$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/84B94D56F83011EE8B26391DC4F9AE02.roa File: 84B94D56F83011EE8B26391DC4F9AE02.roa (raw, json) Hash identifier: x+3QJoK+biDu04dZYkE6o8q8VEGJX6JSOS4hkFBwMrc= Subject key identifier: BE:60:41:5A:23:5A:98:B7:A8:0F:A5:D2:7A:EB:34:6F:1D:83:5F:7E Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Certificate serial: 3576 Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/84B94D56F83011EE8B26391DC4F9AE02.roa Signing time: Thu 10 Oct 2024 14:50:56 +0000 ROA not before: Thu 10 Oct 2024 14:50:56 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 7029 IP address blocks: 175.29.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13686 (0x3576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91510AD Validity Not Before: Oct 10 14:50:56 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6707e9d0-003f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2e:e9:9d:96:98:56:06:2c:26:97:39:32:40: 17:77:2c:db:48:26:a9:23:69:f8:74:ed:12:70:bf: 86:d5:e8:5b:9b:cb:ae:44:70:67:77:04:0b:ab:e1: 90:16:d2:8b:84:e5:11:9c:47:5a:1e:f7:88:a7:11: 0a:4f:6a:b3:7d:1d:7b:92:36:08:db:e5:7f:b7:a6: c2:ad:6d:6c:36:9b:4a:f3:fa:6e:25:95:e8:cf:f2: 62:b7:0c:5c:5b:c7:c9:5b:23:a1:c4:c6:08:3f:f3: 85:f2:37:ca:be:62:a2:cb:15:58:68:e1:43:34:8a: cb:e3:ba:38:58:6d:e6:1d:2a:15:ea:f3:34:6f:9c: b1:7e:36:a8:0f:d3:36:ad:1f:bc:73:63:6d:a5:e6: e1:16:cf:10:5f:6f:a4:31:6f:28:d1:03:01:42:a9: 07:76:3f:87:5e:04:41:b0:18:98:d7:9a:5e:bf:13: 2f:2a:a5:f3:12:ca:fa:a5:c5:86:e3:75:24:a4:91: a0:3a:2a:d6:22:44:b8:05:26:49:6c:3e:84:52:af: 5e:22:f5:e2:f3:82:7b:49:7a:4c:37:1f:b7:66:b7: b4:bb:87:18:84:8d:8e:7c:d2:59:54:37:40:1d:30: c1:94:71:5f:0c:a0:d3:84:d0:6f:21:ba:13:fe:a6: ee:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:60:41:5A:23:5A:98:B7:A8:0F:A5:D2:7A:EB:34:6F:1D:83:5F:7E X509v3 Authority Key Identifier: keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/84B94D56F83011EE8B26391DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.29.128.0/21 Signature Algorithm: sha256WithRSAEncryption 90:21:f9:4b:f7:69:b2:5c:58:07:ce:f4:b9:64:b4:a9:63:5b: b9:23:f3:bb:33:52:f0:ad:6b:08:b4:20:03:59:a4:7b:ae:1d: 27:17:15:43:e2:90:84:c7:d2:49:63:8c:5a:fe:9b:a3:de:2d: 39:33:97:1c:de:c8:24:16:eb:75:28:22:e2:44:91:57:a5:d5: 7d:a5:52:e3:df:ba:18:68:d2:03:22:05:55:80:f6:83:f5:35: a8:7e:42:b7:13:00:5e:a4:eb:f0:e4:50:7a:8a:78:78:cc:63: 84:62:a7:b2:3b:e7:fb:86:f4:33:0a:1b:41:67:0e:17:d2:86: ea:35:fa:0a:ad:f5:d2:97:c7:f4:56:26:13:05:6a:d4:13:fa: ef:e5:d1:b3:29:bd:ee:bc:8f:b3:70:de:e3:8c:c1:59:11:55: c2:e6:05:b0:a2:13:4f:17:ad:de:6d:5d:a9:c5:0f:e3:43:f1: c0:49:8c:ad:f0:5e:a7:9d:f6:4f:7d:46:58:0b:5b:a7:68:0a: 74:15:50:04:3c:9e:a3:79:07:55:72:32:02:b0:11:ec:c6:72: 22:ba:3b:40:3b:29:9b:5b:bc:fa:66:c1:83:b3:f4:32:3f:e0: 28:f7:e7:7e:e5:99:5a:b2:a5:b3:df:72:c0:b3:78:37:63:f7: 98:93:cf:9d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE RUIwOTIyNTcwHhcNMjQxMDEwMTQ1MDU2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA3ZTlkMC0wMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAni7pnZaYVgYsJpc5MkAXdyzbSCapI2n4dO0ScL+G1ehbm8uuRHBndwQLq+GQ FtKLhOURnEdaHveIpxEKT2qzfR17kjYI2+V/t6bCrW1sNptK8/puJZXoz/Jitwxc W8fJWyOhxMYIP/OF8jfKvmKiyxVYaOFDNIrL47o4WG3mHSoV6vM0b5yxfjaoD9M2 rR+8c2NtpebhFs8QX2+kMW8o0QMBQqkHdj+HXgRBsBiY15pevxMvKqXzEsr6pcWG 43UkpJGgOirWIkS4BSZJbD6EUq9eIvXi84J7SXpMNx+3Zre0u4cYhI2OfNJZVDdA HTDBlHFfDKDThNBvIboT/qbuWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL5gQVoj Wpi3qA+l0nrrNG8dg19+MB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvODRCOTRENTZG ODMwMTFFRThCMjYzOTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAOvHYAwDQYJKoZIhvcNAQELBQADggEBAJAh+Uv3abJcWAfO 9LlktKljW7kj87szUvCtawi0IANZpHuuHScXFUPikITH0kljjFr+m6PeLTkzlxze yCQW63UoIuJEkVel1X2lUuPfuhho0gMiBVWA9oP1Nah+QrcTAF6k6/DkUHqKeHjM Y4Rip7I75/uG9DMKG0FnDhfShuo1+gqt9dKXx/RWJhMFatQT+u/l0bMpve68j7Nw 3uOMwVkRVcLmBbCiE08Xrd5tXanFD+ND8cBJjK3wXqed9k99RlgLW6doCnQVUAQ8 nqN5B1VyMgKwEezGciK6O0A7KZtbvPpmwYOz9DI/4Cj3537lmVqypbPfcsCzeDdj 95iTz50= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:49 2025 by rpki-client