$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/350E08F41F1C11ECAD024E53C4F9AE02.roa File: 350E08F41F1C11ECAD024E53C4F9AE02.roa (raw, json) Hash identifier: EW08thIKazH50ivTZV2QiZMhcvF6WQ6NKRyvbpYCdvU= Subject key identifier: FF:8C:89:E2:34:17:A2:2D:36:89:6C:92:69:15:75:82:58:B4:47:85 Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 06C5 Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/350E08F41F1C11ECAD024E53C4F9AE02.roa Signing time: Mon 14 Oct 2024 22:52:35 +0000 ROA not before: Mon 14 Oct 2024 22:52:35 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 131196 IP address blocks: 202.36.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Validity Not Before: Oct 14 22:52:35 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=670da0b2-2d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:65:e2:cf:3f:05:18:b0:35:95:74:5a:6b: 09:92:eb:4a:66:6f:a3:83:a6:1c:53:35:77:29:5e: 70:39:86:e0:0d:9b:bf:e1:dd:2d:22:41:b7:39:96: dd:91:ae:70:15:6e:85:03:5a:cb:79:40:df:4e:b5: a0:ad:b5:b6:07:82:75:c0:3d:23:3a:b4:8b:e8:c1: 68:8e:ed:99:0f:06:6a:a6:2f:af:f7:33:91:9d:3f: 15:72:35:4d:d5:53:f2:2d:b6:53:7e:a1:21:ae:89: 91:c1:ef:00:e2:89:d6:63:ca:b5:f5:e6:0f:4f:14: 66:9c:a3:fc:73:d8:2d:cd:27:c5:df:15:f6:b6:76: 8f:3a:7f:0b:83:58:cf:fb:6a:40:2e:4f:f9:13:0b: 86:7e:25:fa:dd:f9:02:56:24:f2:d0:8a:da:6d:b2: c8:da:95:65:ef:73:b1:35:a1:6b:57:50:08:52:a6: 40:7f:4c:ae:6e:ca:5f:f2:f1:eb:53:19:18:c8:75: 1b:55:75:8e:34:59:04:c4:0c:8d:11:e5:c6:d1:43: 57:08:22:b7:a1:31:aa:e2:c4:2e:93:67:78:7c:dd: 45:16:8e:27:05:00:28:30:d3:05:39:9d:13:17:b6: 2c:6e:fb:e6:f9:0e:d3:01:50:dc:2c:a3:fc:f9:2e: 15:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8C:89:E2:34:17:A2:2D:36:89:6C:92:69:15:75:82:58:B4:47:85 X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/350E08F41F1C11ECAD024E53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.36.221.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:79:6e:dc:ca:e3:06:13:56:3a:61:18:12:4f:e7:84:16:f2: 13:1e:6d:be:3c:0c:f6:33:5c:98:96:bd:eb:35:5c:e7:99:5c: c8:d0:1b:0e:bc:ee:bb:79:2f:b6:91:e6:57:87:aa:f4:e1:5d: 0a:27:d8:f3:e0:18:e2:58:0b:30:57:1a:76:f7:bb:e8:31:ab: d4:19:de:70:89:28:01:82:4a:9e:f3:7c:f1:ae:c0:0b:bc:41: a7:68:ac:13:78:6e:f0:a4:2b:70:da:dd:3a:8f:43:a3:c0:59: 83:60:3e:3e:37:d2:42:d6:93:6a:4a:1a:d2:d3:b9:38:f2:a1: 16:94:05:24:3b:e4:d6:3f:7b:80:d9:2c:a0:c5:47:29:4d:83: 4c:17:57:a5:3e:80:e0:92:e3:55:59:59:3c:5a:21:ec:cf:f4: 45:93:0f:ba:63:83:e3:45:21:87:a3:35:a8:60:e3:f8:14:73: 41:c9:e0:8f:22:c4:89:a9:cd:56:5a:29:b4:d7:52:04:0e:6f: e9:b9:70:49:cd:2e:2e:d8:ec:74:42:64:62:da:0c:be:54:e0: b2:79:79:4a:5d:84:c1:22:d4:e3:d7:ed:e9:b2:f4:5f:74:3d: 6d:5b:f6:8b:a6:3a:19:66:01:54:b3:87:07:ab:89:48:20:ab: b8:34:e3:63 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjQxMDE0MjI1MjM1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBkYTBiMi0yZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wtl4s8/BRiwNZV0WmsJkutKZm+jg6YcUzV3KV5wOYbgDZu/4d0tIkG3OZbd ka5wFW6FA1rLeUDfTrWgrbW2B4J1wD0jOrSL6MFoju2ZDwZqpi+v9zORnT8VcjVN 1VPyLbZTfqEhromRwe8A4onWY8q19eYPTxRmnKP8c9gtzSfF3xX2tnaPOn8Lg1jP +2pALk/5EwuGfiX63fkCViTy0IrabbLI2pVl73OxNaFrV1AIUqZAf0yubspf8vHr UxkYyHUbVXWONFkExAyNEeXG0UNXCCK3oTGq4sQuk2d4fN1FFo4nBQAoMNMFOZ0T F7Ysbvvm+Q7TAVDcLKP8+S4VrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP+MieI0 F6ItNolskmkVdYJYtEeFMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvMzUwRTA4RjQx RjFDMTFFQ0FEMDI0RTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKJN0wDQYJKoZIhvcNAQELBQADggEBAF95btzK4wYTVjph GBJP54QW8hMebb48DPYzXJiWves1XOeZXMjQGw687rt5L7aR5leHqvThXQon2PPg GOJYCzBXGnb3u+gxq9QZ3nCJKAGCSp7zfPGuwAu8QadorBN4bvCkK3Da3TqPQ6PA WYNgPj430kLWk2pKGtLTuTjyoRaUBSQ75NY/e4DZLKDFRylNg0wXV6U+gOCS41VZ WTxaIezP9EWTD7pjg+NFIYejNahg4/gUc0HJ4I8ixImpzVZaKbTXUgQOb+m5cEnN Li7Y7HRCZGLaDL5U4LJ5eUpdhMEi1OPX7emy9F90PW1b9oumOhlmAVSzhweriUgg q7g042M= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:38 2024 by rpki-client on console-ams.rpki-client.org