$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/2784EDACA73711ED85D58D3CC4F9AE02.roa File: 2784EDACA73711ED85D58D3CC4F9AE02.roa (raw, json) Hash identifier: iDlwO8/8Ph0EoA5ZBqWyPAyfuWpI/ZETLqFI9zfRAno= Subject key identifier: EE:01:F1:C9:ED:1E:53:5F:C7:EA:D9:6D:1B:11:D0:55:1D:7D:E5:CA Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 06D3 Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/2784EDACA73711ED85D58D3CC4F9AE02.roa Signing time: Mon 14 Oct 2024 22:52:47 +0000 ROA not before: Mon 14 Oct 2024 22:52:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 56030 IP address blocks: 60.234.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Validity Not Before: Oct 14 22:52:47 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=670da0bf-60bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:61:10:4d:c4:6d:0a:8c:23:c9:37:2d:c4: d8:e9:c1:ef:c4:e5:6d:30:1b:97:3b:87:23:29:aa: 8f:65:98:f3:09:bc:f3:0c:6e:0e:16:bc:42:8f:32: b6:54:f1:c2:a8:a4:ad:5f:03:8b:99:af:0b:12:fe: 8c:30:75:0c:7a:66:fc:b0:00:69:e5:9c:3f:70:0c: e8:0f:51:9d:8e:9d:ec:48:61:23:14:70:3f:3f:17: 8a:c1:01:c0:a9:45:71:f4:b7:47:db:e8:38:cc:bf: 04:24:b8:59:ca:4f:53:9f:5d:c0:33:ff:e0:d2:3e: 10:6b:2d:1a:59:24:f3:67:8a:94:29:51:db:de:a2: cf:9f:86:c5:8b:23:8b:28:cd:6d:10:78:be:0b:55: aa:24:3c:70:79:9c:08:22:2d:fc:0b:80:a7:d9:04: d6:fe:10:a2:77:b0:b0:81:da:2e:4b:0e:ec:0d:63: 76:0e:90:41:25:b6:34:5a:0c:76:a6:f3:f3:6b:7f: b6:e3:cc:1a:76:27:32:73:48:c0:57:7c:30:77:27: 8e:7a:6e:3b:e0:cb:02:f2:62:08:d3:04:18:fc:e9: 60:42:b7:a5:8b:db:36:e1:df:e6:e9:82:c4:2f:3b: 4a:65:4c:1e:75:2d:da:e9:46:02:2e:8e:66:fb:c9: 10:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:01:F1:C9:ED:1E:53:5F:C7:EA:D9:6D:1B:11:D0:55:1D:7D:E5:CA X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/2784EDACA73711ED85D58D3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 60.234.73.0/24 Signature Algorithm: sha256WithRSAEncryption b3:10:95:96:92:0e:aa:9c:c7:eb:83:3f:d3:0a:06:ad:71:e0: 70:a9:c2:6e:9b:96:f0:e0:ef:02:3c:5a:74:c5:74:35:da:b1: 4d:a2:a4:f8:59:4d:05:7b:b0:48:76:5b:0c:42:da:7c:8c:bf: 58:7b:e9:6f:af:f1:c6:18:bc:a9:62:7d:4a:2d:33:36:d9:71: a0:9e:4c:3d:be:68:fd:4e:b1:7a:e9:f2:0d:41:77:05:0f:48: 4b:1e:db:bf:c2:60:03:55:fc:32:f4:bd:ec:a4:42:ea:77:c5: b3:a7:80:61:62:16:78:c0:fe:85:f0:c9:55:a6:0f:64:86:04: 8c:b6:a8:42:98:47:5c:4e:46:e1:2c:47:ea:66:7e:36:97:b6: d8:53:89:70:5e:20:56:26:a2:88:02:bb:32:92:2a:b5:36:d2: 4e:b1:91:f1:85:be:8c:04:ee:17:99:4c:cb:b8:d2:74:9d:40: 23:b2:8b:3c:b7:28:cb:21:80:b3:0c:88:35:a2:e2:53:4f:0e: 17:b7:f5:77:e4:5b:8f:41:86:ca:98:fd:15:08:df:2d:bd:ce: 9e:7b:62:5e:72:7e:c3:3b:fd:56:a7:79:99:4c:f7:2c:aa:14: 70:1d:f8:9b:99:d9:6d:87:84:3f:69:e3:8c:26:97:04:ba:8b: 17:61:9b:2a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjQxMDE0MjI1MjQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBkYTBiZi02MGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4thEE3EbQqMI8k3LcTY6cHvxOVtMBuXO4cjKaqPZZjzCbzzDG4OFrxCjzK2 VPHCqKStXwOLma8LEv6MMHUMemb8sABp5Zw/cAzoD1Gdjp3sSGEjFHA/PxeKwQHA qUVx9LdH2+g4zL8EJLhZyk9Tn13AM//g0j4Qay0aWSTzZ4qUKVHb3qLPn4bFiyOL KM1tEHi+C1WqJDxweZwIIi38C4Cn2QTW/hCid7CwgdouSw7sDWN2DpBBJbY0Wgx2 pvPza3+248wadicyc0jAV3wwdyeOem474MsC8mII0wQY/OlgQreli9s24d/m6YLE LztKZUwedS3a6UYCLo5m+8kQ4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFO4B8cnt HlNfx+rZbRsR0FUdfeXKMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvMjc4NEVEQUNB NzM3MTFFRDg1RDU4RDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA86kkwDQYJKoZIhvcNAQELBQADggEBALMQlZaSDqqcx+uD P9MKBq1x4HCpwm6blvDg7wI8WnTFdDXasU2ipPhZTQV7sEh2WwxC2nyMv1h76W+v 8cYYvKlifUotMzbZcaCeTD2+aP1OsXrp8g1BdwUPSEse27/CYANV/DL0veykQup3 xbOngGFiFnjA/oXwyVWmD2SGBIy2qEKYR1xORuEsR+pmfjaXtthTiXBeIFYmoogC uzKSKrU20k6xkfGFvowE7heZTMu40nSdQCOyizy3KMshgLMMiDWi4lNPDhe39Xfk W49BhsqY/RUI3y29zp57Yl5yfsM7/VaneZlM9yyqFHAd+JuZ2W2HhD9p44wmlwS6 ixdhmyo= -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:44 2024 by rpki-client on console-fra.rpki-client.org