$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/471E9C908DB811E98ACC9F7EC4F9AE02.roa File: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: dhSNGV7WN5Gdy2FxgxjeunIC6meweUvz6hG+CLphccQ= Subject key identifier: CA:E6:86:91:75:DF:90:02:7E:35:B1:88:CF:58:36:DE:81:F4:E0:23 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 34E7 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/471E9C908DB811E98ACC9F7EC4F9AE02.roa Signing time: Mon 22 Jul 2024 14:40:35 +0000 ROA not before: Mon 22 Jul 2024 14:40:35 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 45471 IP address blocks: 58.181.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA Validity Not Before: Jul 22 14:40:35 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=669e6f63-675d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:40:11:e3:e5:e7:e2:28:15:dc:45:a1:5d: fe:c0:ef:7a:7c:cd:9b:7d:65:de:3b:71:09:9b:a4: 93:c5:59:b0:8f:87:05:ec:02:52:3b:ad:de:cf:2c: 7c:f1:42:e2:14:9e:41:7b:17:21:c8:f5:b7:cb:1e: fb:9f:74:40:a4:15:87:e4:75:c6:e8:ce:4b:bb:0a: 65:e7:ce:76:de:15:01:b7:8d:02:9f:b5:f7:a9:0c: 76:96:e0:97:34:e1:99:36:47:66:11:a8:d6:c9:ba: 81:a3:53:f7:2b:bc:1e:31:5f:04:31:c2:04:20:5c: 17:9d:e3:77:5c:64:53:6b:0a:0d:36:88:4b:aa:11: 8a:0f:2a:97:c7:8d:42:b6:e0:f9:2f:8b:cd:b8:e2: 9f:9c:90:1a:cb:2c:e1:42:f2:1c:71:d0:fa:51:8a: 59:c3:10:5a:b4:e1:61:86:53:46:6c:51:6d:16:81: 62:04:62:20:bd:4b:0e:87:7e:68:fe:00:25:c0:75: 99:b5:d7:56:11:10:94:7c:c6:28:1f:a7:4a:4f:91: 0f:72:5a:e8:ac:34:58:56:b7:1b:ef:87:5c:ff:fe: a8:59:8f:97:2f:98:34:11:eb:67:a2:cf:59:fa:51: db:52:77:bb:3e:de:31:6b:8a:00:0c:36:c4:8e:5d: 96:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E6:86:91:75:DF:90:02:7E:35:B1:88:CF:58:36:DE:81:F4:E0:23 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/471E9C908DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.181.178.0/24 Signature Algorithm: sha256WithRSAEncryption 41:8e:eb:08:86:57:a2:fc:4b:ac:ab:b9:91:a1:ea:30:d1:db: 8f:55:cd:86:f3:31:11:10:5d:6e:fc:1b:19:56:4a:35:9c:68: b0:2e:bc:52:6c:8c:de:17:46:a9:91:32:6c:fe:61:6d:27:01: a3:86:fe:75:09:18:74:e5:a0:bc:0b:f4:97:30:62:cc:66:75: aa:fc:6a:65:dc:a7:8b:21:9b:03:b3:21:70:b4:1b:63:f7:22: 22:f2:c7:77:b0:58:27:30:ab:99:9a:45:95:5e:44:d4:09:20: 16:e3:9d:0f:aa:83:06:0e:bb:f8:e4:f1:97:1f:37:0a:0e:eb: be:9b:37:1e:e5:c3:8f:a5:3c:73:01:65:d5:1e:f1:25:1c:80: ba:1a:68:04:07:69:7c:ef:41:43:9f:7b:7c:5e:81:89:30:f2: 54:74:3c:d0:f9:9e:3e:f4:2c:a2:1f:73:e8:d7:b1:29:17:a0: 4e:72:c1:77:57:b9:e0:4d:0a:5a:a4:d0:3f:2e:13:c4:de:a7: 4d:3e:a9:2b:d3:d3:8b:6c:6a:78:c4:c4:9a:7d:c0:8c:78:6a: bc:09:7e:46:d0:4c:66:0b:ed:c2:7e:74:3d:f4:91:6c:a8:07: 05:a9:85:33:f2:04:5d:71:ef:8f:b5:66:db:0f:88:10:82:9a: 31:b0:6b:95 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjQwNzIyMTQ0MDM1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllNmY2My02NzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4tAEePl5+IoFdxFoV3+wO96fM2bfWXeO3EJm6STxVmwj4cF7AJSO63ezyx8 8ULiFJ5BexchyPW3yx77n3RApBWH5HXG6M5Luwpl58523hUBt40Cn7X3qQx2luCX NOGZNkdmEajWybqBo1P3K7weMV8EMcIEIFwXneN3XGRTawoNNohLqhGKDyqXx41C tuD5L4vNuOKfnJAayyzhQvIccdD6UYpZwxBatOFhhlNGbFFtFoFiBGIgvUsOh35o /gAlwHWZtddWERCUfMYoH6dKT5EPclrorDRYVrcb74dc//6oWY+XL5g0Eetnos9Z +lHbUne7Pt4xa4oADDbEjl2WewIDAQABo4IClTCCApEwHQYDVR0OBBYEFMrmhpF1 35ACfjWxiM9YNt6B9OAjMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNDcxRTlDOTA4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6tbIwDQYJKoZIhvcNAQELBQADggEBAEGO6wiGV6L8S6yr uZGh6jDR249VzYbzMREQXW78GxlWSjWcaLAuvFJsjN4XRqmRMmz+YW0nAaOG/nUJ GHTloLwL9JcwYsxmdar8amXcp4shmwOzIXC0G2P3IiLyx3ewWCcwq5maRZVeRNQJ IBbjnQ+qgwYOu/jk8ZcfNwoO676bNx7lw4+lPHMBZdUe8SUcgLoaaAQHaXzvQUOf e3xegYkw8lR0PND5nj70LKIfc+jXsSkXoE5ywXdXueBNClqk0D8uE8Tep00+qSvT 04tsanjExJp9wIx4arwJfkbQTGYL7cJ+dD30kWyoBwWphTPyBF1x74+1ZtsPiBCC mjGwa5U= -----END CERTIFICATE-----Generated at Sun Feb 16 22:23:25 2025 by rpki-client