$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/29D56C5E4A0F11EFB99F7B7BC4F9AE02.roa File: 29D56C5E4A0F11EFB99F7B7BC4F9AE02.roa (raw, json) Hash identifier: FJfM7lHWuMbjUgjiTLJuLcB9K95fakyegv7eUmJxfBY= Subject key identifier: D1:96:1C:79:D1:63:97:C6:21:EC:FA:47:65:2A:67:DA:7F:E5:73:54 Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: B5 Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/29D56C5E4A0F11EFB99F7B7BC4F9AE02.roa Signing time: Wed 24 Jul 2024 23:03:43 +0000 ROA not before: Wed 24 Jul 2024 23:03:43 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152300 IP address blocks: 36.50.18.0/23 maxlen: 31 2001:df3:51c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Validity Not Before: Jul 24 23:03:43 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66a1884f-163a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:2c:40:3c:40:41:5b:d3:bb:35:b8:48:23: 16:8d:7d:4e:84:3c:1b:b4:2b:0b:52:c6:e4:5a:01: 57:7e:cf:39:65:f1:1d:93:20:53:92:86:81:c4:43: 12:48:2e:01:e5:36:4e:9d:5e:01:b7:c4:f2:20:f2: 77:48:14:12:f6:7b:db:13:5f:59:94:d3:3b:b3:55: 1e:9c:ff:ec:fd:6b:73:d1:92:72:2b:33:4f:2f:41: de:37:fa:46:32:e5:ab:a8:f7:99:19:4e:5d:90:bb: 3d:3f:bf:d1:e7:2a:80:ff:18:ab:43:ba:ad:23:32: 71:33:87:bc:84:7b:fd:62:14:27:66:24:63:d6:56: b8:c5:70:0b:df:b1:7e:2d:80:a4:27:d9:ab:97:40: c6:97:a8:a2:40:ef:68:77:5f:9a:f0:c0:9b:ed:a0: 0b:72:e2:6d:fb:9e:2f:32:5c:68:82:95:9d:bb:52: bd:48:23:44:61:3c:57:9d:07:1a:58:10:67:ff:87: 35:58:47:f8:a5:da:13:23:88:23:26:92:5c:e7:43: c2:85:5d:61:20:f8:34:1f:de:97:87:eb:a4:6f:e7: ab:f8:71:89:41:48:8b:da:2a:5a:1e:b3:fd:7b:7a: d4:91:b1:a8:fe:9b:10:b2:8a:52:62:28:34:e4:e3: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:96:1C:79:D1:63:97:C6:21:EC:FA:47:65:2A:67:DA:7F:E5:73:54 X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/29D56C5E4A0F11EFB99F7B7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.18.0/23 IPv6: 2001:df3:51c0::/48 Signature Algorithm: sha256WithRSAEncryption 27:5a:ad:14:46:96:79:f1:0c:48:ea:63:22:2b:c5:8e:fb:46: 38:4d:4c:d5:7f:91:8b:9b:ab:80:aa:a6:e6:d5:09:4e:a9:f7: 03:63:10:fd:1a:49:7f:67:04:7c:7a:bd:91:65:98:c1:87:ad: b3:5a:c8:c1:f5:4e:5d:f6:23:14:c4:f8:fa:19:e2:6e:2a:56: 18:2c:f2:9e:69:81:6d:14:89:9f:70:7b:62:5d:8e:8f:36:7e: 14:22:e7:4b:93:d4:1c:2a:43:54:a6:1a:6c:0e:89:37:84:0d: 87:45:c4:d7:bd:67:69:26:65:71:c5:e0:67:4d:66:3d:84:07: 97:05:fa:e5:5b:61:ec:04:06:db:65:0c:45:b6:ab:38:a4:08: 28:06:80:78:ba:36:cc:b8:6c:56:82:a4:72:d4:4b:15:a2:30: 04:37:d0:9a:ba:1b:45:70:d4:45:5c:63:9a:8f:54:66:d9:e6: 48:7b:8f:02:f2:ee:70:55:65:25:37:be:27:09:e9:9e:b8:3d: 29:78:b9:5f:d7:31:08:43:95:6c:e3:45:79:45:dc:47:eb:10: 95:82:95:ef:70:00:72:f9:1e:7b:d9:3e:5b:9a:0d:bf:af:5a: b1:66:bc:05:3e:49:25:4c:e4:4d:23:05:6e:d0:c4:e5:94:96: f0:09:97:c9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjQwNzI0MjMwMzQzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmExODg0Zi0xNjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzEsQDxAQVvTuzW4SCMWjX1OhDwbtCsLUsbkWgFXfs85ZfEdkyBTkoaBxEMS SC4B5TZOnV4Bt8TyIPJ3SBQS9nvbE19ZlNM7s1UenP/s/Wtz0ZJyKzNPL0HeN/pG MuWrqPeZGU5dkLs9P7/R5yqA/xirQ7qtIzJxM4e8hHv9YhQnZiRj1la4xXAL37F+ LYCkJ9mrl0DGl6iiQO9od1+a8MCb7aALcuJt+54vMlxogpWdu1K9SCNEYTxXnQca WBBn/4c1WEf4pdoTI4gjJpJc50PChV1hIPg0H96Xh+ukb+er+HGJQUiL2ipaHrP9 e3rUkbGo/psQsopSYig05ONUMQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNGWHHnR Y5fGIez6R2UqZ9p/5XNUMB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBEMDcvRDNFODg5RDQ4RTdGMTFFRThFOTdCNDg0QzRGOUFFMDIvMjlENTZDNUU0 QTBGMTFFRkI5OUY3QjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAEkMhIwDwQCAAIwCQMHACABDfNRwDANBgkqhkiG9w0BAQsF AAOCAQEAJ1qtFEaWefEMSOpjIivFjvtGOE1M1X+Ri5urgKqm5tUJTqn3A2MQ/RpJ f2cEfHq9kWWYwYets1rIwfVOXfYjFMT4+hnibipWGCzynmmBbRSJn3B7Yl2OjzZ+ FCLnS5PUHCpDVKYabA6JN4QNh0XE171naSZlccXgZ01mPYQHlwX65Vth7AQG22UM RbarOKQIKAaAeLo2zLhsVoKkctRLFaIwBDfQmrobRXDURVxjmo9UZtnmSHuPAvLu cFVlJTe+Jwnpnrg9KXi5X9cxCEOVbONFeUXcR+sQlYKV73AAcvkee9k+W5oNv69a sWa8BT5JJUzkTSMFbtDE5ZSW8AmXyQ== -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:52 2024 by rpki-client on console-fra.rpki-client.org