$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4AEE35608DB811E98ACC9F7EC4F9AE02.roa File: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: fkmpdzQWy7yxmakJ09stjz11PIAgWGUDm5gwI5DEe7k= Subject key identifier: 28:AA:8D:F7:2F:DE:03:9D:60:D0:FE:13:28:5A:E7:B9:93:0B:FF:FE Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 34EF Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4AEE35608DB811E98ACC9F7EC4F9AE02.roa Signing time: Mon 22 Jul 2024 14:40:41 +0000 ROA not before: Mon 22 Jul 2024 14:40:41 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 58544 IP address blocks: 58.181.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA Validity Not Before: Jul 22 14:40:41 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=669e6f69-bf3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3e:51:2e:19:aa:2b:eb:02:55:97:31:74:2b: ee:94:95:7a:ce:73:26:ab:18:99:ad:9b:ab:74:73: 06:f8:36:fb:3b:f3:8f:60:de:df:a6:5d:79:4b:4f: ce:ad:11:1d:18:29:19:96:67:0c:9e:34:24:26:8b: 64:80:fb:54:8d:e6:f7:c3:a6:7a:cb:45:02:1a:bf: 23:bc:6e:45:a0:05:96:87:06:bf:9b:62:d6:25:ad: c1:39:0a:21:1f:37:aa:2c:8a:f7:0c:78:3b:74:5a: 69:9f:87:a7:1d:61:9e:fd:c7:05:c8:f1:e3:31:1e: 22:df:8d:95:99:ea:c3:ae:82:0f:49:27:fb:1b:3d: 66:4e:7d:72:2f:5a:db:a4:1c:18:8e:eb:c2:fb:97: 44:ee:0e:27:33:69:17:50:be:c7:35:84:52:6a:97: a1:3f:ca:9e:e7:e6:56:8d:0c:14:36:0d:9f:04:5b: c3:d9:44:52:c6:74:2e:a3:96:87:6a:63:9e:5f:df: 24:ec:46:21:38:17:43:c4:71:ad:44:b9:cb:12:97: 2a:73:f3:53:48:c8:94:c8:32:10:76:6e:1d:eb:e3: 4f:ce:b6:a4:04:ce:62:2c:d9:82:f5:51:ba:29:c6: 43:5a:69:53:a4:7e:7e:8a:7c:bd:17:46:c3:7d:57: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AA:8D:F7:2F:DE:03:9D:60:D0:FE:13:28:5A:E7:B9:93:0B:FF:FE X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4AEE35608DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.181.203.0/24 Signature Algorithm: sha256WithRSAEncryption 15:07:83:9b:64:78:c2:72:29:c8:5d:67:00:8b:d0:98:9d:53: bf:78:99:d8:ba:a1:d6:d7:6b:9d:60:78:5e:b5:e7:ef:0a:23: 0d:e3:00:fb:97:f9:6b:b3:12:f0:ef:db:db:c6:3d:ba:96:ed: 08:8f:6e:c1:3e:5f:8f:37:76:c6:98:f5:b1:61:c8:a6:1a:58: 2d:55:bf:19:36:4c:4a:b5:bf:3d:93:f8:a3:39:97:94:e9:d0: 21:30:a1:c1:25:bf:b0:c8:ec:20:f7:32:57:25:f5:a0:59:5f: 72:6d:5d:05:df:c8:24:48:69:89:8b:15:7d:9e:89:2a:bd:c6: a5:bf:95:10:3a:93:4e:dc:22:79:7c:64:a6:46:af:24:a5:75: c8:35:a2:45:9b:7c:7c:da:82:a9:26:0e:50:23:2d:8c:42:dc: 60:62:eb:71:32:0f:85:ac:83:82:07:34:e3:73:a7:1d:37:bc: ec:15:09:84:73:bb:e5:37:f4:03:d0:54:d2:59:e0:e6:87:c7: ec:a8:96:a9:73:46:11:47:e0:8f:46:d8:5f:22:06:a8:e3:b8: 7c:32:1c:41:30:65:9d:e4:a0:0d:ff:a5:2c:82:79:a3:f6:fc: 14:e7:86:df:b8:ed:63:6e:5e:6c:c1:79:3d:87:10:27:2b:9c: 46:43:f2:f4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjQwNzIyMTQ0MDQxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllNmY2OS1iZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4z5RLhmqK+sCVZcxdCvulJV6znMmqxiZrZurdHMG+Db7O/OPYN7fpl15S0/O rREdGCkZlmcMnjQkJotkgPtUjeb3w6Z6y0UCGr8jvG5FoAWWhwa/m2LWJa3BOQoh HzeqLIr3DHg7dFppn4enHWGe/ccFyPHjMR4i342VmerDroIPSSf7Gz1mTn1yL1rb pBwYjuvC+5dE7g4nM2kXUL7HNYRSapehP8qe5+ZWjQwUNg2fBFvD2URSxnQuo5aH amOeX98k7EYhOBdDxHGtRLnLEpcqc/NTSMiUyDIQdm4d6+NPzrakBM5iLNmC9VG6 KcZDWmlTpH5+iny9F0bDfVdFXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCiqjfcv 3gOdYND+Eyha57mTC//+MB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNEFFRTM1NjA4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6tcswDQYJKoZIhvcNAQELBQADggEBABUHg5tkeMJyKchd ZwCL0JidU794mdi6odbXa51geF615+8KIw3jAPuX+WuzEvDv29vGPbqW7QiPbsE+ X483dsaY9bFhyKYaWC1Vvxk2TEq1vz2T+KM5l5Tp0CEwocElv7DI7CD3Mlcl9aBZ X3JtXQXfyCRIaYmLFX2eiSq9xqW/lRA6k07cInl8ZKZGrySldcg1okWbfHzagqkm DlAjLYxC3GBi63EyD4Wsg4IHNONzpx03vOwVCYRzu+U39APQVNJZ4OaHx+yolqlz RhFH4I9G2F8iBqjjuHwyHEEwZZ3koA3/pSyCeaP2/BTnht+47WNuXmzBeT2HECcr nEZD8vQ= -----END CERTIFICATE-----Generated at Sun Feb 16 22:05:51 2025 by rpki-client