$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/38502DA2029A11EB85BD7B84C4F9AE02.roa File: 38502DA2029A11EB85BD7B84C4F9AE02.roa (raw, json) Hash identifier: MTInpOnl0k5cHzk/mQ2WeCDrev/aJl9yGIcBSOBrAww= Subject key identifier: 7C:B0:4E:84:A4:B7:8D:DE:2F:96:17:93:EA:11:C2:92:A0:E1:5E:E8 Certificate issuer: /CN=A912DFBA/serialNumber=AE4E30CC0D0501A5AE664ADB159053ACECF0ACFD Certificate serial: 06DB Authority key identifier: AE:4E:30:CC:0D:05:01:A5:AE:66:4A:DB:15:90:53:AC:EC:F0:AC:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/38502DA2029A11EB85BD7B84C4F9AE02.roa Signing time: Thu 04 Apr 2024 23:32:26 +0000 ROA not before: Thu 04 Apr 2024 23:32:26 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 56098 IP address blocks: 202.127.210.0/24 maxlen: 24 202.127.211.0/24 maxlen: 24 2001:df0:fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.crl rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFBA/serialNumber=AE4E30CC0D0501A5AE664ADB159053ACECF0ACFD Validity Not Before: Apr 4 23:32:26 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660f388a-277b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6c:06:6d:a8:b2:00:9b:6b:d3:92:25:50:49: 4b:27:20:27:18:75:23:da:9c:f0:7e:7f:73:32:3f: 1e:c9:1a:ad:72:b7:20:04:47:b0:a3:a3:0c:b0:5c: 8a:93:a1:33:a3:1a:04:b4:c2:28:d4:58:a1:7b:b1: e2:3a:0e:12:d1:7b:59:cd:e8:80:3a:88:97:e0:f8: 56:1c:a1:ee:ff:ae:2a:1e:7c:ee:68:62:41:d4:5e: f5:42:41:0f:a2:72:1c:79:10:27:c5:05:1f:a0:08: 49:01:61:ae:71:7f:3c:79:e7:98:ab:4d:1a:f4:64: 97:7a:96:a1:60:b6:7d:6c:50:a5:86:69:18:7b:c1: aa:1f:c1:6b:a2:45:b4:a0:06:b5:70:7a:2c:f2:70: b8:51:72:71:0c:d9:0c:a1:2d:4c:17:12:20:1b:f5: 97:35:91:6d:72:0e:ca:e4:16:a0:e6:b0:5f:28:90: 2c:8d:a5:86:0d:82:c9:24:42:1e:05:74:43:ca:9c: 04:e8:71:c6:0e:be:4d:e7:e3:a8:3e:c9:33:2d:03: 4f:50:d2:38:c8:03:2e:8c:4b:eb:3a:a6:5f:0f:de: f3:8a:d7:d6:1e:62:81:38:a9:10:b8:eb:82:fc:0c: 8a:d7:ae:1b:8e:96:41:7d:6f:da:ee:9c:e8:ac:9a: c4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B0:4E:84:A4:B7:8D:DE:2F:96:17:93:EA:11:C2:92:A0:E1:5E:E8 X509v3 Authority Key Identifier: keyid:AE:4E:30:CC:0D:05:01:A5:AE:66:4A:DB:15:90:53:AC:EC:F0:AC:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/38502DA2029A11EB85BD7B84C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.127.210.0/23 IPv6: 2001:df0:fe::/48 Signature Algorithm: sha256WithRSAEncryption af:36:35:63:3f:48:2c:98:84:f7:71:7f:da:09:67:be:85:64: 19:38:e8:cb:6a:f5:d7:31:a7:32:75:02:4f:de:ef:6c:ed:16: 20:9c:7a:1d:b7:da:37:9b:04:3d:7b:d7:0b:5b:ed:a5:d5:85: 0e:54:07:a8:c1:9b:03:98:13:49:93:92:ed:24:ac:7d:75:6f: b7:0a:f9:b6:31:b0:fa:fd:ed:b9:cc:23:fb:bd:1e:cc:83:c5: 5a:65:52:25:66:a8:6f:3d:a7:68:61:ed:7c:eb:a7:a4:96:67: 41:71:b5:35:b0:be:bb:7c:48:8b:ac:22:fb:31:96:93:24:cb: 25:e7:1a:7a:54:cd:48:1f:06:f8:b8:48:4d:2d:56:3e:ab:5f: bf:af:d3:65:c4:08:6d:9b:6d:02:b8:ab:f8:0f:98:78:a7:3a: d4:b2:c7:5a:3e:97:ca:ac:76:13:2d:f5:0b:e5:23:e5:0b:05: 70:ed:91:b3:ae:9e:14:72:e0:0d:06:bc:c5:97:ab:8f:1f:ed: 1f:3e:8a:57:e9:05:b3:43:ba:68:c7:a9:64:24:2a:ad:eb:23: e5:e8:0e:c0:c9:d6:db:69:95:ff:53:52:e6:7d:ac:d1:c0:64: 84:94:71:66:60:da:05:92:18:30:38:44:78:22:ad:53:fa:08: 3b:1c:ee:b7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGQkExMTAvBgNVBAUTKEFFNEUzMENDMEQwNTAxQTVBRTY2NEFEQjE1OTA1M0FD RUNGMEFDRkQwHhcNMjQwNDA0MjMzMjI2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBmMzg4YS0yNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGwGbaiyAJtr05IlUElLJyAnGHUj2pzwfn9zMj8eyRqtcrcgBEewo6MMsFyK k6EzoxoEtMIo1Fihe7HiOg4S0XtZzeiAOoiX4PhWHKHu/64qHnzuaGJB1F71QkEP onIceRAnxQUfoAhJAWGucX88eeeYq00a9GSXepahYLZ9bFClhmkYe8GqH8FrokW0 oAa1cHos8nC4UXJxDNkMoS1MFxIgG/WXNZFtcg7K5Bag5rBfKJAsjaWGDYLJJEIe BXRDypwE6HHGDr5N5+OoPskzLQNPUNI4yAMujEvrOqZfD97zitfWHmKBOKkQuOuC /AyK164bjpZBfW/a7pzorJrE1QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHywToSk t43eL5YXk+oRwpKg4V7oMB8GA1UdIwQYMBaAFK5OMMwNBQGlrmZK2xWQU6zs8Kz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZCQS9EQjlDRTY3ODAy OTgxMUVCOTgyM0FFODJDNEY5QUUwMi9yazR3ekEwRkFhV3Vaa3JiRlpCVHJPendy UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrNHd6QTBGQWFXdVprcmJGWkJUck96d3JQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRGQkEvREI5Q0U2NzgwMjk4MTFFQjk4MjNBRTgyQzRGOUFFMDIvMzg1MDJEQTIw MjlBMTFFQjg1QkQ3Qjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHKf9IwDwQCAAIwCQMHACABDfAA/jANBgkqhkiG9w0BAQsF AAOCAQEArzY1Yz9ILJiE93F/2glnvoVkGTjoy2r11zGnMnUCT97vbO0WIJx6Hbfa N5sEPXvXC1vtpdWFDlQHqMGbA5gTSZOS7SSsfXVvtwr5tjGw+v3tucwj+70ezIPF WmVSJWaobz2naGHtfOunpJZnQXG1NbC+u3xIi6wi+zGWkyTLJecaelTNSB8G+LhI TS1WPqtfv6/TZcQIbZttArir+A+YeKc61LLHWj6Xyqx2Ey31C+Uj5QsFcO2Rs66e FHLgDQa8xZerjx/tHz6KV+kFs0O6aMepZCQqresj5egOwMnW22mV/1NS5n2s0cBk hJRxZmDaBZIYMDhEeCKtU/oIOxzutw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org