$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D0E/8E714984A35E11E8B41A5878C4F9AE02/29FA7FEE4DA711EF87510A26C4F9AE02.roa File: 29FA7FEE4DA711EF87510A26C4F9AE02.roa (raw, json) Hash identifier: vR+jwlNwQhK5PgtcQNrB4z7ddP0crooveNJwbQmAU1w= Subject key identifier: 8C:3C:3E:B1:9B:A3:71:96:2C:8F:FE:00:71:89:6A:A6:B2:ED:42:3A Certificate issuer: /CN=A9138D0E/serialNumber=8671C967EF80CE3D12DCEA30491B946FD70687C0 Certificate serial: 1310 Authority key identifier: 86:71:C9:67:EF:80:CE:3D:12:DC:EA:30:49:1B:94:6F:D7:06:87:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnHJZ--Azj0S3OowSRuUb9cGh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138D0E/8E714984A35E11E8B41A5878C4F9AE02/29FA7FEE4DA711EF87510A26C4F9AE02.roa Signing time: Mon 29 Jul 2024 12:37:40 +0000 ROA not before: Mon 29 Jul 2024 12:37:40 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134134 IP address blocks: 45.65.58.0/24 maxlen: 24 45.65.59.0/24 maxlen: 24 45.126.253.0/24 maxlen: 24 103.53.24.0/24 maxlen: 24 103.53.25.0/24 maxlen: 24 103.53.26.0/24 maxlen: 24 103.53.27.0/24 maxlen: 24 2404:9f40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138D0E/8E714984A35E11E8B41A5878C4F9AE02/hnHJZ--Azj0S3OowSRuUb9cGh8A.crl rsync://rpki.apnic.net/member_repository/A9138D0E/8E714984A35E11E8B41A5878C4F9AE02/hnHJZ--Azj0S3OowSRuUb9cGh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnHJZ--Azj0S3OowSRuUb9cGh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4880 (0x1310) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138D0E/serialNumber=8671C967EF80CE3D12DCEA30491B946FD70687C0 Validity Not Before: Jul 29 12:37:40 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66a78d14-f61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:2c:3e:5a:84:2a:43:dc:23:10:5b:26:62: 33:47:be:b1:26:9c:d8:f5:e4:81:4d:9d:21:4c:57: cb:86:fe:48:fa:f8:ee:60:de:71:1a:6e:26:75:ab: 9c:f3:93:8b:4f:6a:ef:3e:21:0e:68:65:fe:50:69: 13:98:2e:c9:9c:55:49:2f:e0:b9:6c:42:77:a8:05: 11:cb:2d:04:21:d6:8d:82:3a:bf:62:9c:41:6c:6e: e7:ed:6c:3d:a8:1e:fb:60:de:81:13:44:73:7a:a6: 32:ff:10:47:fe:f6:82:6a:ba:13:34:ec:1d:f6:11: e6:93:ba:7c:f6:b9:f2:d9:07:df:f0:c6:29:7f:23: 65:45:6e:97:87:31:bc:45:41:7e:34:b5:f8:cb:e4: a5:cd:af:fd:7f:bb:b6:c8:ab:d7:d1:3d:1c:fe:79: 7b:1d:85:b5:4c:ca:f3:6a:9b:98:7c:59:ff:60:06: 89:de:16:d1:5b:bb:64:10:7c:99:57:b1:0f:82:26: 6d:19:37:8d:fe:1a:97:94:3c:38:3f:e7:e2:39:d5: ee:d0:dc:8b:b6:28:63:51:10:85:51:8d:74:0a:1f: cf:27:90:72:01:77:82:69:31:40:c4:d4:16:34:91: b2:4d:0f:13:0b:53:de:4e:08:65:95:52:6b:0d:e1: 01:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3C:3E:B1:9B:A3:71:96:2C:8F:FE:00:71:89:6A:A6:B2:ED:42:3A X509v3 Authority Key Identifier: keyid:86:71:C9:67:EF:80:CE:3D:12:DC:EA:30:49:1B:94:6F:D7:06:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138D0E/8E714984A35E11E8B41A5878C4F9AE02/hnHJZ--Azj0S3OowSRuUb9cGh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnHJZ--Azj0S3OowSRuUb9cGh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D0E/8E714984A35E11E8B41A5878C4F9AE02/29FA7FEE4DA711EF87510A26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.65.58.0/23 45.126.253.0/24 103.53.24.0/22 IPv6: 2404:9f40::/32 Signature Algorithm: sha256WithRSAEncryption cc:10:16:24:36:e3:6a:8d:e5:5d:8e:a8:25:b4:fb:f9:c1:68: 0d:eb:1d:c0:45:ca:8c:c0:e9:84:6a:c5:b9:41:ef:be:87:4f: 20:17:03:c6:a4:93:11:b9:a8:64:03:05:7b:7f:dc:6f:8b:9a: dd:51:c4:06:eb:04:0f:23:d3:99:9f:be:a6:02:11:db:90:36: 59:af:df:b4:c1:e9:97:82:10:24:e5:ed:5d:96:24:89:6e:83: 13:b1:3d:03:8b:63:29:62:76:21:82:a9:61:90:27:47:bf:5c: 65:84:4b:38:a4:5e:be:a5:22:c3:16:68:5e:b1:09:c9:0d:19: 48:71:6a:ea:cc:2d:94:5d:63:40:01:c1:b5:f7:6d:0e:28:b2: 00:c7:99:b1:fc:11:b4:33:b6:fb:5e:6f:64:f7:e9:33:58:2f: e9:17:f3:50:7b:1e:4f:82:35:e2:1f:2a:60:aa:cd:d1:eb:69: 0d:3b:79:ab:28:96:c5:ca:68:b5:56:6e:3b:24:1e:ea:2f:61: aa:6a:26:0c:61:f7:28:d8:16:f3:09:14:36:9f:f3:b0:dc:1c: 2a:31:c9:e0:ce:44:38:f5:ce:3f:c5:79:70:2e:90:ca:fb:95: 48:4f:b5:e1:00:73:36:25:fa:7a:f5:47:14:02:0f:5d:5e:e0: f0:31:f6:e9 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICExAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhEMEUxMTAvBgNVBAUTKDg2NzFDOTY3RUY4MENFM0QxMkRDRUEzMDQ5MUI5NDZG RDcwNjg3QzAwHhcNMjQwNzI5MTIzNzQwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE3OGQxNC1mNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpEsPlqEKkPcIxBbJmIzR76xJpzY9eSBTZ0hTFfLhv5I+vjuYN5xGm4mdauc 85OLT2rvPiEOaGX+UGkTmC7JnFVJL+C5bEJ3qAURyy0EIdaNgjq/YpxBbG7n7Ww9 qB77YN6BE0RzeqYy/xBH/vaCaroTNOwd9hHmk7p89rny2Qff8MYpfyNlRW6XhzG8 RUF+NLX4y+Slza/9f7u2yKvX0T0c/nl7HYW1TMrzapuYfFn/YAaJ3hbRW7tkEHyZ V7EPgiZtGTeN/hqXlDw4P+fiOdXu0NyLtihjURCFUY10Ch/PJ5ByAXeCaTFAxNQW NJGyTQ8TC1PeTghllVJrDeEBXwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIw8PrGb o3GWLI/+AHGJaqay7UI6MB8GA1UdIwQYMBaAFIZxyWfvgM49EtzqMEkblG/XBofA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEQwRS84RTcxNDk4NEEz NUUxMUU4QjQxQTU4NzhDNEY5QUUwMi9obkhKWi0tQXpqMFMzT293U1J1VWI5Y0do OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huSEpaLS1BemowUzNPb3dTUnVVYjljR2g4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzhEMEUvOEU3MTQ5ODRBMzVFMTFFOEI0MUE1ODc4QzRGOUFFMDIvMjlGQTdGRUU0 REE3MTFFRjg3NTEwQTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAEtQToDBAAtfv0DBAJnNRgwDQQCAAIwBwMFACQEn0AwDQYJ KoZIhvcNAQELBQADggEBAMwQFiQ242qN5V2OqCW0+/nBaA3rHcBFyozA6YRqxblB 776HTyAXA8akkxG5qGQDBXt/3G+Lmt1RxAbrBA8j05mfvqYCEduQNlmv37TB6ZeC ECTl7V2WJIlugxOxPQOLYylidiGCqWGQJ0e/XGWESzikXr6lIsMWaF6xCckNGUhx aurMLZRdY0ABwbX3bQ4osgDHmbH8EbQztvteb2T36TNYL+kX81B7Hk+CNeIfKmCq zdHraQ07easolsXKaLVWbjskHuovYapqJgxh9yjYFvMJFDaf87DcHCoxyeDORDj1 zj/FeXAukMr7lUhPteEAczYl+nr1RxQCD11e4PAx9uk= -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org