$ rpki-client -vvf rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/54692EB02FB111EFAD1C6322C4F9AE02.roa File: 54692EB02FB111EFAD1C6322C4F9AE02.roa (raw, json) Hash identifier: htvjEjCXOkW/zLBD0gHg0KDfRWwqB/ypPFNwonZP/5s= Subject key identifier: 4A:A1:08:CA:05:63:9F:37:FE:71:8B:06:1B:22:C4:26:DA:4B:43:68 Certificate issuer: /CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E Certificate serial: 78 Authority key identifier: E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/54692EB02FB111EFAD1C6322C4F9AE02.roa Signing time: Fri 21 Jun 2024 09:33:34 +0000 ROA not before: Fri 21 Jun 2024 09:33:34 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 16509 IP address blocks: 124.110.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Sep 2024 03:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E Validity Not Before: Jun 21 09:33:34 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=667548ee-aeed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c3:ea:f8:7b:f1:5f:9e:35:20:ab:43:19:78: 42:89:96:b2:e2:d9:b7:7e:8f:27:ab:fc:df:bc:2b: 2f:62:ae:45:83:cd:84:fc:a4:6b:e3:47:81:6b:cc: cd:a4:df:20:79:b3:3b:e2:fd:d1:42:8f:bb:a6:f7: dc:87:64:91:66:d4:c7:8f:aa:f7:af:6a:21:64:f9: 91:b6:e6:07:d5:b6:c1:cf:77:13:02:a3:d9:f7:82: 63:07:fc:0a:bc:51:7b:36:b5:c7:d2:a6:4a:95:56: 96:d8:69:00:86:c2:e9:46:e8:40:21:3f:89:ac:4f: 3f:32:c6:80:b9:29:13:2f:b7:55:7c:b6:ad:c7:b8: eb:69:77:a3:fa:5d:ca:1a:20:33:68:3b:fc:19:31: 97:36:92:e4:d7:53:55:c0:89:d2:20:fb:d7:27:14: 55:af:d9:20:66:11:9f:35:52:10:80:17:1b:3f:20: 91:36:4a:10:c5:8b:0f:f2:7f:f7:62:75:35:3d:c4: ce:e8:ab:46:77:15:17:51:9f:d5:8d:cf:4f:7c:cb: f4:09:db:b1:45:2e:97:a0:3d:0b:3d:35:c1:7c:f4: ab:29:83:8a:f0:ea:c5:6c:22:e7:2b:bc:d1:e4:7d: ba:09:f0:55:f4:ea:c6:fe:29:da:c4:64:44:f3:c5: ee:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A1:08:CA:05:63:9F:37:FE:71:8B:06:1B:22:C4:26:DA:4B:43:68 X509v3 Authority Key Identifier: keyid:E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/54692EB02FB111EFAD1C6322C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.110.200.0/21 Signature Algorithm: sha256WithRSAEncryption 46:82:07:4b:00:93:27:01:fb:05:36:1a:4f:45:dc:ed:7c:7b: b2:da:c3:57:24:64:c4:b3:c3:76:9b:db:89:4d:45:20:02:63: 4c:6c:87:1d:64:f2:3e:21:e4:14:81:fb:4f:33:c3:cf:0d:5b: b5:6a:b1:f6:9b:7b:45:48:93:d0:fb:02:36:5b:52:c4:5c:0c: 9e:f8:d0:56:fe:79:45:f4:ff:e1:92:22:d6:f0:d6:b9:6a:d8: 1b:05:01:19:43:73:e8:f9:13:e8:eb:cc:c3:55:a3:b9:fd:44: d4:fa:d4:3b:88:2c:dd:fb:49:c2:de:b3:83:05:b2:d5:27:76: 12:ad:51:ec:73:9b:74:6a:ef:08:b9:78:73:77:88:16:b4:e3: 28:04:37:20:c1:38:a2:a4:4b:13:d0:94:16:0b:c8:b8:25:1b: d9:92:f9:7c:3b:80:33:f8:bb:8a:e3:63:70:c4:e0:1b:72:a0: 4f:61:aa:35:e8:46:60:3f:ca:e1:64:e7:cb:ef:d9:cb:d4:b2: de:f3:eb:a9:d3:db:2b:2a:fe:b0:36:70:74:a7:01:32:21:40: 68:14:31:36:0d:34:64:b1:60:0b:09:64:da:c3:ab:22:3b:69: 0e:f6:fb:d6:30:cd:a2:7a:02:97:02:5d:50:aa:8f:b5:1d:ea: 99:9e:11:7d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTM3NzExMC8GA1UEBRMoRTc5NDkzRjMwQTNFRTlGMEVFNDA1MjJGRjE5RDY4NUM4 MDYyQkE2RTAeFw0yNDA2MjEwOTMzMzRaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NzU0OGVlLWFlZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyw+r4e/FfnjUgq0MZeEKJlrLi2bd+jyer/N+8Ky9irkWDzYT8pGvjR4FrzM2k 3yB5szvi/dFCj7um99yHZJFm1MePqvevaiFk+ZG25gfVtsHPdxMCo9n3gmMH/Aq8 UXs2tcfSpkqVVpbYaQCGwulG6EAhP4msTz8yxoC5KRMvt1V8tq3HuOtpd6P6Xcoa IDNoO/wZMZc2kuTXU1XAidIg+9cnFFWv2SBmEZ81UhCAFxs/IJE2ShDFiw/yf/di dTU9xM7oq0Z3FRdRn9WNz098y/QJ27FFLpegPQs9NcF89Kspg4rw6sVsIucrvNHk fboJ8FX06sb+KdrEZETzxe4tAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUSqEIygVj nzf+cYsGGyLEJtpLQ2gwHwYDVR0jBBgwFoAU55ST8wo+6fDuQFIv8Z1oXIBium4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFMzc3LzhBNkQxMEI2ODgz QzExRUU5NTU2QkI2RUM0RjlBRTAyLzU1U1Q4d28tNmZEdVFGSXY4WjFvWElCaXVt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNTVTVDh3by02ZkR1UUZJdjhaMW9YSUJpdW00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM3Ny84QTZEMTBCNjg4M0MxMUVFOTU1NkJCNkVDNEY5QUUwMi81NDY5MkVCMDJG QjExMUVGQUQxQzYzMjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA3xuyDANBgkqhkiG9w0BAQsFAAOCAQEARoIHSwCTJwH7BTYa T0Xc7Xx7strDVyRkxLPDdpvbiU1FIAJjTGyHHWTyPiHkFIH7TzPDzw1btWqx9pt7 RUiT0PsCNltSxFwMnvjQVv55RfT/4ZIi1vDWuWrYGwUBGUNz6PkT6OvMw1Wjuf1E 1PrUO4gs3ftJwt6zgwWy1Sd2Eq1R7HObdGrvCLl4c3eIFrTjKAQ3IME4oqRLE9CU FgvIuCUb2ZL5fDuAM/i7iuNjcMTgG3KgT2GqNehGYD/K4WTny+/Zy9Sy3vPrqdPb Kyr+sDZwdKcBMiFAaBQxNg00ZLFgCwlk2sOrIjtpDvb71jDNonoClwJdUKqPtR3q mZ4RfQ== -----END CERTIFICATE-----Generated at Sat Sep 7 08:24:31 2024 by rpki-client on console-ams.rpki-client.org