$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa File: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (raw, json) Hash identifier: +kGit6QP9EC8on4uBAyo05LK37M52pka8uD91XBHy+Y= Subject key identifier: AA:36:10:3B:0D:36:3E:7E:05:9D:27:A5:E7:6B:91:AF:5D:1D:91:9D Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 0621 Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa Signing time: Mon 14 Oct 2024 22:52:31 +0000 ROA not before: Mon 14 Oct 2024 22:52:31 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 56068 IP address blocks: 131.203.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Oct 14 22:52:31 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=670da0af-0da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:19:53:ea:5c:82:eb:eb:ef:85:c0:0e:e8: 1e:e0:d7:72:b6:b4:8b:36:55:89:05:b2:97:5e:68: 66:fa:9d:25:c9:84:52:d9:ce:64:f2:88:05:9b:fb: f9:da:03:ef:ac:f9:13:f1:4d:2b:c5:c6:7a:9d:77: b3:d9:13:f8:05:19:7c:55:3a:da:be:8b:4c:11:1a: 1f:e5:91:04:bc:40:68:e9:06:36:f5:2d:22:7f:d4: 97:46:5e:ea:a4:b3:d8:ce:61:61:6b:8e:17:bb:c1: b8:ab:20:dc:47:ce:b9:5a:56:3b:b1:06:2c:c9:29: c6:01:45:49:19:66:81:18:f2:a4:46:43:ed:e5:76: e6:46:55:8b:8e:0a:c7:2a:ab:5a:33:31:e9:85:07: 13:fc:5c:72:da:9a:2d:6b:66:24:ac:21:c9:70:e0: 29:9b:c0:4c:54:19:6b:68:4f:37:b8:8f:62:4f:ab: 80:2b:f0:2c:69:11:38:87:5d:e8:ee:99:3f:11:cf: c3:3d:b0:ad:64:d5:e6:5d:4e:2c:75:8a:3d:ca:5c: 2a:95:d0:b7:07:65:fe:08:a9:2b:ca:5c:84:2e:df: 8f:11:6a:29:83:eb:13:d3:3d:49:f7:df:19:7c:a0: 37:58:1b:cd:87:1b:24:ee:7a:33:52:f2:96:73:fe: 92:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:36:10:3B:0D:36:3E:7E:05:9D:27:A5:E7:6B:91:AF:5D:1D:91:9D X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 131.203.76.0/23 Signature Algorithm: sha256WithRSAEncryption 93:d5:9e:7e:6c:fb:95:0e:07:1d:72:d0:30:48:45:a9:bf:1b: 4c:d2:20:32:02:fa:82:44:26:fe:2c:48:66:e2:ae:0e:24:39: 3c:09:97:af:6a:0a:32:08:7f:15:35:c2:f9:30:5f:5e:93:22: 78:a7:55:20:6e:26:79:62:a4:d3:f5:fc:bd:3d:bd:03:22:e6: 43:68:97:fd:5c:8e:3c:4f:53:45:ae:1b:2e:18:8b:97:84:1f: 62:48:1c:32:2a:f2:ed:b1:7d:17:26:5b:97:35:e9:51:37:0f: 87:3f:b0:10:19:03:28:67:7d:f1:9c:41:6e:14:f1:89:d9:d0: 55:ce:69:70:53:9b:e0:2d:10:c7:37:d1:40:0e:52:eb:54:e8: 31:57:f1:3e:cc:61:b0:11:85:c0:6c:f2:c1:be:8a:16:cf:02: 43:3a:9d:39:00:25:77:03:d1:be:c5:3f:97:5e:b9:cd:2e:a1: 29:a0:8a:ba:d9:30:70:e8:85:fb:00:66:5c:96:f0:e6:c4:e4: 0d:87:74:a2:5f:c5:84:d9:8a:04:4e:95:72:39:50:ef:d3:a7: 7c:34:85:cb:00:5e:3e:38:1f:f6:eb:1c:b6:ba:e7:3c:8a:11: fb:82:d9:c6:0c:88:72:a6:6a:bd:40:49:84:b5:47:ae:e7:db: 7d:36:79:3a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjQxMDE0MjI1MjMxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBkYTBhZi0wZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttUZU+pcguvr74XADuge4NdytrSLNlWJBbKXXmhm+p0lyYRS2c5k8ogFm/v5 2gPvrPkT8U0rxcZ6nXez2RP4BRl8VTravotMERof5ZEEvEBo6QY29S0if9SXRl7q pLPYzmFha44Xu8G4qyDcR865WlY7sQYsySnGAUVJGWaBGPKkRkPt5XbmRlWLjgrH KqtaMzHphQcT/Fxy2pota2YkrCHJcOApm8BMVBlraE83uI9iT6uAK/AsaRE4h13o 7pk/Ec/DPbCtZNXmXU4sdYo9ylwqldC3B2X+CKkrylyELt+PEWopg+sT0z1J998Z fKA3WBvNhxsk7nozUvKWc/6STQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKo2EDsN Nj5+BZ0npedrka9dHZGdMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvODY1OEU0NjY4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvRUNGMkI1QThB NzJCMTFFREFDM0RBNTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGDy0wwDQYJKoZIhvcNAQELBQADggEBAJPVnn5s+5UOBx1y 0DBIRam/G0zSIDIC+oJEJv4sSGbirg4kOTwJl69qCjIIfxU1wvkwX16TIninVSBu JnlipNP1/L09vQMi5kNol/1cjjxPU0WuGy4Yi5eEH2JIHDIq8u2xfRcmW5c16VE3 D4c/sBAZAyhnffGcQW4U8YnZ0FXOaXBTm+AtEMc30UAOUutU6DFX8T7MYbARhcBs 8sG+ihbPAkM6nTkAJXcD0b7FP5deuc0uoSmgirrZMHDohfsAZlyW8ObE5A2HdKJf xYTZigROlXI5UO/Tp3w0hcsAXj44H/brHLa65zyKEfuC2cYMiHKmar1ASYS1R67n 2302eTo= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:24 2024 by rpki-client on console-fra.rpki-client.org