$ rpki-client -vvf rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/94BF06A8F31D11EA8D62F57EC4F9AE02.roa File: 94BF06A8F31D11EA8D62F57EC4F9AE02.roa (raw, json) Hash identifier: KTuuAh3AHOrZB4qBHVBME28/yKLVl99NGNpmQ7xayeM= Subject key identifier: 82:D3:78:7A:61:41:B2:41:F7:A8:82:12:F1:D5:5B:68:F8:C2:BC:C4 Certificate issuer: /CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Certificate serial: 073B Authority key identifier: F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/94BF06A8F31D11EA8D62F57EC4F9AE02.roa Signing time: Fri 02 Aug 2024 22:40:29 +0000 ROA not before: Fri 02 Aug 2024 22:40:29 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 9241 IP address blocks: 202.170.32.0/20 maxlen: 20 202.170.33.0/24 maxlen: 24 202.170.36.0/24 maxlen: 24 202.170.38.0/24 maxlen: 24 202.170.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851 (0x73b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Validity Not Before: Aug 2 22:40:29 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66ad605d-8e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5e:81:62:2c:46:cb:e6:b3:49:ca:ea:23:1d: 68:a3:84:d0:21:80:8e:3a:34:26:cb:28:99:37:56: b1:77:39:4d:e4:d5:32:39:4d:13:5d:d8:99:a6:c8: 20:bc:98:5d:4e:15:a5:70:96:97:46:b7:80:8e:07: 93:3c:03:a1:ff:8c:8f:f5:54:2d:61:d9:d5:2a:2b: cd:c7:a6:62:a3:2c:91:a9:98:51:13:fe:62:f3:57: 94:35:50:6b:39:ab:1c:92:f2:c3:cd:41:2e:ab:a5: 65:bb:e5:0e:25:4f:1d:a8:a2:5e:f5:0e:ea:0d:4f: b4:d6:17:64:ab:7d:58:d7:2a:17:4f:4e:2a:9e:7a: 7b:80:36:94:e2:2d:7f:da:d6:5d:d7:e3:01:0c:55: e2:5b:56:aa:68:6e:92:f4:f7:fd:6b:f2:e2:e9:f2: d7:fe:41:6b:99:b4:22:d2:b7:49:88:ce:99:f0:f5: ba:49:e6:83:7e:69:03:7c:67:a2:06:71:50:da:cc: c3:62:46:b6:dd:e3:94:a4:29:44:b9:9e:79:dd:91: dc:04:73:01:82:19:c3:b0:51:63:4a:1b:32:48:be: 17:3a:20:9a:05:45:38:a8:5b:4e:dc:a6:f9:03:37: 35:c6:e6:69:75:ec:6d:d4:ca:f3:0b:17:d5:4d:53: ef:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D3:78:7A:61:41:B2:41:F7:A8:82:12:F1:D5:5B:68:F8:C2:BC:C4 X509v3 Authority Key Identifier: keyid:F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/94BF06A8F31D11EA8D62F57EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.170.32.0/20 Signature Algorithm: sha256WithRSAEncryption 64:22:a9:50:ce:dd:a7:48:72:42:25:a0:e3:d3:7b:73:be:bc: 8d:30:84:aa:2f:56:8e:11:1b:db:31:6c:c9:c4:ec:44:3b:3c: ee:f0:00:69:2f:25:4a:45:76:7c:79:ce:1d:21:d1:7b:8f:da: 16:5b:2a:d7:1f:ed:ff:9e:a4:ea:14:fb:67:81:a8:4e:4c:d5: c9:89:7f:ba:ea:e2:8f:28:16:7e:93:ae:58:b4:79:d2:68:d9: bb:4f:6f:05:f1:33:ae:f8:b2:ac:b7:9f:3b:73:87:46:92:e4: d4:c7:49:77:25:57:0e:64:69:da:66:11:44:4f:7a:af:dc:ff: 15:ed:d3:0d:1d:17:47:22:db:8b:24:7c:87:6a:76:fe:50:97: 7e:57:92:02:3e:52:55:7d:dd:7c:4a:e0:c6:4c:b2:a4:da:ae: cd:b3:c0:58:e7:cc:97:c8:ca:94:6a:8a:f2:82:84:30:58:ac: 7e:38:77:38:d1:d1:9a:cd:06:26:40:78:9e:f4:36:40:ef:35: 7a:71:de:1d:15:b0:5d:05:3c:21:ce:07:44:90:0c:43:ac:b0: f5:ac:ed:b2:70:cc:22:8d:a0:64:5e:e9:d9:fe:a9:c9:44:9f: 70:c9:14:b2:40:60:19:f6:6e:f1:5d:9b:28:af:45:d0:b1:9b: 92:dd:ad:61 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3QzAxMTAvBgNVBAUTKEY3NTE0M0FCNUJFODMwQkU5M0JDRDc3NkQzMzJCMEZE NUI3ODdFM0IwHhcNMjQwODAyMjI0MDI5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFkNjA1ZC04ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo16BYixGy+azScrqIx1oo4TQIYCOOjQmyyiZN1axdzlN5NUyOU0TXdiZpsgg vJhdThWlcJaXRreAjgeTPAOh/4yP9VQtYdnVKivNx6ZioyyRqZhRE/5i81eUNVBr OasckvLDzUEuq6Vlu+UOJU8dqKJe9Q7qDU+01hdkq31Y1yoXT04qnnp7gDaU4i1/ 2tZd1+MBDFXiW1aqaG6S9Pf9a/Li6fLX/kFrmbQi0rdJiM6Z8PW6SeaDfmkDfGei BnFQ2szDYka23eOUpClEuZ553ZHcBHMBghnDsFFjShsySL4XOiCaBUU4qFtO3Kb5 Azc1xuZpdext1MrzCxfVTVPvcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFILTeHph QbJB96iCEvHVW2j4wrzEMB8GA1UdIwQYMBaAFPdRQ6tb6DC+k7zXdtMysP1beH47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdDMC8wMThFQkU1OEYz MUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01MNlR2TmQyMHpLd19WdDRm anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxRkRxMXZvTUw2VHZOZDIwekt3X1Z0NGZqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE3QzAvMDE4RUJFNThGMzFBMTFFQUJDMDBDQzVDQzRGOUFFMDIvOTRCRjA2QThG MzFEMTFFQThENjJGNTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBATKqiAwDQYJKoZIhvcNAQELBQADggEBAGQiqVDO3adIckIl oOPTe3O+vI0whKovVo4RG9sxbMnE7EQ7PO7wAGkvJUpFdnx5zh0h0XuP2hZbKtcf 7f+epOoU+2eBqE5M1cmJf7rq4o8oFn6Trli0edJo2btPbwXxM674sqy3nztzh0aS 5NTHSXclVw5kadpmEURPeq/c/xXt0w0dF0ci24skfIdqdv5Ql35XkgI+UlV93XxK 4MZMsqTars2zwFjnzJfIypRqivKChDBYrH44dzjR0ZrNBiZAeJ70NkDvNXpx3h0V sF0FPCHOB0SQDEOssPWs7bJwzCKNoGRe6dn+qclEn3DJFLJAYBn2bvFdmyivRdCx m5LdrWE= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org