$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/9CDA9126F76611EE99BA2B43C4F9AE02.roa File: 9CDA9126F76611EE99BA2B43C4F9AE02.roa (raw, json) Hash identifier: OpyXnyA/Ad1XYEszmU5CKJ88pHcx3yghHfsVKBcNcyY= Subject key identifier: 11:55:E2:D6:F7:73:E1:61:71:AB:AC:9F:21:54:A1:5F:13:DD:8B:1C Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 63 Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/9CDA9126F76611EE99BA2B43C4F9AE02.roa Signing time: Wed 10 Apr 2024 18:27:12 +0000 ROA not before: Wed 10 Apr 2024 18:27:11 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 152300 IP address blocks: 36.50.240.0/24 maxlen: 31 36.50.241.0/24 maxlen: 31 2001:df3:5240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Validity Not Before: Apr 10 18:27:11 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=6616d9ff-07ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:30:1a:67:cf:a6:58:1e:4a:53:d7:2e:af: f5:b2:9f:ef:27:5f:bb:44:3e:f6:ca:08:9b:80:ba: 91:0b:33:8e:de:5a:2c:5b:41:b0:5a:b5:54:14:c7: 55:5d:1b:2f:e2:c4:ae:9b:75:fc:c2:14:73:46:71: 8d:0c:ce:a7:3e:90:98:69:52:a3:25:da:e3:02:2e: b6:08:de:de:26:eb:91:e5:9e:8f:cb:12:5e:aa:f6: 48:ab:9c:cf:90:9c:82:9a:8d:12:b4:2f:fa:11:19: a7:e5:1c:57:52:06:80:82:d6:d2:7a:4b:39:9c:02: 1f:26:3f:f8:6e:de:7b:44:8c:b6:c1:54:ec:48:88: eb:83:22:ea:d4:bc:15:ce:96:ac:6d:b8:8e:92:38: af:a5:32:dc:51:52:68:7f:8f:c5:eb:ff:67:60:4f: 3f:37:27:f4:37:5e:d0:08:da:81:f5:2d:2a:d1:7f: d5:fd:ac:8b:8f:63:57:77:7d:b2:64:9a:01:ae:1e: 80:7c:53:32:5d:4a:e9:f6:2d:68:d2:60:ca:a9:0a: 66:cd:4c:66:54:48:ed:7a:ad:e5:84:ad:50:33:54: 5b:2b:19:cd:fc:48:25:5f:3c:d1:4e:09:15:f8:fb: 63:f5:03:47:ad:15:54:9f:a5:b1:a1:25:a3:52:e4: 4f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:55:E2:D6:F7:73:E1:61:71:AB:AC:9F:21:54:A1:5F:13:DD:8B:1C X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/9CDA9126F76611EE99BA2B43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.240.0/23 IPv6: 2001:df3:5240::/48 Signature Algorithm: sha256WithRSAEncryption 1b:a0:a9:9f:5e:94:0c:f2:31:e0:5a:de:66:35:14:87:a6:fe: 72:c8:80:28:2d:d3:00:ac:08:3e:d1:ed:ab:29:15:38:5f:a7: fc:4c:7d:54:21:f7:8f:5b:8a:72:fc:3b:47:26:00:8d:a6:a6: 90:cd:11:61:cb:37:0d:e9:10:03:24:d9:0a:17:2e:68:ec:78: ae:bb:f2:ff:a7:9c:59:04:f8:16:df:b1:89:93:52:82:d0:82: 2c:d6:75:60:cd:31:d6:1b:e9:0d:7b:57:c3:d6:b5:c1:30:c6: c2:6e:b7:31:c9:b5:05:45:15:24:8f:73:ba:c4:b2:b6:14:fe: 85:c3:ba:df:dc:ec:ef:ed:be:4d:1e:49:be:21:16:de:ac:44: de:a5:b7:3b:4f:73:f2:eb:b5:d3:e5:cf:a4:ce:84:23:fe:30: e2:eb:fb:bc:6c:9e:9a:68:0c:f6:61:84:c9:e5:24:d5:bc:00: 79:a2:23:d1:d8:26:1f:b7:0f:b9:fa:bd:05:91:99:37:27:b9: 68:25:79:e2:1d:8b:a0:00:86:4f:a7:11:38:ab:e2:98:60:aa: 88:51:bb:0a:e2:7b:e9:f0:87:df:d9:b2:48:ea:e2:5e:0a:d7: 57:af:2d:5e:72:ae:de:1a:ba:ed:41:32:1d:20:2f:7d:38:66: 3f:3b:53:5e -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTkyRDExMC8GA1UEBRMoQTgxRDBENjFGN0I3MzBEREI3NDJDQzQ4QUREODhBMDRE NDZGRDAyNDAeFw0yNDA0MTAxODI3MTFaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MTZkOWZmLTA3ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUnjAaZ8+mWB5KU9cur/Wyn+8nX7tEPvbKCJuAupELM47eWixbQbBatVQUx1Vd Gy/ixK6bdfzCFHNGcY0Mzqc+kJhpUqMl2uMCLrYI3t4m65Hlno/LEl6q9kirnM+Q nIKajRK0L/oRGaflHFdSBoCC1tJ6SzmcAh8mP/hu3ntEjLbBVOxIiOuDIurUvBXO lqxtuI6SOK+lMtxRUmh/j8Xr/2dgTz83J/Q3XtAI2oH1LSrRf9X9rIuPY1d3fbJk mgGuHoB8UzJdSun2LWjSYMqpCmbNTGZUSO16reWErVAzVFsrGc38SCVfPNFOCRX4 +2P1A0etFVSfpbGhJaNS5E8ZAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUEVXi1vdz 4WFxq6yfIVShXxPdixwwHwYDVR0jBBgwFoAUqB0NYfe3MN23QsxIrdiKBNRv0CQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExOTJEL0NDNjdEMjUyQTRC QzExRUU5RTVBNUQ3MkM0RjlBRTAyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBD US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUIwTllmZTNNTjIzUXN4SXJkaUtCTlJ2MENRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkyRC9DQzY3RDI1MkE0QkMxMUVFOUU1QTVENzJDNEY5QUUwMi85Q0RBOTEyNkY3 NjYxMUVFOTlCQTJCNDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEASQy8DAPBAIAAjAJAwcAIAEN81JAMA0GCSqGSIb3DQEBCwUA A4IBAQAboKmfXpQM8jHgWt5mNRSHpv5yyIAoLdMArAg+0e2rKRU4X6f8TH1UIfeP W4py/DtHJgCNpqaQzRFhyzcN6RADJNkKFy5o7Hiuu/L/p5xZBPgW37GJk1KC0IIs 1nVgzTHWG+kNe1fD1rXBMMbCbrcxybUFRRUkj3O6xLK2FP6Fw7rf3Ozv7b5NHkm+ IRberETepbc7T3Py67XT5c+kzoQj/jDi6/u8bJ6aaAz2YYTJ5STVvAB5oiPR2CYf tw+5+r0FkZk3J7loJXniHYugAIZPpxE4q+KYYKqIUbsK4nvp8Iff2bJI6uJeCtdX ry1ecq7eGrrtQTIdIC99OGY/O1Ne -----END CERTIFICATE-----Generated at Fri May 31 10:42:50 2024 by rpki-client on console-fra.rpki-client.org