$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/BCAE5314F75C11EB95BE8C87C4F9AE02.roa File: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (raw, json) Hash identifier: 0j4qXjmpQjaICT1LO2qciryz+Oskgntzqwfwnl8SXbw= Subject key identifier: C2:92:D4:64:BC:4C:75:88:57:8A:AA:F2:17:56:AB:38:4C:70:72:76 Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Certificate serial: 2615 Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/BCAE5314F75C11EB95BE8C87C4F9AE02.roa Signing time: Wed 10 Apr 2024 16:22:47 +0000 ROA not before: Wed 10 Apr 2024 16:22:47 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 17557 IP address blocks: 124.109.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9749 (0x2615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Validity Not Before: Apr 10 16:22:47 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6616bcd7-7e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:29:58:28:47:08:33:a9:f7:e0:17:49:0e: 28:a5:a8:a3:19:9e:1a:6f:de:fc:a5:64:21:f5:4a: 29:0c:73:a1:19:5e:78:2f:fe:55:f7:17:8c:d3:7f: 0d:85:34:27:42:a6:6f:23:d9:79:60:54:60:93:bb: 07:be:45:bf:2a:36:c0:97:ca:eb:ed:b5:16:cd:fc: 04:6a:22:f4:fb:f7:5b:ab:cc:ad:2c:d1:fa:18:0a: eb:06:69:25:8e:84:e4:a0:bf:29:34:aa:ed:f9:91: 9f:37:b5:65:5e:6c:aa:d3:cd:21:63:df:10:7a:5e: 7e:15:6a:9d:5f:27:53:23:8b:fc:ea:68:b4:f1:8f: 15:bc:8e:e6:56:ef:3e:1c:13:26:e7:6f:d5:ec:0c: 3a:b4:1c:fa:f5:ed:e5:f9:4f:1e:59:5a:1a:7d:6d: 87:e4:a2:44:93:70:07:d7:52:be:78:dc:58:c4:f0: 5a:75:5a:31:72:a2:2b:3d:e2:ec:2d:20:63:2a:2d: ed:2e:3e:5d:f4:7b:cd:11:41:09:f6:2f:45:63:f9: 31:0e:00:31:bb:ba:46:77:e5:ff:4a:94:a6:35:af: f8:32:04:62:4a:4f:8f:15:4b:57:29:3a:eb:44:07: 19:31:cf:3c:c2:92:35:02:96:70:2f:71:0f:c4:fa: 62:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:92:D4:64:BC:4C:75:88:57:8A:AA:F2:17:56:AB:38:4C:70:72:76 X509v3 Authority Key Identifier: keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/BCAE5314F75C11EB95BE8C87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.109.63.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:28:a1:6c:16:66:08:c5:43:20:52:27:80:20:50:6e:39:41: a2:ed:c9:c3:2d:58:27:af:ec:d9:e2:50:7e:92:d9:a4:21:0b: fc:15:93:8c:40:65:62:95:41:f5:f4:30:5f:21:07:1b:11:ca: 4c:19:4a:5c:8a:a8:e4:ed:3b:3a:37:ab:15:ea:c0:45:1a:a0: 9d:5a:91:c3:cc:14:9d:92:4b:a0:48:45:f0:0f:6f:fd:d8:62: 90:32:3c:33:1a:38:0c:1c:d4:b3:f0:80:e6:43:db:37:6a:3c: 50:ba:a0:15:09:44:44:40:b5:a8:71:f0:94:ac:a0:3a:ee:d1: 5c:06:61:ce:a0:bd:88:77:a0:d0:48:99:29:bb:5a:5f:11:1f: be:8d:16:c0:c4:c1:04:68:b9:b7:4e:86:8a:93:6e:ab:e2:a9: a4:d5:8f:be:f1:46:39:ac:74:b6:8c:8a:7c:4e:db:7c:26:3c: 7a:dd:94:27:c6:10:d3:50:39:c4:85:d8:0e:ef:32:6b:19:bc: 3b:84:16:a7:dc:fd:5d:1d:03:5c:b1:74:68:6e:df:00:cb:d4: c4:c3:29:b9:4e:57:f7:9c:90:71:10:ae:9d:84:4e:11:93:66: 0f:fc:48:39:9d:89:36:34:f4:2e:6f:f3:c3:59:ba:61:08:cd: e5:06:1c:40 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE MEFCOTRCRTUwHhcNMjQwNDEwMTYyMjQ3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE2YmNkNy03ZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIQpWChHCDOp9+AXSQ4opaijGZ4ab978pWQh9UopDHOhGV54L/5V9xeM038N hTQnQqZvI9l5YFRgk7sHvkW/KjbAl8rr7bUWzfwEaiL0+/dbq8ytLNH6GArrBmkl joTkoL8pNKrt+ZGfN7VlXmyq080hY98Qel5+FWqdXydTI4v86mi08Y8VvI7mVu8+ HBMm52/V7Aw6tBz69e3l+U8eWVoafW2H5KJEk3AH11K+eNxYxPBadVoxcqIrPeLs LSBjKi3tLj5d9HvNEUEJ9i9FY/kxDgAxu7pGd+X/SpSmNa/4MgRiSk+PFUtXKTrr RAcZMc88wpI1ApZwL3EPxPpi4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMKS1GS8 THWIV4qq8hdWqzhMcHJ2MB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTYyMkYvNjk3NTQ4QzhEQUNDMTFFNEE4MUFCRTUwQzRGOUFFMDIvQkNBRTUzMTRG NzVDMTFFQjk1QkU4Qzg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB8bT8wDQYJKoZIhvcNAQELBQADggEBAI4ooWwWZgjFQyBS J4AgUG45QaLtycMtWCev7NniUH6S2aQhC/wVk4xAZWKVQfX0MF8hBxsRykwZSlyK qOTtOzo3qxXqwEUaoJ1akcPMFJ2SS6BIRfAPb/3YYpAyPDMaOAwc1LPwgOZD2zdq PFC6oBUJRERAtahx8JSsoDru0VwGYc6gvYh3oNBImSm7Wl8RH76NFsDEwQRoubdO hoqTbqviqaTVj77xRjmsdLaMinxO23wmPHrdlCfGENNQOcSF2A7vMmsZvDuEFqfc /V0dA1yxdGhu3wDL1MTDKblOV/eckHEQrp2EThGTZg/8SDmdiTY09C5v88NZumEI zeUGHEA= -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:02 2024 by rpki-client on console-ams.rpki-client.org