$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/A8051CC4508011EF81053074C4F9AE02.roa File: A8051CC4508011EF81053074C4F9AE02.roa (raw, json) Hash identifier: KDME76LGlQ6SZ/HJc0igxu2MnypBi5lr/MXedI9Hydk= Subject key identifier: FA:BB:00:29:A0:E3:F0:9E:1F:40:B8:9B:09:CC:CE:C0:1A:8E:24:32 Certificate issuer: /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Certificate serial: 0D Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/A8051CC4508011EF81053074C4F9AE02.roa Signing time: Fri 02 Aug 2024 03:38:18 +0000 ROA not before: Fri 02 Aug 2024 03:38:18 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 132087 IP address blocks: 203.29.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Validity Not Before: Aug 2 03:38:18 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66ac54a9-f4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:31:05:24:ff:79:6a:ea:a3:0b:62:ae:84: df:71:fe:74:c4:c1:b6:5b:26:3f:95:46:82:34:d3: c9:89:e4:4e:d3:ff:a2:ce:9e:67:90:42:7b:ee:bb: a3:fc:9d:eb:64:0a:b3:c7:61:7d:f7:23:88:67:10: 50:7c:3a:6d:1d:21:bd:2e:10:74:7c:32:a7:34:d7: 87:07:50:af:7a:7f:be:b4:f5:5c:85:27:1d:4e:65: ad:b5:ed:b7:e7:40:52:c8:ea:e9:06:9e:63:4c:82: e0:20:d4:9d:ed:53:56:d2:f2:b1:3a:bb:e2:f9:ce: 20:1b:20:d9:fc:55:fa:d0:f4:fb:65:15:cb:e9:de: 82:b6:66:e6:38:8a:7a:ea:9b:5d:2f:4f:de:f3:6e: 29:f7:96:41:2a:75:92:a2:b9:4b:37:a6:0d:93:c0: 18:b4:ac:c9:bb:c9:5f:18:60:87:0b:3d:72:e9:59: 33:cd:76:8b:72:ca:46:0d:de:d0:cc:4d:68:92:62: 61:d1:c8:02:2f:db:fa:3b:9d:da:c7:9e:5b:c2:1d: 65:79:99:fe:ba:0a:5a:00:9a:46:26:70:f1:b3:16: b2:a9:61:ea:b1:88:ee:92:33:32:6f:1b:da:bb:29: 34:57:12:6b:8f:42:54:f2:71:63:c4:ed:e0:15:7f: 17:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BB:00:29:A0:E3:F0:9E:1F:40:B8:9B:09:CC:CE:C0:1A:8E:24:32 X509v3 Authority Key Identifier: keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/A8051CC4508011EF81053074C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.29.68.0/24 Signature Algorithm: sha256WithRSAEncryption 96:28:89:a4:f7:1e:37:11:11:53:32:c0:9e:3d:29:fa:2f:41: bf:66:c7:e0:61:f7:6e:c2:77:1d:24:45:d3:e6:d8:66:cc:72: 3d:9d:e4:de:99:b4:08:dd:7f:15:82:11:72:1c:08:d4:37:71: 69:c3:ab:a5:db:15:39:13:69:bf:42:dc:d2:6f:f9:83:ad:b4: df:bf:cf:65:8a:84:1b:57:11:83:44:04:63:fe:9c:70:e2:fa: 01:5f:8e:af:f3:f1:23:53:38:fc:ce:45:7f:d8:df:ef:25:03: 22:6f:3e:6f:85:05:7f:0e:9f:6d:4e:d6:0a:b8:00:39:63:8c: 5a:f3:3b:c0:13:96:46:cb:4c:c2:1b:83:88:dc:56:f6:76:d1: a5:c5:26:86:de:f0:6c:02:9c:22:42:49:8a:6e:0e:c8:72:74: 21:70:00:0b:df:30:b9:d8:70:8a:36:38:fd:7e:d5:ee:c1:86: b1:f1:f3:2d:c3:d4:50:54:e3:11:08:97:1c:d4:02:99:73:24: 54:77:02:f5:0b:01:8b:21:f8:25:5c:cc:03:7a:80:29:88:d5: ad:7a:03:7f:32:e6:64:1b:5e:dd:d2:1d:a1:93:f1:aa:ca:cf: f7:ff:cb:a0:4e:38:34:fd:0e:a6:4d:40:e3:ae:cb:7a:ff:a8: 20:2e:d3:d8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjJFMjExMC8GA1UEBRMoMjEyNjFCODk3NDk4OTNDM0IzMTg0MUI5NkZFM0ZCNjMy MzAzMkYxODAeFw0yNDA4MDIwMzM4MThaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YWM1NGE5LWY0ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+1zEFJP95auqjC2KuhN9x/nTEwbZbJj+VRoI008mJ5E7T/6LOnmeQQnvuu6P8 netkCrPHYX33I4hnEFB8Om0dIb0uEHR8Mqc014cHUK96f7609VyFJx1OZa217bfn QFLI6ukGnmNMguAg1J3tU1bS8rE6u+L5ziAbINn8VfrQ9PtlFcvp3oK2ZuY4inrq m10vT97zbin3lkEqdZKiuUs3pg2TwBi0rMm7yV8YYIcLPXLpWTPNdotyykYN3tDM TWiSYmHRyAIv2/o7ndrHnlvCHWV5mf66CloAmkYmcPGzFrKpYeqxiO6SMzJvG9q7 KTRXEmuPQlTycWPE7eAVfxfhAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU+rsAKaDj 8J4fQLibCczOwBqOJDIwHwYDVR0jBBgwFoAUISYbiXSYk8OzGEG5b+P7YyMDLxgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGMkUyL0M1QjZCOTM2NDQw NDExRUZCOUE2MkMwREM0RjlBRTAyL0lTWWJpWFNZazhPekdFRzViLVA3WXlNREx4 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVNZYmlYU1lrOE96R0VHNWItUDdZeU1ETHhnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJFMi9DNUI2QjkzNjQ0MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9BODA1MUNDNDUw ODAxMUVGODEwNTMwNzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsdRDANBgkqhkiG9w0BAQsFAAOCAQEAliiJpPceNxERUzLA nj0p+i9Bv2bH4GH3bsJ3HSRF0+bYZsxyPZ3k3pm0CN1/FYIRchwI1DdxacOrpdsV ORNpv0Lc0m/5g62037/PZYqEG1cRg0QEY/6ccOL6AV+Or/PxI1M4/M5Ff9jf7yUD Im8+b4UFfw6fbU7WCrgAOWOMWvM7wBOWRstMwhuDiNxW9nbRpcUmht7wbAKcIkJJ im4OyHJ0IXAAC98wudhwijY4/X7V7sGGsfHzLcPUUFTjEQiXHNQCmXMkVHcC9QsB iyH4JVzMA3qAKYjVrXoDfzLmZBte3dIdoZPxqsrP9//LoE44NP0Opk1A467Lev+o IC7T2A== -----END CERTIFICATE-----Generated at Tue Sep 17 07:38:14 2024 by rpki-client on console-fra.rpki-client.org