$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/46800A948DB811E98ACC9F7EC4F9AE02.roa File: 46800A948DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: HDowV0jxfkJYeFr+sT32cXrZ6tZ57Cd3d2XNwlRtI04= Subject key identifier: 94:B5:AA:1C:14:B0:42:82:4E:F9:0C:36:18:B2:15:2A:51:3E:A3:DE Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 34E6 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/46800A948DB811E98ACC9F7EC4F9AE02.roa Signing time: Mon 22 Jul 2024 14:40:34 +0000 ROA not before: Mon 22 Jul 2024 14:40:34 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 45197 IP address blocks: 203.155.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13542 (0x34e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA Validity Not Before: Jul 22 14:40:34 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=669e6f62-e1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:a2:3a:01:c2:e4:27:78:68:f3:93:78:03: fb:df:7b:27:97:98:7e:e3:bc:a2:55:20:65:f8:02: 95:d3:88:72:82:c4:cf:66:cf:ba:fc:fe:4c:d2:e8: a8:de:a2:bb:e0:90:7c:d6:db:4e:50:c5:2c:d2:8f: a0:eb:3c:c1:b3:35:9b:98:c1:5c:4a:bb:c4:20:6f: df:21:45:f7:6b:24:1c:81:d5:14:5b:64:41:62:50: 38:4e:36:22:b8:60:2a:32:d6:44:84:cb:1b:2b:29: 8f:99:84:d5:72:9f:3a:75:30:db:75:7b:11:84:3a: 67:83:de:a1:c7:70:8b:1b:4f:ef:25:a5:c5:76:a8: e7:1a:73:55:af:e1:4d:da:11:d8:e4:ad:8e:82:7b: 92:5c:b7:04:97:89:b3:2e:e2:3c:71:ce:89:83:c8: 8d:ea:33:a0:60:68:33:ec:e7:f6:8b:4f:07:96:cc: 07:b5:06:76:90:33:3c:dc:75:f1:48:d4:d0:1e:80: 46:ff:db:3a:da:fa:d8:ca:4e:33:7a:ab:b0:8b:d3: a7:a6:3e:95:cb:30:ba:ff:37:a9:cd:64:b8:60:f7: 55:39:14:b9:89:e7:34:b2:a6:f1:c8:ff:53:5b:d7: 38:ef:74:cc:3f:98:9d:e2:cc:57:7e:b9:27:f8:04: 52:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B5:AA:1C:14:B0:42:82:4E:F9:0C:36:18:B2:15:2A:51:3E:A3:DE X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/46800A948DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.155.217.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:06:10:a7:78:20:ae:3c:14:87:ec:99:98:19:2c:3a:2e:76: 07:59:c5:e0:e8:39:b2:c9:76:7b:dc:57:ae:3d:5a:68:e6:62: 00:59:4f:d6:ce:dd:da:06:18:2d:b6:10:93:e4:25:26:f8:59: d3:cf:1a:fc:96:f6:95:43:50:3a:72:90:3a:73:53:85:ca:ca: 6d:7f:5a:0c:ad:04:e3:3d:f0:3c:26:de:6b:de:1f:9c:f3:5d: 73:f3:6f:bf:f0:61:ee:1b:d0:60:52:3f:ae:32:38:ee:13:c8: 28:23:0d:3d:d5:9c:43:53:cf:62:3a:83:76:39:59:ae:a4:64: cd:00:bb:95:03:45:86:93:75:e3:08:40:45:0e:13:ca:f5:cb: 8e:a2:73:e3:d4:f1:51:66:7a:eb:1b:14:f5:c1:d2:d7:b9:2e: 46:6b:15:5d:3f:23:d0:cd:30:e1:5b:40:86:e3:62:3c:8f:ad: 94:d5:2d:67:d1:6f:bb:31:0a:62:5e:9f:ff:4f:5d:52:68:e5: bd:45:90:22:59:5a:74:e0:52:8c:2f:5e:bf:3a:01:7a:c2:f2: 35:11:32:5b:28:a1:23:7e:12:94:a0:1b:2f:ec:6b:9d:4f:2b: 1f:19:d2:7f:cd:b1:04:bd:91:f8:b1:bd:61:39:3c:61:87:61: 61:21:b0:af -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjQwNzIyMTQ0MDM0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllNmY2Mi1lMWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwmiOgHC5Cd4aPOTeAP733snl5h+47yiVSBl+AKV04hygsTPZs+6/P5M0uio 3qK74JB81ttOUMUs0o+g6zzBszWbmMFcSrvEIG/fIUX3ayQcgdUUW2RBYlA4TjYi uGAqMtZEhMsbKymPmYTVcp86dTDbdXsRhDpng96hx3CLG0/vJaXFdqjnGnNVr+FN 2hHY5K2OgnuSXLcEl4mzLuI8cc6Jg8iN6jOgYGgz7Of2i08HlswHtQZ2kDM83HXx SNTQHoBG/9s62vrYyk4zequwi9Onpj6VyzC6/zepzWS4YPdVORS5iec0sqbxyP9T W9c473TMP5id4sxXfrkn+ARSewIDAQABo4IClTCCApEwHQYDVR0OBBYEFJS1qhwU sEKCTvkMNhiyFSpRPqPeMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNDY4MDBBOTQ4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLm9kwDQYJKoZIhvcNAQELBQADggEBAJsGEKd4IK48FIfs mZgZLDoudgdZxeDoObLJdnvcV649WmjmYgBZT9bO3doGGC22EJPkJSb4WdPPGvyW 9pVDUDpykDpzU4XKym1/WgytBOM98Dwm3mveH5zzXXPzb7/wYe4b0GBSP64yOO4T yCgjDT3VnENTz2I6g3Y5Wa6kZM0Au5UDRYaTdeMIQEUOE8r1y46ic+PU8VFmeusb FPXB0te5LkZrFV0/I9DNMOFbQIbjYjyPrZTVLWfRb7sxCmJen/9PXVJo5b1FkCJZ WnTgUowvXr86AXrC8jURMlsooSN+EpSgGy/sa51PKx8Z0n/NsQS9kfixvWE5PGGH YWEhsK8= -----END CERTIFICATE-----Generated at Sun Feb 16 22:04:11 2025 by rpki-client