$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/FD206C4EF80B11EAA0659123C4F9AE02.roa File: FD206C4EF80B11EAA0659123C4F9AE02.roa (raw, json) Hash identifier: rbHmJ7wg+EQEHnyfTG4+nvFCGTpxVf1MlsE3F9F45/k= Subject key identifier: 01:61:57:53:78:1B:EB:73:9F:F1:1B:43:2F:A0:A5:B5:F5:B5:24:9A Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 34E6 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/FD206C4EF80B11EAA0659123C4F9AE02.roa Signing time: Thu 06 Jun 2024 15:11:09 +0000 ROA not before: Thu 06 Jun 2024 15:11:09 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 137059 IP address blocks: 114.130.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 14:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13542 (0x34e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Jun 6 15:11:09 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6661d18d-965a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f6:95:2e:7c:c4:57:f1:c3:0b:7a:72:ab:69: ee:9e:a6:02:e9:de:e3:2d:f8:d4:0b:fa:23:0d:71: b6:31:93:16:e4:7d:25:98:4d:47:6d:85:31:fb:d1: 87:f3:88:ff:df:00:83:5b:b3:09:6e:fd:e4:3b:b6: 68:73:d6:6f:c7:ec:2b:f9:a2:99:2d:ac:4f:cc:88: fd:2c:1b:8a:81:e6:ea:b6:69:ad:5b:97:1c:50:69: d1:31:44:1f:39:f7:45:57:f4:e7:24:01:6f:db:8e: ee:e0:4c:b8:64:78:b0:c3:5c:42:77:4d:b5:4a:65: 1b:75:8e:8c:95:fd:8d:cd:9d:02:1e:bb:04:88:01: b7:bf:53:97:a7:e3:42:75:59:a8:87:0e:38:7c:e3: e2:40:52:94:ad:ae:65:d3:06:f8:35:10:e8:bb:b1: ef:d5:86:6c:f1:7e:41:ac:cb:d4:92:0e:96:02:0c: 85:d2:05:2c:67:f1:3e:7d:ee:72:d8:42:22:67:b0: 9c:0e:dd:cd:55:93:8e:2c:71:94:d7:58:d0:d5:46: db:f7:c5:58:47:11:25:68:34:ae:f4:e4:8c:5a:5e: 0c:11:d7:cc:58:4e:c2:54:44:d0:79:fa:a3:9d:e2: 45:b2:93:39:87:a2:c3:1f:3c:68:f7:49:96:9b:59: 55:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:61:57:53:78:1B:EB:73:9F:F1:1B:43:2F:A0:A5:B5:F5:B5:24:9A X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/FD206C4EF80B11EAA0659123C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.130.78.0/24 Signature Algorithm: sha256WithRSAEncryption 00:02:e5:12:ff:fc:bd:60:f6:47:9d:51:94:09:53:08:46:cf: d6:ef:ec:e3:b7:9d:fb:c2:ce:e3:d2:56:ee:85:37:8b:66:40: 73:9e:81:ec:5b:1b:7f:50:4c:f4:c3:0c:76:7c:56:55:9f:36: 8f:13:22:f4:a3:2b:a6:c8:19:b4:47:fa:b5:a9:98:59:6d:57: bf:c2:7a:4f:0b:07:f5:8b:0d:83:36:ca:a0:9e:f7:c2:8c:13: 4e:56:1c:2e:a8:e5:32:3a:d2:a0:7c:ae:3e:b1:83:03:53:27: 42:66:5e:e9:4e:10:a3:6e:d8:8a:78:4c:bd:97:89:32:ba:5c: 2c:3f:aa:6c:c1:4d:48:19:3b:44:c5:d8:55:39:42:b3:e9:dc: fc:84:24:15:28:fd:ee:c1:da:8e:4a:a5:bd:a6:ef:4c:88:c7: a6:65:a4:8d:7f:1f:2f:8d:ad:1e:bf:e3:23:70:65:74:02:ee: 09:f0:33:4b:40:ae:44:a1:80:c6:f0:34:47:38:0e:53:65:b6: b3:62:68:60:a5:e6:2a:fc:7d:68:ee:5f:67:15:4a:60:eb:57: 43:07:3e:f5:c5:0d:5e:db:b3:d1:0c:af:8d:34:cb:62:66:a4: b0:34:3b:2a:27:b0:7d:18:ec:5e:8c:94:b0:d0:d0:a8:2d:3d: 98:b1:b0:ba -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjQwNjA2MTUxMTA5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjYxZDE4ZC05NjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/aVLnzEV/HDC3pyq2nunqYC6d7jLfjUC/ojDXG2MZMW5H0lmE1HbYUx+9GH 84j/3wCDW7MJbv3kO7Zoc9Zvx+wr+aKZLaxPzIj9LBuKgebqtmmtW5ccUGnRMUQf OfdFV/TnJAFv247u4Ey4ZHiww1xCd021SmUbdY6Mlf2NzZ0CHrsEiAG3v1OXp+NC dVmohw44fOPiQFKUra5l0wb4NRDou7Hv1YZs8X5BrMvUkg6WAgyF0gUsZ/E+fe5y 2EIiZ7CcDt3NVZOOLHGU11jQ1Ubb98VYRxElaDSu9OSMWl4MEdfMWE7CVETQefqj neJFspM5h6LDHzxo90mWm1lVCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAFhV1N4 G+tzn/EbQy+gpbX1tSSaMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFCQjEvODg3NEU5RTgxRDk4MTFFMjk3ODhBOTgyMDhCMDJDRDIvRkQyMDZDNEVG ODBCMTFFQUEwNjU5MTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABygk4wDQYJKoZIhvcNAQELBQADggEBAAAC5RL//L1g9ked UZQJUwhGz9bv7OO3nfvCzuPSVu6FN4tmQHOegexbG39QTPTDDHZ8VlWfNo8TIvSj K6bIGbRH+rWpmFltV7/Cek8LB/WLDYM2yqCe98KME05WHC6o5TI60qB8rj6xgwNT J0JmXulOEKNu2Ip4TL2XiTK6XCw/qmzBTUgZO0TF2FU5QrPp3PyEJBUo/e7B2o5K pb2m70yIx6ZlpI1/Hy+NrR6/4yNwZXQC7gnwM0tArkShgMbwNEc4DlNltrNiaGCl 5ir8fWjuX2cVSmDrV0MHPvXFDV7bs9EMr400y2JmpLA0OyonsH0Y7F6MlLDQ0Kgt PZixsLo= -----END CERTIFICATE-----Generated at Tue Nov 26 17:20:03 2024 by rpki-client on console-fra.rpki-client.org