$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F5CB8F0A459D11EDB62F422FC4F9AE02.roa File: F5CB8F0A459D11EDB62F422FC4F9AE02.roa (raw, json) Hash identifier: DEDTu8Mp335AkDMg3gaFXfDzK0w1tPa7JLjvtAutrLM= Subject key identifier: 42:F6:4D:E5:0A:A4:E3:5F:95:0C:22:91:A4:C4:D0:2B:48:A0:DB:EB Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Certificate serial: 3565 Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F5CB8F0A459D11EDB62F422FC4F9AE02.roa Signing time: Thu 10 Oct 2024 14:50:42 +0000 ROA not before: Thu 10 Oct 2024 14:50:42 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 139065 IP address blocks: 175.29.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13669 (0x3565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Validity Not Before: Oct 10 14:50:42 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6707e9c1-ed59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:e5:11:a1:84:f8:38:de:07:6a:94:4a:24: 8c:7e:fb:b2:28:c1:e6:09:80:20:16:79:ad:09:89: 53:3b:9f:b0:ce:3b:05:57:07:bc:2f:95:75:81:66: c2:cc:fe:49:51:ea:c3:6f:2c:c2:e9:a4:75:bf:0d: ed:d1:98:08:2b:2d:23:83:98:0b:0b:9a:a0:a0:98: 5a:80:7c:20:9c:72:48:bd:60:34:1c:cd:45:9c:7e: d1:4e:27:1c:a8:df:96:b4:b6:66:61:7d:77:39:db: 2d:25:11:74:e2:7f:3f:34:73:46:69:24:ba:88:4b: 66:e4:d7:37:f0:80:e2:80:0b:2d:14:db:97:d3:7a: 8b:75:05:47:e7:25:53:85:6b:f0:8f:6c:3e:e9:94: 11:ab:3e:32:1b:98:ec:62:10:9c:7f:d9:f3:66:21: d6:3e:d8:16:dc:a5:fa:a2:69:05:0d:76:56:6e:a5: a2:85:1b:92:df:90:a4:5c:65:4b:46:3f:f5:e8:53: d3:34:f4:7a:e0:b0:ce:e1:9e:49:d4:40:8d:58:f2: 3b:69:89:6f:10:4f:b9:ea:6f:26:26:ef:b2:dc:08: 79:2a:b3:35:19:b4:79:26:ba:83:34:b4:d3:93:77: 59:7f:bf:d0:34:a6:1c:e9:13:82:0b:4c:b6:e7:cb: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F6:4D:E5:0A:A4:E3:5F:95:0C:22:91:A4:C4:D0:2B:48:A0:DB:EB X509v3 Authority Key Identifier: keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/F5CB8F0A459D11EDB62F422FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.29.104.0/22 Signature Algorithm: sha256WithRSAEncryption 32:1b:0d:a8:f2:16:db:a3:25:7c:94:c6:3b:47:9e:e2:0e:9f: f1:44:a6:71:f8:fc:b5:0c:30:62:1a:3e:0d:b8:8a:46:2a:2a: 70:7a:2d:18:89:0b:ab:2c:a6:14:37:29:9e:74:47:18:03:73: c2:99:d6:5a:d1:28:84:39:f7:2a:6e:8c:10:0c:a2:47:8d:07: 03:b4:92:48:ec:9b:9f:eb:bc:2d:fa:09:98:54:0d:b0:bb:fc: 03:6a:6e:f0:9b:5a:21:1d:40:b1:d5:08:71:c8:61:fd:3a:80: e5:18:be:3e:2c:e1:ba:d4:0e:8a:24:18:98:95:de:e6:eb:10: 27:2a:74:ab:84:1a:a6:1d:31:7e:07:85:4d:17:39:81:9e:c0: d1:bb:b7:b7:72:a2:44:67:ce:cb:f2:5f:5d:1e:8d:e8:c9:4f: b9:bb:2f:9e:09:d9:0e:0a:15:6a:fe:e2:68:6d:0c:33:2b:3a: 15:94:f2:27:e1:5b:2b:9e:c7:e7:49:41:ab:fc:9b:9f:62:13: a0:aa:f8:ad:a0:5b:9f:05:c7:83:a5:6e:84:6b:be:77:09:80: 96:03:83:ff:ee:05:2b:e3:9a:67:b5:81:72:f0:27:0e:fa:a1: 45:8f:97:da:b9:ce:3b:c2:e3:d7:4e:b6:19:47:9a:66:9a:17: c1:66:b1:88 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE RUIwOTIyNTcwHhcNMjQxMDEwMTQ1MDQyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA3ZTljMS1lZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoXlEaGE+DjeB2qUSiSMfvuyKMHmCYAgFnmtCYlTO5+wzjsFVwe8L5V1gWbC zP5JUerDbyzC6aR1vw3t0ZgIKy0jg5gLC5qgoJhagHwgnHJIvWA0HM1FnH7RTicc qN+WtLZmYX13OdstJRF04n8/NHNGaSS6iEtm5Nc38IDigAstFNuX03qLdQVH5yVT hWvwj2w+6ZQRqz4yG5jsYhCcf9nzZiHWPtgW3KX6omkFDXZWbqWihRuS35CkXGVL Rj/16FPTNPR64LDO4Z5J1ECNWPI7aYlvEE+56m8mJu+y3Ah5KrM1GbR5JrqDNLTT k3dZf7/QNKYc6ROCC0y258t7CwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEL2TeUK pONflQwikaTE0CtIoNvrMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvRjVDQjhGMEE0 NTlEMTFFREI2MkY0MjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKvHWgwDQYJKoZIhvcNAQELBQADggEBADIbDajyFtujJXyU xjtHnuIOn/FEpnH4/LUMMGIaPg24ikYqKnB6LRiJC6ssphQ3KZ50RxgDc8KZ1lrR KIQ59ypujBAMokeNBwO0kkjsm5/rvC36CZhUDbC7/ANqbvCbWiEdQLHVCHHIYf06 gOUYvj4s4brUDookGJiV3ubrECcqdKuEGqYdMX4HhU0XOYGewNG7t7dyokRnzsvy X10ejejJT7m7L54J2Q4KFWr+4mhtDDMrOhWU8ifhWyuex+dJQav8m59iE6Cq+K2g W58Fx4OlboRrvncJgJYDg//uBSvjmme1gXLwJw76oUWPl9q5zjvC49dOthlHmmaa F8FmsYg= -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:26 2024 by rpki-client on console-fra.rpki-client.org