$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/5D58A6368CBD11EFBA479615C4F9AE02.roa File: 5D58A6368CBD11EFBA479615C4F9AE02.roa (raw, json) Hash identifier: fQEPggKeUXGb8ZTYlH41koJENtuHoAxNSC/aql+imTE= Subject key identifier: 40:08:A2:60:85:51:F4:EA:EA:9F:63:C4:3F:98:D5:A1:32:4F:DC:E7 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: 05 Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/5D58A6368CBD11EFBA479615C4F9AE02.roa Signing time: Thu 17 Oct 2024 19:32:47 +0000 ROA not before: Thu 17 Oct 2024 19:32:47 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 132804 IP address blocks: 27.109.104.0/22 maxlen: 22 103.2.105.0/24 maxlen: 24 103.2.106.0/24 maxlen: 24 2404:e600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Oct 17 19:32:47 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6711665f-c0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dd:7c:78:d2:3a:e8:b8:8b:0d:40:52:ad:99: ef:bb:99:4f:46:a4:11:b5:ab:89:88:c9:13:4e:8f: c0:60:c0:c1:87:1d:d2:2b:2c:8f:fb:94:25:d1:7d: 37:66:92:d1:c4:f8:e8:02:79:3d:85:1e:83:5f:f6: 6b:99:75:58:d2:bf:42:d1:d9:80:26:48:d2:b6:4b: 9c:de:d2:0e:53:44:99:1c:61:39:2d:f7:2e:59:0e: 8f:de:5d:e4:a7:cb:dc:52:67:15:21:54:9a:0d:9f: c5:3d:5d:9d:cf:d0:99:86:73:48:ee:78:94:91:2d: b3:1d:68:33:f1:85:6c:52:e9:8c:ca:7d:87:37:50: 7b:5b:cb:cf:0d:b4:92:27:d4:f4:eb:44:69:bf:47: eb:fc:46:09:6c:09:80:ba:7b:dc:e5:c6:00:62:bd: 8f:bf:11:1d:83:d3:6e:7b:a8:eb:ea:7e:b8:07:7d: 63:0f:ae:01:ea:e4:ff:23:74:fb:4b:7d:8f:7a:79: f8:33:9e:9d:99:eb:d6:92:ac:16:46:44:46:58:d1: 3d:b1:27:3e:f1:a4:c3:91:f8:62:61:60:3f:32:3f: 06:f6:75:51:4a:84:b8:16:b0:d9:3c:c8:a0:4a:72: 2a:1d:40:bb:2a:51:d7:63:81:d8:b8:0f:00:b9:3f: d1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:08:A2:60:85:51:F4:EA:EA:9F:63:C4:3F:98:D5:A1:32:4F:DC:E7 X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/5D58A6368CBD11EFBA479615C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.109.104.0/22 103.2.105.0-103.2.106.255 IPv6: 2404:e600::/48 Signature Algorithm: sha256WithRSAEncryption 77:d1:a2:f2:a9:c5:b2:92:c4:f5:72:13:6b:41:6c:55:69:28: 44:c3:27:e3:02:6d:cc:f5:d2:a8:ec:00:11:71:25:fa:74:8c: ea:bd:df:cd:6a:0d:8f:6e:5e:02:75:8f:6e:bf:88:d4:fe:b0: 1d:31:76:31:0d:30:87:27:5c:eb:74:f5:47:da:19:4e:16:17: 1a:32:94:bb:0b:76:d1:ec:4c:eb:c0:5f:c3:74:c7:e8:c7:d6: eb:3b:2a:43:70:f9:1e:db:e3:c4:6f:bc:d1:ae:66:5a:9a:36: ac:18:ed:9a:4f:b0:bb:9b:2c:81:90:55:4e:75:f2:c1:08:dd: 38:86:55:d4:01:d3:ab:35:45:e8:e7:bf:3b:ec:6b:b6:03:43: 91:b3:84:8c:9f:c3:6e:dd:6c:fb:41:3c:87:99:50:35:ca:a4: 56:59:e2:35:72:48:a6:b5:e2:f3:db:25:68:14:31:04:c6:41: 7c:73:15:a9:58:84:20:92:a1:a2:74:ca:1b:4f:49:07:e2:82: 4f:97:bc:17:8d:33:53:7b:76:e9:77:31:d8:d3:c3:d6:0c:46: 51:d6:ff:ee:f3:0b:85:2f:09:83:ae:30:b2:62:3d:a4:ca:8a: 0c:6b:f0:de:b2:50:2a:e7:6e:ef:b2:06:d4:4f:01:bb:12:93: 3c:99:cc:4e -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF REZBRjExMC8GA1UEBRMoMEU2NjNDQjQ5MDBFRjREODIyRjk5QUJERTI3RkE0MDNB QjlGNEM0MDAeFw0yNDEwMTcxOTMyNDdaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MTE2NjVmLWMwYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj3Xx40jrouIsNQFKtme+7mU9GpBG1q4mIyRNOj8BgwMGHHdIrLI/7lCXRfTdm ktHE+OgCeT2FHoNf9muZdVjSv0LR2YAmSNK2S5ze0g5TRJkcYTkt9y5ZDo/eXeSn y9xSZxUhVJoNn8U9XZ3P0JmGc0jueJSRLbMdaDPxhWxS6YzKfYc3UHtby88NtJIn 1PTrRGm/R+v8RglsCYC6e9zlxgBivY+/ER2D0257qOvqfrgHfWMPrgHq5P8jdPtL fY96efgznp2Z69aSrBZGREZY0T2xJz7xpMOR+GJhYD8yPwb2dVFKhLgWsNk8yKBK ciodQLsqUddjgdi4DwC5P9G9AgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUQAiiYIVR 9Orqn2PEP5jVoTJP3OcwHwYDVR0jBBgwFoAUDmY8tJAO9Ngi+Zq94n+kA6ufTEAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVERkFGLzk3QkU5MzBFOENC QzExRUZCRjIyMDAxMkM0RjlBRTAyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRF QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRG1ZOHRKQU85TmdpLVpxOTRuLWtBNnVmVEVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REZBRi85N0JFOTMwRThDQkMxMUVGQkYyMjAwMTJDNEY5QUUwMi81RDU4QTYzNjhD QkQxMUVGQkE0Nzk2MTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA+BggrBgEFBQcBBwEB/wQv MC0wGgQCAAEwFAMEAhttaDAMAwQAZwJpAwQAZwJqMA8EAgACMAkDBwAkBOYAAAAw DQYJKoZIhvcNAQELBQADggEBAHfRovKpxbKSxPVyE2tBbFVpKETDJ+MCbcz10qjs ABFxJfp0jOq9381qDY9uXgJ1j26/iNT+sB0xdjENMIcnXOt09UfaGU4WFxoylLsL dtHsTOvAX8N0x+jH1us7KkNw+R7b48RvvNGuZlqaNqwY7ZpPsLubLIGQVU518sEI 3TiGVdQB06s1Rejnvzvsa7YDQ5GzhIyfw27dbPtBPIeZUDXKpFZZ4jVySKa14vPb JWgUMQTGQXxzFalYhCCSoaJ0yhtPSQfigk+XvBeNM1N7dul3MdjTw9YMRlHW/+7z C4UvCYOuMLJiPaTKigxr8N6yUCrnbu+yBtRPAbsSkzyZzE4= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org