$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/B91AACE86C8A11EEA934912FC4F9AE02.roa File: B91AACE86C8A11EEA934912FC4F9AE02.roa (raw, json) Hash identifier: BRqUa6lx1hCo3MEvTs8NlHFfgRjiFksL6MonNo6Ic5M= Subject key identifier: FB:FA:48:2D:D1:53:7E:63:02:F7:6A:BB:8B:AD:08:9E:97:4B:39:4A Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Certificate serial: 05EF Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/B91AACE86C8A11EEA934912FC4F9AE02.roa Signing time: Fri 05 Jul 2024 00:22:24 +0000 ROA not before: Fri 05 Jul 2024 00:22:24 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 209854 IP address blocks: 118.99.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1519 (0x5ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Validity Not Before: Jul 5 00:22:24 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66873cbe-b551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:eb:cf:26:8f:6f:77:c8:dd:85:f1:bc:b8:be: db:11:2c:13:0f:dc:0a:32:d3:9f:72:a2:f3:1a:44: 0f:ca:db:c6:c1:80:ce:7d:cd:3a:e4:af:71:be:88: 63:5a:3c:39:3d:80:9d:ea:52:73:e1:83:f5:61:57: c4:42:47:8c:b7:93:47:80:ce:dc:39:41:6e:7e:7c: 74:31:24:b9:01:21:c9:52:b2:f2:bd:cf:3b:09:bf: a2:82:29:eb:3a:e9:dd:d6:e4:18:2c:7c:0c:70:d3: 8a:9c:ab:d0:d2:62:d9:8d:d1:bb:48:f6:67:e6:b8: 9b:fa:6e:cc:92:e7:16:7a:e6:08:b5:44:e5:9d:6d: 90:fb:bf:14:f0:7b:07:99:59:08:f9:5e:f7:54:70: 92:96:ff:b1:e8:34:6e:de:d6:c8:c9:09:a4:1a:bc: 86:ab:0c:0a:47:e2:0d:5f:ce:08:51:61:5f:ea:ad: b7:3e:9d:c2:26:42:68:bd:24:00:cf:31:bb:7b:74: b8:6f:0e:cf:f2:48:ff:85:81:66:2f:57:1c:59:4c: 6f:6d:ba:22:4c:93:e6:d6:00:0c:15:98:bb:d5:1b: 26:92:05:10:69:33:1f:8c:e9:7a:53:7d:f4:7f:fd: 8f:31:b6:b3:ef:0e:bb:61:54:bb:0d:23:4e:f5:e8: 37:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FA:48:2D:D1:53:7E:63:02:F7:6A:BB:8B:AD:08:9E:97:4B:39:4A X509v3 Authority Key Identifier: keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/B91AACE86C8A11EEA934912FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.99.2.0/24 Signature Algorithm: sha256WithRSAEncryption 03:af:dc:d2:d8:42:79:84:73:c3:df:5b:30:a1:3f:39:cc:e8: e5:fb:34:d4:8d:6a:66:30:4f:4d:40:5d:9c:75:53:fa:0b:53: ba:cd:71:78:d2:5a:65:e9:58:05:e2:a6:39:72:01:a7:46:a5: ef:3f:40:88:63:dc:38:eb:df:06:2c:c1:d8:a0:6b:82:70:01: 93:f3:11:75:a9:8a:99:5a:60:2c:0a:1d:ce:77:53:ad:fb:53: c8:4b:e7:1f:e8:0b:cf:58:57:01:b0:2f:92:4b:e0:4d:83:2f: a8:75:00:71:86:9c:78:a0:50:25:ba:12:51:43:f5:9a:92:db: 3d:b3:2f:dd:76:20:37:1d:8e:6f:4d:18:1a:ac:96:8e:54:43: e0:c9:8e:38:fb:f8:62:cc:c0:b5:fc:3f:1e:8a:cd:8e:b1:b4: a8:18:73:e1:cc:68:09:60:c0:1d:1c:bf:21:e0:30:37:4f:4f: ff:c6:c8:03:83:a3:b9:c4:ad:71:1e:e9:aa:f6:fb:01:34:d1: d8:f1:2f:9b:93:07:5c:0b:6d:eb:d4:f7:83:d4:fd:56:02:e0: f5:d4:8f:06:d2:a3:e2:b3:d3:2d:5d:80:e3:78:bc:8c:34:1b: 7d:a3:23:78:98:10:82:86:6e:90:e6:b2:27:a0:fb:d5:f6:5c: 5b:b2:fa:e8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2 OThDOTM5NzcwHhcNMjQwNzA1MDAyMjI0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg3M2NiZS1iNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+vPJo9vd8jdhfG8uL7bESwTD9wKMtOfcqLzGkQPytvGwYDOfc065K9xvohj Wjw5PYCd6lJz4YP1YVfEQkeMt5NHgM7cOUFufnx0MSS5ASHJUrLyvc87Cb+iginr Ound1uQYLHwMcNOKnKvQ0mLZjdG7SPZn5rib+m7MkucWeuYItUTlnW2Q+78U8HsH mVkI+V73VHCSlv+x6DRu3tbIyQmkGryGqwwKR+INX84IUWFf6q23Pp3CJkJovSQA zzG7e3S4bw7P8kj/hYFmL1ccWUxvbboiTJPm1gAMFZi71RsmkgUQaTMfjOl6U330 f/2PMbaz7w67YVS7DSNO9eg3IQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPv6SC3R U35jAvdqu4utCJ6XSzlKMB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0 NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjRENjAvOUUwREUzOTJCNDVGMTFFQkI2MUI3NjBDQzRGOUFFMDIvQjkxQUFDRTg2 QzhBMTFFRUE5MzQ5MTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB2YwIwDQYJKoZIhvcNAQELBQADggEBAAOv3NLYQnmEc8Pf WzChPznM6OX7NNSNamYwT01AXZx1U/oLU7rNcXjSWmXpWAXipjlyAadGpe8/QIhj 3Djr3wYswdiga4JwAZPzEXWpiplaYCwKHc53U637U8hL5x/oC89YVwGwL5JL4E2D L6h1AHGGnHigUCW6ElFD9ZqS2z2zL912IDcdjm9NGBqslo5UQ+DJjjj7+GLMwLX8 Px6KzY6xtKgYc+HMaAlgwB0cvyHgMDdPT//GyAODo7nErXEe6ar2+wE00djxL5uT B1wLbevU94PU/VYC4PXUjwbSo+Kz0y1dgON4vIw0G32jI3iYEIKGbpDmsieg+9X2 XFuy+ug= -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:21 2024 by rpki-client on console-fra.rpki-client.org