$ rpki-client -vvf rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/5F114FB2C28811EB8BB7245FC4F9AE02.roa File: 5F114FB2C28811EB8BB7245FC4F9AE02.roa (raw, json) Hash identifier: pXEz96c+FVbRFmjMAW4nQjRzz8DkZXAExn9Bfi/pywo= Subject key identifier: 95:D0:15:C0:00:7B:F3:FA:88:B3:95:23:6C:9B:02:A9:13:0A:D3:BA Certificate issuer: /CN=A91E38C1/serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202 Certificate serial: 3455 Authority key identifier: 33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/5F114FB2C28811EB8BB7245FC4F9AE02.roa Signing time: Sat 02 Nov 2024 15:20:51 +0000 ROA not before: Sat 02 Nov 2024 15:20:51 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9731 IP address blocks: 119.252.225.0/24 maxlen: 24 119.252.226.0/24 maxlen: 24 119.252.227.0/24 maxlen: 24 119.252.229.0/24 maxlen: 24 119.252.230.0/24 maxlen: 24 119.252.231.0/24 maxlen: 24 119.252.232.0/24 maxlen: 24 119.252.233.0/24 maxlen: 24 119.252.234.0/24 maxlen: 24 119.252.235.0/24 maxlen: 24 119.252.236.0/24 maxlen: 24 119.252.237.0/24 maxlen: 24 119.252.238.0/24 maxlen: 24 119.252.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.crl rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13397 (0x3455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E38C1/serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202 Validity Not Before: Nov 2 15:20:51 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67264353-1e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5e:c7:39:bc:71:5b:47:02:15:6b:da:64:3c: eb:bc:41:66:61:e0:18:5d:97:ac:f2:51:47:1b:05: 2c:6f:e6:ee:fa:8d:fd:20:63:88:fe:34:7c:ee:7d: f9:28:15:bf:ac:6c:66:36:fd:5d:90:f6:1c:43:27: 73:cf:c6:0a:32:f9:23:74:e9:02:a9:a8:2e:99:bf: 10:d7:f6:b0:24:ad:52:05:c8:cb:74:88:1d:13:b7: 3a:3e:69:c0:24:5a:aa:99:cd:c3:35:b3:80:6d:57: d3:6e:72:67:37:e8:6b:33:39:c6:23:e9:2a:62:35: 9a:75:a8:73:54:71:a7:51:c5:3f:c0:83:d3:32:ad: 44:94:6a:16:7a:21:41:d0:76:d1:1c:5f:db:d6:5a: cc:2b:02:80:d4:94:b8:7d:b2:05:52:aa:4b:13:3a: a7:ed:4d:25:f9:f6:c2:a6:36:b5:26:6e:0e:f6:ce: ba:e4:25:59:0a:33:03:a6:7a:a0:29:0d:b4:ea:de: b9:42:71:1a:b0:ab:4a:84:93:8c:b6:f3:63:31:90: fc:be:ec:b3:23:45:46:74:6b:bc:36:10:b6:6b:42: 76:50:3f:51:c2:c0:44:d5:b3:04:bb:39:b2:c6:c7: cb:25:43:a2:8f:44:69:fb:32:f9:17:40:e8:49:30: a0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D0:15:C0:00:7B:F3:FA:88:B3:95:23:6C:9B:02:A9:13:0A:D3:BA X509v3 Authority Key Identifier: keyid:33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/5F114FB2C28811EB8BB7245FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.252.225.0-119.252.227.255 119.252.229.0-119.252.239.255 Signature Algorithm: sha256WithRSAEncryption 8b:1a:08:3a:8c:d3:22:31:6d:ac:b3:dc:98:cd:59:89:ea:ff: 97:ca:22:07:12:39:01:46:e6:f7:be:92:be:c5:ba:59:77:9e: 03:90:77:ef:bf:d9:23:fa:7b:80:7c:52:91:f2:72:3b:50:93: 8c:60:71:d1:b1:08:23:8f:eb:6d:38:34:d4:29:be:87:c1:3a: 01:cd:b6:b5:31:30:0a:2d:7a:a9:41:d7:32:66:1c:b6:f4:3e: 6f:b2:bd:23:77:4a:d3:14:2f:4c:07:fb:1d:a1:9e:b6:65:b7: 4f:6f:c0:3d:b2:94:ca:34:e2:ce:14:6c:44:fa:ce:4c:18:53: ff:7b:df:6b:a7:5b:ce:47:29:86:82:10:c5:c9:da:5f:90:ba: 97:03:6e:96:b6:a4:dd:ed:4d:46:c8:56:94:d2:4e:87:14:24: 46:6d:ef:cc:a2:39:d7:4c:a6:88:2c:7b:74:9d:bf:24:c5:4e: f0:49:71:99:0a:0a:7f:24:30:07:72:1a:42:54:88:02:51:97: 1a:7b:cb:86:c9:f0:b0:b4:ae:be:4b:e1:76:bd:ea:83:52:18: b4:91:49:a9:8f:57:60:e3:20:e5:0a:74:0e:6d:27:b1:67:66: 26:32:e6:cd:08:29:ea:d9:3b:b1:b2:cc:1d:73:e9:66:18:4d: e1:49:4f:c1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICNFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4QzExMTAvBgNVBAUTKDMzOEJENzgxRUQyMUU1REIxNDA1N0IzN0I5MDNBMkE0 MDhFMjQyMDIwHhcNMjQxMTAyMTUyMDUxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2NDM1My0xZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnF7HObxxW0cCFWvaZDzrvEFmYeAYXZes8lFHGwUsb+bu+o39IGOI/jR87n35 KBW/rGxmNv1dkPYcQydzz8YKMvkjdOkCqagumb8Q1/awJK1SBcjLdIgdE7c6PmnA JFqqmc3DNbOAbVfTbnJnN+hrMznGI+kqYjWadahzVHGnUcU/wIPTMq1ElGoWeiFB 0HbRHF/b1lrMKwKA1JS4fbIFUqpLEzqn7U0l+fbCpja1Jm4O9s665CVZCjMDpnqg KQ206t65QnEasKtKhJOMtvNjMZD8vuyzI0VGdGu8NhC2a0J2UD9RwsBE1bMEuzmy xsfLJUOij0Rp+zL5F0DoSTCgXQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFJXQFcAA e/P6iLOVI2ybAqkTCtO6MB8GA1UdIwQYMBaAFDOL14HtIeXbFAV7N7kDoqQI4kIC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzhDMS9FNzVBQzI2MjFE OTcxMUUyOEVGODkyODEwOEIwMkNEMi9NNHZYZ2UwaDVkc1VCWHMzdVFPaXBBamlR Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL000dlhnZTBoNWRzVUJYczN1UU9pcEFqaVFnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM4QzEvRTc1QUMyNjIxRDk3MTFFMjhFRjg5MjgxMDhCMDJDRDIvNUYxMTRGQjJD Mjg4MTFFQjhCQjcyNDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEAHf84QMEAnf84DAMAwQAd/zlAwQEd/zgMA0GCSqGSIb3 DQEBCwUAA4IBAQCLGgg6jNMiMW2ss9yYzVmJ6v+XyiIHEjkBRub3vpK+xbpZd54D kHfvv9kj+nuAfFKR8nI7UJOMYHHRsQgjj+ttODTUKb6HwToBzba1MTAKLXqpQdcy Zhy29D5vsr0jd0rTFC9MB/sdoZ62ZbdPb8A9spTKNOLOFGxE+s5MGFP/e99rp1vO RymGghDFydpfkLqXA26WtqTd7U1GyFaU0k6HFCRGbe/MojnXTKaILHt0nb8kxU7w SXGZCgp/JDAHchpCVIgCUZcae8uGyfCwtK6+S+F2veqDUhi0kUmpj1dg4yDlCnQO bSexZ2YmMubNCCnq2Tuxsswdc+lmGE3hSU/B -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:05 2024 by rpki-client on console-ams.rpki-client.org