$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E5AA11C2974A11EFAE16EC38C4F9AE02.roa File: E5AA11C2974A11EFAE16EC38C4F9AE02.roa (raw, json) Hash identifier: 67cynDrHjcrNqy/qzpnHKK3xdYQ/vQM5T0XMdvRvbBg= Subject key identifier: 1A:EB:80:3A:29:EF:D5:E8:E9:0A:63:CE:A0:0F:B8:3C:D7:E5:A9:57 Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Certificate serial: 2778 Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E5AA11C2974A11EFAE16EC38C4F9AE02.roa Signing time: Thu 31 Oct 2024 05:42:21 +0000 ROA not before: Thu 31 Oct 2024 05:42:21 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 38539 IP address blocks: 116.93.52.0/24 maxlen: 24 116.93.61.0/24 maxlen: 24 116.93.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10104 (0x2778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Validity Not Before: Oct 31 05:42:21 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=672318bd-dba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:60:95:49:d0:e8:92:be:61:9a:24:73:8e: 76:65:b6:f2:9c:ae:14:68:e7:30:69:fc:01:6a:4e: b9:47:26:cc:02:8f:81:15:5e:0b:23:3c:c9:a6:18: 96:fa:d8:f6:c6:88:b3:db:2b:26:7e:aa:62:68:54: da:16:ac:e5:ec:ea:c8:48:58:3a:18:d5:91:42:a0: 76:de:f1:9c:83:c1:e6:8d:89:1f:09:de:e9:76:89: 44:c0:a2:42:35:d2:9b:68:96:70:2b:13:02:10:06: d7:2a:40:85:07:22:c2:f7:ed:03:90:12:6d:61:ae: bc:2c:aa:84:14:26:b1:9b:4f:b5:b6:8e:ad:f1:b2: 7e:39:b8:09:00:5f:42:83:c8:d8:6a:01:7b:fa:6c: 45:99:b3:ab:fa:e8:2c:fc:3c:17:dd:98:f7:e7:3f: ec:52:f9:17:ac:51:70:81:d1:8a:54:74:d2:21:b9: 7c:23:8e:fa:89:fb:48:05:15:8a:42:96:63:1b:4d: 7a:6a:cc:0f:01:e0:ce:da:0a:0a:e8:12:7a:06:21: 0f:12:d4:25:41:01:c1:03:9b:86:a2:53:19:bc:ad: 46:18:ac:47:16:e8:1a:a3:e3:d3:da:24:0b:83:b1: cc:e7:34:d3:26:b1:a0:62:0f:ed:32:01:1f:0a:69: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EB:80:3A:29:EF:D5:E8:E9:0A:63:CE:A0:0F:B8:3C:D7:E5:A9:57 X509v3 Authority Key Identifier: keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E5AA11C2974A11EFAE16EC38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.93.52.0/24 116.93.61.0-116.93.62.255 Signature Algorithm: sha256WithRSAEncryption 6d:f1:68:d0:50:2d:11:18:96:60:8a:c6:0a:0b:98:07:f4:51: 95:93:56:45:ec:01:3b:09:64:5e:1a:92:db:b3:57:6c:ce:f7: 90:02:2d:d1:cf:34:ad:d2:cb:8b:fe:f4:fd:98:50:79:6f:f7: cd:e4:7d:03:66:8b:68:a4:dc:3d:79:78:bc:3b:ed:88:a8:91: a4:f1:0e:f8:9d:28:e9:95:4c:4d:0c:79:a3:34:c4:ed:cc:c4: ce:8e:28:08:d4:3c:4d:d4:0f:45:f1:e1:96:ca:16:41:00:48: 07:50:b0:a5:b6:4f:d3:07:2f:09:32:0a:f6:02:b8:db:72:ee: 56:47:b3:78:ae:aa:53:f5:e0:73:ae:44:c1:f3:73:d4:e8:45: 46:24:7d:76:5a:f7:9f:3a:cc:1f:88:6b:f1:fe:db:9e:0c:9b: 6b:71:4e:f0:cb:aa:8d:81:54:9a:1a:a9:ac:66:b9:76:0e:16: fc:02:48:91:0a:8f:27:c3:25:18:ce:93:70:d7:e8:98:33:1a: e7:24:23:22:3b:17:80:13:51:35:8a:4a:2e:48:83:85:8f:fe: 8a:79:6d:98:74:b8:31:b3:21:56:77:8e:4e:09:10:89:cf:f2: 91:b8:73:6b:21:5a:2a:04:00:cc:7f:c7:28:30:f7:9a:97:66: b3:15:ae:c2 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICJ3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF MDgxRjFBRjgwHhcNMjQxMDMxMDU0MjIxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzIzMThiZC1kYmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaVglUnQ6JK+YZokc452ZbbynK4UaOcwafwBak65RybMAo+BFV4LIzzJphiW +tj2xoiz2ysmfqpiaFTaFqzl7OrISFg6GNWRQqB23vGcg8HmjYkfCd7pdolEwKJC NdKbaJZwKxMCEAbXKkCFByLC9+0DkBJtYa68LKqEFCaxm0+1to6t8bJ+ObgJAF9C g8jYagF7+mxFmbOr+ugs/DwX3Zj35z/sUvkXrFFwgdGKVHTSIbl8I476iftIBRWK QpZjG016aswPAeDO2goK6BJ6BiEPEtQlQQHBA5uGolMZvK1GGKxHFugao+PT2iQL g7HM5zTTJrGgYg/tMgEfCmk9YQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFBrrgDop 79Xo6QpjzqAPuDzX5alXMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvRTVBQTExQzI5 NzRBMTFFRkFFMTZFQzM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAB0XTQwDAMEAHRdPQMEAHRdPjANBgkqhkiG9w0BAQsFAAOC AQEAbfFo0FAtERiWYIrGCguYB/RRlZNWRewBOwlkXhqS27NXbM73kAIt0c80rdLL i/70/ZhQeW/3zeR9A2aLaKTcPXl4vDvtiKiRpPEO+J0o6ZVMTQx5ozTE7czEzo4o CNQ8TdQPRfHhlsoWQQBIB1CwpbZP0wcvCTIK9gK423LuVkezeK6qU/Xgc65EwfNz 1OhFRiR9dlr3nzrMH4hr8f7bngyba3FO8MuqjYFUmhqprGa5dg4W/AJIkQqPJ8Ml GM6TcNfomDMa5yQjIjsXgBNRNYpKLkiDhY/+inltmHS4MbMhVneOTgkQic/ykbhz ayFaKgQAzH/HKDD3mpdmsxWuwg== -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:42 2024 by rpki-client on console-fra.rpki-client.org