate issuer: /CN=A91E38C1/serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202 Certificate serial: 3453 Authority key identifier: 33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/5CD84EBCC28811EB8BB7245FC4F9AE02.roa Signing time: Sat 02 Nov 2024 15:20:49 +0000 ROA not before: Sat 02 Nov 2024 15:20:49 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136587 IP address blocks: 119.252.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.crl rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13395 (0x3453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E38C1/serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202 Validity Not Before: Nov 2 15:20:49 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67264351-ec3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7d:33:dc:14:9e:d0:68:6f:64:5f:8e:07:79: 61:69:3d:a6:15:c4:ca:a2:ec:08:7b:e7:bd:02:bb: 57:c6:6f:64:9c:22:b4:20:b8:8b:9c:2b:a6:c4:69: 3e:17:03:ee:0b:9d:89:71:11:e5:69:6b:6b:66:a9: ad:23:88:af:74:1a:63:7a:40:66:28:de:67:4a:69: c0:c3:82:da:f9:ef:3e:6f:61:f6:72:02:70:e9:12: be:5f:75:82:37:58:64:43:0c:29:65:80:e3:38:70: ce:f3:e4:2e:b9:19:ae:80:bc:c4:53:c2:da:fa:ae: 6b:85:ed:7b:e3:f6:06:c2:b2:77:18:85:ef:99:0d: f6:dd:7d:ba:4d:55:3d:f2:2e:ca:b2:61:25:27:9a: 5b:7d:d6:55:a5:b3:2d:fc:5d:6f:d8:d7:b3:52:76: c3:31:62:28:42:ef:68:29:35:32:0f:86:02:36:a2: 92:8a:dc:5f:10:48:c3:3e:84:71:6c:18:01:6b:b1: 89:9f:0c:7c:48:5e:84:56:90:11:a0:95:a1:e2:3a: 7a:77:e7:b9:e8:9a:15:5b:23:13:06:45:98:9f:84: 5b:29:9a:a0:01:80:e9:34:8c:22:e4:23:c4:ad:45: e0:24:f8:56:c5:58:ae:69:78:de:b7:cc:4c:8d:98: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D7:A6:14:57:C1:1C:B0:15:94:6A:12:F4:7E:C9:7A:8A:00:DC:5D X509v3 Authority Key Identifier: keyid:33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/5CD84EBCC28811EB8BB7245FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.252.224.0/24 Signature Algorithm: sha256WithRSAEncryption 24:c1:fc:21:c6:64:af:f3:97:4f:8d:ba:94:91:6e:ae:74:a6: e9:0a:2f:c6:31:a5:20:03:33:4f:84:86:94:05:70:2e:6b:74: a4:3c:0c:f4:10:3b:ac:b3:a0:77:4e:73:cc:c5:38:6a:4d:84: 4c:1a:83:89:64:8d:40:41:16:60:96:9f:4b:d6:d9:ba:22:de: fd:d1:3c:bb:70:fe:72:d4:67:18:9f:7a:2f:72:c5:f7:37:6b: 33:26:e5:5b:7f:77:dd:f3:c5:b2:db:16:b0:78:b8:93:36:8b: 95:98:84:8d:80:0b:0a:55:31:56:b4:66:39:62:e9:8c:01:20: d7:0e:59:5c:7e:b3:84:e8:9e:b9:8e:fb:4b:2e:16:11:86:1c: dc:d2:32:e9:f1:1c:61:25:0d:9a:fd:c4:1d:c0:b9:04:e8:b1: ea:0e:f2:25:80:d3:76:1e:61:80:43:d1:f2:42:54:ea:9d:9c: e3:89:33:3a:5a:35:42:0a:cc:8e:49:64:33:f2:90:9a:b9:b1: c0:22:34:6d:d7:57:9c:bc:df:dd:a2:87:a0:88:46:89:e9:aa: 4d:76:7d:21:87:38:4e:2e:18:93:25:e9:a5:d6:36:2f:34:90: 8e:cc:ac:9e:e8:88:2b:34:01:f8:cd:41:74:ca:d8:79:ec:6d: 92:ac:8a:fd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4QzExMTAvBgNVBAUTKDMzOEJENzgxRUQyMUU1REIxNDA1N0IzN0I5MDNBMkE0 MDhFMjQyMDIwHhcNMjQxMTAyMTUyMDQ5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2NDM1MS1lYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2n0z3BSe0GhvZF+OB3lhaT2mFcTKouwIe+e9ArtXxm9knCK0ILiLnCumxGk+ FwPuC52JcRHlaWtrZqmtI4ivdBpjekBmKN5nSmnAw4La+e8+b2H2cgJw6RK+X3WC N1hkQwwpZYDjOHDO8+QuuRmugLzEU8La+q5rhe174/YGwrJ3GIXvmQ323X26TVU9 8i7KsmElJ5pbfdZVpbMt/F1v2NezUnbDMWIoQu9oKTUyD4YCNqKSitxfEEjDPoRx bBgBa7GJnwx8SF6EVpARoJWh4jp6d+e56JoVWyMTBkWYn4RbKZqgAYDpNIwi5CPE rUXgJPhWxViuaXjet8xMjZgNEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKnXphRX wRywFZRqEvR+yXqKANxdMB8GA1UdIwQYMBaAFDOL14HtIeXbFAV7N7kDoqQI4kIC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzhDMS9FNzVBQzI2MjFE OTcxMUUyOEVGODkyODEwOEIwMkNEMi9NNHZYZ2UwaDVkc1VCWHMzdVFPaXBBamlR Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL000dlhnZTBoNWRzVUJYczN1UU9pcEFqaVFnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM4QzEvRTc1QUMyNjIxRDk3MTFFMjhFRjg5MjgxMDhCMDJDRDIvNUNEODRFQkND Mjg4MTFFQjhCQjcyNDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB3/OAwDQYJKoZIhvcNAQELBQADggEBACTB/CHGZK/zl0+N upSRbq50pukKL8YxpSADM0+EhpQFcC5rdKQ8DPQQO6yzoHdOc8zFOGpNhEwag4lk jUBBFmCWn0vW2boi3v3RPLtw/nLUZxifei9yxfc3azMm5Vt/d93zxbLbFrB4uJM2 i5WYhI2ACwpVMVa0Zjli6YwBINcOWVx+s4TonrmO+0suFhGGHNzSMunxHGElDZr9 xB3AuQToseoO8iWA03YeYYBD0fJCVOqdnOOJMzpaNUIKzI5JZDPykJq5scAiNG3X V5y8392ih6CIRonpqk12fSGHOE4uGJMl6aXWNi80kI7MrJ7oiCs0AfjNQXTK2Hns bZKsiv0= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org