$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/425C78E48DB811E98ACC9F7EC4F9AE02.roa File: 425C78E48DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: Jsh3F+SRNKBqY52aW+NwLa5q6gQv+u52pDqTp9IFfXY= Subject key identifier: CE:EC:2E:D9:85:AB:DA:7B:6D:1D:D9:7E:F0:2F:1C:39:15:6D:87:1F Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 34DE Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/425C78E48DB811E98ACC9F7EC4F9AE02.roa Signing time: Mon 22 Jul 2024 14:40:26 +0000 ROA not before: Mon 22 Jul 2024 14:40:26 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 17980 IP address blocks: 203.209.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13534 (0x34de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jul 22 14:40:26 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=669e6f59-e091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dc:a1:dd:11:d2:d8:d6:4b:93:75:39:a2:d3: e1:a8:18:a7:22:11:05:8e:3c:63:2f:09:db:09:8e: 90:8e:33:6c:79:ca:5b:e6:a2:1d:5b:1d:d8:93:28: 7e:d7:02:6b:9d:b0:24:82:56:21:c4:a7:b5:fa:6a: 07:05:bc:f0:36:48:48:d7:14:91:36:2c:4d:18:ea: 92:bc:c4:51:40:e9:1a:e5:74:8b:f1:e4:27:c9:6d: 13:9c:34:df:51:aa:0d:69:0b:1c:5b:b0:e3:69:6f: ae:a8:b6:2f:84:5a:d1:cf:4f:f8:84:01:70:ec:32: 4d:77:78:f1:e6:9e:44:0c:d3:33:32:5f:d4:47:16: 6d:e7:9b:35:72:7b:04:5c:44:a9:ea:bc:cb:59:3b: a1:86:1b:06:07:ba:c8:42:22:84:ca:96:b8:80:c7: b3:86:bb:7c:c4:42:45:c1:6a:44:43:4a:38:67:c2: 3c:14:99:a9:19:e4:f2:f6:0d:92:9a:81:19:65:14: bc:f2:7d:4b:29:3e:73:f8:60:94:b2:f4:39:95:c4: d9:79:a4:04:e2:57:d2:81:fe:79:a2:eb:7a:cf:af: 4e:ab:1c:ae:95:53:8b:91:03:02:33:7c:22:bc:a1: 8b:6c:14:74:c1:06:03:2b:7b:75:56:e8:ff:e7:59: 6c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EC:2E:D9:85:AB:DA:7B:6D:1D:D9:7E:F0:2F:1C:39:15:6D:87:1F X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/425C78E48DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.209.99.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:d7:5d:5d:0a:dd:c5:65:63:b7:22:96:89:ee:28:62:52:54: f1:04:04:c0:95:43:49:6c:99:51:22:02:b2:28:33:b6:79:64: 50:43:a2:f1:83:e0:1e:f5:f9:e3:87:de:20:1f:67:f8:dd:e4: 38:0d:8f:0d:31:61:e8:65:47:0d:6a:3a:4a:4f:c5:c0:2c:88: 41:92:74:d9:ee:19:9c:f9:4b:fa:66:e1:19:22:97:74:dc:89: e7:7a:7b:e3:fa:47:59:b3:8c:9b:00:9d:19:b5:22:90:13:fa: b0:90:7a:d0:31:20:7c:17:5c:47:23:43:e2:90:74:bb:2b:5e: 01:f9:25:54:a9:0c:7f:67:64:07:6c:9c:50:dc:08:51:32:c3: 3b:e1:c9:65:8e:94:c2:7c:c8:f5:88:c3:62:60:e3:7b:2c:be: 4b:8a:8a:a9:82:32:f8:9d:68:fe:27:db:d4:9f:53:34:50:7e: 47:5f:3b:d7:87:a2:e4:e9:e1:8c:ba:09:d7:5b:e5:cf:2c:f2: 05:74:16:cc:75:be:64:f9:c2:10:07:a3:fd:c1:f6:d6:29:69: 77:54:ac:44:da:7d:ac:7a:d6:d9:f4:b3:33:58:5d:78:4b:db: 35:cf:f5:3c:a9:d9:05:69:8d:d9:ee:8c:f6:6f:79:fb:7c:48: 1e:5c:21:e6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjQwNzIyMTQ0MDI2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllNmY1OS1lMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tyh3RHS2NZLk3U5otPhqBinIhEFjjxjLwnbCY6QjjNsecpb5qIdWx3Ykyh+ 1wJrnbAkglYhxKe1+moHBbzwNkhI1xSRNixNGOqSvMRRQOka5XSL8eQnyW0TnDTf UaoNaQscW7DjaW+uqLYvhFrRz0/4hAFw7DJNd3jx5p5EDNMzMl/URxZt55s1cnsE XESp6rzLWTuhhhsGB7rIQiKEypa4gMezhrt8xEJFwWpEQ0o4Z8I8FJmpGeTy9g2S moEZZRS88n1LKT5z+GCUsvQ5lcTZeaQE4lfSgf55out6z69OqxyulVOLkQMCM3wi vKGLbBR0wQYDK3t1Vuj/51ls5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFM7sLtmF q9p7bR3ZfvAvHDkVbYcfMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNDI1Qzc4RTQ4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADL0WMwDQYJKoZIhvcNAQELBQADggEBAJ/XXV0K3cVlY7ci lonuKGJSVPEEBMCVQ0lsmVEiArIoM7Z5ZFBDovGD4B71+eOH3iAfZ/jd5DgNjw0x YehlRw1qOkpPxcAsiEGSdNnuGZz5S/pm4Rkil3Tcied6e+P6R1mzjJsAnRm1IpAT +rCQetAxIHwXXEcjQ+KQdLsrXgH5JVSpDH9nZAdsnFDcCFEywzvhyWWOlMJ8yPWI w2Jg43ssvkuKiqmCMvidaP4n29SfUzRQfkdfO9eHouTp4Yy6Cddb5c8s8gV0Fsx1 vmT5whAHo/3B9tYpaXdUrETafax61tn0szNYXXhL2zXP9Typ2QVpjdnujPZveft8 SB5cIeY= -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:37 2024 by rpki-client on console-fra.rpki-client.org