$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/20EC686CFB8211EEAAFD740AC4F9AE02.roa File: 20EC686CFB8211EEAAFD740AC4F9AE02.roa (raw, json) Hash identifier: TWdDCk/ze5A3zb6XluYViknw8QLsVZBoiZbfOGVunJs= Subject key identifier: 4A:6C:EC:DE:E5:D4:F8:66:00:31:F5:9C:22:4F:4B:79:3E:9D:3E:F5 Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 06C6 Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/20EC686CFB8211EEAAFD740AC4F9AE02.roa Signing time: Mon 14 Oct 2024 22:52:35 +0000 ROA not before: Mon 14 Oct 2024 22:52:35 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 133878 IP address blocks: 202.180.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Validity Not Before: Oct 14 22:52:35 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=670da0b3-444a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:38:88:fb:a2:1d:31:6a:85:19:77:3a:70: e2:33:f5:2e:22:0d:93:87:64:82:d0:1b:b0:19:0d: a5:e6:03:ac:89:b3:18:76:b4:fc:22:a7:8d:13:3c: 12:ca:21:ef:b2:12:6b:f6:81:e4:aa:ff:af:91:f4: 23:eb:10:5e:ab:32:6d:13:85:ba:15:ce:42:4f:33: ed:3b:dd:bb:87:66:98:ae:7e:9a:dd:5e:92:29:b6: 74:f8:b8:15:5f:f8:fb:97:6f:a3:d8:72:2c:be:9d: 1a:12:dc:71:f3:b0:59:c0:67:de:cc:e7:45:59:a6: 8d:9a:3e:2f:a7:04:09:15:ed:21:ee:05:5b:10:94: f6:e0:c1:51:54:1d:20:f1:c0:a5:4f:b7:da:2c:ce: 66:9d:32:56:89:f1:2f:02:2b:e9:1a:5c:c5:9c:7d: 5d:9f:8f:09:1b:2d:82:88:94:3b:81:43:bf:a2:89: 80:de:d6:78:d6:65:13:86:3d:80:90:24:35:a1:87: 4d:00:1e:29:85:39:ca:6e:04:68:4a:1f:69:87:73: c0:40:ca:38:18:45:a9:ec:4b:9b:b0:b4:d4:28:1b: 66:75:95:d5:2b:43:d1:b0:df:68:3e:01:09:a3:f3: b2:17:f5:44:97:11:c8:bc:7e:4c:27:a9:4f:a6:aa: 21:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6C:EC:DE:E5:D4:F8:66:00:31:F5:9C:22:4F:4B:79:3E:9D:3E:F5 X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/20EC686CFB8211EEAAFD740AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.180.79.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:60:b1:0f:a9:19:e4:1b:38:49:26:9f:53:b6:1d:0a:30:94: d5:62:9e:9f:52:8f:ea:bf:62:49:f9:91:d4:f4:33:f1:7c:62: bb:ea:95:ee:b0:92:39:e3:7a:81:e5:21:6f:30:5b:ae:c5:75: 73:8e:66:06:a5:d4:1f:0a:9a:e8:b7:52:c1:a7:75:cf:11:38: 48:f7:8e:e0:14:a6:46:77:d7:a0:4b:4a:d5:40:7c:da:eb:7e: 0a:55:af:6c:14:d4:d9:3a:fd:76:99:9a:b3:d4:e9:09:2d:87: c9:ca:a7:cc:48:2e:79:3b:95:6b:21:8c:5d:ea:4d:3e:7b:d6: 2f:46:68:dc:b0:d8:99:b4:25:40:74:9e:c3:73:98:05:b8:64: 13:be:57:88:ea:c0:47:1d:66:0f:ea:1e:fe:eb:5a:14:b8:3d: af:23:f1:20:02:d8:a5:78:96:89:42:d7:8b:0f:59:d6:ac:6a: f3:70:91:dc:f9:06:28:bd:12:a3:75:1a:29:2e:53:86:d8:09: 63:44:12:40:7a:98:92:5e:04:e8:56:ed:27:c1:02:b8:41:7b: ef:d7:87:c0:1f:47:c6:3c:e7:8f:9e:62:0d:4e:8d:7a:5d:f7: 22:19:ff:6b:a2:dc:91:2d:8f:c7:a0:07:c6:2a:bd:4b:78:03: 96:97:cc:6f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjQxMDE0MjI1MjM1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBkYTBiMy00NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscY4iPuiHTFqhRl3OnDiM/UuIg2Th2SC0BuwGQ2l5gOsibMYdrT8IqeNEzwS yiHvshJr9oHkqv+vkfQj6xBeqzJtE4W6Fc5CTzPtO927h2aYrn6a3V6SKbZ0+LgV X/j7l2+j2HIsvp0aEtxx87BZwGfezOdFWaaNmj4vpwQJFe0h7gVbEJT24MFRVB0g 8cClT7faLM5mnTJWifEvAivpGlzFnH1dn48JGy2CiJQ7gUO/oomA3tZ41mUThj2A kCQ1oYdNAB4phTnKbgRoSh9ph3PAQMo4GEWp7EubsLTUKBtmdZXVK0PRsN9oPgEJ o/OyF/VElxHIvH5MJ6lPpqohEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEps7N7l 1PhmADH1nCJPS3k+nT71MB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvMjBFQzY4NkNG QjgyMTFFRUFBRkQ3NDBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKtE8wDQYJKoZIhvcNAQELBQADggEBAH9gsQ+pGeQbOEkm n1O2HQowlNVinp9Sj+q/Ykn5kdT0M/F8Yrvqle6wkjnjeoHlIW8wW67FdXOOZgal 1B8Kmui3UsGndc8ROEj3juAUpkZ316BLStVAfNrrfgpVr2wU1Nk6/XaZmrPU6Qkt h8nKp8xILnk7lWshjF3qTT571i9GaNyw2Jm0JUB0nsNzmAW4ZBO+V4jqwEcdZg/q Hv7rWhS4Pa8j8SAC2KV4lolC14sPWdasavNwkdz5Bii9EqN1GikuU4bYCWNEEkB6 mJJeBOhW7SfBArhBe+/Xh8AfR8Y854+eYg1OjXpd9yIZ/2ui3JEtj8egB8YqvUt4 A5aXzG8= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:38 2024 by rpki-client on console-ams.rpki-client.org