$ rpki-client -vvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/82743A06E2EB11EEBAC73D0CC4F9AE02.roa File: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (raw, json) Hash identifier: y03lKIB42nw4jlkFQ7G75iFQPvcCfwFRDTzAnmoLg+c= Subject key identifier: BE:29:0D:AC:A3:7C:C4:AF:56:83:33:2E:50:06:4D:07:01:C1:A4:21 Certificate issuer: /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Certificate serial: 02 Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/82743A06E2EB11EEBAC73D0CC4F9AE02.roa Signing time: Fri 15 Mar 2024 16:46:03 +0000 ROA not before: Fri 15 Mar 2024 16:46:03 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152646 IP address blocks: 202.50.154.0/24 maxlen: 24 202.50.155.0/24 maxlen: 24 2001:df3:8d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Validity Not Before: Mar 15 16:46:03 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=65f47b4b-f41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:25:62:23:22:94:88:59:e5:94:33:7c:08:60: 3d:7f:ce:c9:59:bc:fe:55:fc:63:89:f5:52:16:2e: e6:58:fd:b9:8e:f9:2e:a4:1a:1b:0e:4e:c8:b6:10: 34:33:4e:ff:7a:81:b4:70:03:e5:6d:70:0d:d7:49: 74:e4:b1:07:2c:f7:0d:87:4c:31:60:96:69:ac:6f: 78:8f:6f:73:30:31:fc:62:c5:b7:e0:87:28:b8:70: 4d:a8:c9:ee:4b:31:ff:67:b3:0b:a5:c5:e1:1c:03: a4:c4:21:7b:38:de:03:c4:d8:c0:09:6d:e4:70:77: 44:27:1e:3c:ba:86:db:ab:ee:7a:f3:52:8a:08:08: 56:f5:86:22:13:04:7a:7d:97:04:67:63:14:67:e4: df:a2:b8:6d:46:22:a2:83:7a:56:10:fd:89:fb:a5: cf:6c:f6:6e:3a:58:7d:66:1a:10:e7:78:b0:2e:98: 56:39:9b:e4:04:15:c3:98:32:c4:b4:6b:b5:d1:2d: 17:ee:0c:34:2e:bb:bc:32:f4:b8:5e:56:bf:a2:2f: 98:39:c2:55:f2:c7:2f:90:cc:7b:5b:3d:4e:90:a9: dc:5f:4d:3f:f5:0b:b8:c2:6d:e7:30:9e:ca:8a:dc: a7:76:35:d6:8a:16:94:2b:9c:55:7f:3f:8c:56:0f: 6f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:29:0D:AC:A3:7C:C4:AF:56:83:33:2E:50:06:4D:07:01:C1:A4:21 X509v3 Authority Key Identifier: keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/82743A06E2EB11EEBAC73D0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.50.154.0/23 IPv6: 2001:df3:8d40::/48 Signature Algorithm: sha256WithRSAEncryption 40:a1:49:5d:87:81:57:74:60:cd:9c:0e:cc:f8:cb:15:4a:5e: a0:bb:4d:a8:26:10:79:9a:c5:12:82:b6:6d:f2:fc:11:03:a8: 01:a0:75:8f:34:cf:b9:dd:82:a2:76:95:c6:9e:10:b2:0e:d5: a7:5d:59:ce:1e:a1:c1:aa:14:6b:10:21:20:01:f7:8b:3d:cc: cf:19:f4:49:01:2b:c6:fd:c0:4a:82:5e:cd:82:1b:78:af:60: 87:a7:71:ea:e0:3e:d6:28:4a:30:0f:9d:42:fb:5f:0d:57:59: 51:ea:62:29:93:d9:14:ef:48:20:9e:cf:ae:99:93:66:5d:0d: 2d:3c:a4:56:3a:ba:a0:4d:d5:e8:f9:24:95:b2:d5:1f:75:c2: 84:8b:dc:cd:e6:c8:b0:d9:9c:42:c4:75:a2:a8:fd:86:b8:2f: e8:9c:d0:19:bf:24:cf:11:e6:c0:6d:f7:7a:a1:76:ee:c3:e5: 63:90:9d:51:c0:47:ff:b4:0c:40:af:39:33:ea:ab:a0:fb:60: d7:67:fe:18:5b:59:a2:02:4d:be:05:b9:00:72:4b:9c:08:cb: 2b:de:fa:d7:1b:6c:0c:9e:50:22:1f:30:01:52:60:f2:a2:96: 19:f6:8d:79:f6:6b:9d:e1:2c:82:cc:e5:57:9c:12:f4:26:ca: f7:8e:21:b7 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NzcyRjExMC8GA1UEBRMoMUJGOTc2RUZFQUIyMzEyRUEyREFDODZCOThBMzk4Q0Yw QzVCRDZGMDAeFw0yNDAzMTUxNjQ2MDNaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZjQ3YjRiLWY0MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5JWIjIpSIWeWUM3wIYD1/zslZvP5V/GOJ9VIWLuZY/bmO+S6kGhsOTsi2EDQz Tv96gbRwA+VtcA3XSXTksQcs9w2HTDFglmmsb3iPb3MwMfxixbfghyi4cE2oye5L Mf9nswulxeEcA6TEIXs43gPE2MAJbeRwd0QnHjy6htur7nrzUooICFb1hiITBHp9 lwRnYxRn5N+iuG1GIqKDelYQ/Yn7pc9s9m46WH1mGhDneLAumFY5m+QEFcOYMsS0 a7XRLRfuDDQuu7wy9LheVr+iL5g5wlXyxy+QzHtbPU6QqdxfTT/1C7jCbecwnsqK 3Kd2NdaKFpQrnFV/P4xWD29zAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUvikNrKN8 xK9WgzMuUAZNBwHBpCEwHwYDVR0jBBgwFoAUG/l27+qyMS6i2shrmKOYzwxb1vAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3NzJGLzFFNzdFNzMyRTJF QjExRUVBRDZFOUEwQkM0RjlBRTAyL0dfbDI3LXF5TVM2aTJzaHJtS09Zend4YjF2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR19sMjctcXlNUzZpMnNocm1LT1l6d3hiMXZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzcyRi8xRTc3RTczMkUyRUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi84Mjc0M0EwNkUy RUIxMUVFQkFDNzNEMENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAcoymjAPBAIAAjAJAwcAIAEN841AMA0GCSqGSIb3DQEBCwUA A4IBAQBAoUldh4FXdGDNnA7M+MsVSl6gu02oJhB5msUSgrZt8vwRA6gBoHWPNM+5 3YKidpXGnhCyDtWnXVnOHqHBqhRrECEgAfeLPczPGfRJASvG/cBKgl7Nght4r2CH p3Hq4D7WKEowD51C+18NV1lR6mIpk9kU70ggns+umZNmXQ0tPKRWOrqgTdXo+SSV stUfdcKEi9zN5siw2ZxCxHWiqP2GuC/onNAZvyTPEebAbfd6oXbuw+VjkJ1RwEf/ tAxArzkz6qug+2DXZ/4YW1miAk2+BbkAckucCMsr3vrXG2wMnlAiHzABUmDyopYZ 9o159mud4SyCzOVXnBL0Jsr3jiG3 -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org