$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/CF2E99C88C0911EAAFF6CD27C4F9AE02.roa File: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (raw, json) Hash identifier: j8fhU7exqqelZLDvGV+LiToUg9srXBfjEzKSUgs/K/M= Subject key identifier: E1:89:0B:D6:E4:44:F1:38:F5:65:08:18:0F:1A:3B:23:57:83:9A:0D Certificate issuer: /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592 Certificate serial: 0953 Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/CF2E99C88C0911EAAFF6CD27C4F9AE02.roa Signing time: Wed 16 Oct 2024 20:39:05 +0000 ROA not before: Wed 16 Oct 2024 20:39:05 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 16509 IP address blocks: 203.210.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2387 (0x953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592 Validity Not Before: Oct 16 20:39:05 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67102468-e01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:38:1a:a4:51:98:e9:93:80:07:9f:97:84:ec: ae:0d:93:63:ff:ce:7d:3f:58:7b:c0:8e:53:ed:ba: 17:60:7d:5d:dd:7f:80:c7:ea:be:eb:70:66:b6:c6: d6:50:f8:69:e0:54:d7:f0:d0:89:86:04:73:3a:8b: b7:ea:08:c6:99:cf:23:14:86:28:d1:42:49:da:67: de:a2:6e:4c:7b:6e:b7:f8:c7:f0:20:e2:90:20:62: 29:17:35:84:cf:84:2b:4a:bb:a7:72:2a:38:bd:63: 0e:54:6e:3b:dd:2a:f3:b8:50:51:25:9c:63:50:33: 02:87:36:4d:cc:77:5f:9e:96:c9:87:54:ff:c7:c4: 20:af:0e:4e:03:9e:91:da:62:1c:84:f0:24:29:de: c8:a3:7d:2b:a4:db:bb:b6:b4:5f:d6:e0:6e:b8:c3: 2a:8b:16:b8:df:77:dc:62:58:32:73:ed:39:9b:26: 15:62:32:6e:a9:f9:7f:57:20:3d:07:9e:79:23:e0: 2e:3d:4c:ce:47:11:43:d2:75:0d:a7:cf:95:8c:aa: 60:30:49:bd:81:af:f4:a7:94:d3:30:75:b0:2a:8b: 23:94:19:9d:4d:77:a1:99:2f:65:aa:c1:7c:12:bf: 8e:ef:d9:7d:59:76:c2:c6:d4:3b:70:27:c3:d4:b4: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:89:0B:D6:E4:44:F1:38:F5:65:08:18:0F:1A:3B:23:57:83:9A:0D X509v3 Authority Key Identifier: keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/CF2E99C88C0911EAAFF6CD27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.210.75.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:e4:58:3f:13:5a:0a:06:85:9b:de:64:da:26:03:a6:6a:64: 98:8f:8c:de:bb:41:03:3b:a3:e8:d3:cb:58:39:3a:d4:38:8a: 79:ca:d9:47:23:55:52:64:60:bb:35:ef:fe:82:f2:d2:a0:2b: c1:56:d3:93:51:c1:12:e9:db:4f:52:64:fd:9a:d2:f9:82:38: a0:61:3c:18:91:8c:79:8f:56:cd:b8:44:da:be:fb:aa:db:38: cf:84:bc:c1:50:3f:92:7e:db:54:5a:3f:22:57:7f:3b:84:d8: 21:e6:81:ec:32:f7:db:8b:79:20:63:9c:89:3f:d0:d8:8a:80: 9c:fa:fa:36:0b:ee:dd:8d:7e:c2:9f:13:92:2a:9d:2c:0b:80: 0d:61:ff:de:e2:93:c3:8a:15:ba:fa:d6:b5:8a:09:4f:2c:40: 00:28:4a:64:9e:b3:7b:6f:85:4d:8f:fa:e1:fe:e9:f3:25:3b: 8d:64:32:96:5c:01:18:b0:7f:78:65:a3:09:5d:2b:2f:92:92: 1d:db:8a:b6:2e:25:95:60:65:d6:8b:3a:95:f4:6b:f7:3a:0c: 83:11:a5:85:3d:98:2c:0a:2b:4d:07:59:eb:76:88:16:44:10: b2:97:4b:63:69:d6:16:cc:f5:97:a5:6c:29:cd:44:1b:af:29: eb:ff:97:50 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NjYxMTAvBgNVBAUTKDMyODQzMzg0RkFFNkFGNkMzMTc2RTFERjc0RTkwODgx RDZEOTc1OTIwHhcNMjQxMDE2MjAzOTA1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzEwMjQ2OC1lMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8TgapFGY6ZOAB5+XhOyuDZNj/859P1h7wI5T7boXYH1d3X+Ax+q+63BmtsbW UPhp4FTX8NCJhgRzOou36gjGmc8jFIYo0UJJ2mfeom5Me263+MfwIOKQIGIpFzWE z4QrSruncio4vWMOVG473SrzuFBRJZxjUDMChzZNzHdfnpbJh1T/x8Qgrw5OA56R 2mIchPAkKd7Io30rpNu7trRf1uBuuMMqixa433fcYlgyc+05myYVYjJuqfl/VyA9 B555I+AuPUzORxFD0nUNp8+VjKpgMEm9ga/0p5TTMHWwKosjlBmdTXehmS9lqsF8 Er+O79l9WXbCxtQ7cCfD1LSWfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOGJC9bk RPE49WUIGA8aOyNXg5oNMB8GA1UdIwQYMBaAFDKEM4T65q9sMXbh33TpCIHW2XWS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY2Ni82MjNDRDZFNDg0 RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIyd3hkdUhmZE9rSWdkYlpk WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01vUXpoUHJtcjJ3eGR1SGZkT2tJZ2RiWmRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTg2NjYvNjIzQ0Q2RTQ4NEYzMTFFQUIxRkJCQjE4QzRGOUFFMDIvQ0YyRTk5Qzg4 QzA5MTFFQUFGRjZDRDI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADL0kswDQYJKoZIhvcNAQELBQADggEBAEvkWD8TWgoGhZve ZNomA6ZqZJiPjN67QQM7o+jTy1g5OtQ4innK2UcjVVJkYLs17/6C8tKgK8FW05NR wRLp209SZP2a0vmCOKBhPBiRjHmPVs24RNq++6rbOM+EvMFQP5J+21RaPyJXfzuE 2CHmgewy99uLeSBjnIk/0NiKgJz6+jYL7t2NfsKfE5IqnSwLgA1h/97ik8OKFbr6 1rWKCU8sQAAoSmSes3tvhU2P+uH+6fMlO41kMpZcARiwf3hlowldKy+Skh3birYu JZVgZdaLOpX0a/c6DIMRpYU9mCwKK00HWet2iBZEELKXS2Np1hbM9ZelbCnNRBuv Kev/l1A= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:07 2024 by rpki-client on console-ams.rpki-client.org