$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/AD5BA998D85D11EB8E31070BC4F9AE02.roa File: AD5BA998D85D11EB8E31070BC4F9AE02.roa (raw, json) Hash identifier: AqcTvl3JE8iQmp2mHhzhnxH+2xnTnNkhAQ8gJbtZg+I= Subject key identifier: B5:F5:06:74:D2:43:F8:55:1E:56:9A:22:1E:5F:0A:22:C5:76:B5:20 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 343E Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/AD5BA998D85D11EB8E31070BC4F9AE02.roa Signing time: Sat 02 Nov 2024 15:20:57 +0000 ROA not before: Sat 02 Nov 2024 15:20:57 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 136415 IP address blocks: 110.35.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13374 (0x343e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: Nov 2 15:20:57 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67264359-ebc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4a:7f:5a:ca:cb:f8:46:2f:da:43:67:18:50: 4b:2c:b6:9e:ef:2d:fb:83:b3:5d:3b:0b:8b:ad:92: 94:e6:24:77:63:06:c7:b7:d3:e3:9f:2c:0c:44:b3: 92:41:1f:29:e5:c7:01:fc:5b:80:c3:94:95:da:8e: 08:9d:c2:6a:be:57:27:d0:e6:d2:28:e8:a1:e4:c6: d5:54:ac:64:79:2f:05:75:13:f7:9f:8d:0d:0b:f9: 14:bb:99:3a:a6:ba:92:56:28:80:95:d0:1b:2f:f3: d0:70:bf:ef:02:74:fa:f3:ae:5e:b6:da:bd:ea:77: ed:cc:ce:6e:92:b1:c6:0e:db:4e:0c:30:b2:6f:09: 92:4a:22:02:9b:8d:ae:7d:b0:e0:ad:ba:9d:65:9b: e4:e1:21:2d:e8:3f:c5:11:26:b7:86:dc:91:30:fe: 8a:87:5d:96:4a:ed:22:4e:84:68:35:91:15:20:82: df:4f:4f:bd:32:6a:9f:10:0f:e4:0c:86:26:a5:6f: 2c:0a:da:e3:35:d7:05:a7:93:ac:66:b7:fb:4a:e1: bb:8c:e5:41:f2:2e:7d:85:93:03:6c:45:8c:12:33: a4:91:62:cc:6f:ff:99:f5:14:cc:88:78:1c:9e:00: 5a:70:fe:77:e7:6a:60:31:72:4b:9b:ee:f8:52:84: 27:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F5:06:74:D2:43:F8:55:1E:56:9A:22:1E:5F:0A:22:C5:76:B5:20 X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/AD5BA998D85D11EB8E31070BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.35.88.0/21 Signature Algorithm: sha256WithRSAEncryption 59:7c:fb:28:cd:96:da:78:08:74:e7:79:01:36:02:95:cb:ff: 42:27:1f:cd:db:38:67:ea:38:ce:54:b4:e1:ec:9e:1c:f4:e7: e5:ce:e2:d0:b6:ee:7a:11:c5:f7:f4:ae:a5:80:d2:d6:29:4f: 33:d6:86:a7:7b:90:75:29:c5:bb:e8:8b:27:0b:82:23:13:28: 1e:74:27:a8:e2:06:db:0d:1a:9b:9b:6a:36:0c:3b:8a:4f:8f: 2f:62:9e:e5:9f:80:00:d2:ee:0e:d3:78:dd:66:84:12:ea:4e: 19:f2:37:70:01:8a:8c:45:12:5d:69:d7:13:8e:e4:d8:d7:00: 75:7f:d8:34:1f:ea:72:3f:f5:d1:c6:15:eb:bb:4a:b9:a1:da: 09:13:7b:cd:26:76:64:f3:34:54:b0:23:34:d7:7d:19:c7:0e: 5c:89:b7:94:1e:f4:d3:65:64:d6:17:2f:95:3d:d4:ea:0f:b2: bb:77:bc:b4:d5:c5:a7:bc:a6:30:ff:c2:9b:bb:ba:05:a8:5d: 14:ba:df:8e:6b:a8:5e:e9:10:75:68:12:a4:9f:9e:99:74:30: 98:4b:99:73:b3:c2:9c:b9:9a:88:1a:e1:1b:8f:6f:3c:4f:01: 7d:6b:2d:29:d3:e5:df:9b:e2:c4:fa:6b:a0:b4:dc:89:de:60: c7:55:6d:35 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICND4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjQxMTAyMTUyMDU3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2NDM1OS1lYmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ep/WsrL+EYv2kNnGFBLLLae7y37g7NdOwuLrZKU5iR3YwbHt9PjnywMRLOS QR8p5ccB/FuAw5SV2o4IncJqvlcn0ObSKOih5MbVVKxkeS8FdRP3n40NC/kUu5k6 prqSViiAldAbL/PQcL/vAnT6865ettq96nftzM5ukrHGDttODDCybwmSSiICm42u fbDgrbqdZZvk4SEt6D/FESa3htyRMP6Kh12WSu0iToRoNZEVIILfT0+9MmqfEA/k DIYmpW8sCtrjNdcFp5OsZrf7SuG7jOVB8i59hZMDbEWMEjOkkWLMb/+Z9RTMiHgc ngBacP5352pgMXJLm+74UoQnAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLX1BnTS Q/hVHlaaIh5fCiLFdrUgMB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTI3RjkvNkVEMkVCQUExRDlBMTFFMkFFOTNBRDg3MDhCMDJDRDIvQUQ1QkE5OThE ODVEMTFFQjhFMzEwNzBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBANuI1gwDQYJKoZIhvcNAQELBQADggEBAFl8+yjNltp4CHTn eQE2ApXL/0InH83bOGfqOM5UtOHsnhz05+XO4tC27noRxff0rqWA0tYpTzPWhqd7 kHUpxbvoiycLgiMTKB50J6jiBtsNGpubajYMO4pPjy9inuWfgADS7g7TeN1mhBLq ThnyN3ABioxFEl1p1xOO5NjXAHV/2DQf6nI/9dHGFeu7Srmh2gkTe80mdmTzNFSw IzTXfRnHDlyJt5Qe9NNlZNYXL5U91OoPsrt3vLTVxae8pjD/wpu7ugWoXRS6345r qF7pEHVoEqSfnpl0MJhLmXOzwpy5moga4RuPbzxPAX1rLSnT5d+b4sT6a6C03Ine YMdVbTU= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:19 2024 by rpki-client on console-ams.rpki-client.org