$ rpki-client -vvf rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/5DF144D4C28811EB8BB7245FC4F9AE02.roa File: 5DF144D4C28811EB8BB7245FC4F9AE02.roa (raw, json) Hash identifier: kVq2GG+edCw3+lxLsij1CON1KgLPy95QS1vRV3TSyB8= Subject key identifier: B2:26:52:C4:97:27:B3:21:A3:90:1F:3C:67:90:D2:50:84:2A:29:C1 Certificate issuer: /CN=A91E38C1/serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202 Certificate serial: 3454 Authority key identifier: 33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/5DF144D4C28811EB8BB7245FC4F9AE02.roa Signing time: Sat 02 Nov 2024 15:20:50 +0000 ROA not before: Sat 02 Nov 2024 15:20:50 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9229 IP address blocks: 119.252.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.crl rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13396 (0x3454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E38C1/serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202 Validity Not Before: Nov 2 15:20:50 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67264352-4799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a7:05:50:86:46:fc:c5:4d:a6:88:3a:bf:ca: 93:ac:5d:6c:b0:ea:46:a2:4e:a5:59:ff:07:95:a4: e4:6a:9e:4b:28:6e:52:07:15:f1:7e:52:72:b1:f7: 01:bc:4f:76:77:06:3c:74:17:71:20:18:a9:ec:ec: c2:05:76:4c:6b:d2:27:65:2a:c5:72:01:01:56:7b: 78:41:ac:ea:97:12:75:5c:b3:3c:60:ad:9e:90:14: 56:8d:f6:3f:2c:79:dc:38:61:48:20:35:86:c5:87: 54:84:0f:8b:74:40:5c:7d:a9:89:96:bd:27:ba:a8: 77:e5:02:ec:4d:1b:eb:28:7a:4e:6e:ce:40:4b:e0: f5:80:90:52:3a:50:c6:dc:f0:d7:3f:f9:86:d1:67: 6e:7c:85:2e:47:1f:23:6f:e5:15:c5:0e:8b:92:c9: 86:2a:7c:fd:75:db:5e:43:0a:6c:bf:d5:e2:76:c9: 11:76:c9:1c:77:da:30:d4:f0:e6:e2:52:b3:c5:5f: 69:ad:c3:ab:2e:d9:c4:b6:55:f1:32:14:4f:74:66: 52:4b:b1:ac:30:8d:0e:55:91:1f:bf:51:67:67:e2: 3c:ad:70:d7:de:a0:8e:3c:b2:2c:9c:29:16:4a:7a: 28:2d:fc:4f:eb:bd:c6:c4:d3:80:7e:c0:e6:31:f7: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:26:52:C4:97:27:B3:21:A3:90:1F:3C:67:90:D2:50:84:2A:29:C1 X509v3 Authority Key Identifier: keyid:33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/5DF144D4C28811EB8BB7245FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.252.228.0/24 Signature Algorithm: sha256WithRSAEncryption ae:b6:1d:ae:19:96:49:94:9e:f9:5a:98:6e:fd:65:c5:fa:ad: 54:15:67:12:56:a1:e4:b2:ad:f6:d1:6b:1f:3e:26:11:91:61: 07:68:e7:b5:a8:a5:b2:27:64:12:b3:5d:45:8b:9f:50:7a:9f: 75:b2:c4:59:80:60:2f:70:e7:1f:cb:7f:f8:81:b5:f6:9c:9f: 9a:24:26:d2:aa:8c:6e:29:a3:12:a9:90:76:d9:6f:5a:a2:c2: 6a:b2:f2:19:e5:eb:99:cf:54:7f:98:a8:2f:24:9e:38:1d:27: 0d:47:52:b8:49:39:9c:c4:b9:7d:b4:b2:a3:13:63:b0:9f:c6: de:bd:5b:78:e7:35:92:16:ee:77:5f:74:fa:7e:a4:b1:2f:a3: bf:e8:36:82:c7:63:a8:c6:bf:a3:29:72:67:94:56:aa:8f:61: 91:81:d1:e9:32:5c:99:8f:f9:fb:e6:1c:63:64:1a:f0:91:50: 58:63:c4:ae:3a:6c:cc:82:cd:1c:ca:85:d3:4a:df:ec:ae:72: cf:15:aa:59:34:26:52:6c:c5:ad:8f:cb:ed:e4:5a:19:bc:27: d8:66:a7:4d:d9:76:bb:db:3b:ba:ff:b8:b0:01:d7:8f:e4:44: 9c:e1:aa:20:ee:e6:ba:85:7a:0e:7a:95:27:c5:57:ea:17:9f: 58:dd:14:4a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4QzExMTAvBgNVBAUTKDMzOEJENzgxRUQyMUU1REIxNDA1N0IzN0I5MDNBMkE0 MDhFMjQyMDIwHhcNMjQxMTAyMTUyMDUwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2NDM1Mi00Nzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6acFUIZG/MVNpog6v8qTrF1ssOpGok6lWf8HlaTkap5LKG5SBxXxflJysfcB vE92dwY8dBdxIBip7OzCBXZMa9InZSrFcgEBVnt4QazqlxJ1XLM8YK2ekBRWjfY/ LHncOGFIIDWGxYdUhA+LdEBcfamJlr0nuqh35QLsTRvrKHpObs5AS+D1gJBSOlDG 3PDXP/mG0WdufIUuRx8jb+UVxQ6LksmGKnz9ddteQwpsv9XidskRdskcd9ow1PDm 4lKzxV9prcOrLtnEtlXxMhRPdGZSS7GsMI0OVZEfv1FnZ+I8rXDX3qCOPLIsnCkW SnooLfxP673GxNOAfsDmMff0LwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLImUsSX J7Mho5AfPGeQ0lCEKinBMB8GA1UdIwQYMBaAFDOL14HtIeXbFAV7N7kDoqQI4kIC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzhDMS9FNzVBQzI2MjFE OTcxMUUyOEVGODkyODEwOEIwMkNEMi9NNHZYZ2UwaDVkc1VCWHMzdVFPaXBBamlR Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL000dlhnZTBoNWRzVUJYczN1UU9pcEFqaVFnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM4QzEvRTc1QUMyNjIxRDk3MTFFMjhFRjg5MjgxMDhCMDJDRDIvNURGMTQ0RDRD Mjg4MTFFQjhCQjcyNDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB3/OQwDQYJKoZIhvcNAQELBQADggEBAK62Ha4ZlkmUnvla mG79ZcX6rVQVZxJWoeSyrfbRax8+JhGRYQdo57WopbInZBKzXUWLn1B6n3WyxFmA YC9w5x/Lf/iBtfacn5okJtKqjG4poxKpkHbZb1qiwmqy8hnl65nPVH+YqC8knjgd Jw1HUrhJOZzEuX20sqMTY7Cfxt69W3jnNZIW7ndfdPp+pLEvo7/oNoLHY6jGv6Mp cmeUVqqPYZGB0ekyXJmP+fvmHGNkGvCRUFhjxK46bMyCzRzKhdNK3+yucs8Vqlk0 JlJsxa2Py+3kWhm8J9hmp03ZdrvbO7r/uLAB14/kRJzhqiDu5rqFeg56lSfFV+oX n1jdFEo= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org