$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/FD398FA0BB5D11ECA62F8674C4F9AE02.roa File: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (raw, json) Hash identifier: BTLl2ZQykfG+tipQAUgtzvqp3DpDHeGIHhFJsSIVOWM= Subject key identifier: 4B:83:7C:39:D6:DE:67:4D:D4:98:1A:FF:74:03:45:6E:2D:5A:D6:E0 Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Certificate serial: 02A9 Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/FD398FA0BB5D11ECA62F8674C4F9AE02.roa Signing time: Sat 13 Jul 2024 03:24:13 +0000 ROA not before: Sat 13 Jul 2024 03:24:13 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 56286 IP address blocks: 203.222.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Validity Not Before: Jul 13 03:24:13 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6691f35d-d42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:1c:29:6d:8a:ec:b9:fc:f1:ee:a6:d8:d5: db:ca:fb:8a:86:0a:9d:62:f6:04:0c:7d:19:11:3e: d9:21:a0:85:c9:df:b2:c3:78:34:1f:13:a3:15:97: 01:07:25:c5:fb:4d:35:c4:44:13:a6:9a:67:3a:b7: 87:89:3e:b1:3f:68:76:5b:e2:5c:5e:f2:ac:f5:1c: 86:87:78:af:69:ed:03:e0:e0:af:4f:6d:c1:be:c9: 98:95:d3:21:b1:da:c9:32:2f:cf:16:e8:88:d7:64: cb:05:1b:bd:03:72:13:cb:cb:66:21:6f:4f:5c:78: 78:87:5d:aa:1b:ca:29:13:6b:cc:91:88:96:6b:2f: 6e:a7:f8:6e:14:b3:81:9a:cb:c7:ad:bd:dd:e5:c0: f2:f3:11:98:08:c7:9b:d6:c0:31:61:97:f7:53:b4: 56:4c:07:83:e9:0d:4c:e8:44:c0:82:8e:36:a6:20: 02:28:1c:b9:97:e2:50:d6:93:f2:1f:fc:19:7d:92: 23:3d:28:17:b9:b0:3a:85:a9:ed:ed:74:0b:c2:70: 45:a6:33:b1:df:71:62:36:68:35:4f:3b:21:f6:f7: 0b:48:09:a9:71:0e:a8:b3:12:55:5d:4a:75:26:35: 74:1b:36:f6:cb:6f:b8:d8:f0:fc:26:74:71:9c:40: 76:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:83:7C:39:D6:DE:67:4D:D4:98:1A:FF:74:03:45:6E:2D:5A:D6:E0 X509v3 Authority Key Identifier: keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/FD398FA0BB5D11ECA62F8674C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.222.47.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:97:8f:8c:69:b8:9d:ba:ad:2c:21:7e:1f:a9:6e:10:74:58: 57:eb:90:64:76:af:fe:e5:da:e2:58:af:82:f1:09:c0:6b:34: 6f:a9:6f:82:da:14:75:3f:66:69:95:0d:62:20:26:b7:52:ec: fd:46:8c:77:47:53:15:d3:19:64:85:ee:b9:5d:f3:3e:36:f0: b7:15:98:50:dd:2b:7c:13:64:a3:a5:fa:6d:87:0f:86:99:78: db:cc:38:1d:6b:68:c5:9d:ba:be:e7:70:72:e5:55:66:bd:67: b3:b9:b8:43:53:a4:bd:11:8a:8b:91:78:ca:cd:82:30:b0:d1: 31:ae:6a:19:28:1a:2c:5a:e6:b9:b6:b1:4c:ec:b4:72:9a:53: 4e:03:d1:c9:65:ce:65:ea:c5:d1:9c:46:ae:a0:de:aa:09:d0: 38:4d:85:2c:c4:0e:b4:40:a3:b3:da:58:2e:f9:40:f2:2b:6c: 32:1b:35:50:13:12:d8:c2:5c:c6:96:f3:d6:f7:3a:12:50:92: aa:54:cf:82:41:d8:c2:68:ac:a8:0d:02:1b:fa:58:5f:16:50: 5b:ba:ea:e2:8d:7c:e7:8f:b0:28:9c:f9:08:b6:c7:ce:4d:b6: d5:a5:8b:c9:1f:6e:49:0a:e5:38:31:a1:68:ec:44:e7:99:c4: 1a:8a:ec:bc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3 MURGQzExMjkwHhcNMjQwNzEzMDMyNDEzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjkxZjM1ZC1kNDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVEcKW2K7Ln88e6m2NXbyvuKhgqdYvYEDH0ZET7ZIaCFyd+yw3g0HxOjFZcB ByXF+001xEQTpppnOreHiT6xP2h2W+JcXvKs9RyGh3ivae0D4OCvT23BvsmYldMh sdrJMi/PFuiI12TLBRu9A3ITy8tmIW9PXHh4h12qG8opE2vMkYiWay9up/huFLOB msvHrb3d5cDy8xGYCMeb1sAxYZf3U7RWTAeD6Q1M6ETAgo42piACKBy5l+JQ1pPy H/wZfZIjPSgXubA6hant7XQLwnBFpjOx33FiNmg1Tzsh9vcLSAmpcQ6osxJVXUp1 JjV0Gzb2y2+42PD8JnRxnEB2CQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEuDfDnW 3mdN1Jga/3QDRW4tWtbgMB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjA3REUvQzc2ODE0QzZCQjVBMTFFQzkwOEFDOTZFQzRGOUFFMDIvRkQzOThGQTBC QjVEMTFFQ0E2MkY4Njc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADL3i8wDQYJKoZIhvcNAQELBQADggEBAAuXj4xpuJ26rSwh fh+pbhB0WFfrkGR2r/7l2uJYr4LxCcBrNG+pb4LaFHU/ZmmVDWIgJrdS7P1GjHdH UxXTGWSF7rld8z428LcVmFDdK3wTZKOl+m2HD4aZeNvMOB1raMWdur7ncHLlVWa9 Z7O5uENTpL0RiouReMrNgjCw0TGuahkoGixa5rm2sUzstHKaU04D0cllzmXqxdGc Rq6g3qoJ0DhNhSzEDrRAo7PaWC75QPIrbDIbNVATEtjCXMaW89b3OhJQkqpUz4JB 2MJorKgNAhv6WF8WUFu66uKNfOePsCic+Qi2x85NttWli8kfbkkK5TgxoWjsROeZ xBqK7Lw= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:37 2024 by rpki-client on console-fra.rpki-client.org