$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/EE744ACAD55C11EAA224E026C4F9AE02.roa File: EE744ACAD55C11EAA224E026C4F9AE02.roa (raw, json) Hash identifier: eBFGO12oDTyqo1p6145sG6wYHSIxsBjmKQNKXZiPJ/4= Subject key identifier: 94:3E:C0:E5:EB:30:C6:6B:B7:5B:60:43:C1:74:41:5C:60:CE:80:F5 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 179E Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/EE744ACAD55C11EAA224E026C4F9AE02.roa Signing time: Tue 20 Feb 2024 17:55:36 +0000 ROA not before: Tue 20 Feb 2024 17:55:36 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 45186 IP address blocks: 49.255.255.0/24 maxlen: 24 2402:4600::/40 maxlen: 40 2407:5600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6046 (0x179e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Feb 20 17:55:36 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d4e798-197b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:58:f7:59:63:56:e5:6a:73:31:71:6a:d3:b6: 8e:67:65:67:5f:2e:e2:25:bd:79:c8:e8:f8:28:6f: 0e:79:0b:70:fb:4e:a6:a2:29:d6:f1:2d:cb:68:6c: 66:f3:0b:3b:20:0e:09:a6:46:41:a5:3a:18:a3:83: 18:78:f8:91:76:27:bc:f2:a9:26:4b:a3:3b:bc:5f: 3a:97:34:98:0a:08:2d:32:29:b0:61:9b:23:1b:e1: 3e:4b:85:2e:d5:ad:6c:b6:ee:79:fc:a9:96:2b:3e: 3b:57:1d:0a:b0:55:f5:64:8c:d5:08:41:3f:2c:9c: a0:40:bc:e8:a2:57:db:63:26:b0:6c:97:3f:5f:43: 76:30:54:5b:ad:63:98:51:e0:23:e6:f4:de:1c:6e: ef:bb:b5:2d:db:ee:75:3d:d8:45:1a:11:08:ce:bb: 2d:d1:50:61:87:e1:60:5b:9f:9d:55:ce:43:43:ab: 9e:4e:a9:d5:02:aa:80:d3:c8:22:fb:2e:b9:14:eb: 4c:6a:38:2c:cc:b1:e4:93:7c:6f:2b:05:e6:12:10: 47:ec:48:02:52:d0:23:a5:32:31:53:e7:91:40:f1: 97:95:82:8d:18:62:40:12:1a:18:dc:df:2e:a6:72: 14:d9:70:48:25:be:f0:4d:03:dc:2b:6a:2b:de:a2: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3E:C0:E5:EB:30:C6:6B:B7:5B:60:43:C1:74:41:5C:60:CE:80:F5 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/EE744ACAD55C11EAA224E026C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.255.255.0/24 IPv6: 2402:4600::/40 2407:5600::/32 Signature Algorithm: sha256WithRSAEncryption 5c:d9:e1:09:03:31:04:58:ac:85:00:b9:56:5d:34:24:65:17: be:6d:ca:58:97:9e:41:30:26:2e:5e:90:f5:bf:ec:94:87:27: d6:fc:56:ed:35:63:fa:61:89:f9:e4:ab:5d:55:3a:33:27:98: e2:c7:a4:78:d8:0d:65:74:73:83:57:60:ff:59:50:98:1e:5a: 47:60:b6:18:32:26:a2:5e:d1:50:a6:bb:83:e9:f5:43:b8:15: 90:0a:b7:8a:99:fd:04:76:d9:e6:88:77:c4:de:74:a8:2e:90: 27:14:cf:e4:92:0a:ec:ee:4b:d7:00:30:85:58:ec:d1:f6:5f: 5a:5d:69:04:2f:38:91:22:8b:c6:62:7b:0f:c6:7b:88:42:76: 5e:87:47:e2:17:3d:f5:3a:72:1f:5e:42:fe:d2:e1:e8:37:4c: 48:cf:ca:a8:57:6c:e2:db:1b:66:b8:6f:f3:dc:24:62:61:a3: 95:91:11:b6:ae:5c:a4:b4:97:e2:55:ae:64:03:60:ff:e7:23: 6b:4b:bb:fb:47:69:4b:a6:db:bc:f3:a9:b0:c5:63:02:05:ad: 0c:8c:f4:00:9e:c5:81:cf:d5:b7:e0:ae:4d:ca:91:20:6e:49: 70:81:57:a4:c0:25:36:08:a3:df:88:05:b2:8d:cf:f9:97:f0: 9a:49:2f:25 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICF54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjQwMjIwMTc1NTM2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ0ZTc5OC0xOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1j3WWNW5WpzMXFq07aOZ2VnXy7iJb15yOj4KG8OeQtw+06moinW8S3LaGxm 8ws7IA4JpkZBpToYo4MYePiRdie88qkmS6M7vF86lzSYCggtMimwYZsjG+E+S4Uu 1a1stu55/KmWKz47Vx0KsFX1ZIzVCEE/LJygQLzoolfbYyawbJc/X0N2MFRbrWOY UeAj5vTeHG7vu7Ut2+51PdhFGhEIzrst0VBhh+FgW5+dVc5DQ6ueTqnVAqqA08gi +y65FOtMajgszLHkk3xvKwXmEhBH7EgCUtAjpTIxU+eRQPGXlYKNGGJAEhoY3N8u pnIU2XBIJb7wTQPcK2or3qKAgwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJQ+wOXr MMZrt1tgQ8F0QVxgzoD1MB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvRUU3NDRBQ0FE NTVDMTFFQUEyMjRFMDI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMAwEAgABMAYDBAAx//8wFQQCAAIwDwMGACQCRgAAAwUAJAdWADANBgkqhkiG 9w0BAQsFAAOCAQEAXNnhCQMxBFishQC5Vl00JGUXvm3KWJeeQTAmLl6Q9b/slIcn 1vxW7TVj+mGJ+eSrXVU6MyeY4sekeNgNZXRzg1dg/1lQmB5aR2C2GDImol7RUKa7 g+n1Q7gVkAq3ipn9BHbZ5oh3xN50qC6QJxTP5JIK7O5L1wAwhVjs0fZfWl1pBC84 kSKLxmJ7D8Z7iEJ2XodH4hc99TpyH15C/tLh6DdMSM/KqFds4tsbZrhv89wkYmGj lZERtq5cpLSX4lWuZANg/+cja0u7+0dpS6bbvPOpsMVjAgWtDIz0AJ7Fgc/Vt+Cu TcqRIG5JcIFXpMAlNgij34gFso3P+ZfwmkkvJQ== -----END CERTIFICATE-----Generated at Fri May 31 19:47:54 2024 by rpki-client on console-fra.rpki-client.org