$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/C699F452FDF711E8B5A6725EC4F9AE02.roa File: C699F452FDF711E8B5A6725EC4F9AE02.roa (raw, json) Hash identifier: mdu9JMCWm1VcaEkAvSFDvH8Q8ILUzNJBmUo72/x8o9U= Subject key identifier: 15:95:EA:FC:29:A3:37:41:CC:58:1C:0E:8C:AE:D4:C1:73:61:FA:AC Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653 Certificate serial: 1262 Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/C699F452FDF711E8B5A6725EC4F9AE02.roa Signing time: Sat 10 Aug 2024 17:44:52 +0000 ROA not before: Sat 10 Aug 2024 17:44:52 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 45474 IP address blocks: 122.11.181.0/24 maxlen: 24 122.11.182.0/24 maxlen: 24 122.11.183.0/24 maxlen: 24 122.11.184.0/24 maxlen: 24 122.11.185.0/24 maxlen: 24 122.11.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4706 (0x1262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653 Validity Not Before: Aug 10 17:44:52 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b7a714-1201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ba:a4:55:a0:04:9e:dd:3f:32:74:58:e0:69: c8:3b:9d:e6:d3:51:3e:06:6d:f9:04:0b:3e:a8:2f: 7a:fa:85:d3:de:c3:6f:41:c8:29:71:0a:1c:d5:a8: fe:21:61:3e:86:e0:2a:bb:7c:ad:78:d0:42:cf:da: b4:ed:92:48:cf:36:64:40:8a:1b:fa:4d:57:0b:00: 55:04:d7:2d:02:1e:96:0e:c5:c2:30:68:1f:87:0a: 47:bb:95:49:0f:db:2d:0a:e3:59:b3:c0:7f:ac:84: 88:da:b7:84:ea:4a:15:e2:a6:55:03:5f:86:b8:31: 5c:c1:60:14:a3:45:6b:5b:8c:c4:a6:52:74:ff:ef: c6:f6:b6:3d:f4:43:d0:d1:fc:41:0d:ca:a0:f8:ab: f2:c9:40:34:05:c4:ab:06:fa:b9:d7:1f:ef:a7:fc: 6d:90:e2:7d:e4:07:c7:d2:82:f9:ae:2a:f7:39:84: cd:c8:fa:01:39:1a:72:67:95:e7:84:6c:90:fa:3b: 17:56:5a:b3:f3:6d:98:ef:7b:4b:c2:5d:50:4f:18: bf:ef:0c:ce:b1:ae:a5:ab:8c:b6:38:52:4f:1a:4f: cc:a0:47:b1:a6:9f:2b:2d:c1:42:50:1b:20:a8:bf: f3:6d:e6:c8:8f:81:0a:a9:79:3a:41:7a:b1:54:ab: 9a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:95:EA:FC:29:A3:37:41:CC:58:1C:0E:8C:AE:D4:C1:73:61:FA:AC X509v3 Authority Key Identifier: keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/C699F452FDF711E8B5A6725EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.11.181.0-122.11.186.255 Signature Algorithm: sha256WithRSAEncryption 15:b1:84:c9:97:40:36:ea:c7:64:39:0a:d2:6e:94:4a:06:e4: ce:ff:dc:34:70:0e:7f:15:86:05:4d:bf:39:07:79:92:c9:8b: 16:78:fc:1e:c1:10:75:bb:dc:d2:8c:ed:9d:3e:bb:0c:21:d6: c7:19:bf:29:da:83:44:33:55:30:ab:bc:3b:c6:bb:46:f2:e0: 92:01:9c:8a:e5:a3:00:07:5c:fc:69:d9:8f:01:2a:c0:48:ed: 97:18:7a:32:f2:39:ba:e3:f0:fe:5d:f4:80:c0:21:3c:56:e8: 2e:2d:42:49:e1:e2:35:4a:6e:70:a4:bf:c3:1c:6a:68:6f:2a: 70:bb:ce:56:d2:d5:a8:0e:5a:78:32:89:c3:f8:33:2e:79:b1: 09:d9:df:31:26:ab:8c:30:4f:d5:75:f3:13:29:bc:0c:f5:9c: 2d:6a:91:58:bf:31:3a:c0:e8:da:61:f5:43:37:9f:e6:f2:cd: 88:46:89:6f:c7:08:ee:e2:d8:70:4b:89:83:f2:9c:5a:fe:4c: fa:d5:59:9a:81:e5:5d:56:df:e3:6b:33:ec:2f:83:f8:cb:d3: 6c:69:57:b9:c0:56:70:49:83:f4:c7:7d:d7:8e:54:31:42:b9: 53:63:82:29:72:b5:31:7f:d0:83:8d:9c:d5:ef:79:80:21:d4: b2:73:9e:9d -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICEmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyREMxMTAvBgNVBAUTKEMyQjlGNUYzQzY4QzU3NjcyNzIzOUI5MkE5M0IzNjI5 N0QxQjE2NTMwHhcNMjQwODEwMTc0NDUyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI3YTcxNC0xMjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37qkVaAEnt0/MnRY4GnIO53m01E+Bm35BAs+qC96+oXT3sNvQcgpcQoc1aj+ IWE+huAqu3yteNBCz9q07ZJIzzZkQIob+k1XCwBVBNctAh6WDsXCMGgfhwpHu5VJ D9stCuNZs8B/rISI2reE6koV4qZVA1+GuDFcwWAUo0VrW4zEplJ0/+/G9rY99EPQ 0fxBDcqg+KvyyUA0BcSrBvq51x/vp/xtkOJ95AfH0oL5rir3OYTNyPoBORpyZ5Xn hGyQ+jsXVlqz822Y73tLwl1QTxi/7wzOsa6lq4y2OFJPGk/MoEexpp8rLcFCUBsg qL/zbebIj4EKqXk6QXqxVKuaJQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFBWV6vwp ozdBzFgcDoyu1MFzYfqsMB8GA1UdIwQYMBaAFMK59fPGjFdnJyObkqk7Nil9GxZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJEQy8yRDUxQUY0MkZE M0UxMUU4ODhDNTM5NDRDNEY5QUUwMi93cm4xODhhTVYyY25JNXVTcVRzMktYMGJG bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dybjE4OGFNVjJjbkk1dVNxVHMyS1gwYkZsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDAyREMvMkQ1MUFGNDJGRDNFMTFFODg4QzUzOTQ0QzRGOUFFMDIvQzY5OUY0NTJG REY3MTFFOEI1QTY3MjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAHoLtQMEAHoLujANBgkqhkiG9w0BAQsFAAOCAQEAFbGE yZdANurHZDkK0m6USgbkzv/cNHAOfxWGBU2/OQd5ksmLFnj8HsEQdbvc0oztnT67 DCHWxxm/KdqDRDNVMKu8O8a7RvLgkgGciuWjAAdc/GnZjwEqwEjtlxh6MvI5uuPw /l30gMAhPFboLi1CSeHiNUpucKS/wxxqaG8qcLvOVtLVqA5aeDKJw/gzLnmxCdnf MSarjDBP1XXzEym8DPWcLWqRWL8xOsDo2mH1Qzef5vLNiEaJb8cI7uLYcEuJg/Kc Wv5M+tVZmoHlXVbf42sz7C+D+MvTbGlXucBWcEmD9Md9145UMUK5U2OCKXK1MX/Q g42c1e95gCHUsnOenQ== -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:16 2024 by rpki-client on console-ams.rpki-client.org