$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa File: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (raw, json) Hash identifier: 1z83FO4GtKRx6NJ1zk8GB6hRpxtXT/R6CtAHYUkaqdA= Subject key identifier: DD:EF:CD:4E:1A:9F:72:60:1D:E4:1F:AA:59:06:58:17:B8:A2:17:72 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 07F9 Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa Signing time: Mon 26 Aug 2024 21:30:00 +0000 ROA not before: Mon 26 Aug 2024 21:30:00 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 31898 IP address blocks: 202.173.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Aug 26 21:30:00 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ccf3d8-548d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:b7:88:ba:94:05:4a:f6:24:7b:63:ef:de: f9:6c:2f:bf:c8:16:06:f8:5d:6e:5b:9c:86:71:33: de:37:35:c9:95:6b:93:bd:c8:fd:4e:7a:0e:ce:a1: 37:da:ea:76:8b:9b:e8:98:de:73:fd:bf:ed:3c:b8: 99:a7:31:d4:d3:8b:42:38:0e:23:a9:cb:e0:a1:78: 6f:fe:98:1e:b6:c1:0e:f9:b5:a6:4f:2b:75:32:31: 9a:ba:31:44:98:88:eb:4b:21:f2:09:32:a2:93:0f: f9:a2:c8:6c:82:01:c6:c2:9a:f4:96:83:1f:98:46: 00:6e:f8:6a:35:70:65:8a:81:a3:8f:c9:28:89:90: d6:f9:4f:43:e1:52:48:1e:d9:1f:86:6d:79:c4:1e: 24:1e:5c:16:80:cf:61:00:cb:54:ff:d9:9d:fb:23: a9:be:df:54:e3:30:9e:d8:6e:77:19:e6:6e:47:d1: e7:4a:13:0c:fe:10:80:c1:2f:27:0e:f5:bc:24:09: dd:12:2e:5a:69:cf:51:de:35:fa:90:f6:78:54:50: 5e:e6:c5:ba:bd:27:e7:72:94:43:5e:d2:b8:00:73: 5f:1f:5e:0a:8d:7e:1f:79:44:79:68:ad:26:23:13: 57:60:88:dd:10:fc:60:5d:e6:3e:bd:4f:7c:ae:be: 71:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EF:CD:4E:1A:9F:72:60:1D:E4:1F:AA:59:06:58:17:B8:A2:17:72 X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.173.27.0/24 Signature Algorithm: sha256WithRSAEncryption a1:50:87:f0:1b:55:e6:21:85:77:b0:54:77:34:94:4f:b2:7b: 4a:1e:b5:ac:33:7f:e8:c5:f8:94:c4:5a:f9:c8:50:f1:54:2e: 8c:0d:c3:fc:98:b8:cc:e9:19:8a:26:44:ab:8d:09:5b:3e:56: 1d:a4:79:a7:40:e6:be:80:ad:76:8c:38:fa:c4:dc:fd:c6:86: 1f:4a:ff:54:9e:71:1e:37:b6:ab:f3:0e:01:3b:0f:6b:b8:81: a4:12:1d:5c:42:98:ff:17:89:1d:72:0d:26:2b:00:2c:d4:b6: 30:67:f3:f5:f3:76:6a:08:a3:09:b6:c6:0c:4d:7d:e8:40:00: bf:b5:13:f7:67:7e:73:8c:e5:8c:98:88:07:b2:f9:48:0f:dc: c8:84:4e:aa:a3:07:f4:fb:3c:de:c7:a2:e3:fa:42:b0:d1:35: d1:e7:03:5b:cd:38:b8:32:f4:69:c8:96:bd:9d:4a:2b:30:af: ae:80:1b:a1:c0:b5:d4:b1:93:73:fe:ea:3e:06:2a:b1:50:21: a8:0c:11:f8:1e:bb:0f:bd:3c:41:97:5f:ac:ee:b7:b1:cd:00: 70:4d:06:6a:5f:b4:da:24:8e:71:dc:72:2b:67:30:90:cd:9c: 6d:43:45:09:96:15:05:8e:6e:bd:bc:2f:f0:fb:7c:72:70:83: 67:27:a8:65 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjQwODI2MjEzMDAwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNjZjNkOC01NDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApd23iLqUBUr2JHtj7975bC+/yBYG+F1uW5yGcTPeNzXJlWuTvcj9TnoOzqE3 2up2i5vomN5z/b/tPLiZpzHU04tCOA4jqcvgoXhv/pgetsEO+bWmTyt1MjGaujFE mIjrSyHyCTKikw/5oshsggHGwpr0loMfmEYAbvhqNXBlioGjj8koiZDW+U9D4VJI Htkfhm15xB4kHlwWgM9hAMtU/9md+yOpvt9U4zCe2G53GeZuR9HnShMM/hCAwS8n DvW8JAndEi5aac9R3jX6kPZ4VFBe5sW6vSfncpRDXtK4AHNfH14KjX4feUR5aK0m IxNXYIjdEPxgXeY+vU98rr5xJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN3vzU4a n3JgHeQfqlkGWBe4ohdyMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIyNDEvNEY3Qjk4NjZDNUY3MTFFQUJBOUQyMDgxQzRGOUFFMDIvNUZFOTdCNUEx REI5MTFFRjlDOTRFQjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKrRswDQYJKoZIhvcNAQELBQADggEBAKFQh/AbVeYhhXew VHc0lE+ye0oetawzf+jF+JTEWvnIUPFULowNw/yYuMzpGYomRKuNCVs+Vh2keadA 5r6ArXaMOPrE3P3Ghh9K/1SecR43tqvzDgE7D2u4gaQSHVxCmP8XiR1yDSYrACzU tjBn8/XzdmoIowm2xgxNfehAAL+1E/dnfnOM5YyYiAey+UgP3MiETqqjB/T7PN7H ouP6QrDRNdHnA1vNOLgy9GnIlr2dSiswr66AG6HAtdSxk3P+6j4GKrFQIagMEfge uw+9PEGXX6zut7HNAHBNBmpftNokjnHccitnMJDNnG1DRQmWFQWObr28L/D7fHJw g2cnqGU= -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:38 2024 by rpki-client on console-fra.rpki-client.org