$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa File: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (raw, json) Hash identifier: pAxKOEsb1/KFe+q3FlaBgvrNZLF2dQ46tY3qWb9WHrw= Subject key identifier: 69:6E:6C:8C:88:22:DD:2A:D1:63:83:09:34:B6:4F:77:68:23:40:E3 Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Certificate serial: 0740 Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa Signing time: Tue 12 Nov 2024 21:19:52 +0000 ROA not before: Tue 12 Nov 2024 21:19:52 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 7545 IP address blocks: 203.4.197.0/24 maxlen: 24 203.4.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1856 (0x740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Validity Not Before: Nov 12 21:19:52 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6733c678-a481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:27:97:4b:f5:28:92:03:67:81:04:81:e2: 6b:6c:cd:d0:11:a2:2e:54:d9:83:4c:be:66:4a:a1: 19:75:12:b5:cd:ba:ca:06:36:7c:3a:c7:75:61:17: d4:29:0e:26:46:a6:bb:13:24:d4:b0:f3:77:6a:12: 2c:da:32:53:25:98:09:9e:34:27:56:74:f5:9e:4e: 52:38:22:28:1b:3c:79:ae:8a:c0:e9:a1:ba:53:d4: a7:9a:0c:47:d0:bc:6a:53:42:71:05:a2:fd:6d:78: 8e:2b:86:25:af:c7:ea:56:d3:65:4e:8e:42:7b:13: c3:d8:9a:c0:9f:07:03:08:c4:d2:77:1f:c2:69:4e: 5f:91:e2:bf:3b:a6:1a:b3:99:df:87:71:b0:bc:f0: f7:bd:8a:f5:76:bf:41:88:da:e2:51:99:59:2b:23: da:dd:65:f5:88:7d:3e:5a:c0:12:9d:89:ff:ff:48: fb:0f:49:d5:72:2c:8d:ad:17:e1:16:12:51:fd:9f: 31:b8:2e:a9:ac:15:cb:1a:e8:ad:df:9b:ba:47:e7: 53:8f:fb:60:08:2d:05:9b:7c:b3:ab:d2:34:b2:12: a5:1d:8c:fd:66:cf:f6:8e:75:38:e9:c8:ae:a7:5e: f4:96:59:31:7c:33:ae:d2:44:89:98:be:27:de:b7: 3d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6E:6C:8C:88:22:DD:2A:D1:63:83:09:34:B6:4F:77:68:23:40:E3 X509v3 Authority Key Identifier: keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/24D4F9F0E61B11EBBAE35771C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.4.197.0-203.4.198.255 Signature Algorithm: sha256WithRSAEncryption a1:96:76:81:06:07:ad:66:04:c0:08:83:c0:46:33:47:90:16: 14:56:e8:d9:46:77:40:58:f3:68:00:af:81:a9:b1:bf:8c:9d: f3:52:93:fd:8e:2e:df:44:70:fc:18:54:b5:de:93:a7:3c:de: 3d:2e:5b:d7:0c:ca:3d:8d:64:87:26:fa:25:dc:6c:ea:eb:be: a6:08:86:c8:cd:4f:14:36:42:e9:b2:c2:cd:3d:92:8c:e7:0a: 09:31:85:c9:83:b6:19:89:5b:59:14:1a:85:ad:bb:41:7c:8d: 61:92:e4:05:0b:49:0f:24:71:0e:c2:5b:db:a2:29:7f:6f:97: 15:d2:d3:a0:50:4e:11:5b:a8:98:49:56:3d:e1:c0:59:5d:02: fc:5f:a3:f6:81:67:09:b9:05:04:e1:eb:fd:0b:06:ef:23:0d: b7:93:ec:97:41:9d:ad:21:fc:31:40:51:27:db:71:58:ce:3d: 0b:a1:80:42:f1:d3:bc:c3:f9:d5:d7:06:22:c9:d6:c9:f1:9f: 4c:a2:7c:93:cf:eb:97:97:3c:84:48:eb:a7:df:db:c0:eb:e3: f3:4e:e4:0c:c5:3f:14:7e:3f:6f:ca:67:c9:8c:c2:fd:29:a5: 8b:4c:e0:f8:e3:4d:a0:95:51:51:49:85:b2:32:7d:d0:46:7d: 20:20:4d:ea -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0RTkxMTAvBgNVBAUTKEM0MkZGMUQyRkYzNTI5ODFCQzVGODIyNDBFQzkzOTRF RkFCMzExODYwHhcNMjQxMTEyMjExOTUyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMzYzY3OC1hNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomEnl0v1KJIDZ4EEgeJrbM3QEaIuVNmDTL5mSqEZdRK1zbrKBjZ8Osd1YRfU KQ4mRqa7EyTUsPN3ahIs2jJTJZgJnjQnVnT1nk5SOCIoGzx5rorA6aG6U9SnmgxH 0LxqU0JxBaL9bXiOK4Ylr8fqVtNlTo5CexPD2JrAnwcDCMTSdx/CaU5fkeK/O6Ya s5nfh3GwvPD3vYr1dr9BiNriUZlZKyPa3WX1iH0+WsASnYn//0j7D0nVciyNrRfh FhJR/Z8xuC6prBXLGuit35u6R+dTj/tgCC0Fm3yzq9I0shKlHYz9Zs/2jnU46ciu p170llkxfDOu0kSJmL4n3rc9uwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFGlubIyI It0q0WODCTS2T3doI0DjMB8GA1UdIwQYMBaAFMQv8dL/NSmBvF+CJA7JOU76sxGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRFOS9GRTU3QzJCQzA4 MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZRzhYNElrRHNrNVR2cXpF WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDX3gwdjgxS1lHOFg0SWtEc2s1VHZxekVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODE0RTkvRkU1N0MyQkMwODMwMTFFQkJGRTRDNzMyQzRGOUFFMDIvMjRENEY5RjBF NjFCMTFFQkJBRTM1NzcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAMsExQMEAMsExjANBgkqhkiG9w0BAQsFAAOCAQEAoZZ2 gQYHrWYEwAiDwEYzR5AWFFbo2UZ3QFjzaACvgamxv4yd81KT/Y4u30Rw/BhUtd6T pzzePS5b1wzKPY1khyb6Jdxs6uu+pgiGyM1PFDZC6bLCzT2SjOcKCTGFyYO2GYlb WRQaha27QXyNYZLkBQtJDyRxDsJb26Ipf2+XFdLToFBOEVuomElWPeHAWV0C/F+j 9oFnCbkFBOHr/QsG7yMNt5Psl0GdrSH8MUBRJ9txWM49C6GAQvHTvMP51dcGIsnW yfGfTKJ8k8/rl5c8hEjrp9/bwOvj807kDMU/FH4/b8pnyYzC/Smli0zg+ONNoJVR UUmFsjJ90EZ9ICBN6g== -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:42 2024 by rpki-client on console-fra.rpki-client.org