$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7DFD24A0A69D11ED970A2E1EC4F9AE02.roa File: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (raw, json) Hash identifier: UXLNG/TKlOwe92B54U28A9vIc0yRc2k66x6iSMWRkzk= Subject key identifier: 75:02:BC:E8:CE:04:E2:63:EC:12:01:09:23:14:8A:A9:AC:0E:9A:30 Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 061E Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7DFD24A0A69D11ED970A2E1EC4F9AE02.roa Signing time: Mon 14 Oct 2024 22:52:28 +0000 ROA not before: Mon 14 Oct 2024 22:52:28 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 16625 IP address blocks: 131.203.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Oct 14 22:52:28 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=670da0ab-e97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3b:1a:31:41:c4:dd:c4:b7:b9:06:c2:67:47: ce:7a:22:0b:ac:3d:60:96:2e:0c:ac:2d:32:8b:e6: 27:2b:2d:02:e8:f7:c4:da:a1:ba:28:df:3f:9c:7c: 18:06:c5:b1:3b:3a:0b:1e:c4:1a:c7:e2:2e:3f:1a: fd:ca:dd:fe:60:56:5f:21:64:e9:25:49:fe:68:57: 2d:fa:38:0c:64:97:eb:96:25:1a:bd:2b:43:9d:7b: a1:d1:df:4d:8d:4b:76:14:f8:b6:20:59:87:b8:fd: 61:f7:54:11:6a:df:d4:4d:d2:2d:ce:24:c4:15:99: 97:39:99:2a:14:06:62:31:5e:45:89:9d:81:b7:25: 9c:bb:cd:0f:78:5f:09:c8:ae:49:54:ed:ab:ef:10: 13:24:b3:94:bb:04:25:6c:f5:89:db:63:c7:94:ce: 1d:96:dd:63:82:ff:88:f3:43:dd:c6:51:40:cf:71: b6:cf:e7:3e:8d:fb:c4:74:6e:06:34:df:26:69:08: e2:a6:58:a8:b7:6e:f3:fb:48:8b:6e:0d:6e:e8:80: ff:ca:69:6c:f9:d2:ea:9c:cf:bd:60:9a:0d:f8:e8: 35:ca:fd:89:8b:ac:fc:9e:28:de:3b:8b:f5:0c:32: 19:05:e6:79:be:bd:4a:24:1a:00:ce:b2:4f:86:b8: 99:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:02:BC:E8:CE:04:E2:63:EC:12:01:09:23:14:8A:A9:AC:0E:9A:30 X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7DFD24A0A69D11ED970A2E1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 131.203.4.0/22 Signature Algorithm: sha256WithRSAEncryption 87:d6:c5:81:60:b7:b0:d3:25:10:0f:4e:3f:13:c3:1f:d2:64: 9b:f1:c3:83:3e:30:7d:5b:d4:7d:f7:f5:8c:97:d4:d1:f0:46: c7:60:ff:e3:4f:9b:e8:a3:5c:7e:44:fa:3e:12:38:a4:45:88: 49:47:51:5d:b2:5a:50:9d:cf:3c:54:36:53:af:c5:68:da:24: 68:98:62:52:f7:00:a7:17:b1:86:8c:3a:f6:96:7d:1c:8c:b3: 41:2a:c9:7b:86:c8:ca:78:fe:25:18:37:ae:f5:2b:0f:49:30: 68:ea:aa:53:0e:27:f0:fc:dc:50:1c:b9:00:1a:4a:1f:51:fb: 11:fb:59:28:f6:44:56:74:15:ee:27:a1:3f:da:9b:c5:b1:32: 46:09:3c:95:b4:ea:79:a5:1b:57:cc:38:12:24:5d:a9:a1:34: e7:ec:c0:0f:c6:45:df:7e:71:fd:cd:f0:c2:0c:b4:98:10:a4: 97:52:01:be:cd:37:a4:db:0f:e0:29:c2:9b:5e:80:78:48:10: f4:54:25:c8:d0:15:f3:03:f3:d0:c4:67:b2:29:81:65:af:9b: 88:38:30:aa:92:09:bb:a8:8c:f8:bd:b6:72:f4:35:da:98:a4: b8:eb:e0:4a:97:35:0e:35:53:04:1c:4e:c8:9c:ff:c2:cc:73: d7:45:a6:90 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjQxMDE0MjI1MjI4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBkYTBhYi1lOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DsaMUHE3cS3uQbCZ0fOeiILrD1gli4MrC0yi+YnKy0C6PfE2qG6KN8/nHwY BsWxOzoLHsQax+IuPxr9yt3+YFZfIWTpJUn+aFct+jgMZJfrliUavStDnXuh0d9N jUt2FPi2IFmHuP1h91QRat/UTdItziTEFZmXOZkqFAZiMV5FiZ2BtyWcu80PeF8J yK5JVO2r7xATJLOUuwQlbPWJ22PHlM4dlt1jgv+I80PdxlFAz3G2z+c+jfvEdG4G NN8maQjipliot27z+0iLbg1u6ID/ymls+dLqnM+9YJoN+Og1yv2Ji6z8nijeO4v1 DDIZBeZ5vr1KJBoAzrJPhriZcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHUCvOjO BOJj7BIBCSMUiqmsDpowMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvODY1OEU0NjY4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvN0RGRDI0QTBB NjlEMTFFRDk3MEEyRTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKDywQwDQYJKoZIhvcNAQELBQADggEBAIfWxYFgt7DTJRAP Tj8Twx/SZJvxw4M+MH1b1H339YyX1NHwRsdg/+NPm+ijXH5E+j4SOKRFiElHUV2y WlCdzzxUNlOvxWjaJGiYYlL3AKcXsYaMOvaWfRyMs0EqyXuGyMp4/iUYN671Kw9J MGjqqlMOJ/D83FAcuQAaSh9R+xH7WSj2RFZ0Fe4noT/am8WxMkYJPJW06nmlG1fM OBIkXamhNOfswA/GRd9+cf3N8MIMtJgQpJdSAb7NN6TbD+ApwptegHhIEPRUJcjQ FfMD89DEZ7IpgWWvm4g4MKqSCbuojPi9tnL0NdqYpLjr4EqXNQ41UwQcTsic/8LM c9dFppA= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:38 2024 by rpki-client on console-ams.rpki-client.org